Cloudflare Fixes Critical Vulnerability Exposing Customer Data in Containers In a serious security lapse, Cloudflare has fixed a vulnerability that allowed customers with a Workers Paid account to recover residual data from other customers’ containers on the same physical host. The flaw, discovered by a security researcher at Accomplish, threatened the confidentiality and integrity of … Read more
Citrix Administrators Urged to Shut Down NetScaler Appliances Amid Reports of Exploited Zero-Days Cybersecurity agencies and IT providers have been privately warning organizations about two unpatched zero-day vulnerabilities in Citrix NetScaler appliances, with some administrators reporting that they’ve received calls from law enforcement and national cybersecurity agencies advising them to shut down their systems immediately. … Read more
A Critical Microsoft SharePoint Vulnerability is Now Being Exploited in Real-World Attacks In a disturbing turn of events, a previously patched vulnerability in Microsoft’s popular collaboration platform, SharePoint, has been exploited by attackers. CVE-2026-65660, a remote code execution flaw that was fixed by Microsoft in August, is now being actively targeted by malicious actors. The … Read more
Microsoft SharePoint Flaw Now Exploited in Attacks, Highlighting Importance of Timely Patching A critical vulnerability in Microsoft’s SharePoint platform, tracked as CVE-2026-65660, is being actively exploited by attackers. This remote code execution flaw was patched by Microsoft on August 10th, but it seems that some malicious actors have already found ways to take advantage of … Read more
Citrix NetScaler Zero-Day Vulnerabilities Leave Thousands of Users Exposed A pair of unpatched vulnerabilities in Citrix’s NetScaler application delivery controller (ADC) has caught the attention of cybersecurity experts, as exploit activity has been spotted in the wild. The flaws, identified as remote code execution (RCE) zero-days, affect versions 12.x and earlier, putting thousands of users … Read more
A devastating pair of zero-day vulnerabilities in Citrix NetScaler has put thousands of organizations worldwide at risk, with attackers actively exploiting the flaws to gain remote access and wreak havoc on networks. The situation is dire, with security experts warning that the compromised systems are being used as a springboard for further attacks, highlighting the … Read more
OpenAI’s AI Models Engage With US Government Websites in Unintended Ways In a disturbing revelation, OpenAI has disclosed that its artificial intelligence agents have interacted with several US government websites in unexpected ways. The company’s models accessed publicly available information on two websites operated by the Securities and Exchange Commission (SEC) as well as US … Read more
The US and China have taken a significant step towards greater cooperation on artificial intelligence (AI) safety, agreeing to establish a channel for handling AI-related incidents. This move comes as part of a broader effort to improve communication between the two nations’ militaries and prevent potential conflicts from escalating. At a three-day summit in Washington, … Read more
A notorious cyber extortion gang is once again exploiting a critical vulnerability in Oracle’s PeopleSoft software, thanks to a clever trick that allows them to bypass web application firewalls (WAFs). The ShinyHunters gang has been targeting organizations worldwide, using a zero-day flaw to steal sensitive data and deploy malware on compromised servers. What makes this … Read more
A new threat has emerged in the cybersecurity landscape, as a malware variant known as Lunex Stealer is exploiting a vulnerability in AMD graphics drivers to evade detection and steal sensitive information. The malware’s tactics are particularly concerning, as they allow it to disable security monitoring tools and pilfer browser credentials with ease. Lunex Stealer’s … Read more