CyberNews Federal Agencies Under Attack: Critical MLflow Vulnerability Exploited by Hackers The US Cybersecurity and Infrastructure Security Agency (CISA) has issued a warning to federal agencies that threat actors are actively exploiting a critical vulnerability in the popular AI engineering platform, MLflow. The agency has added this flaw to its catalog of exploited vulnerabilities and ordered … Read more
Citrix Issues Urgent Warning for NetScaler Security Flaws, Patches Now Available Citrix has sounded the alarm, warning administrators to immediately patch two critical vulnerabilities affecting its NetScaler Gateway secure remote access solutions and NetScaler ADC networking appliances. The flaws, tracked as CVE-2026-19490 and CVE-2026-19489, can be exploited by attackers to bypass authentication or launch denial-of-service … Read more
**Phishing Attacks Get a Boost with AI – How MSPs Can Stay Ahead of the Game** Phishing attacks have always been a headache for Managed Service Providers (MSPs), but the recent surge in artificial intelligence-powered campaigns has made them even more challenging to detect and prevent. With AI, attackers can create highly personalized emails that … Read more
A Critical Vulnerability in Elementor Pro Exposes WordPress Sites to Remote Code Execution Attacks A serious security bug has been discovered in the popular Elementor Pro plugin, which could allow attackers to upload malicious files and execute arbitrary code on vulnerable websites. The flaw, identified as CVE-2026-32475, affects all versions of Elementor Pro prior to … Read more
Cybersecurity experts have uncovered a sophisticated supply-chain attack that has compromised several popular Rust crates, including arrayref, append-only-vec, and internment. The attackers injected malicious code into these libraries, which are used by thousands of developers worldwide to build software applications. The hackers took advantage of the maintainer account behind arrayref, one of the most widely … Read more
Phishing Attacks Just Got a Whole Lot Smarter – And It’s Up to MSPs to Catch Them Cybersecurity professionals have long warned about the dangers of phishing emails, but recent advancements in artificial intelligence (AI) have made these attacks more convincing and harder to detect than ever. Managed Service Providers (MSPs), who are often responsible … Read more
A Critical Elementor Pro Bug Exposes WordPress Sites to Remote Code Execution Attacks A severe vulnerability in the popular Elementor Pro plugin for WordPress has been uncovered, putting millions of websites at risk of remote code execution attacks. The flaw, identified as CVE-2026-32475, affects all versions of Elementor Pro prior to 4.2.2 and could allow … Read more
A devastating supply-chain attack has compromised the popular Rust crate arrayref, allowing hackers to push infostealer malware onto developers’ systems during compilation. The malicious code was injected into the crate by an attacker who had access to the maintainer’s account and exploited a vulnerability in the package management system. The attack, which occurred on August … Read more
A sophisticated attack campaign has been uncovered, with suspected Russian hackers exploiting a combination of Google’s OAuth authentication system and WhatsApp’s linking feature to gain unauthorized access to multiple high-profile targets. This brazen hacking operation not only highlights the vulnerabilities in our increasingly interconnected online lives but also underscores the importance of robust security measures. … Read more
A Supply Chain Hack Has Injected Malware into a Crucial Rust Package, Potentially Affecting Millions of Developers and Users A malicious actor has successfully infiltrated the supply chain of one of the most widely-used libraries in the Rust programming language, injecting malware that can compromise systems during the build process. The affected library, called “crates.io”, … Read more