GitHub access sales, leaked repositories, and stolen API keys can all become supply-chain attack footholds. Flare explores how underground forums expose early signals tied to software supply-chain risk. […]
Die Notepad++-Entwickler liefern ein außerplanmäßiges Update gegen drei Schwachstellen. Zwei erlauben die Ausführung beliebigen Codes über manipulierte Konfigurationsdateien, die dritte legt den Editor lokal lahm. Vollständigen Schutz bietet erst Version 8.9.6.2.
Dark Web Profile: Rock Most Phishing-as-a-Service operations are run by a faceless brand. Rock is the opposite: a single developer who builds, maintains, and sells an entire phishing and remote access toolkit, then sits in the middle of an ecosystem of up to roughly 200 operators running their own campaigns on top of it. SOCRadar […]
CVE-2026-35273 in Oracle PeopleSoft PeopleTools EMHub Under Active Exploitation Oracle has disclosed CVE-2026-35273, a critical Remote Code Execution (RCE) zero-day vulnerability in Oracle PeopleSoft Enterprise PeopleTools, affecting the Updates Environment Management component (often referenced as Environment Management / EMHub). Multiple reports cite active exploitation in the wild, with activity attributed to ShinyHunters. This post covers […]