Since the beginning of 2025, Google has been steadily deploying the Gemini Nano model to Chrome browser users. This sophisticated model operates locally on the device, primarily serving to identif…

At a Glance Attribute Detail Actor / group Unattributed threat actor (tracked by Securonix as SMOKE#SCREEN) Activity type Multi-wave phishing and RMM abuse for remote access Targets / victims Wind…

OpenAI filed a motion to drop the Apple lawsuit and stop the ban. In recent court papers, OpenAI strongly denies stealing trade secrets. Also, the company called the claims completely false. OpenA…

For enterprises, operating system stability is paramount, whereas routine feature updates hold a significantly lower priority. Consequently, numerous organizations prefer deploying the Windows 10 …

At a Glance Attribute Detail Malware family FDMTP implant (.NET, TouchSocket-based) Threat actor Suspected Twill Typhoon (not confirmed) Target / victims Windows users of QuickFox, mainly Chinese …

Recently, the “out-of-control” behavior of artificial intelligence during cybersecurity evaluations has triggered profound alarm across the technology sector. According to newly disclo…

At a glance Field Detail Actor Unidentified LATAM threat actor behind the Astaroth/Guildma botnet Activity WhatsApp Web spambot spreading Astaroth banking trojan via victim contact lists Targets B…

Reports of AI-driven agents autonomously discovering vulnerabilities and escaping their evaluation environments have become increasingly frequent – and they merit serious attention. The conc…

TL;DR VulnCheck found a Zbtlink router backdoor in every published firmware build across the product line. Named ENDLESSDOORS and tracked as CVE-2026-66747, it scores 9.8 on CVSS. It hands unauthe…

TL;DR Security researcher Hyunwoo Kim (@v4bel) disclosed a KVM escape vulnerability named Zapscape. Tracked as CVE-2026-64561, it lets a guest break out to the host. The attacker can then run comm…

Welcome back to Part 2 of this series, Hrik this side. If you’re new here, make sure to check out the previous part first. If you’re…

This article discusses social-engineering lures that use explicitly themed material. To keep this write-up safe and readable for a general…

At- SmatchoiceHackers

A practical reference for common SPL queries, commands, and operators.

“Hello, Chris, where you work, and where you live…”

Security teams tracked 1,877 new vulnerabilities between August 3 and August 9, 2026. This weekly CVE report, drawn from the CVE WATCHTOWER service, breaks down what actually matters. Six of those…

Views are my own(I have reports pending on Com Olho, so technically I’m a shareholder in their backlog)

It looks like a normal flash drive. But instead of sending files to your computer, it can send something far more destructive

Complete PoC included. Build the vulnerable app, run the exploit yourself, watch the token get stolen, then patch it. Every command, every…

Why permission, scope, and NDAs matter more than any tool in your kit — and what happens when hackers skip them