We Are At War

27/03/2026 0 Comments 0 tags

Rising geopolitical tensions are reflected (or in some cases preceded) by cyber operations, while technology itself has become politicized. Let’s admit it: we are in the middle of it.  Introduction:

LangChain, LangGraph Flaws Expose Files, Secrets, Databases in Widely Used AI Frameworks

27/03/2026 0 Comments 0 tags

Cybersecurity researchers have disclosed three security vulnerabilities impacting LangChain and LangGraph that, if successfully exploited, could expose filesystem data, environment secrets, and conversation history. Both LangChain and LangGraph are open-source

China-Linked Red Menshen Uses Stealthy BPFDoor Implants to Spy via Telecom Networks

26/03/2026 0 Comments 0 tags

A long-term and ongoing campaign attributed to a China-nexus threat actor has embedded itself in telecom networks to conduct espionage against government networks. The strategic positioning activity, which involves implanting

ThreatsDay Bulletin: PQC Push, AI Vuln Hunting, Pirated Traps, Phishing Kits & 20 More Stories

26/03/2026 0 Comments 0 tags

Some weeks in security feel loud. This one feels sneaky. Less big dramatic fireworks, more of that slow creeping sense that too many people are getting way too comfortable abusing

Masters of Imitation: How Hackers and Art Forgers Perfect the Art of Deception

26/03/2026 0 Comments 0 tags

Unmasking impostors is something the art world has faced for decades, and there are valuable lessons from the works of Elmyr de Hory that can apply to the world of

Claude Extension Flaw Enabled Zero-Click XSS Prompt Injection via Any Website

26/03/2026 0 Comments 0 tags

Cybersecurity researchers have disclosed a vulnerability in Anthropic’s Claude Google Chrome Extension that could have been exploited to trigger malicious prompts simply by visiting a web page. The flaw “allowed

Coruna iOS Kit Reuses 2023 Triangulation Exploit Code in New Mass Attacks

26/03/2026 0 Comments 0 tags

The kernel exploit for two security vulnerabilities used in the recently uncovered Apple iOS exploit kit known as Coruna is an updated version of the same exploit that was used

[Webinar] Stop Guessing. Learn to Validate Your Defenses Against Real Attacks

26/03/2026 0 Comments 0 tags

Most teams have security tools in place. Alerts are firing, dashboards look clean, threat intel is flowing in. On the surface, everything feels under control. But one question usually stays

WebRTC Skimmer Bypasses CSP to Steal Payment Data from E-Commerce Sites

26/03/2026 0 Comments 0 tags

Cybersecurity researchers have discovered a new payment skimmer that uses WebRTC data channels as a means to receive payloads and exfiltrate data, effectively bypassing security controls. “Instead of the usual

LeakBase Admin Arrested in Russia Over Massive Stolen Credential Marketplace

25/03/2026 0 Comments 0 tags

The alleged administrator of the LeakBase cybercrime forum has been arrested by Russian law enforcement authorities, state media reported Thursday. According to TASS and MVD Media, a news website linked