CyberNews

A Critical Citrix Flaw is Now Being Exploited in Real-World Attacks Citrix, a leading provider of secure networking solutions, has had its NetScaler appliance vulnerability exploited by attackers. The flaw, known as CVE-2026-19490, allows unprivileged threat actors to bypass authentication remotely when the NetScaler appliance is configured in certain ways. This means that even if … Read more

A sophisticated backdoor has been discovered lurking inside HAProxy builds, putting thousands of organizations and their customers at risk of intercepted web traffic. The “Ted” backdoor, as it’s being called, exploits a vulnerability in HAProxy software to secretly siphon off sensitive data from unsuspecting users. The discovery was made by security researchers who analyzed various … Read more

A Critical Vulnerability in PostgreSQL Has Been Patched After 12 Years PostgreSQL, a popular open-source database management system, has just released patches for a long-standing vulnerability that allows attackers to execute malicious code on systems using its replication feature. The flaw, discovered in 2014 but not previously addressed, is particularly concerning due to the sensitive … Read more

Millions of Email Users Targeted in Sophisticated Phishing Campaign Using Invisible Unicode A massive phishing campaign has been underway, sending out millions of emails that have managed to evade traditional spam filters. The attackers’ cunning trick? They’re using invisible Unicode characters to conceal their malicious links and attachments. At the heart of this operation is … Read more

Microsoft’s Microsoft Teams desktop client has been plagued by a known issue that prevents some users from opening it on their Windows systems. The company acknowledged the problem on Thursday and advised affected customers to work around it by using the web or mobile platforms until a fix is released. The issue, tracked as TM1466820, … Read more

Critical Citrix NetScaler Flaw Exploited in Real-World Attacks, Experts Warn Citrix’s NetScaler appliance has been compromised by attackers exploiting a critical vulnerability that allows unprivileged threat actors to bypass authentication remotely. This flaw, tracked as CVE-2026-19490, was first disclosed in mid-August and has now been confirmed to be exploited in the wild. The vulnerability affects … Read more

A devastating new backdoor, dubbed “Ted”, has been discovered lurking within HAProxy builds, potentially leaving thousands of organizations vulnerable to interception and data theft. This stealthy malware is embedded deep within a victim’s own infrastructure, making it a ticking time bomb waiting to unleash chaos on unsuspecting networks. HAProxy is an open-source load balancer used … Read more

A 12-Year-Old Flaw in PostgreSQL Replication System Leaves Thousands Vulnerable to Remote Code Execution Thousands of organizations using PostgreSQL, a popular open-source relational database management system, have been left vulnerable to remote code execution attacks due to a 12-year-old flaw in its replication system. The vulnerability, identified as CVE-2023-4651, was patched by the PostgreSQL developers … Read more

Cyber attackers have unleashed a sophisticated phishing campaign that exploits Unicode characters, sending millions of emails that evade even the most robust email filters. This insidious tactic has far-reaching implications for businesses and individuals alike, underscoring the need for heightened vigilance in today’s digital landscape. The attackers’ scheme leverages invisible Unicode characters to craft emails … Read more

Catch Raises $5 Million for AI Executive Assistant With Built-In Security Features A startup called Catch has secured $5 million in funding to further develop its artificial intelligence-powered executive assistant. This AI agent, also called Catch, is designed to perform tasks like scheduling meetings and booking travel, but with a key difference: it’s built with … Read more