Microsoft has released out-of-band security updates to address a high-severity flaw in Microsoft Exchange Server that could allow an attacker to escalate privileges under certain conditions. The vulnerability, tracked as… Read More »Microsoft Exchange Flaw Lets Authenticated Attackers Read Other Users’ Mailboxes
A blank field. A public repo. One reply to an email. A box left exposed. None of this sounds dramatic, which is partly the problem. This week’s threats keep finding… Read More »⚡ Weekly Recap: NetScaler and FortiMail 0-Days, AI Coding Leaks, Spectre v2 and Ransomware Arrests
Threat actors have been observed attempting to exploit a now-patched critical security flaw impacting the Realtek Jungle software development kit (SDK) to deploy a botnet malware called Cling. “Cling is… Read More »Realtek Jungle SDK Exploit Attempts Deliver Cling Botnet With STUN-Based C2
Every modern enterprise depends on credentials. This is how humans, systems, and now AI, all connect to data, services, and each other securely. GitGuardian helps secure that credential layer through… Read More »The Credential Layer Is Expanding Faster Than Security Teams Can See It
Apple has announced that it’s taking steps to tighten controls around a macOS setting called Full Disk Access (FDA) due to security risks posed by artificial intelligence (AI) agents. “Some… Read More »Apple Plans Tighter macOS Full Disk Access Controls Over AI Agent Data Access
A critical security flaw impacting Rejetto HTTP File Server (HFS) is witnessing active exploitation attempts, according to VulnCheck. The vulnerability in question is CVE-2026-61500 (CVSS score: 9.3), a case of… Read More »Attackers Target Rejetto HFS Flaw That Enables Admin Session Forgery and RCE
Citrix has released security updates for a high-severity security flaw in NetScaler ADC and Citrix NetScaler Gateway that has been exploited as part of targeted zero-day attacks. The vulnerability, tracked… Read More »New NetScaler Zero-Day Exploited in Targeted Attacks Can Knock SAML Deployments Offline
A new China-nexus cyber espionage group known as TA419 has been attributed to multiple credential phishing campaigns targeting artificial intelligence (AI) experts working for U.S. think tanks, universities, and legal… Read More »China-Aligned TA419 Targets U.S. AI Policy Experts With Microsoft AitM Phishing
A suspected member of the ShinyHunters digital extortion group, who goes by the online alias “Rey,” has been allegedly detained by authorities in Jordan, Reuters reported, citing three people familiar… Read More »ShinyHunters Suspect Rey Reportedly Detained in Jordan, Helping FBI Identify Group Members
The suspected China-linked threat actor known as Warlock is still continuing to weaponize Microsoft SharePoint vulnerabilities, likely both old and new, in attacks targeting organizations in Portuguese- and Spanish-speaking countries.… Read More »Warlock Exploits SharePoint Flaws to Disable Security Tools and Deploy Ransomware