Cisco SD-WAN Manager Authentication Bypass Under Active Exploitation
A critical zero-day in Cisco Catalyst SD-WAN Manager lets unauthenticated remote attackers operate as admin…
Month: September 2026
Citrix NetScaler Zero-Days Exploited for Weeks Before Detection, Dozens of Organisations Compromised
Two actively exploited vulnerabilities in Citrix NetScaler appliances gave suspected state-sponsored attackers a multi-week head…
Device Linking Features in WhatsApp and Signal Exploited as Lawful Intercept Vector
German authorities have demonstrated that encrypted messaging apps can be monitored without breaking encryption, simply…
Apple patches CoreGraphics zero-day used in targeted attacks before fix was available
CVE-2026-86950, an out-of-bounds write flaw in CoreGraphics, marks Apple's seventh zero-day of the year and…
Citrix NetScaler Zero-Days Exploited Over the Weekend While Vendor Stayed Silent
Two critical NetScaler vulnerabilities were actively exploited for nearly two days before Citrix issued an…
Carbonato Botnet Targets Exposed Docker Daemons to Deploy AI-Assisted Malware
A newly identified botnet uses an open-source AI agent framework, controlled via Telegram, to execute…
ShinyHunters Arrest Triggers Escalation: FBI Jobs Site Breached via PeopleSoft Zero-Day
The detention of a Dutch suspect linked to ShinyHunters appears to have prompted the group…
JADEPUFFER Actors Used Compromised Azure Service Principals to Destroy Cloud Resources
Microsoft's tracking of Storm-3168 reveals an 18-hour destructive operation against Azure environments, marking a tactical…
CISA Mandates Federal Agencies Patch Critical Citrix NetScaler Flaws Within Days
Two critical Citrix NetScaler vulnerabilities under active exploitation have triggered a CISA emergency directive requiring…
Citrix NetScaler Critical Vulnerabilities Under Active Exploitation as CISA Issues Alert
Eight newly disclosed CVEs across NetScaler ADC and Gateway products include two critical remote code…