Collaborate Disseminate
Attackers are exploiting a critical flaw in Cisco Catalyst SD-WAN Manager, the system companies use to manage their Cisco SD-WAN networks, Cisco said in an advisory on September 30.
The flaw, CVE-2026-76504, could allow a remote attacker wit… Continue reading Cisco Warns of Attackers Exploiting Critical Authentication Bypass in SD-WAN Manager
Threat actors are abusing ChatGPT Custom GPTs to disguise them as legitimate product offerings and direct unsuspecting victims to malicious sites that employ ClickFix lures to deliver malware.
Huntress, which observed the activity in late September 20… Continue reading Attackers Abuse ChatGPT Custom GPTs to Deliver RAT via ClickFix Lures
Given that the browser is where business apps are accessed and used, it makes sense that attacks are happening there too. Most breaches today begin in a browser session. Often, they never leave it, with the entire attack chain from initial access to ex… Continue reading Know Your Enemy: Browser-Based Attack Techniques in 2026
AI coding agents asked to share screenshots of code changes for review have put internal company images in public GitHub repositories, security company Glow said.
Its researchers found more than 13,000 internal images from developers at over 300 organ… Continue reading AI Coding Agents Exposed 13,000 Internal Images, Including Billing Records, on GitHub
ANY.RUN researchers traced a US-focused CSuite phishing campaign across 351 sandbox analyses, with 51% of submissions coming from the United States. Technology, manufacturing, government, and consulting organizations showed the highest exposure.
Unknown threat actors have been observed exploiting a newly patched security flaw in Citrix NetScaler ADC and NetScaler Gateway appliances to target organizations in North America and Europe.
The activity, observed by Mandiant Consulting and Google Th… Continue reading Attackers Exploit NetScaler Flaw for Root Access, Deploy WHIPSHOT and SLAPSHOT
A High-severity OpenSSL flaw can leak heap memory to the other side of a DTLS connection or crash the program, OpenSSL said on September 29 as it released fixes.
DTLS, the TLS variant used for UDP traffic, resends a handshake message if no r… Continue reading OpenSSL Fixes High-Severity DTLS Flaw That Can Leak Heap Memory Unencrypted
Cybersecurity researchers have disclosed technical details of a recently patched critical security flaw in Citrix NetScaler ADC and Gateway that has come under active exploitation in the wild.
The vulnerability, tracked as CVE-2026-88772 (CVSS score: … Continue reading Citrix NetScaler CVE-2026-88772 Exploit Details Show Pre-Auth Path to Shellcode Execution
An attacker used stolen passwords of staff at France’s tax administration to take tax data on hundreds of thousands of taxpayers and businesses in June and July.
Neither the tax administration nor France’s national cybersecurity agency saw the data le… Continue reading French Tax Data Theft Using Stolen Staff Passwords Went Undetected for Seven Weeks
Russian state hackers known as Star Blizzard have been using fake event invitations to trick people into installing a backdoor on their Windows computers, according to Microsoft.
The campaigns, aimed at people and organizations tied to Ukraine, h… Continue reading Russia’s Star Blizzard Targets 100+ Organizations With Fake Event Invites to Deliver Backdoor