We are B9 and we are here to make sure YOU are not B-10. We are B9 and we are here to make sure YOU are not B-10.
- Adversaries Don't Need a Zero-Day — They Read Your Rulebook
- Dysphoria IoT Botnet Adds Blockchain C2 and Victim Relays After JackSkid Disruption
- Public Exploit Released for Patched vBulletin Pre-Auth Code Execution Flaw
- ⚡ Weekly Recap: Rogue AI Agents, Check Point Exploit, Slopsquatting, ClickFix Lures and More
- n8n Sandbox Escape Lets Workflow Editors Run OS Commands as the n8n Process
- Operation BlueDash Deploys Level RMM and ScreenConnect via Fake Teams Update
- Cruciferra Crypter Uses BYOVD and Process Ghosting to Hide Windows Malware
- TELESHIM Abuses Telegram for C2 in Attacks Against Middle East Governments
- GitHub Adds 3-Day Dependabot Cooldown to Limit Poisoned Package Adoption
- Malvertising Sends Malware in Pieces, Then Makes the Browser Build the Executable
- Fastjson 1.x RCE Vulnerability Targeted in Attacks With No Patched Available
- CTM360 Research Reveals How Insurance Phishing Has Evolved Into Real-Time Account Hijacking
- Cl0p Affiliates Target Internet-Exposed PTC Windchill and FlexPLM with Unauthenticated RCE
- DevMan RaaS Portal Centralizes Payload Builds, Victim Management, and Affiliate Payouts
- Researcher Publishes GitLab RCE PoC Letting Authenticated Users Run Commands as Git
- CISOs vs. Boards: Myth or Misunderstanding?
- Escape Artists: 'Incorrigible' AI Models Resist Rehabilitation
- BlueNoroff Zoom Phishing Kit Profiles Crypto Wallets Before Malware Delivery
- Certighost Exploit Lets Low-Privileged Active Directory Users Impersonate a Domain Controller
- Vatican's Official Prayer App Leaks 700K+ Global Users' PII
- Default Azure Automation Setting Enables Cross-Tenant Identity Takeover
- ChatGPT AgentForger Flaw Could Deploy Rogue Workspace Agents via a Phishing Link
- Bing Images Flaws Let Crafted SVGs Run Commands as SYSTEM on Microsoft's Servers
- Seeing AI Agents Is Not Enough. Security Teams Must Enforce What They Can Do
- Hacker Runs Hermes AI Agent Unattended for Post-Exploitation at Thai Finance Ministry
