Category: Cyber Security
-
Citrix has released emergency updates for a NetScaler zero-day that attackers have exploited against appliances using SAML authentication. Tracked as CVE-2026-88779, the vulnerability can crash affected systems and interrupt access to services. The memory buffer flaw affects NetScaler ADC and NetScaler Gateway deployments using SAML authentication with Gateway or AAA functionality. It carries a CVSS…
-
Jordanian authorities have reportedly detained a ShinyHunters suspect who may be helping investigators identify other members of the cybercrime group. Sources familiar with the case identified him as Saif al-Din Khader, known online as “Rey.” According to those sources, authorities took Khader into custody on Tuesday. He is reportedly assisting the FBI and international investigators…
-
Warlock ransomware attackers have targeted a water utility, a telecommunications provider, a regional government body and a university through vulnerable SharePoint servers. Researchers at Symantec and Carbon Black linked the intrusions to Longlegs, a China-linked group associated with Warlock’s development. During the past two months, its activity appears to have concentrated on Portuguese- and Spanish-speaking…
-
Leaked documents from a Russian research institute describe projects for stealing credentials, collecting mobile data and extracting information from corporate networks. According to DomainTools, the material offers a detailed view of development work supporting Russian cyber espionage. The files allegedly came from SpetsVuzAvtomatika, a Rostov-on-Don institute with an official focus on information security and technology…
-
Fortinet has warned that attackers are exploiting a critical FortiMail zero-day to run unauthorized code or commands on vulnerable appliances. The company urges customers to apply temporary protections while they await fixed software releases. The vulnerability, tracked as CVE-2026-104286, affects the FortiMail management interface and carries a CVSS severity score of 9.8. Critical Flaw Allows…
-
The KillSec ransomware takedown has disrupted an alleged cybercrime operation linked to around 1,000 suspected attacks worldwide. Authorities seized the group’s infrastructure and provisionally arrested three suspects during coordinated action on September 30. According to Europol, investigators believe a 16-year-old served as the group’s main operator. Meanwhile, police secured at least 110 terabytes of stolen…
-
MetaMask disclosed an ongoing infrastructure security issue on October 1 and began taking affected staking validators out of operation as a precaution. The MetaMask security incident remains under investigation, with the company reporting no immediate threat to MetaMask wallets. Internal teams are working with external partners and security advisers to address the issue. However, MetaMask…
-
More than 543,000 credentials exposed in public GitHub repositories still worked when researchers checked them in July. Truffle Security’s findings show how GitHub credential leaks can leave access to services open long after developers publish sensitive information. The exposed secrets had remained publicly accessible for a median of 784 days. Moreover, roughly 10% of the…
-
CISA has warned that a critical MikroTik RouterOS flaw could let remote attackers execute code with root privileges without logging in. The vulnerability, CVE-2026-84411, could also cause a denial of service through a single specially crafted request. However, the agency says it has no knowledge of active exploitation. Its advisory also contains conflicting version information,…
-
Cisco has released patches for a Cisco SD-WAN zero-day that attackers are actively exploiting to gain administrator access. The critical vulnerability, CVE-2026-76504, affects Catalyst SD-WAN Manager and allows remote attackers to bypass authentication without existing credentials. Cisco confirmed that its security response team learned of exploitation in September 2026. Meanwhile, CISA has added the flaw…