cPanel Patches CVE-2026-67401 SQL Injection Flaw Enabling Root Access
A new cPanel flaw lets an authenticated hosting account achieve root-level code execution via SQL injection in EmailTrack. All supported versions are affected.
ThreatsThreat Intelligence Feed
-
-
Ohio Man Gets 15 Years for AI Sextortion and Cyberstalking
James Strahler II was sentenced to 15 years for cyberstalking, AI-generated sextortion, and child sexual abuse material. He is the first person convicted under
Guides -
Trezor Data Breach Expands to 81,000 Customers After ShipMonk Failure
A breach at Trezor's shipping provider ShipMonk has grown to affect 81,000 customers after the provider failed to delete data as contractually required.
Tools -
Microsoft Teams and Outlook Fail to Launch on ARM Windows PCs
Microsoft is fixing a bug causing Teams and new Outlook to crash on ARM devices after August 2026 Patch Tuesday updates. A temporary workaround is available.
Guides -
Shai-Hulud Infostealer Worm Now Scans 469 Credential Locations
A new Shai-Hulud variant scans 469 locations for developer credentials, up from 189. Securing the credential layer is now the core supply chain defense priority
Threats -
Comcast Adds Motion Detection to Wireless Routers, Shares Data with Third Parties
Comcast has added WiFi-based motion detection to its routers. The feature can share motion data with third parties, including law enforcement.
VPN & Privacy
Analysis & Guides
Threats
Novocure Data Breach Exposes Records of 1,400 Cancer Patients
Novocure disclosed a mid-August cyberattack exposing over 1,400 U.S. patient records and employee contact data. No medical devices were accessed.
Tools
Cronos Blockchain Restarts After $74 Million Tectonic Exploit
A price-manipulation attack on Tectonic drained $74 million in borrowed assets. Cronos halted and restored the blockchain to a pre-exploit state.
VPN & Privacy
Two RCE Flaws Found in Unitree G1 EDU Humanoid Robot
Two root RCE vulnerabilities in the Unitree G1 EDU robot allow network-adjacent and BLE-based code execution. No confirmed fixed firmware version exists.
Tools
AI-Powered OSINT Makes Every Internet User a Fraud Target
AI tools let cybercriminals profile victims faster and cheaper than ever. Here's what the threat looks like and what you can still control.
Guides
Two Alleged TeamPCP Hackers Arrested in Australia
Australian Federal Police arrested two Western Australia men linked to TeamPCP, a cybercrime group behind a sweeping software supply chain attack campaign.
VPN & Privacy
Android Car Head Units Hit by Supply-Chain Proxy Botnet Attack
A supply-chain attack on Android car head units uses a legitimate update app to spread malware that builds a proxy botnet or commits ad fraud.
Threats
Hardware Makers Integrate Post-Quantum Cryptography Into Chips
Intel, Nvidia, and IBM are embedding post-quantum cryptography into hardware. Enterprises are urged to act now against harvest-now, decrypt-later attacks.
Guides
ToxicPanda 2.0 and GoldDigger Expand Android Banking Malware Campaigns
ToxicPanda 2.0 adds 167 remote commands and targets 349 financial institutions. GoldDigger expands to South Africa and the U.K. via fake airline and retail apps
VPN & Privacy
Comcast Xfinity Shield Uses WiFi Signals as Home Motion Detectors
Comcast's new Xfinity Shield platform uses existing WiFi signals to detect motion inside homes. Privacy questions remain over data retention and third-party dis