A new critical vulnerability has been discovered in Cisco’s Catalyst SD-WAN Manager, a network management software used to monitor and manage up to 6,000 Software-Defined Wide Area Network (SD-WAN) devices. The flaw, tracked as CVE-2026-76504, allows unauthenticated attackers to access vulnerable systems remotely with administrator privileges, marking the fifth SD-WAN zero-day vulnerability exploited in the … Read more
A critical vulnerability has been discovered in MikroTik RouterOS, a widely used network operating system, that could allow hackers to execute malicious code or cause a denial-of-service condition on affected devices. The US Cybersecurity and Infrastructure Security Agency (CISA) has issued an alert warning of the risk, which it says could be exploited by an … Read more
As cybersecurity threats continue to evolve, a disturbing trend has emerged in 2026: browser-based attacks that exploit identity exposure are becoming increasingly sophisticated and widespread. We’ve analyzed over a dozen real-world cases where attackers leveraged compromised identities to unlock active attack paths, often with devastating consequences for affected organizations. These attacks typically begin when an … Read more
A New Wave of RATs Spreads via Abused ChatGPT Custom GPTs, Exposing Users to ClickFix Lures Malicious actors have discovered a novel way to spread Remote Access Trojans (RATs) using compromised ChatGPT custom models. These attackers are exploiting vulnerabilities in the popular AI chatbot platform to deliver RATs through carefully crafted “clickfix” lures. This development … Read more
Cisco has issued a critical alert regarding an authentication bypass vulnerability in its Software-Defined Wide Area Networking (SD-WAN) Manager. This flaw, identified as CVE-2026-1234, allows attackers to access sensitive areas of the network without proper authorization. The SD-WAN Manager is used by numerous organizations worldwide to manage and secure their WAN connections. The vulnerability affects … Read more
**Critical OpenSSL Flaw Leaks Sensitive Data, Demands Immediate Action** A high-severity vulnerability in the widely-used encryption library OpenSSL has been patched, but not before it had already begun leaking sensitive information. The flaw, which affects the DTLS (Datagram Transport Layer Security) protocol used by many websites and applications to secure online communications, can expose unencrypted … Read more
A critical vulnerability in Citrix’s NetScaler platform has been exploited by attackers, granting them root access and allowing them to deploy malicious payloads on affected networks. The flaw, which affects multiple versions of the software, was discovered earlier this year but had not yet been patched by many organizations. Citrix’s NetScaler is a popular application … Read more
A sophisticated phishing campaign targeting US-based C-suite executives has compromised Microsoft 365 sessions, granting attackers remote access to companies’ internal networks. The hack also involves deploying Remote Monitoring and Management (RMM) tools to facilitate further exploitation. The scheme, which leverages identity exposure as a key entry point, preys on senior-level employees who often possess high … Read more
A staggering cybersecurity lapse has been exposed, with a pair of AI coding agents inadvertently leaking over 13,000 internal images on GitHub. The shocking revelation raises serious concerns about data protection and highlights the risks associated with using external platforms for development purposes. The compromised images include billing records, employee IDs, and other sensitive information … Read more
As hackers continue to evolve and adapt their tactics, a disturbing trend has emerged in 2026: browser-based attacks that exploit identity exposure to unlock active attack paths. What’s alarming is not just the number of incidents, but how these sophisticated attacks are able to bypass traditional security measures and leave even the most vigilant users … Read more