MetaMask Security Incident Prompts Exit of Affected Ethereum Validators

October 1, 2026 at 10:40AM MetaMask on Thursday said it's responding to what it described as an "ongoing security incide…

Citrix NetScaler Post-Exploitation Payload Creates Superuser, Maps Web Shell to CSS-Like URLs

October 1, 2026 at 10:05AM Threat actors have been observed exploiting a critical pre-authentication command injection vulnerabil…

Attackers Abuse MSP360 to Deploy ScreenConnect in Dual-RMM Phishing Attacks

September 30, 2026 at 10:02PM Microsoft has warned of phishing campaigns distributing an installer for the MSP360 Remote Monitori…

OpenSSL Fixes High-Severity DTLS Flaw That Can Leak Heap Memory Unencrypted

September 30, 2026 at 01:39PM A High-severity OpenSSL flaw can leak heap memory to the other side of a DTLS connection or crash t…

Citrix NetScaler CVE-2026-88772 Exploit Details Show Pre-Auth Path to Shellcode Execution

September 30, 2026 at 11:00AM Cybersecurity researchers have disclosed technical details of a recently patched critical security …

Russia's Star Blizzard Targets 100+ Organizations With Fake Event Invites to Deliver Backdoor

September 29, 2026 at 10:50PM Russian state hackers known as Star Blizzard have been using fake event invitations to trick people…

Hackers Use NeedyMantis to Maintain Long-Term Access in Breached Networks

September 29, 2026 at 12:05AM Hackers have used a malware family called NeedyMantis to maintain long-term access to networks they…

RatHat Android Malware Console Uses Gemini to Identify Higher-Value Victims

September 28, 2026 at 11:08PM RatHat's operators build and publish the Android banking trojan and control infected phones fro…

Carbonato Botnet Compromises Docker Hosts to Deploy Telegram-Controlled Hermes AI Agent

September 28, 2026 at 05:16PM Cybersecurity researchers have disclosed details of a new botnet malware called Carbonato that'…

CISA Says Attackers Are Exploiting Two Critical Citrix NetScaler Flaws Globally

September 28, 2026 at 12:51PM The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Sunday added two critical Citri…

Warning: Two Unpatched Citrix NetScaler RCE Zero-Days Under Active Exploitation

September 27, 2026 at 01:17PM Two new unpatched zero-day vulnerabilities in Citrix NetScaler ADC and NetScaler Gateway appliances…

Lunex Stealer Abuses AMD Driver to Disable Security Monitoring and Steal Browser Credentials

September 26, 2026 at 11:52PM The Psychedelic Stealer malware distributed via compromised Ukrainian websites using ClickFix-style…