Cybersecurity
Cybersecurity collects analysis on vulnerabilities, exploits, patch management, ransomware, supply chain, AI security and threat intelligence. These articles help IT professionals, developers and security analysts follow operational threats, vendor updates and technical trends.
Citrix NetScaler Zero-Day: WHIPSHOT and SLAPSHOT Malware Active Since September
Two critical Citrix NetScaler vulnerabilities were exploited as zero-days starting September 1, 2026, three weeks before Citrix publis…
WatchGuard FireWare OS: RCE Vulnerability in spamd Service Rated CVSS 8.6
A stack-based buffer overflow in the spamd (spamBlocker) service of WatchGuard FireWare OS allows authenticated administrators to achi…
Star Blizzard Launches RedFlick: One Email, One Interaction
Star Blizzard has replaced ClickFix with RedFlick, an infection chain requiring a single click. Since January, 13 mass campaigns have…
DarkSword: iPhone Exploit Kit Delivered via Watering-Hole Attacks on Ukrainian Sites, SSSCIP Reveals
Ukraine's SSSCIP details DarkSword, an iOS exploit kit targeting military and government iPhones through compromised news, court, and…
Cisco Leaves New SD-WAN Zero-Day Unpatched: The Exploit Chain That Bypasses Authentication to Root
Cisco confirmed active exploitation of CVE-2026-20245, a command injection flaw in Catalyst SD-WAN Manager with no patch or workaround…
UK Cybersecurity Skills Gap: 57% of British Businesses Lack Confidence in Basic Defenses
The 2026 DSIT/Ipsos report finds 808,000 UK businesses lack confidence in fundamental cybersecurity technical skills, up from 49% in 2…
Malware Found in South African ATNS OT Network: 10% of Global Airspace at Risk
Air Traffic and Navigation Services (ATNS), the South African state-owned entity managing roughly 10% of the world's airspace, has dis…
From npm to AWS: 91.7 GB of European Commission Data and the Framework Shifting the Perimeter
The EC breach documents a disturbing pattern: install-time malware on npm packages steals cloud credentials before execution, turning…
Citrix NetScaler: Two Actively Exploited Zero-Days Patched After Disclosure Delay
Citrix released patches for eight NetScaler ADC and Gateway vulnerabilities on September 27, 2026. Two critical zero-days rated CVSS 9…
Wiz's Blue Agent Reconstructs GitHub-to-AWS Attack Chain in Minutes
An autonomous AI investigator correlated signals across three platforms in minutes to reconstruct a cross-platform data exfiltration c…
Autonomous AI Agent Hits DIVD: Operational Errors Leave Forensic Trail
The Dutch Institute for Vulnerability Disclosure suffered a breach carried out by an automated AI agent that operated autonomously dur…
CVE-2026-94127: F5 BIG-IP APM Zero-Day Triggers Three-Day CISA Deadline
F5 patched CVE-2026-94127, a critical heap-based buffer overflow in BIG-IP APM already exploited for remote code execution. CISA gave…