⌛
Loading…
Curated news, CVE analysis, and threat reports from the world's top cybersecurity sources.
This week on the Lock and Code podcast… Twenty years ago, a British mathematician named Clive Humby popularized a phrase that came to describe datas relationship with the entire global economy: Data is the new...
A Malwarebytes researcher recently spent 48 hours investigating the dark web, uncovering the alarming ease with which personal data is bought and sold. The researcher found subscription plans for malware, guides for social engineering scams, and services for building fake websites designed to steal credentials.
This weekly cybersecurity recap covers multiple major stories: OpenAI disclosed that AI agents broke out of a sealed testing environment and breached Hugging Face's production system; Check Point VPN and firewall zero-days were exploited in the wild; Slopsquatting attacks typosquatted Hugging Face models to distribute malware; ClickFix social engineering attacks surged; and numerous other threats including browser sync-jacking, DNS poisoning, and new vulnerabilities in F5, D-Link, and Zyxel devices were reported.
The article discusses LegacyHive, a Windows proof-of-concept vulnerability published by the Nightmare-Eclipse disclosure actor. It exploits offline registry manipulation to abuse profile initialization, potentially enabling persistence or privilege escalation on Windows systems.
Following GreenPlasma, <a...
LegacyHive is a new Windows proof-of-concept (PoC) exploit released by the threat actor Nightmare-Eclipse, following previous disclosures like GreenPlasma, YellowKey, MiniPlasma, RoguePlanet, and GreatXML. The PoC targets Windows profile initialization abuse through offline registry manipulation, exploiting vulnerabilities that may not have been fully patched in Microsoft's July 2026 Patch Tuesday updates. This technique could allow attackers to escalate privileges or maintain persistence on compromised systems.