Cybersecurity
Cybersecurity collects analysis on vulnerabilities, exploits, patch management, ransomware, supply chain, AI security and threat intelligence. These articles help IT professionals, developers and security analysts follow operational threats, vendor updates and technical trends.
Operation Master: From VPN CVE to 2.4 Million Fake Invoices Targeting Consumers
The Operation Master group exploited CVE-2026-0257 in Palo Alto Networks GlobalProtect to breach corporate infrastructure across four…
Bank of Korea Data Leak Exposes 186 Staff via E-Learning Vendor's GitHub
South Korea's central bank faces parliamentary scrutiny after personal data of 186 employees was exposed for 31 days through a third-p…
AI Agent Memory Has Become an Ungoverned Attack Surface
Coding agents store API keys and credentials in plain text. Agent memory becomes a target for persistent attacks via plugins and MCP,…
WordPress Under Attack: Malicious PHP Files in /tmp in Under Five Hours
CVE-2026-87902 is being actively exploited to write malicious files to WordPress servers. Upgrading to 7.1.2 does not remove compromis…
FBIJobs Breach: Recruitment Databases Are Prime Intelligence Assets
The FBI confirmed on September 20, 2026, that it is investigating a cyber incident involving its FBIJobs.gov recruitment portal. The S…
CVE-2026-85102: Three Days from Patch to Exploit on Check Point VPN
Check Point confirms active attacks against CVE-2026-85102 starting September 12, 2026, three days after patches were released. CISA s…
Two Citrix NetScaler Zero-Day RCEs Drive Preemptive Shutdowns
Two actively exploited zero-day remote code execution vulnerabilities in Citrix NetScaler ADC/Gateway have no patches or assigned CVEs…
x47.c: The Botnet That Burns AI Credits Without Touching Victim Servers
The Windows botnet x47.c, sold by threat actor WraithTools, introduces AI API drain — a capability that sends billable completion requ…
AI Sandbox Escapes: The Paradox of Guardrails That Block Defenders
The OpenAI–Hugging Face incident reveals a critical paradox: frontier provider guardrails hindered incident response, not the attack.…
Kiteworks Orders Server Shutdown After Federal Intelligence Warns of Imminent Attack
Kiteworks instructed customers to power down servers for six hours following credible threat intelligence from federal authorities. No…
GitHub Actions Mini Shai-Hulud Reactivated: Containment Turns Into Attack
Two GitHub Actions compromised in May came back online on September 16, 2026 with malicious tags intact, automatically executing paylo…
Astrana Health Breach via Vishing: SEC Filing in 24 Hours, Patients Still in the Dark
Astrana Health filed a Form 8-K with the SEC one day after detecting a vishing breach, but has yet to notify affected patients. The ga…