Cybercriminals Exploit Citrix NetScaler Vulnerability in Ongoing Attacks
PremiumCritical Citrix NetScaler authentication bypass CVE-2026-19490 is now being actively exploited in attacks.
Monday, September 7
Critical PostgreSQL Vulnerability Exposes Databases and Servers to Severe Risks
PremiumPostGREShell CVE-2026-6471 lets replication access escalate to code execution, persistent superuser backdoor and server takeover.
JetBrains Urges Immediate Action After TeamCity Exploit Breach
PremiumUnpatched TeamCity led to a breach exposing AWS credentials; immediate secret rotation and patching urged.
OpenAI's GPT-6 Astra Sets New Benchmarks in Zero-Day Vulnerability Detection
PremiumGPT-6 Astra demonstrated the ability to find zero-days and produce exploits, raising AI-enabled offensive automation concerns.
Google Releases Critical Update for Chrome to Fix Exploited Zero-Day Vulnerability
PremiumChrome 152 fixes an actively exploited V8 zero-day; update browsers immediately to mitigate active attacks.
Critical Zero-Day Vulnerability Threatens Magento and Adobe Commerce Stores
PremiumCritical unauthenticated RCE 'StyleSmuggler' is actively exploited, allowing attackers to backdoor e-commerce stores.
Friday, September 4
Critical Flaw in JFrog Artifactory Allows Hackers to Forge Admin Access
PremiumCVE-2026-82329 in JFrog Artifactory is exploited to forge admin tokens, granting attackers administrative access to repos.
BGP Hijack Compromises Virtualizor Updates, Highlights Supply Chain Vulnerabilities
PremiumA BGP hijack diverted update traffic to deliver a malicious Virtualizor package, plus Project Watershed and other supply-chain incidents.
Elementor Pro Vulnerability Compromises WordPress Security
PremiumCVE-2026-32475 in Elementor Pro is exploited to install webshells and execute arbitrary server commands for site takeover.
Zero-Day Vulnerability Alleged in Avast Antivirus by Researcher
PremiumResearcher Chaotic Eclipse published a PoC for an alleged Avast Antivirus privilege-escalation zero-day affecting Windows 11 systems.
Breeze Comet Exploits Financial Systems Across Borders
PremiumBrazilian threat group Breeze Comet targets financial systems to steal funds and disrupt operations across banks and payment processors.
Massive Data Breach Hits Manchester Airports Group, Exposing Millions
PremiumFulcrumSec published roughly 550GB of Manchester Airports Group data after MAG refused a ransom demand, exposing passenger records.
Cyber Attack Exposes Vulnerabilities in Philippine Nuclear Agency
PremiumAttackers exploited unpatched ownCloud to access the Philippines nuclear agency, exfiltrating reactor databases and credentials.
Cybercriminals Exploit Brazilian Government Servers to Push Gambling Sites
PremiumGambling Goblin installed malicious Apache modules on Brazilian government and education servers to redirect visitors to betting pages.
Rockwell Automation Addresses Critical Vulnerabilities in Industrial Products
PremiumRockwell Automation released advisories and patches for multiple vulnerabilities across RSLinx, FactoryTalk, and other industrial products.
Pegasus Spyware Targets Serbian Activists in Zero-Click Attack
PremiumNSO Group Pegasus used an iMessage zero-click exploit to infect a Serbian student activist's iPhone enabling remote surveillance.
Massive Data Breach at Aesto Exposes Health Records of 9.5 Million Individuals
PremiumAesto data breach leaked sensitive health information of more than 9.5 million people, reported to regulators after discovery.
Massive Data Breach Exposes 153 Million Driver's Licenses
PremiumScans of 153 million US and Canadian driver's licenses are being sold on the dark web, risking large-scale identity fraud.
Thomson Reuters C-Track Breach Compromises Sensitive Court Records
PremiumThomson Reuters disclosed a C-Track breach exposing sealed court data and PII across US and Canadian jurisdictions.
FalconFlank Exploit Unveils Privilege Escalation Vulnerability in CrowdStrike Falcon
PremiumResearcher released a FalconFlank PoC showing privilege escalation in CrowdStrike Falcon sensor, creating urgent patch/practice risk.
Get these articles delivered to your inbox.
Subscribe free