Public exploit code released earlier this week claims that a local Windows user can gain SYSTEM privileges through the Common Log File System driver. The proof of concept, called SignDrop,… Read More »New SignDrop Zero-Day Exploit Turns Windows CLFS Security Feature Into SYSTEM Access
A search result isn’t always safe. An access request isn’t always harmless. And a familiar account doesn’t always mean a familiar person is using it. Simple things to remember. Yet… Read More »ThreatsDay: 59 Linux Kernel Bugs, Falcon Spyware, GSocket Backdoors + 17 More Stories
A critical flaw in Red Hat Quay allows an attacker who can access a Quay registry to read and overwrite private container images in every repository. Quay enables anonymous access… Read More »Critical Red Hat Quay Flaw Lets Attackers Read and Overwrite All Private Container Images in a Registry
The ongoing campaign targeting ConnectWise ScreenConnect deployments involves the exploitation of a now-patched critical security flaw in the remote access software, and not a new vulnerability, it has emerged. Blackpoint… Read More »SCKit Malware Turns ScreenConnect Support Sessions Into Potential MSP Attack Paths
Cybersecurity researchers have found that lookalike domains masquerading as artificial intelligence (AI) tools are being used to serve ClickFix-style lures, browser-hijacking malware, and a set of extensions that hijack user… Read More »186 Fake AI Domains Redirect Users to ClickFix Lures, Browser Malware, and Search Hijackers
Citrix has released patches for multiple critical security flaws impacting NetScaler ADC, Citrix NetScaler Gateway, and NetScaler Console that could lead to denial-of-service (DoS) or an authentication bypass. The critical… Read More »Citrix Patches 12 NetScaler and Secure Access Client Flaws, Including Authentication Bypass
PTC has released patches for a new critical vulnerability impacting Windchill and FlexPLM software that, if successfully exploited, could result in remote code execution. The security flaw, tracked as CVE-2026-126325,… Read More »PTC Patches Critical Windchill and FlexPLM Flaw That Could Enable Remote Code Execution
Since mid-August 2026, a phishing operation has been stealing live Google sessions from corporate users. Every check defenders normally lean on to judge a link came back clean, and the… Read More »Calendar Invites and Live Proxies: Inside a Google Session Hijacking Campaign
N-able on Thursday said it’s investigating a new public disclosure containing claims of additional vulnerabilities in on-premise versions of N-central running version 2026.4.1 HF2. “Based on our initial review, the… Read More »New N-central Exploits Work Against Patched Servers, Enable Root RCE and Windows SYSTEM Access
Security teams have more alerts, logs, and monitoring tools than ever. Yet when an attack happens, one simple question can still take too long to answer: Who or what is… Read More »Webinar: See How Identity Blind Spots Put Your SOC at Risk and How to Close Them