-
Attackers are exploiting CVE-2026-88771, a critical pre-authentication command-injection vulnerability in Citrix NetScaler ADC and NetScaler Gateway, to deploy reverse shells, create privileged accounts, and establish persistent access. LevelBlue’s Thr…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Hackers are abusing GitHub Actions to steal SSH keys, cloud credentials, and access tokens through malicious workflows disguised as security checks. The workflows targeted 2,577 secrets, but targeting did not always translate into theft. Researchers co…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
A cryptocurrency mining campaign dubbed PoeLLM has compromised more than 3,400 servers by targeting exposed AI infrastructure and other internet-facing applications. Active since April 2026, the operation combines vulnerability exploitation, cryptocurr…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
MALFEX, a persistent npm supply-chain campaign distributing Windows malware through eight malicious packages. Linked to an apparent single operator active since August 2023, the campaign delivers Overlord RAT, the movinlike information stealer, and a s…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Ernst & Young (EY) has warned that a data breach exposed personal and financial information belonging to clients of Goldman Sachs’ wealth management division and Man Group. The incident involved a platform supporting EY’s tax services, not the fina…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Progress has disclosed a critical command injection vulnerability in the Early Access Release of its DataDirect Autonomous REST Connector AI Model Generator agents. This vulnerability, tracked as CVE-2026-91140, allows specially crafted OpenAPI or Swag…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
CyberXero, a Russian-speaking initial access broker combining conventional exploitation tools with AI agents to pursue global website compromises and targeted intrusions against Ukrainian energy infrastructure. The findings describe an active, financia…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
The FBI and U.S. Secret Service issued a joint cybersecurity advisory warning that operators of “FortiBleed” continue to target internet-facing Fortinet FortiGate firewalls and SSL VPN gateways to steal credentials, maintain unauthorized ac…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
Attackers breached two of South Korea’s largest churches through distinct intrusion chains, combining an ERP web shell, privileged database access, leaked credentials, and broken authorization controls. Oasis Security’s analysis of attacker-server file…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
-
OpenSSH released version 10.6 on October 6, 2026, to address security vulnerabilities that affect encrypted sessions, file transfers, authentication, and forwarding controls. This update mitigates a plaintext recovery attack that exploits shared compre…
¶¶¶¶¶
¶¶¶¶¶
¶¶¶¶¶
