Cybersecurity
Cybersecurity collects analysis on vulnerabilities, exploits, patch management, ransomware, supply chain, AI security and threat intelligence. These articles help IT professionals, developers and security analysts follow operational threats, vendor updates and technical trends.
P7 DarkSword: iOS Exploit Kit Evolves With Crypto Theft and Remote C2 Commands
iVerify has identified P7 DarkSword, a new variant of the DarkSword iOS exploit kit active in-the-wild since August 2026. The implant…
AnyPwn Exposes Silent Fix Risk: Pre-Auth Root RCE in AnyDesk Linux
Researchers released AnyPwn, a pre-authentication exploit for AnyDesk Linux achieving root RCE. AnyDesk quietly patched the bug in Jun…
CISA Sets Oct. 11 Deadline for 5 CVEs Exploited by Flax Typhoon
CISA added five vulnerabilities to its Known Exploited Vulnerabilities catalog, attributing active exploitation to the Chinese threat…
AhsayCBS: In-the-Wild Zero-Day RCE — Vendor Fix 10.3.4 Still Vulnerable
Two zero-day vulnerabilities in AhsayCBS are under active exploitation for unauthenticated remote code execution with SYSTEM privilege…
Ukraine Hikvision Exploit Spike: 9 Days of Pre-Kinetic Reconnaissance
GreyNoise detects a concentrated spike of CVE-2021-36260 exploit attempts against Hikvision DVRs in Ukraine from September 21 to Octob…
CISO Isolates Unpatchable Legacy Check-Printing Systems on Dedicated Network
A financial institution CISO, writing on the Cisco Talos blog, details how they mitigated risk from critical legacy check-printing sys…
ThreatsDay: When Cybercrime Eats Its Own and IDEs Become Arsenals
The October 8, 2026 ThreatsDay report documents a saturated ransomware-as-a-service market driving affiliate betrayal and an unprecede…
Ransomware Hits IDCF Cloud: Japanese Control Plane Collapses in 7 Minutes
A ransomware attack struck IDC Frontier's IDCF Cloud on October 7, 2026, compromising 239 hypervisors and 16,000 VM disks. The control…
"Prometheus" Arrested: The ATM Malware Funding the Venezuelan Cartel
Anibal Canelon Aguirre, alleged creator of the Ploutus-D malware and member of the Venezuelan Tren de Aragua cartel, has been arrested…
NVIDIA DCGM Bug: 2,100 GPU Servers Exposed, Unauthenticated DoS
CVE-2026-47483 hits NVIDIA GPU monitoring: 2,100 internet-exposed servers, 12,000 GPUs vulnerable to DoS via /debug/pprof endpoint. Th…
Shai-Hulud Worm Hits Tensorlake: AI SDK Turned Attack Vector
The npm package tensorlake@0.5.144 was compromised by the Shai-Hulud worm. Installing the AI SDK executes malware with a valid provena…
Citrix NetScaler: Third Zero-Day in 10 Days, CISA Sets Oct. 7 Deadline
CVE-2026-88779 hits the NetScaler ADC/Gateway SAML parser with a CVSS 4.0 score of 8.7. It is the third actively exploited zero-day on…