More than a dozen models of Chinese-made Zbtlink routers ‌ship with at least two backdoors that could allow for invasive remote access akin to “surveillance,” according to new findings from cybersecurity firm VulnCheck.

In our previous blog, ENDLESSDOORS Is Phoning Home. Pick up, we detailed a phone-home implant vulnerable to man-in-the-middle attacks embedded in ZBT routers. In this blog, we trace the ZBT supply cha...

YouTube video by Decipher

Vulnerability intelligence that predicts avenues of attack with speed and accuracy.

That vulnerability (CVE-2025-64446) affects several versions of FortiWeb and CISA  has added it to its Known Exploited Vulnerabilities catalog.

Financial pros recommend waiting as long as possible to claim your Social Security benefits. Most Americans say they're ignoring that advice.

Agatha Christie: “I bet I could murder them and get away with it.” Ernest Hemingway: “For sale. Two testicles. Never used.” George R. R. Martin: “H...

We’re back, just over 24 hours later, to share our evolving understanding of CVE-2025-10035. Thanks to everyone who reached out after Part 1, and especially to the individual who shared credible inte...

Vulnerabilities in some models of Cisco's Adaptive Security Appliances (ASA) have been exploited by "an advanced threat actor," according to a warning from CISA.

A new critical vulnerability was disclosed in Fortra's GoAnywhere managed file transfer product, which has been targeted in the past by ransomware and extortion groups

Vulnerability intelligence that predicts avenues of attack with speed and accuracy.

1-800 dark magic

Instead of bouncing between tabs, you now get instant, current context the moment a CVE appears on your screen.

An active ViewState deserialization attack affecting Sitecore products, where attackers achieved remote code execution.

Three new Citrix NetScaler vulnerabilities were disclosed on August 26, including CVE-2025-7775, a fresh zero-day flaw being used in the wild

API Update, CVE-2025-25256: Fortinet FortiSIEM Command Injection, CVE-2022-30622: CHCNAV P5E GNSS, CVE-2020-1147: SharePoint .NET Core Deserialization RCE, CVE-2025-46811: SUSE Manager RemoteMinionCom...

Google confirmed that one of its cloud-stored Salesforce databases was breached, exposing its customer data. Google attributed the breach to a hacking group, ShinyHunters, known for breaking into Sale...

Revealed: The Israeli military undertook an ambitious project to store a giant trove of Palestinians’ phone calls on Microsoft’s servers in Europe

SonicWall has warned customers to disable SSLVPN services due to ransomware gangs potentially exploiting an unknown security vulnerability in SonicWall Gen 7 firewalls to breach networks over the past few weeks.

VulnCheck tracked thousands of attacker systems over a 90-day window to see how long malicious infrastructure really lasts. The results show that exposure doesn’t mean disruption, as many phishing kit...

ISLA VISTA, CA—In the days following a violent rampage in southern California in which a lone attacker killed seven individuals, including himself, and seriously injured over a dozen others, citizens ...