Critical Citrix NetScaler Flaw Exploited in Real-World Attacks, Experts Warn Citrix’s NetScaler appliance has been compromised by attackers exploiting a critical vulnerability that allows unprivileged threat actors to bypass authentication remotely. This flaw, tracked as CVE-2026-19490, was first disclosed in mid-August and has now been confirmed to be exploited in the wild. The vulnerability affects … Read more
A devastating new backdoor, dubbed “Ted”, has been discovered lurking within HAProxy builds, potentially leaving thousands of organizations vulnerable to interception and data theft. This stealthy malware is embedded deep within a victim’s own infrastructure, making it a ticking time bomb waiting to unleash chaos on unsuspecting networks. HAProxy is an open-source load balancer used … Read more
A 12-Year-Old Flaw in PostgreSQL Replication System Leaves Thousands Vulnerable to Remote Code Execution Thousands of organizations using PostgreSQL, a popular open-source relational database management system, have been left vulnerable to remote code execution attacks due to a 12-year-old flaw in its replication system. The vulnerability, identified as CVE-2023-4651, was patched by the PostgreSQL developers … Read more
Cyber attackers have unleashed a sophisticated phishing campaign that exploits Unicode characters, sending millions of emails that evade even the most robust email filters. This insidious tactic has far-reaching implications for businesses and individuals alike, underscoring the need for heightened vigilance in today’s digital landscape. The attackers’ scheme leverages invisible Unicode characters to craft emails … Read more
Catch Raises $5 Million for AI Executive Assistant With Built-In Security Features A startup called Catch has secured $5 million in funding to further develop its artificial intelligence-powered executive assistant. This AI agent, also called Catch, is designed to perform tasks like scheduling meetings and booking travel, but with a key difference: it’s built with … Read more
A Decade-Old Flaw in PostgreSQL Exposes Databases to Remote Takeover PostgreSQL, a popular open-source database system used by tens of thousands of companies worldwide, has been found to contain a severe vulnerability that allows attackers with low privileges to take control of databases and servers. The flaw, tracked as CVE-2026-6471, has its roots in a … Read more
Google has issued an emergency update for its Chrome browser to address a critical security vulnerability that has been actively exploited by attackers. The issue, identified as CVE-2026-85046, is a type confusion bug in the V8 engine, which compiles and executes JavaScript code used by websites. This flaw allows hackers to corrupt memory and potentially … Read more
Microsoft’s Exchange Online Service Experiences Widespread Email Delays and ‘Server Busy’ Errors A major outage has crippled Microsoft’s Exchange Online service, leaving users unable to send or receive emails from external domains. The issue, which began early yesterday morning, has caused “intermittent Server busy” errors and delays for multiple mailboxes. The problem appears to be … Read more
Super Forms and Elementor Pro Vulnerabilities Exposed in Massive Exploit Attempts A staggering 440,000 exploit attempts have been detected targeting vulnerabilities in Super Forms and Elementor Pro plugins used by millions of WordPress websites. This alarming trend highlights the ongoing threat landscape faced by website administrators and underscores the importance of timely patching. The affected … Read more
Google has issued a critical update to address an actively exploited high-severity vulnerability in its Chrome browser. The flaw, identified as CVE-2026-85046, is a type confusion issue that can allow attackers to corrupt memory and potentially execute malicious code within Chrome’s sandboxed environment. The vulnerability was reported by security researcher Salvatore Gulizia, known online as … Read more