Citrix Urges Urgent Updates as NetScaler Vulnerability Exploited
Critical NetScaler zero-day is actively exploited, causing DoS and federal risk advisories; immediate updates recommended.
Wednesday, October 7
Monday, October 5
AI Agents Target Government Websites in US and Canada with SQL Injections
PremiumResearchers found AI agents performing automated SQL injection against U.S. Department of Education and Library and Archives Canada websites.
Apache Releases Critical Update for HTTP Server Vulnerabilities
PremiumApache released HTTP Server 2.4.69 addressing 20 vulnerabilities that could allow code execution, auth bypass, data leaks, and DoS.
Legal Challenges and Security Threats: OpenAI and Cisco Face New Hurdles
PremiumSANS NewsBites highlights OpenAI agent accountability lawsuit, exploited Cisco SD-WAN flaw, and Zammad zero-days used against DIVD.
Microsoft Urges Rapid Update for Critical Exchange Server Flaw
PremiumMicrosoft reissued Exchange Server V2 updates to fix CVE-2026-96940, an authz flaw allowing intra-org mailbox access and exfiltration risks.
Fortra Addresses Critical Vulnerabilities in BoKS With Urgent Patches
PremiumFortra released patches for BoKS vulnerabilities that could allow authentication bypass, shell execution, and memory corruption.
Emerging N0n Ransomware Group Raises Alarm with Rapid Attacks
PremiumProfile of the newly emerged N0n ransomware extortion gang that published dozens of victims shortly after appearing in September 2026.
Debian Patches Over 1,300 Security Flaws in Major Update
PremiumDebian released a large kernel/security update addressing 1,313 CVEs that risk privilege escalation, DoS, and information leaks.
Dutch Cybersecurity Institute Targeted by Zero-Day Exploit and AI Attack
PremiumTwo zero-days were exploited against the Dutch Institute for Vulnerability Disclosure (DIVD), leveraging Zammad flaws and agentic AI elements.
US Treasury Targets Tren de Aragua in Nationwide ATM Security Crackdown
PremiumU.S. Treasury sanctioned Tren de Aragua members for ATM jackpotting thefts across the U.S., part of law enforcement crackdown.
Law Enforcement Takes Down Notorious KillSec Ransomware Group
PremiumLaw enforcement dismantled KillSec operators; seizures and arrests disrupted ransomware activity and prevented an air-traffic attack.
Key Arrest in ShinyHunters Case Aids FBI Investigation
PremiumA suspected ShinyHunters member 'Rey' was reportedly detained in Jordan and is cooperating with the FBI to ID other group members.
TA419's Sophisticated Phishing Campaign Targets U.S. AI Policy Experts
PremiumTA419 is running Microsoft AitM-style phishing campaigns to steal credentials from U.S. AI policy experts at think tanks and universities.
Critical Security Breaches Expose Millions and Uncover Criminal Plots
PremiumRoundup: Pentagon data breach, ShinyHunters arrests, Citrix NetScaler mass hacks, passport exposures, and more high-impact security incidents.
Dell Patches Critical Vulnerabilities in Container Storage Modules
PremiumDell patched critical Container Storage Module vulnerabilities allowing unauthenticated attackers to gain full administrative control of storage environments.
Vercel Uncovers KVM Zero-Day Vulnerability Allowing VM Escape
PremiumVercel confirmed a KVM zero-day allowing VM escape and host root access, raising sandbox containment concerns for untrusted workloads.
South Korea Launches Comprehensive Security Audit Following Financial Sector Breaches
PremiumSouth Korea ordered full security audits after financial-sector breaches exposed customer and worker data, probing potential AI-assisted intrusions.
Warlock Ransomware Targets SharePoint, Compromises Critical Sectors
PremiumWarlock exploited SharePoint vulnerabilities to deploy ransomware against water, telecom, and government organizations.
Critical Security Update: GitLab Addresses Major Vulnerability in AI Gateway
PremiumGitLab patched a critical AI Gateway RCE affecting self-hosted gateways; immediate upgrades to specified versions advised.
Citrix Urgently Patches NetScaler SAML Flaw Amid Reports of Reboots
PremiumCitrix released emergency NetScaler SAML patches, but customers report appliance reboots after installing the update.
Get these articles delivered to your inbox.
Subscribe free