Cybersecurity
Cybersecurity collects analysis on vulnerabilities, exploits, patch management, ransomware, supply chain, AI security and threat intelligence. These articles help IT professionals, developers and security analysts follow operational threats, vendor updates and technical trends.
Fortinet: Critical FortiMail Zero-Day, Patches Missing for Three of Four Branches
CVE-2026-104286 hits FortiMail with a CVSS 9.8 score and active exploitation. CISA mandates action by October 4, but Fortinet has patc…
Penetration Test Compromises 2,500 Machines Using a 2019 Patch
A penetration tester compromised 2,500 computers at a U.S. law firm by exploiting BlueKeep, CVE-2019-0708. The CISO inadvertently incr…
Google Promises Automated Patching With Argon, But the Model Remains Inaccessible
Google announces Gemini 4 Argon, a language model it says can autonomously find, validate, and patch critical software vulnerabilities…
OFAC Sanctions TdA Jackpotting Network: 7 TRON Addresses Targeted
The U.S. Treasury hit 10 targets linked to the Venezuelan Tren de Aragua cartel over $40 million stolen from ATMs. Seven TRON addresse…
Citrix NetScaler Zero-Day: WHIPSHOT and SLAPSHOT Malware Active Since September
Two critical Citrix NetScaler vulnerabilities were exploited as zero-days starting September 1, 2026, three weeks before Citrix publis…
WatchGuard FireWare OS: RCE Vulnerability in spamd Service Rated CVSS 8.6
A stack-based buffer overflow in the spamd (spamBlocker) service of WatchGuard FireWare OS allows authenticated administrators to achi…
Star Blizzard Launches RedFlick: One Email, One Interaction
Star Blizzard has replaced ClickFix with RedFlick, an infection chain requiring a single click. Since January, 13 mass campaigns have…
DarkSword: iPhone Exploit Kit Delivered via Watering-Hole Attacks on Ukrainian Sites, SSSCIP Reveals
Ukraine's SSSCIP details DarkSword, an iOS exploit kit targeting military and government iPhones through compromised news, court, and…
Cisco Leaves New SD-WAN Zero-Day Unpatched: The Exploit Chain That Bypasses Authentication to Root
Cisco confirmed active exploitation of CVE-2026-20245, a command injection flaw in Catalyst SD-WAN Manager with no patch or workaround…
UK Cybersecurity Skills Gap: 57% of British Businesses Lack Confidence in Basic Defenses
The 2026 DSIT/Ipsos report finds 808,000 UK businesses lack confidence in fundamental cybersecurity technical skills, up from 49% in 2…
Malware Found in South African ATNS OT Network: 10% of Global Airspace at Risk
Air Traffic and Navigation Services (ATNS), the South African state-owned entity managing roughly 10% of the world's airspace, has dis…
From npm to AWS: 91.7 GB of European Commission Data and the Framework Shifting the Perimeter
The EC breach documents a disturbing pattern: install-time malware on npm packages steals cloud credentials before execution, turning…