News Archive
2287 stories · page 11 of 96Every story we've published, newest first. Vulnerability records live in the CVE Tracker.
Suspected state-sponsored hackers exploited NetScaler zero-day since early September (CVE-2026-88772)
Suspected state-sponsored threat actors have been exploiting a zero-day vulnerability in NetScaler Application Delivery Controllers (ADCs) and Gateways, identified as CVE-2026-88772, since at least early September 2026. This flaw, along with a related vulnerability, CVE-2026-88771, allows for remote code execution on affected appliances. Citrix confirmed the active exploitation of both…
Security tools can now scan Claude Enterprise chats and uploads for sensitive data
Anthropic has introduced a Compliance API for its Claude Enterprise AI platform, enabling organizations to integrate Claude activity with their existing security and compliance tools. Over 100 security and compliance vendors are reported to have integrations with this new API, including major players like CrowdStrike, Microsoft Purview, Splunk, Palo Alto Networks, Cloudflare, and Zscaler.
OWASP Noir: Open-source static analysis tool
OWASP has released Noir, a new open-source static analysis tool designed to inventory application endpoints. Unlike dynamic application security testing (DAST) tools, which interact with a running application, Noir analyzes source code directly to identify all exposed paths, HTTP methods, parameters, headers, and cookies, linking each to its originating file and line number. This approach…
EU Cyber Resilience Act requirements for containers and Kubernetes
The European Union's Cyber Resilience Act (CRA), Regulation (EU 2024/2847), will impose mandatory cybersecurity requirements on all digital products sold within EU markets, significantly impacting organizations that develop and distribute containerized applications and Kubernetes deployments. The regulation, which entered into full force on December 10, 2024, will begin its reporting…
In this new SME cybersecurity service, the AI assists and the consultants decide
BH Consulting, an Irish cybersecurity and data protection consultancy, has launched BH Haven, a new ongoing service designed to provide small and medium-sized enterprises (SMEs) with access to specialist consultants. This service is supported by a proprietary AI tool that assists with analysis, evidence review, regulatory mapping, and reporting. Initially targeting Ireland and the UK, BH…
Most open critical and high flaws are over 90 days old
A recent analysis of internet-facing systems across 1,293 organizations in the US, UK, and Nordics revealed that the vast majority of critical and high-severity vulnerabilities remain unaddressed for over 90 days. Specifically, 97% of such flaws in the Nordics, 92% in the UK, and 86% in the US had been exposed for more than three months at the time of the study.
WSL containers are generally available on Windows
Microsoft has announced the general availability of WSL containers, a feature that enables Linux containers to run on Windows via the Windows Subsystem for Linux. The functionality can be installed through `wsl --update` or downloaded from Microsoft's GitHub releases page.
Most organizations need six months or longer to roll out new security controls
A recent survey of 8,000 security professionals across 30 markets indicates that most organizations face significant internal friction and delays in implementing new security controls, with only a small fraction demonstrating high effectiveness against modern threats. The survey, conducted by Cisco, found that only 8% of organizations fall into the top tier of preparedness for AI-era threats.
Post-quantum website certificates from Cloudflare are scheduled for early 2027
Cloudflare intends to establish itself as a public certificate authority (CA), an entity responsible for issuing the digital certificates websites utilize for traffic encryption and identity verification. The company has announced plans to issue both conventional certificates and a post-quantum variant known as Merkle Tree Certificates (MTCs), with production MTC issuance anticipated for the…
Trump Says Top Tech Firms Have Signed Accord to ‘Self-Police’ AI Development
Former President Donald Trump has announced that leading technology companies have entered into an accord focused on the self-regulation of artificial intelligence development. This agreement outlines a framework for voluntary actions by these firms, while also acknowledging the potential for future regulatory measures in the AI space.
Dutch ShinyHunters Suspect Investigated for Trying to Arrange 2 Murders
Dutch law enforcement authorities are reportedly investigating a suspect linked to the ShinyHunters cybercrime group for allegedly attempting to arrange two murders in a separate case. The individual, who is already under scrutiny for their suspected involvement in cybercrime activities, is now facing additional serious allegations unrelated to their digital offenses. This development…
Phishing Abuses RMM Tools for Persistent Access
Microsoft has reported observing phishing campaigns that are leveraging legitimate Remote Monitoring and Management (RMM) tools to establish persistent access to victim systems. Specifically, the campaigns were noted to abuse MSP360 RMM to facilitate the deployment of ScreenConnect, a legitimate remote desktop solution. This tactic creates redundant remote-access channels, enabling attackers…
Add one more AI worry to the nightmare scenario: self-replicating prompt injections
OpenAI has disclosed the discovery of "self-replicating prompt injection" attacks, a novel form of AI-specific worm attack affecting its GPT models. These attacks, which cause a model to repeatedly propagate malicious instructions, were identified in June during internal adversarial training exercises. OpenAI states there is no evidence these self-replicating prompt injections have occurred in…
Apple Zero-Day Vulnerability Weaponized in Targeted Attacks
Apple has reported that a zero-day vulnerability, identified as CVE-2026-86950, is actively being exploited in targeted attacks. The company described the exploitation as highly sophisticated, indicating a significant level of attacker capability. This out-of-bounds write flaw affects Apple products, though specific affected versions or devices were not detailed in the announcement.
Attackers exploited Citrix NetScaler zero-day for at least three weeks undetected
Attackers exploited a critical zero-day vulnerability in Citrix NetScaler appliances for at least three weeks before its public disclosure and the release of patches, according to security researchers. The vulnerability, identified as CVE-2026-88772, was first exploited on September 3, with widespread attacks affecting dozens of organizations across North America and Europe. These…
Signal adds encypted local backup support to iOS, desktop apps
Signal has completed the rollout of its secure backup feature across all supported operating systems, including Android, iOS, Linux, macOS, and Windows, with the release of version 8.30. This update introduces end-to-end encrypted local backups for iOS and desktop applications, while also revamping the Android backup system to utilize a new cross-platform format. The feature, initially…
Custom ChatGPTs push ClickFix attacks to deploy RAT malware
A novel attack campaign is leveraging custom variants of OpenAI's ChatGPT, promoted through sponsored Google search results, to direct users to malicious websites. These sites employ "ClickFix" social engineering tactics to deliver remote access trojan (RAT) malware. The campaign was identified by Huntress, a managed detection and response firm, which noted that dozens of users have been affected.
Acronis Backup Flaw Exploited Before CVE Publication
The Acronis Backup Incorrect Default Permissions Vulnerability (CVE-2026-87886) was exploited two days before its official CVE publication date. A second major catalogue now lists it as exploited.
CVE-2024-24112 SQL Injection in exrick xmall Exploited
CVE-2024-24112, an SQL injection vulnerability in exrick xmall, was listed as exploited in the VulnCheck KEV catalogue on September 14, 2026. It remains absent from CISA and EUVD catalogues.
Car Rental System SQL Injection Flaw Added to VulnCheck KEV
CVE-2022-32025, an SQL injection vulnerability in the Car Rental Management System Project, was added to the VulnCheck Known Exploited Vulnerabilities catalogue. This follows public exploitation reports from September 14, 2026.
CVE-2015-20122 Exploited Same Day as Publication
A SQL injection vulnerability, CVE-2015-20122, was reported as exploited on the same day its CVE record was published. The flaw has no patch window.
SQL Injection Flaw Exploited Same Day CVE Was Published
CVE-2023-54400, an SQL injection vulnerability, was reported as exploited on the same day its CVE record was published. The flaw is listed in the VulnCheck KEV catalogue but not in CISA KEV or EUVD.
Controversial spyware firm Paragon to go public by end of year
The controversial spyware manufacturer Paragon Solutions is set to become a publicly traded company by the end of the year, following a merger with the special purpose acquisition company (SPAC) Bold Eagle Acquisition Corp., which is listed on the Nasdaq exchange. This move is expected to increase transparency regarding Paragon's business activities while also signaling the firm's growing…
FBI tells ShinyHunters members to turn themselves in after recent arrest
The FBI has issued a public warning to members of the ShinyHunters extortion group, urging them to surrender following the arrest of an alleged leader by Dutch police. Brett Leatherman, Assistant Director of the FBI's Cyber Division, stated in a video released Tuesday that the Dutch National Police apprehended a 24-year-old man from Amsterdam on September 15. This individual is suspected of…