Earlier in Cybersecurity
ANY.RUN researchers have detailed a sophisticated CSuite phishing campaign specifically targeting United States-based executives, as revealed through an analysis of 351 sandbox submissions. This campaign demonstrates a dual-pronged attack strategy that combines the theft of Microsoft 365 session cookies…
Unknown threat actors have been observed exploiting a newly patched security flaw in Citrix NetScaler ADC and NetScaler Gateway appliances to target organizations in North America and Europe. This exploitation activity, identified by Mandiant Consulting and the Google Threat Intelligence…
OpenSSL released fixes on September 29 for a high-severity vulnerability affecting its Datagram Transport Layer Security (DTLS) implementation, which could lead to the unencrypted leakage of heap memory or program crashes.
Cybersecurity researchers have disclosed detailed technical information regarding a critical security vulnerability in Citrix NetScaler ADC and Gateway, identified as CVE-2026-88772. This flaw, which has been actively exploited in the wild, was recently patched by Citrix.
An unauthorized individual gained access to sensitive tax data belonging to hundreds of thousands of French taxpayers and businesses over a two-month period, from June to July. The breach was facilitated by the use of stolen employee passwords, a method…
Russian state-sponsored hacking group, identified as Star Blizzard, has been actively employing a sophisticated social engineering tactic involving the distribution of fake event invitations to compromise Windows computer systems. Microsoft's Threat Intelligence team reported on this campaign, detailing how…
A new variant of the Spectre CPU vulnerability, codenamed Branch Target Reuse (BTR), has been disclosed by academics from VUSec and Scuola Superiore Sant'Anna. This variant specifically targets Just-In-Time (JIT) engines found in web browsers, language runtimes, and the operating…
Kiteworks announced on Monday that it successfully identified and remediated a critical security vulnerability that was discovered during a scheduled precautionary shutdown over the weekend. The company collaborated closely with federal intelligence authorities throughout this process, underscoring the severity…