Ionut Arghire

Hackers are targeting NetScaler appliances using public PoC code to retrieve arbitrary memory content in the HTTP response.

Researchers say credentials harvested from hundreds of thousands of FortiGate firewalls are being used to facilitate ransomware attacks by the INC and Lynx operations.

A PoC exploit has been available since public disclosure, and the first exploitation attempts were observed last week.

Researchers show how context manipulation can cause agentic browsers to abandon safety guardrails and exfiltrate sensitive credentials.

CISA says threat actors are exploiting a recently patched SharePoint remote code execution vulnerability (CVE-2026-45659).

Microsoft's new Teams admin policy requires organizer approval for external AI bots, giving organizations greater visibility and control over automated participants in sensitive meetings.

Seven of the security defects have a maximum severity rating of 10/10 and could lead to arbitrary code execution.

Citrix urges customers to patch NetScaler after fixing six vulnerabilities, including the HTTP/2 Bomb flaw and a high-severity CitrixBleed-style information disclosure bug.

The updates fix vulnerabilities in WebKit, the kernel, WebRTC, Web Extensions, and other components affecting iPhone, iPad, Mac, and Safari users.

The company has publicly launched its solution to help organizations design, build, and operate secure cloud systems.

Hackers were seen making over 81 million login attempts originating from systems associated with hosting provider LSHIY.

Hackers accessed the insurance giant’s policyholder portal multiple times between June 15 and June 25.

The critical-severity defect allows unauthenticated attackers to take over the E-Business Suite’s Payments product.

The threat actor is focused on collecting credentials, SSH keys, cryptocurrency wallets, and development tooling.

Quantifind will accelerate international expansion and extend its platform’s localized risk intelligence capabilities.

Indirect prompts hidden in a repository can lead to Claude Code spawning a reverse shell on the developer’s machine.

The startup’s platform can identify AI agents and provide visibility into their access, behavior, and risks.

A variant of DirtyFrag, the flaw allows unprivileged local users to manipulate the Linux page cache and gain root privileges.

UNC5792 and UNC4221 have been targeting US government officials, military leaders, and allied personnel.

Threat actors are selling investment scam templates created using the legitimate DCloud Uni-App toolkit.