home
🔴 BREAKING — Critical RCE flaw in widely used VPN gateway under active exploitation
●
Patch Tuesday: 206 flaws fixed, 3 zero-days
●
New ransomware group "RabbitHole" targets EDR processes
●
🔴 BREAKING — Critical RCE flaw in widely used VPN gateway under active exploitation
●
Patch Tuesday: 206 flaws fixed, 3 zero-days
●
New ransomware group "RabbitHole" targets EDR processes
Independent security research
The watchful eye on every breach, bug, and breakdown.
Mad Hatter tracks threat actors, dissects vulnerabilities, and explains attacks in plain language — so your team reacts in minutes, not days.
See today's threats →
1,284
CVEs tracked this month
37
Active threat actor groups monitored
12
Zero-days disclosed in 2026
98%
Reports verified against primary sources
Threat Intelligence
Inside RabbitHole: the ransomware group hunting EDR before it hunts you
A profile of the fastest-growing RaaS operation of 2026, and the 400 security processes it's built to disable on sight.
Critical
Vulnerabilities
Unpatchable 'usbliter8' exploit breaks Apple A12/A13 secure boot chain
Researchers publish a working exploit achieving arbitrary code execution at the hardware root of trust — and there's no patch coming.
Cyber Attacks
AutoJack: how one booby-trapped web page hijacks an AI browsing agent
A new exploit chain turns autonomous AI agents into a delivery vehicle for remote code execution on the host machine.
New to security?
Explore Learn →
Start with the fundamentals, not the firehose.
Mad Hatter Learn breaks threat detection, vulnerability management, and incident response into plain-language tracks — no prior experience assumed.