Earlier in Cybersecurity
Two critical unpatched zero-day vulnerabilities in Citrix NetScaler ADC and NetScaler Gateway appliances are currently being actively exploited in the wild, allowing for remote code execution. Security firm watchTowr disclosed this threat on September 26, highlighting the immediate risk…
The Lunex Stealer, a sophisticated malware-as-a-service (MaaS) platform, has been identified by cybersecurity firm Ontinue as the engine behind a targeted attack campaign aimed at Ukrainian-speaking users. This operation unfolds through a meticulously crafted four-stage attack chain, initiated via compromised…
Google is alerting organizations to a resurgence in the mass exploitation of a critical security vulnerability within Oracle PeopleSoft, a widely used enterprise resource planning (ERP) software. This renewed campaign, linked to threat actors associated with the ShinyHunters group, targets…
The discourse surrounding Artificial Intelligence (AI) agents is evolving, necessitating a fundamental shift in their implementation strategies. Initial discussions centered on the rapid deployment of agents and their potential to boost productivity.
A significant security vulnerability has been detailed within the Elementor Website Builder WordPress plugin, a widely used tool for website design. This flaw, identified as a high-severity cross-site request forgery (CSRF) vulnerability, could enable an unauthenticated attacker to gain complete…
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) officially added two significant security vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog on Friday, citing concrete evidence of their active exploitation in the wild.
Kiteworks, a secure file sharing and data governance platform formerly known as Accellion, has advised its customers to shut down their systems for a precautionary nine-hour period over the weekend.
U.S. Army soldier Cameron John Wagenius, 22, was sentenced to 70 months in federal prison on March 18, 2026, for hacking into multiple telecommunications companies and stealing mobile call and text metadata for over 100 million AT&T customers in 2024.