Citrix has released security updates to address two vulnerabilities in NetScaler ADC and NetScaler Gateway, including a critical flaw that could be exploited to leak sensitive data from the application.… Read More »Citrix Urges Patching Critical NetScaler Flaw Allowing Unauthenticated Data Leaks
A 26-year-old Russian citizen has been sentenced in the U.S. to 6.75 years (81 months) in prison for his role in assisting major cybercrime groups, including the Yanluowang ransomware crew,… Read More »U.S. Sentences Russian Hacker to 6.75 Years for Role in $9M Ransomware Damage
The North Korean threat actors behind the Contagious Interview campaign, also tracked as WaterPlum, have been attributed to a malware family tracked as StoatWaffle that’s distributed via malicious Microsoft Visual… Read More »North Korean Hackers Abuse VS Code Auto-Run Tasks to Deploy StoatWaffle Malware
Another week, another reminder that the internet is still a mess. Systems people thought were secure are being broken in simple ways, showing many still ignore basic advisories. This edition… Read More »⚡ Weekly Recap: CI/CD Backdoor, FBI Buys Location Data, WhatsApp Ditches Numbers & More
AWS Bedrock is Amazon’s platform for building AI-powered applications. It gives developers access to foundation models and the tools to connect those models directly to enterprise data and systems. That… Read More »We Found Eight Attack Vectors Inside AWS Bedrock. Here’s What Attackers Can Do with Them
Microsoft has warned of fresh campaigns that are capitalizing on the upcoming tax season in the U.S. to harvest credentials and deliver malware. The email campaigns take advantage of the… Read More »Microsoft Warns IRS Phishing Hits 29,000 Users, Deploys RMM Malware
Cybersecurity researchers have uncovered malicious artifacts distributed via Docker Hub following the Trivy supply chain attack, highlighting the widening blast radius across developer environments. The last known clean release of… Read More »Trivy Hack Spreads Infostealer via Docker, Triggers Worm and Kubernetes Wiper
Threat actors are suspected to be exploiting a maximum-severity security flaw impacting Quest KACE Systems Management Appliance (SMA), according to Arctic Wolf. The cybersecurity company said it observed malicious activity… Read More »Hackers Exploit CVE-2025-32975 (CVSS 10.0) to Hijack Unpatched Quest KACE SMA Systems
Threat actors affiliated with Russian Intelligence Services are conducting phishing campaigns to compromise commercial messaging applications (CMAs) like WhatsApp and Signal to seize control of accounts belonging to individuals with… Read More »FBI Warns Russian Hackers Target Signal, WhatsApp in Mass Phishing Attacks
Oracle has released security updates to address a critical security flaw impacting Identity Manager and Web Services Manager that could be exploited to achieve remote code execution. The vulnerability, tracked… Read More »Oracle Patches Critical CVE-2026-21992 Enabling Unauthenticated RCE in Identity Manager