Ravie LakshmananOct 01, 2026Vulnerability / Network Security The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Wednesday added a critical […]
Category: Security
Google Rolls Out Gemini 4 Argon to Trusted Cyber Defenders, Plans Guardrail-Free Version
Ravie LakshmananOct 01, 2026Artificial Intelligence / AI Safety Google on Wednesday announced its latest frontier artificial intelligence (AI) model, Gemini […]
Apple CoreGraphics PoC Emerges as WhatsApp PDF Checks Hint at Possible Delivery Path
Security researchers have published the first public proof-of-concept for CVE-2026-86950, an Apple CoreGraphics flaw Apple says may have been used […]
Bitget Confirms Third-Party Zero-Day Behind $387.5 Million Cryptocurrency Theft
Cryptocurrency exchange Bitget on Wednesday confirmed that attackers who stole $387.5 million last week exploited a zero-day flaw in third-party […]
MetaMask Security Incident Prompts Exit of Affected Ethereum Validators
Ravie LakshmananOct 01, 2026 MetaMask on Thursday said it’s responding to what it described as an “ongoing security incident” impacting […]
Citrix NetScaler Post-Exploitation Payload Creates Superuser, Maps Web Shell to CSS-Like URLs
Ravie LakshmananOct 01, 2026Vulnerability / Web Security Threat actors have been observed exploiting a critical pre-authentication command injection vulnerability in […]
Attackers have been exploiting critical Zimbra flaw to steal emails
Hackers have been exploiting a critical vulnerability in the Zimbra Collaboration Suite in an attempt to obtain email backups and […]
Attackers Exploit Zimbra Flaw to Deploy Web Shells and Harvest Authentication Secrets
Threat actors have weaponized a now-patched security flaw in Zimbra Collaboration Suite (ZCS) to deploy web shells and access mailbox […]
Attackers Abuse MSP360 to Deploy ScreenConnect in Dual-RMM Phishing Attacks
Ravie LakshmananSep 30, 2026Endpoint Security / Social Engineering Microsoft has warned of phishing campaigns distributing an installer for the MSP360 […]
Hackers host fake ChatGPT model on its official website — but really it’s just malware
(Image credit: Shutterstock/Daniel Chetroni) Attackers abused custom ChatGPT bots and Google Sites to deliver ClickFix malware Fake troubleshooting prompts tricked […]