Citrix gives NetScaler admins another critical reason to patch
1. Executive summary Citrix has disclosed CVE-2026-107406, a memory overflow in NetScaler ADC and NetScaler Gateway that can lead to remote code execution or
1. Executive summary Citrix has disclosed CVE-2026-107406, a memory overflow in NetScaler ADC and NetScaler Gateway that can lead to remote code execution or
1. Executive summary ASOS has confirmed that attackers accessed customer information after tricking an employee into handing over login credentials, and the stolen data is broader
1. Executive summary On 8 October 2026, attackers operating the GhostAction GitHub Actions credential-theft campaign compromised two high-profile open-source maintainer accounts and injected
1. Executive summary The FBI and US Department of Justice seized seven domains used to operate Microscan and FishHub, two intrusion tools attributed to China-based
1. Executive summary The FBI has arrested a further suspected co-conspirator of the ShinyHunters group, the third detention in roughly two weeks, following the group&
1. Executive summary A Dark Reading commentary published 2026-10-09 argues that as AI agents are granted authority over business systems, attackers can manipulate those
1. Executive summary Researchers have published a full working exploit for a pre-authentication remote code execution flaw in AnyDesk for Linux that grants root access
1. Executive summary CVE-2026-47483 is a high-severity flaw (CVSS 8.2, CWE-770) in NVIDIA DCGM Exporter that lets an unauthenticated attacker exhaust
1. Executive summary Citrix has disclosed a critical memory overflow in NetScaler ADC and NetScaler Gateway, tracked as CVE-2026-107406, with a CVSS score of
1. Executive summary Threat actors are chaining two AhsayCBS vulnerabilities, CVE-2026-105133 (CVSS 5.5 MEDIUM, CWE-287) and CVE-2026-105134 (CVSS 9.3
1. Executive summary BPFDoor is a Linux backdoor that stays dormant until it receives a specific "magic packet", so it does not beacon outbound
1. Executive summary The FBI and US Department of Justice announced the seizure of seven domains and the blocking of platforms used by a China-linked