Attackers Are Buying Domains That AI Tools Hallucinate and Pointing Traffic to Phishing Pages
Unit 42 has named and documented 'phantom squatting', a technique that exploits the tendency of…
Year: 2026
Anthropic to Restore Claude Fable 5 and Mythos 5 Access After Export Control Lift
The Department of Commerce has lifted export controls on two Anthropic models, with access restoration…
Citrix patches six NetScaler vulnerabilities, including a memory disclosure flaw linked to CitrixBleed’s root cause
A new out-of-bounds memory read in NetScaler's SAML handling reinforces a persistent pattern of fragile…
SimpleHelp Authentication Bypass Lets Attackers Forge Technician Sessions via Unsigned Tokens
A vulnerability in SimpleHelp's OIDC authentication flow allows unauthenticated remote attackers to submit forged identity…
Linux Kernel Vulnerability, AI-Assisted Malware and a Resurfaced Backdoor Headline This Week’s Threat Landscape
A quiet week it was not — researchers and attackers alike have been active, and…
Weak RSA Keys with Structured Zero Patterns Found in Production Certificates and SSH Hosts
Researchers have identified a new class of cryptographically weak RSA keys characterised by regularly spaced…
Nissan Americas warns employees of payroll data exposure in Oracle PeopleSoft attack
Nissan has disclosed that a cyberattack on Oracle PeopleSoft may have exposed payroll records, Social…
Critical libssh2 Flaw Lets Rogue SSH Servers Corrupt Client Memory
A public proof-of-concept exploit now exists for CVE-2026-55200, a CVSS 9.2 vulnerability in libssh2 that…
Post-Quantum Cryptography Executive Order Sets Hard Deadlines for Enterprise Migration
A new US executive order converts post-quantum readiness from a research aspiration into a funded,…
CISA Orders Federal Agencies to Patch Actively Exploited Cisco Unified Communications Flaw by Sunday
A vulnerability in Cisco Unified Communications Manager is under active exploitation, prompting CISA to impose…