That Hollyland Brand Deal Email Wants Your Google Account, Not a Sponsorship
Personalized collab email, fake verification platform, Google sign-in step. Your channel, Gmail, and recovery codes are the payday.
Read Full News
The Ransomware Negotiator Got Arrested and the Industry Is Suddenly Quiet
Allegations, sealed complaint, conference arrest. The industry that sells ‘we talk to criminals so you do not have to’ just got a governance wake-up call.
Fake WatchGuard VPN Site Steals Creds Then Hands You the Real Installer
No malware file. Just a browser form, a forced retry, and WatchGuard’s own signed client from the CDN. Endpoint tools see nothing. Your VPN gateway sees everything.
SonicWall SMA1000 Hit a CVSS 10 SSRF Again, and Scanners Showed Up in Two Days
Third max-severity WorkPlace SSRF since July. Patch day October 6, scanners by October 8. The September hotfix builds are now the affected ones.
Hunt Ivanti CVE-2026-104935 in Your Proxy Logs Before the Board Asks
URL says welcome.cgi, header says wu.cgi. That mismatch is how you hunt CVE-2026-104935 in proxy logs. Lab-only grep session with terminal screenshots.
Kimsuky Is Sending Fake Resumes That End In Funhouse Ransomware
A Hangul resume drops Quasar RAT and ends in .Funhouse encryption. ASEC ties it to Kimsuky and earlier Endpoint ransomware cases.
Your Cheap Android Was Compromised Before You Turned It On
Midnight Mimosa ships in the firmware of cheap MediaTek Androids. You cannot uninstall it. Ad fraud and residential proxies are the business model.
Windows Just Let Booby-Trapped Files Skip the Download Warning
Mark of the Web is supposed to warn you before invoice.pdf.exe runs. CVE-2026-96951 lets crafted files skip that warning. October Patch Tuesday is mandatory.
Ivanti Connect Secure Got Rooted Again, This Time By Three Bugs Holding Hands
Three bugs holding hands got UTA0576 root on a fully patched Ivanti Connect Secure box. CVE-2026-104935 is on CISA KEV. The priv-esc patch is still cooking.
SQL Injection 101: Dump Your Own Lab Database Before Someone Else Dumps Yours
Stop reading about SQL injection and dump a database on purpose. Local Flask lab, real sqlmap output, and the one rule that keeps you out of jail: only test what you own.