Rejetto HFS CVE-2026-61500 faces exploitation attempts after a public PoC showed forged admin sessions can lead to remote code execution.

Citrix patches CVE-2026-88779 after targeted zero-day attacks caused denial-of-service on SAML-enabled NetScaler deployments.

Bitdefender GravityZone discovers 700+ AI tools, ranks risky usage, and lets teams allow, review, restrict, or block activity.

A penetration test found an AI-assisted financial app could restore applicant access from a GUID without independent proof of control.

A suspected ShinyHunters member known as Rey was reportedly detained in Jordan and is said to be cooperating with the FBI.

TA419 targets U.S. AI policy experts with reply-triggered AitM phishing that captures Microsoft credentials and session ...

MI5 says more than 100 U.K.-linked academics contributed to MSS-funded research via CGTRI, which it assesses as an MSS front.

Warlock exploited SharePoint flaws in attacks on at least four organizations, including two critical infrastructure operators ...

Cybersecurity teams are shifting toward continuous control across identity, cloud, endpoints, telemetry, and human risk.

Given that the browser is where business apps are accessed and used, it makes sense that attacks are happening there too. Most breaches today begin in a browser session. Often, they never leave it, ...

China-nexus UAT-11587 targets Asian government and policy groups with Antino, a Rust backdoor that uses Microsoft 365 for C2.

Dell fixes six CSM flaws enabling authentication bypass, storage credential access, and cluster-wide privilege escalation.