Citrix has issued a critical patch for its NetScaler product, fixing a vulnerability that could have allowed attackers to gain remote code execution (RCE) in SAML deployments. The flaw, which was discovered by security researchers, is particularly concerning because it affects organizations using Single Sign-On (SSO) protocols to authenticate users across different domains. The vulnerability, … Read more
A trio of skilled hackers has successfully demonstrated remote attacks on fully patched Google Pixel 10 smartphones, leaving security experts questioning the effectiveness of current defense mechanisms. At the prestigious Pwn2Own hacking contest held in Tokyo last week, three separate teams managed to breach the supposedly impenetrable devices, exploiting vulnerabilities that allowed them to gain … Read more
A Critical Flaw in Tor’s Onion Routing System Allows Hackers to Take Control of Anonymous Websites A severe vulnerability has been discovered in the GoBalance system, a crucial component of Tor’s onion routing protocol, which enables users to access anonymous websites with .onion addresses. The flaw allows attackers to hijack these hidden services by recovering … Read more
A wave of sophisticated cyber attacks has been unfolding across various industries, exploiting a previously unknown vulnerability in identity exposure. The attackers are using AI-driven tools to map and navigate an organization’s internal systems, creating a “velocity paradox” where security measures are woefully outdated compared to the speed and agility of modern AI. The attacks … Read more
Citrix has issued a critical warning to IT administrators, urging them to patch their NetScaler ADC and NetScaler Gateway appliances immediately to prevent remote code execution (RCE) attacks. The vulnerability, tracked as CVE-2026-107406, allows attackers to gain control over targeted devices or trigger denial-of-service (DoS) states that can cause crashes. To be vulnerable, NetScaler appliances … Read more
The FBI has taken a significant step in disrupting a major threat to critical infrastructure by seizing control of seven domains associated with the Flax Typhoon toolset. This move is aimed at preventing hackers from using these tools to infiltrate and compromise sensitive systems, potentially causing widespread damage. Flax Typhoon is a suite of hacking … Read more
A Critical Flaw in Citrix’s NetScaler Exposes SAML Deployments to Remote Code Execution Citrix has issued a patch for its NetScaler product, addressing a critical vulnerability that could allow attackers to execute malicious code remotely on affected systems. This security flaw affects organizations using NetScaler with Single Sign-On (SSO) capabilities through Security Assertion Markup Language … Read more
Three Teams of Hackers Successfully Breach Fully Patched Google Pixel 10 Phones at Prestigious Hacking Contest At this year’s Pwn2Own hacking contest, a trio of teams demonstrated astonishingly effective exploits against the supposedly secure Google Pixel 10 smartphones. The devices, boasting the latest software patches and touted as among the most secure on the market, … Read more
A Critical Flaw in Tor’s Onion Routing System Leaves .onion Addresses Vulnerable to Hijacking A severe security vulnerability has been discovered in the way Tor, a popular anonymizing browser, handles its onion routing system. The flaw, which affects all versions of Tor prior to 2.4.17-rc, allows attackers to hijack .onion addresses and potentially access sensitive … Read more
The US Department of State is offering a substantial reward for information leading to the capture of Zhang Yu, a Chinese national accused of being part of a notorious hacking campaign that targeted Microsoft Exchange servers. The Hafnium attacks, which began in 2020, compromised thousands of computers worldwide, including those belonging to a US university … Read more