Bitget resumes Bitcoin withdrawals after $387.5 million crypto heist

Bitget, a prominent cryptocurrency exchange, has recently suffered a massive security breach at the hands of suspected North Korean hackers. The attack resulted in the loss of over $387.5 million worth of digital assets, making it one of the most significant crypto heists to date. The incident unfolded when Bitget’s security systems flagged multiple unauthorized … Read more

CISA Says Attackers Are Exploiting Two Critical Citrix NetScaler Flaws Globally

Citrix NetScaler Flaws Wreak Havoc on Global Networks as CISA Issues Urgent Warning The US Cybersecurity and Infrastructure Security Agency (CISA) has sounded the alarm, warning that attackers are actively exploiting two critical vulnerabilities in Citrix’s NetScaler product. The flaws, which have been identified as CVE-2023-0664 and CVE-2023-0671, allow hackers to gain unauthorized access to … Read more

JADEPUFFER-Linked Attackers Used Compromised Service Principals to Delete Azure Resources

Security researchers have uncovered a sophisticated attack campaign that leverages compromised service principals to delete Azure resources, leaving organizations vulnerable and their sensitive data exposed. The attackers’ modus operandi was linked to a notorious threat actor known as JADEPUFFER, which has been implicated in numerous high-profile breaches over the past year. The malicious campaign relies … Read more

Citrix Confirms 2 NetScaler Zero-Days After Admins Pulled the Plug

Citrix has rushed out patches for two critical NetScaler zero-day vulnerabilities that have been exploited in the wild. The company’s advisory covers eight vulnerabilities affecting NetScaler ADC and NetScaler Gateway, including remote code execution, HTTP request smuggling, denial of service (DoS), and security bypass issues. The two confirmed zero-days are tracked as CVE-2026-88771 and CVE-2026-88772, … Read more

CISA orders feds to patch exploited Citrix flaws by Wednesday

Citrix Flaw Exposes Feds to Zero-Day Attacks, CISA Orders Patching by Wednesday In a stark reminder of the ongoing threat posed by unpatched vulnerabilities, the US government’s Cybersecurity and Infrastructure Security Agency (CISA) has ordered federal agencies to secure their systems against attacks exploiting two critical Citrix NetScaler flaws. The agency’s directive comes as Citrix … Read more

Bitget resumes Bitcoin withdrawals after $387.5 million crypto heist

Crypto Exchange Bitget Hit with $387.5 Million Heist, Withdrawals Resume After Security Measures Implemented Bitget, a cryptocurrency exchange, has confirmed that it has resumed Bitcoin withdrawals after a devastating heist in which hackers made off with over $350 million. The company suspended all withdrawals last week after its security systems flagged suspicious activity and discovered … Read more

Citrix Confirms 2 NetScaler Zero-Days After Admins Pulled the Plug

Two Critical NetScaler Zero-Days Confirmed Exploited in Wild – Urgent Patching Recommended Citrix has issued emergency patches for two critical vulnerabilities affecting its NetScaler appliances, following reports of exploitation in the wild. The two zero-days, tracked as CVE-2026-88771 and CVE-2026-88772, have a CVSS score of 9.5 each and can be exploited without authentication. The affected … Read more

CISA orders feds to patch exploited Citrix flaws by Wednesday

Citix Vulnerabilities Exposed in Massive Government Alert The Cybersecurity and Infrastructure Security Agency (CISA) has issued a stark warning to US government agencies, ordering them to patch two critical Citrix NetScaler vulnerabilities by Wednesday. The move comes as national cybersecurity agencies, IT suppliers, and security teams have been privately advising customers to shut down their … Read more

US soldier gets 70 months in prison for extorting 10 tech, telecom firms

A former US Army soldier has been handed a 70-month prison sentence for orchestrating a complex cyber extortion scheme that targeted at least 10 major technology and telecommunications companies between April 2023 and December 2024. Cameron John Wagenius, who used online handles such as ‘kiberphant0m’ and ‘cyb3rph4nt0m’, pleaded guilty to multiple counts of hacking, identity … Read more