High-Severity Vulnerabilities Patched in OpenSSL, WolfSSL

Critical Vulnerabilities Patched in OpenSSL and WolfSSL Libraries A wave of high-severity vulnerabilities has been patched in the widely-used OpenSSL and WolfSSL open source cryptographic libraries. The fixes address a total of 25 security holes, including one critical flaw that could allow attackers to intercept sensitive data or crash applications. Developers are urged to update … Read more

South Africa Seeks Help After Cyberattack Targets Air Traffic Control

South African Air Traffic Control Systems Hit by Ransomware Attack Air traffic control systems in South Africa have been compromised by a sophisticated ransomware attack, highlighting the growing threat to aviation infrastructure worldwide. The incident, which has left officials scrambling for answers, underscores the vulnerability of critical systems to cyber threats. The attack targeted Air … Read more

Citrix NetScaler CVE-2026-88772 Exploit Details Show Pre-Auth Path to Shellcode Execution

A Critical Citrix Vulnerability Exposes Organizations to Pre-Auth Attacks Citrix, a leading provider of cloud and networking solutions, has announced that its NetScaler product is vulnerable to a critical pre-authentication (pre-auth) attack. The vulnerability, identified as CVE-2026-88772, allows attackers to bypass authentication mechanisms and execute malicious shellcode on affected systems without needing valid login credentials. … Read more

Trump Says Top Tech Firms Have Signed Accord to ‘Self-Police’ AI Development

President Donald Trump’s Meeting with Tech Leaders Yields Voluntary Accord on AI Development In a significant development, President Trump has announced that he and leaders from top tech firms have signed a voluntary accord aimed at addressing concerns about artificial intelligence (AI) development. The agreement, which includes internal and external reviews, is seen as a … Read more

Dual NetScaler Zero-Days Trigger Chaos for Citrix Customers

Citrix customers are reeling after two critical zero-day vulnerabilities were exploited, leaving their networks vulnerable to remote code execution and denial-of-service attacks. The company’s NetScaler products, used for application delivery control and security, were targeted by attackers who essentially gained a “skeleton key” to affected systems. The two vulnerabilities, CVE-2026-88771 and CVE-2026-88772, both have a … Read more

‘NeedyMantis’ Provides Long-Term Access to Compromised Networks

Cyberattacks can be devastating to organizations, but what happens after an initial breach is just as critical as the attack itself. A newly discovered malware framework, dubbed “NeedyMantis,” has been found providing long-term access to compromised networks, highlighting a potential blind spot for defenders. Microsoft’s Threat Intelligence team has identified NeedyMantis as a modular backdoor … Read more

Cloudflare Announces Public Certificate Authority for the Post-Quantum Web

Cloudflare’s Bold Move: A Public Certificate Authority for a Post-Quantum Web Cloudflare, the leading connectivity cloud company, has just announced its intention to become a public Certificate Authority (CA), an open service that issues digital certificates websites need to encrypt traffic and prove their identity to visitors. This move is a significant step towards securing … Read more

Unsloth Studio Flaw Turns Routine Model Inspection Into Code Execution

A critical vulnerability in Unsloth Studio, a popular open-source library for fine-tuning and quantizing large language models (LLMs), has been patched after researchers discovered that malicious AI models could execute arbitrary Python code during inspection. The flaw, which was reported to Unsloth in June and fixed in update 2026.6.9, allowed attackers to run custom code … Read more

Dual NetScaler Zero-Days Trigger Chaos for Citrix Customers

Citrix’s NetScaler Customers Left Reeling as Zero-Day Vulnerabilities Exposed A pair of zero-day vulnerabilities in Citrix’s NetScaler products has sent shockwaves through the cybersecurity community, leaving customers scrambling to patch their systems and protect against potential attacks. The critical flaws, which affect default configurations of NetScaler appliances, have been exploited by attackers for at least … Read more

Cloudflare Announces Public Certificate Authority for the Post-Quantum Web

Cloudflare’s Bold Move to Secure the Post-Quantum Web In a major breakthrough for internet security, Cloudflare has announced its intention to become a public Certificate Authority (CA), marking a significant shift towards protecting websites from the looming threat of quantum computers. This move is particularly timely as computing power advances, threatening to break current encryption … Read more