Real-time Actionable Vulnerability Intelligence

May 21, 2026

First VPN service used by cybercriminals dismantled in international police op

Criminal groups allegedly used the service to hide their identities and online infrastructure.

3 min read

May 21, 2026

Microsoft rolls out out-of-band security patches to fix two Defender zero-days

The company has also patched a critical remote execution flaw, which has no signs of active exploitation.

3 min read

May 20, 2026

GitHub confirms nearly 4K repos breached after employee installed malicious VS Code extension

The company said that its current investigation indicates the attackers accessed only GitHub’s internal repositories.

2 min read

May 20, 2026

China-linked Webworm APT updates its arsenal with EchoCreep and GraphWorm backdoors

Webworm has shifted from the McRat and Trochilus remote access trojans to lightweight proxy infrastructure and cloud-based C&C mechanisms.

3 min read

May 20, 2026

Chinese hackers target entities with updated FDMTP backdoor

The intrusion chain involved attackers delivering a legitimate executable, a matching .config file, and a malicious DLL designed for sideloading into the trusted process.

3 min read