Adobe ColdFusion flaw CVE-2026-48282 now exploited in the wild
Adobe ColdFusion flaw CVE-2026-48282 now exploited in the wild Pierluigi Paganini July 06, 2026 Attackers...
Security
Pickle in the Middle – Hijacking Vertex AI Model Uploads for Cross-Tenant RCE
Executive Summary We discovered a vulnerability in the Google Cloud Vertex AI software development kit...
Local agentic reverse engineering through vbdec’s live COM object model
Analysis tools do not need AI built in to support agentic workflows; they simply need...
RCS and DNS: The NAPTR Record
Over the last year, with recent updates to iOS and Android, RCS (Rich Communication Services)...
When checking the URL isn’t enough: phishing via the Microsoft identity platform
One of the most common pieces of anti-phishing advice is to double-check the website’s domain...
Choose your WhatsApp username carefully
Dutch consumer organization Consumentenbond has warned users to be careful when choosing their optional WhatsApp...
Inside Gentlemen’s EDR killer framework
ESET researchers analyzed the robust EDR-killing toolset of the ransomware-as-a-service gang Gentlemen. Since the beginning...
Ukraine Transfers Seized Crypto Assets Worth $8.3M To ARMA
Ukraine has transferred Seized Crypto Assets worth more than 8.3 million USDT to the country’s...
KnowBe4 awarded in the email security industry
KnowBe4, the global leader in digital workforce security, securing both AI agents and humans, today...
Medtronic Notifies 3.8 Million After ShinyHunters Data Breach
Medtronic Notifies 3.8 Million After ShinyHunters Data Breach Pierluigi Paganini July 05, 2026 Medtronic says...