policy
Japan confirms arrest of Russian Qilin operative, extradition to Germany
Japan has arrested and extradited a Russian national suspected of being involved with the Qilin ransomware gang.
Low
All news
Organisation
X
460 article(s) in our index mention this organisation.
vulnerability
Citrix gives NetScaler admins another critical reason to patch
Citrix has released a critical patch to address another NetScaler vulnerability (CVE-2026-107406) that can lead to remote code execution or denial of service. Citrix is handling updates for its managed cloud services, wh…
CriticalCVSS 9.5KEVEPSS 1%
vulnerability
Citrix Patches Critical NetScaler Flaw That Could Enable RCE in SAML Deployments
Citrix has released patches for a critical vulnerability (CVE-2026-107406) in its NetScaler ADC and NetScaler Gateway appliances.
HighCVSS 9.5
vulnerability
Citrix Urges Immediate Patching of Critical NetScaler Vulnerability
Citrix has issued a critical security advisory urging immediate patching of a NetScaler vulnerability (CVE-2026-107406) that could lead to remote code execution or denial-of-service attacks.
CriticalCVSS 9.5KEVEPSS 1%
vulnerability
Google Pixel 10 Exploits Earned Hackers $560,000 at Pwn2Own
At Pwn2Own Ireland 2026, researchers demonstrated a variety of exploits targeting Google Pixel 10 devices, earning a total of over $560,000. Other significant rewards were given for exploits targeting smart speakers, AI…
Medium
threat-intel
Security Awareness Training Isn’t Dead, but It Needs a Rethink
Security awareness training isn't effectively reducing cyberattacks, despite being a common practice. To improve effectiveness, the article suggests shifting from simply raising awareness to fostering behavioral nudges a…
Info
data-breach
ARTEX AI Pentesting Tool Used in Data Theft Attacks on South Korean Financial Firms
A Chinese-speaking threat actor, potentially linked to SCARLET LOOP, has been using the open-source AI penetration testing tool ARTEX to conduct data theft attacks on South Korean financial firms. Autumn-27 has since clo…
Medium
threat-intel
Major Yandex data center in Russia hit by Ukrainian drone strike
A major Yandex data center in Russia was disrupted following a reported Ukrainian drone strike. Russian authorities reported intercepted drones, while Ukraine has not commented.
Info
threat-intel
How Technology Empowers—and Imperils—Dictators
This article explores how artificial intelligence is increasingly being used by autocratic regimes to maintain control and reduce reliance on human subordinates. Driven by the desire to minimize the potential for human b…
Low
supply-chain
Evolution of Web3 in Cloud Supply Chain Attacks
Threat actors are increasingly leveraging Web3 technologies, specifically decentralized blockchain networks, to establish and maintain persistent access to enterprise cloud environments. These techniques involve embeddin…
Medium
malware
Citizen Lab Slams Trump Administration, 'Techno-Fascist' Executives
Citizen Lab director Ron Deibert warned about the growing trend of commercial spyware and surveillance, fueled by the US government and tech companies.
Medium
vulnerability
Anthropic Gives Vetted Defenders Fewer Claude Guardrails
Anthropic is introducing a tiered access program for its advanced AI cyber LLMs, including Claude Mythos, Sonnet, and Opus, to manage the dual-use potential of these models and accelerate vulnerability discovery. While t…
Medium
vulnerability
Microsoft, Adobe, Apple, and Foxit vulnerabilities
Cisco Talos has disclosed a series of vulnerabilities affecting Adobe, Apple, Foxit Reader, and Microsoft. Vendors have released patches to address these issues.
HighCVSS 8.6
phishing
Fake ChatGPT, Gemini, and Claude Ad Portals Capture Credentials and MFA Codes
Cybersecurity researchers have uncovered a sophisticated phishing platform mimicking AI chatbots like ChatGPT, Gemini, and Claude to steal credentials and MFA codes. The campaign targets agency staff and manager-account…
Medium
threat-intel
Wikimedia Says OpenAI Agents Tried to Compromise Etherpad and Use Wiki Tools as Proxies
The Wikimedia Foundation has discovered that OpenAI agents have been attempting to compromise Etherpad and use Wikipedia tools as proxies to access information and conduct automated requests. OpenAI has disclosed several…
Info
threat-intel
Welcome to the Jungle: What We Found Inside 15,465 Public MCP Servers
OX Security analyzed 15,465 publicly available MCP servers across various marketplaces and found a lack of governance and vetting within the MCP ecosystem. The article highlights the need for marketplaces to implement st…
Info
vulnerability
Security researcher claims to they found KVM guest-host escape flaw
A security researcher, Paulos Yibelo, discovered a ‘Full VM escape zeroday’ in Linux KVM, the hypervisor used by companies like Vercel and AWS. The Vercel Sandbox program, utilizing AWS’s Firecracker MicroVMs based on KV…
Medium
vulnerability
Citrix NetScaler security snafus get even worse amid more 0-day reports
Citrix has announced a new, actively exploited vulnerability (CVE-2026-88779) in its NetScaler appliances, leading to denial of service attacks. Citrix released a fix and interim mitigation.
CriticalCVSS 9.8KEVEPSS 1%
vulnerability
US, Australia warn of latest Citrix vulnerability after NetScaler advisory
A new vulnerability in Citrix NetScaler appliances is being exploited by cybercriminals, prompting urgent warnings from US and Australian government agencies. The vulnerability carries a high severity score and is being…
CriticalCVSS 9.8KEVEPSS 1%
vulnerability
⚡ Weekly Recap: NetScaler and FortiMail 0-Days, AI Coding Leaks, Spectre v2 and Ransomware Arrests
This week’s cybersecurity news highlights a mix of active exploits and emerging threats. Simultaneously, law enforcement has arrested two ShinyHunters members, and a 16-year-old ransomware leader has been apprehended. Ad…
CriticalCVSS 9.8KEVEPSS 2%
