Telegram
TRENDING TOPICS JAN 13, 2026 Hidden Telegram Proxy Links Enable One-Click IP Address Exposure Researchers have disclosed a Telegram client behavior that allows attackers to expose a user’s real IP address with a single click by abusing how MTProto proxy links are handled on mobile platforms. Specially crafted t[
Cloudflare
TRENDING TOPICS DEC 24, 2025 Phishers Exploit Cloudflare Pages and Telegram to Scale Credential Theft Threat actors are increasingly abusing free developer hosting platforms, most notably Cloudflare Pages, to host highly convincing phishing portals that impersonate banking, insurance, and healthcare providers. These campaigns frequently leverage compromised legitimate websites as redirectors,
Cloudflare
TRENDING TOPICS NOV 19, 2025 Update: Cloudflare Global Network Outage Disrupts Major Online Services Cloudflare previously reported a major outage on November 18 that disrupted core CDN, security, and authentication services across its Global Network, and new findings now clarify that the disruption stemmed from an internal database permissions change
Cloudflare
TRENDING TOPICS NOV 18, 2025 Cloudflare Global Network Outage Disrupts Major Online Services Cloudflare confirmed a significant disruption across its Global Network on November 18, 2025, with outages rippling through major platforms, including X, Canva, Downdetector, and various web services relying on Cloudflare infrastructure. The issue surfaced shortly after the
ClickFix
CVE-2025-37734 Medium Elastic Kibana SSRF VULNERABILITY Origin Validation Error in Kibana can lead to Server-Side Request Forgery (SSRF) via a forged Origin HTTP header processed by the Observability AI Assistant. This vulnerability allows attackers to make unauthorized requests from the Kibana server to internal or external resources. Affected Versions • Versions
Microsoft Teams
TRENDING TOPICS SEPT 29, 2025 Hackers Exploit Weaponized Microsoft Teams Installer to Deploy Oyster Malware Researchers have found that a malvertising campaign is distributing a weaponized Microsoft Teams installer to deliver the Oyster backdoor, also known as Broomstick or CleanUpLoader. The campaign begins with SEO poisoning of Bing search results,
PyPI
TRENDING TOPICS SEPT 18, 2025 PyPI Tokens Revoked After GhostAction Supply Chain Attack The Python Software Foundation has confirmed that all PyPI publishing tokens stolen in early September's GhostAction supply chain attack have been invalidated, with no evidence that they were used to publish malicious packages. The incident
UNC6395
TRENDING TOPICS SEPT 15, 2025 Update: FBI Warns of Salesforce Data Theft by UNC6040 and UNC6395 The FBI has issued a FLASH advisory warning that two active threat clusters, UNC6040 and UNC6395, are breaching Salesforce environments to steal sensitive data and extort victims. UNC6040, first reported by Mandiant in June
UAC-0057
CVE-2025-20265 Critical Cisco Secure Firewall Management Center COMMAND INJECTION Critical vulnerability in the RADIUS subsystem allows unauthenticated remote attackers to inject arbitrary shell commands during authentication, enabling high-privilege code execution. Exploitable only if FMC is configured to use RADIUS for web or SSH management. Mitigation: Apply Cisco patches immediately or