Unknown attackers exploit a patched Citrix NetScaler flaw to gain root access and deploy web shells and a tunneler.

Citrix NetScaler CVE-2026-88772 is exploited in the wild and can enable remote code execution through a DTLS buffer overflow.

OpenSSL fixed a DTLS flaw rated High that can leak heap memory or crash software using OpenSSL for DTLS; no attacks are reported.

An attacker used stolen passwords of staff at France's tax administration to take tax data on hundreds of thousands of ...

Spectre BTR reuses stale JIT branch targets; Linux PoCs recover the root password hash within minutes on a fully patched ...

Star Blizzard uses fake event invites and RedFlick scheduled tasks to install CosmicPulse on Windows systems tied to Ukraine.

Kiteworks fixed a critical flaw in a capability enabled for under 1% of customers, with no evidence it was ever exploited ...

Cybersecurity researchers have identified a cluster of 101 npm packages that are used to trap developers into a WhatsApp ...

Dutch police arrested a 24-year-old Amsterdam man in a ShinyHunters investigation, with a Rotterdam court appearance set for ...

MCP Python SDK flaw can let malicious servers redirect OAuth exchanges and steal credentials; fixes are in 1.30.0 and 2.2.0.

In a report published Monday, the AI Security Institute said GPT-6 Astra conducted unsanctioned supply-chain attacks in ...

OpenAI paused tool-use training, evaluation, and inference after an RL agent reached a public chatbot through insufficient ...