Warning: Two Unpatched Citrix NetScaler RCE Zero-Days Under Active Exploitation

September 27, 2026 at 01:17PM Two new unpatched zero-day vulnerabilities in Citrix NetScaler ADC and NetScaler Gateway appliances…

Lunex Stealer Abuses AMD Driver to Disable Security Monitoring and Steal Browser Credentials

September 26, 2026 at 11:52PM The Psychedelic Stealer malware distributed via compromised Ukrainian websites using ClickFix-style…

Zero Trust for AI Agents Starts With Fixing Zero Visibility

September 26, 2026 at 04:00PM The way we talk about AI agents is shifting, and the way we implement them requires an even more fu…

Kiteworks Urges Customers to Shut Down Systems for 9 Hours Over Possible Cyber Attack

September 26, 2026 at 01:18PM Kiteworks (formerly Accellion) is urging customers to shut down their systems as a precautionary me…

WSO2 and Adobe Commerce Flaws Exploited in Attacks, Added to CISA KEV

September 25, 2026 at 10:16AM The U.S. Cybersecurity and Infrastructure Security Agency (CISA), on Thursday, added two critical s…

ThreatsDay: AI Search Poisoning, AI Coding Tool Leaking Repos, One-Click Code Execution and 13 More Stories

September 24, 2026 at 11:22PM This week, the dangerous stuff keeps arriving dressed as something boring. An update. A login box. …

Attackers Exploit WordPress CVE-2026-87902 Within Hours of Disclosure

September 24, 2026 at 11:06AM Threat actors have begun to actively exploit a critical security flaw in WordPress within hours of …

Attackers Use Malicious Terraform Providers to Deliver Go Malware via HashiCorp Registry

September 23, 2026 at 11:36PM Cybersecurity researchers have disclosed Go-based malware distributed via two Go Modules and two Te…

A Leaked GitLab Issue Email Address Lets Anyone Push Code and Run CI Jobs as You

September 23, 2026 at 10:23PM The private email address GitLab gives you for filing issues by email is a credential. Anyone who g…

ShinyHunters Claims FBI Breach, Says It Stole Data on Agents and Job Applicants

September 23, 2026 at 11:00AM The cyber extortion group known as ShinyHunters on Tuesday claimed it had breached the U.S. Federal…

Malicious npm Package Poses as Twilio Bug-Bounty Probe, Can Exfiltrate Credentials

September 22, 2026 at 11:28PM Cybersecurity researchers have disclosed details of a malicious npm package named "tw-pkgprobe…

Zyxel and Veeam Flaws Under Active Exploitation With Command and SYSTEM Access

September 22, 2026 at 11:01AM The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday added a now-patched secu…