Print Infrastructure Alert: Chained PaperCut NG/MF Vulnerabilities Actively Exploited in Enterprise Intrusions
Print management software giant PaperCut has released urgent security bulletins and emergency patches addressing critical chained vulnerabilities—tracke...
Cybersecurity researchers have identified an aggressive cyber espionage campaign orchestrated by the Iranian state-sponsored threat group Nimbus Manticore (affiliated with Iran's Ministry of Intelligence and Security, MOIS). The campaign targets softwar...
Supply Chain Infiltration: 13 Malicious Packagist Packages Deliver Zero-Click iOS Spyware to Steal Crypto Seeds
Application security researchers at Socket have identified a coordinated open-source supply chain attack involving 13 malicious PHP Composer packages d...
The Cybersecurity and Infrastructure Security Agency (CISA) and threat intelligence researchers have issued an urgent warning regarding the active exploitation of two zero-day vulnerabilities affecting PaperCut NG and PaperCut MF print management softwa...
On September 1, 2026, leading cybersecurity researchers uncovered an unprecedented AI resource-hijacking attack targeting Model Evaluation and Threat Research (METR), an AI safety and capability evaluation organization. Threat actors exfiltrated high-tier frontier model...
Threat intelligence firms and security researchers have confirmed active, in-the-wild exploitation of a newly disclosed critical vulnerability impacting JFrog Artifactory, tracked as CVE-2026-82329 with a maximum-severity CVSS score of ...
The Hak5 WiFi Pineapple Mark VII is the preeminent wireless auditing and penetration testing platform for security professionals. Explore its multi-radio architecture, automated PineAP suite, rogue access point simulation, and actionable wireless defense countermeasures.
The Hak5 USB Rubber Ducky revolutionized physical penetration testing by pioneering Keystroke Injection attacks. Learn how DuckyScript 3.0, hardware-level HID emulation, and logic-driven payloads operate—and how security teams can defend endpoints against unauthorized keystroke autom...
Physical penetration testing and red-team operations require specialized, field-tested tactical hardware. Discover the complete buyer's and operator's guide to the legendary Hak5 tactical ecosystem—spanning wireless domination, keystroke injection, covert network implants, and modula...
On August 31, 2026, enterprise IT operations giant ServiceNow issued an urgent security bulletin announcing patches for three critical vulnerabilities affecting the Now Platform. The security flaws—two of which are categorized as maximum-severity remote code execution (...
Healthcare Device Supply Chain Disruption: Boston Scientific Discloses Operational Impact and SEC Filing Following Global Cyber Incident
On August 28–30, 2026, global medical device manufacturer Boston Scientific Corporation issued formal updates and an SEC Form ...
McKesson Corporation, a dominant force in North American pharmaceutical and medical supply distribution, has officially confirmed a critical cybersecurity incident. This confirmation follows public claims by ShinyHunters—a notorious cyber extortion syndicate—asserting t...