Cybersecurity
Cybersecurity collects analysis on vulnerabilities, exploits, patch management, ransomware, supply chain, AI security and threat intelligence. These articles help IT professionals, developers and security analysts follow operational threats, vendor updates and technical trends.
ClingSTUN: The Linux Backdoor That Turns Legitimate STUN Servers Into Covert Proxies
FortiGuard Labs has uncovered ClingSTUN, a Linux back-connect proxy backdoor that weaponizes the STUN protocol and exploits over two d…
youX: 229,226 Australian Driver's Licenses Exposed in Broker Platform Breach
The fintech platform youX exposed data on 444,538 individuals across roughly 800 brokers. Driver's license numbers, financial records,…
CISA Adds Zammad Zero-Days to KEV: Federal Deadline Set for Oct. 5
CISA added two zero-day vulnerabilities in Zammad to its Known Exploited Vulnerabilities catalog, both rated CVSS 9.4. Federal Civilia…
Anthropic's Mythos Bug-Hunter Finds Critical CVE, Exploited Within 24 Hours
AI model Mythos discovered CVE-2026-61500 in Rejetto HFS by reversing a PRNG with an SMT solver. Active exploitation from Chinese IPs…
DTU Breach Exposes 200,000 Records; University Cannot Determine What Was Stolen
The Technical University of Denmark suffered a cyberattack via compromised credentials. DTU cannot determine which data was exfiltrate…
ThreatsDay: When Mundane System Operations Become Weapons
The October 1, 2026 ThreatsDay bulletin maps 16 stories that turn ordinary operations into attack vectors. The real risk is the banali…
Frontline Education Data Breach Exposes SSNs and School Employee Data
Frontline Education has notified U.S. school districts of a data breach exposing Social Security numbers, email addresses, and physica…
Citrix and Kiteworks: Two Opposite Zero-Days, No Standard Governs the Response
Citrix patched two actively exploited NetScaler zero-day RCEs days after attacks began. Kiteworks urged customers to shut down systems…
Dell CSM: Two CVSS 10 Flaws Grant Attackers Full Administrative Control
Dell has patched two maximum-severity vulnerabilities in Container Storage Modules. An unauthenticated attacker can bypass access cont…
Bitget: The Zero-Day Was Inside the Security Perimeter — $387.5 Million Stolen
Bitget confirmed that the $387.5 million theft stemmed from a zero-day vulnerability in third-party security appliances. Initial acces…
Android 17 Moves the Anti-Spyware Battlefield to Google's Servers
Android 17 adds six features to Advanced Protection, headlined by Intrusion Logging — a forensic logging system that stores encrypted…
AI Agent Breaches DIVD in Seconds Using Zammad Zero-Days: The Report
On September 21, 2026, the Dutch Institute for Vulnerability Disclosure (DIVD) was compromised by an autonomous AI agent that chained…