11+ hour, 52+ min ago   (833+ words) You don’t know your DDoS defenses work until you attack them yourself — safely, on purpose, with a kill switch. Simulated DDoS attack tools generate controlled, realistic attack traffic against your live infrastructure to expose capacity gaps, validate mitigation, and produce…...

12+ hour, 59+ min ago   (751+ words) Hackers are abusing Microsoft Teams voice calls and fake IT helpdesk personas to gain remote access to corporate endpoints, drop a custom post‑exploitation toolchain, and, in multiple cases rapidly pivot to Chaos ransomware deployment across North American organizations. Nearly…...

12+ hour, 12+ min ago   (423+ words) Home Assistant’s FFmpeg integration recently came under scrutiny after researchers demonstrated that unsafe argument handling in the Wyoming Assist satellite feature could be exploited to steal Supervisor tokens and ultimately execute commands as root on the host system. The issue…...

11+ hour, 31+ min ago   (547+ words) GenieLocker is a custom ransomware family linked to the Toy Ghouls group (also known as Bearlyfy or Labubu). It can encrypt systems running Windows, Linux, and VMware ESXi, with a current focus on the manufacturing sector and related industries in…...

11+ hour, 54+ min ago   (531+ words) Hackers are increasingly exploiting vulnerabilities at an unprecedented speed, with nearly one in four flaws being abused before or on the same day they are publicly disclosed, according to VulnCheck’s State of Exploitation report for the first half of 2026, published…...

13+ hour, 53+ min ago   (624+ words) Work Panel is a turnkey vishing and phishing platform that industrializes enterprise account takeovers and MFA theft by packaging infrastructure automation, role-based operations, and real-time credential harvesting into a single criminal SaaS console. It exemplifies how phishing has evolved from…...

15+ hour, 37+ min ago   (731+ words) North Korea–linked operators have quietly turned popular npm packages into a high‑volume access vector for developer and build environments, chaining multiple compromises of axios, debug, chalk, and typo‑crypto into a coordinated software supply‑chain campaign. Amazon’s latest…...

15+ hour, 35+ min ago   (307+ words) Google has released stable Chrome version 151 updates for Windows, macOS, and Linux, addressing 370 security vulnerabilities. This update includes fixes for seven critical-severity flaws that affect core components of the browser. The new versions are Chrome 151.0.7922.71/.72 for Windows and macOS, and…...

15+ hour, 52+ min ago   (407+ words) The Node.js Project has released security updates for the active Node.js versions 22.x, 24.x, and 26.x, addressing 11 vulnerabilities. These vulnerabilities range from high-severity issues, such as HTTP/2 memory corruption and permission-bypass flaws, to lower-severity problems, such as HTTP…...

17+ hour, 53+ min ago   (476+ words) A critical vulnerability in Ruby on Rails’ Active Storage component could allow unauthenticated attackers to read arbitrary files on vulnerable application servers, potentially escalating to remote code execution. This vulnerability is tracked as CVE-2026-66066 and affects Active Storage variant processing…...