​The U.S. government on Wednesday warned of an “active threat” targeting critical infrastructure organizations in the country using artificial intelligence (AI)-generated exploit scripts. The activity is targeting Siemens S7 SeriesProgrammable… Read More »AI-Generated Exploit Scripts Target Siemens S7 PLCs in U.S. Critical Infrastructure

​Adversa AI has disclosed an attack technique that it says can cause xAI’s Grok chatbot to send a user’s name, approximate location, subscription tier, and the prompts from the ongoing… Read More »New Cryptographic Context Injection Attack Could Let Web Pages Steal Grok Chat Data

​A now-patched security flaw impacting Zimbra Collaboration (ZCS) has come under active exploitation in the wild, according to the Polish Computer Emergency Response Team (CERT Polska). The vulnerability in question… Read More »Attackers Exploit Zimbra SNMP Flaw for Unauthenticated Remote Code Execution

​Citrix has released updates to address two security flaws impacting NetScaler ADC and NetScaler Gateway deployments, including a critical-severity authentication bypass vulnerability. According to the cloud computing and virtualization technology… Read More »Critical NetScaler Flaw Can Bypass Authentication on Certain Gateway and AAA Servers

​Cybersecurity researchers have disclosed a critical security flaw in isolated-vm, a popular open-source sandbox with more than 2,900 stars and 190 forks on GitHub, that could allow attackers to escape… Read More »Isolated-vm Flaw Lets Sandboxed JavaScript Escape to Host for Potential RCE

​A new Android threat codenamed Manic has been observed actively targeting Ukrainian banks, government and identity services, and messaging applications, as well as Russian and European financial institutions, global fintech… Read More »Manic Android Malware Exfiltrates Data From Offline Phones via Nearby Infected Devices

​Cybersecurity researchers have disclosed two denial-of-service (DoS) attacks that exploit how major content delivery networks (CDNs) convert client-facing HTTP/3 traffic into HTTP/1.1 requests to the websites they front, amplifying a… Read More »CDN Tsunami Attack Abuses HTTP/3 Translation for Up to 350x DoS Amplification

​In March 2026, an internal AI agent at Meta triggered a “Sev 1” incident after sensitive company and user data was exposed to employees who weren’t authorized to access it. … Read More »Why “Shady AI” is Security’s Next Big Governance Problem

​Researchers at the University of Massachusetts Amherst have demonstrated an attack that revives expired Visa contactless credit cards for real in-store purchases by rewriting the expiration date a point-of-sale (POS)… Read More »Zombie Card Attack Can Revive Expired Visa Cards for Contactless Payments