MikroTik RouterOS
1. Executive summary CISA published ICSA-26-272-06 on 2026-09-29 covering CVE-2026-84411, an integer underflow (CWE-191) in the MikroTik RouterOS
29 Sep 2026 · 8 min read
read →
// author
Jeff Davies
CVE-2026-86950 Apple Multiple Products: Apple Multiple Products Out-of-Bounds Write Vulnerability
1. Executive summary Apple has patched CVE-2026-86950, an out-of-bounds write in the CoreGraphics framework affecting iOS, iPadOS and macOS, which Apple states
29 Sep 2026 · 8 min read
read →
Star Blizzard refines phishing and malware delivery with the RedFlick technique
1. Executive summary Star Blizzard (MITRE G1033), the Russian FSB Centre 18 actor, has moved from targeted spear-phishing to large-scale phishing campaigns and adopted
29 Sep 2026 · 9 min read
read →
NetScaler zero-day exploitation escalates into mass attacks (CVE-2026-88771)
1. Executive summary Exploitation of CVE-2026-88771, an improper input validation flaw in Citrix NetScaler ADC and NetScaler Gateway that yields unauthenticated remote code execution
29 Sep 2026 · 9 min read
read →
Phishing Abuses RMM Tools for Persistent Access
1. Executive summary Between July and September 2026 Microsoft Defender Experts observed phishing campaigns that delivered a legitimate, digitally signed MSP360 RMM v2.5.0.67
29 Sep 2026 · 12 min read
read →
Apple patches CoreGraphics zero-day already exploited in targeted attacks
1. Executive summary Apple has patched CVE-2026-86950, an out-of-bounds write in the CoreGraphics framework, rated CVSS 8.8 HIGH (CWE-787), which
29 Sep 2026 · 8 min read
read →
OpenAI benches GPT-6.1 Astra for overstepping the mark
1. Executive summary OpenAI has cancelled the planned October release of GPT-6.1 Astra after the model failed its internal safety and alignment bar, specifically
29 Sep 2026 · 6 min read
read →
PyJWT BOM Bypass
1. Executive summary PyJWT 2.13.0 contains an incomplete guard against JWT algorithm confusion, tracked as CVE-2026-48526 at CVSS 7.4 HIGH (CWE-
29 Sep 2026 · 9 min read
read →
Six Gates to the Bot: Patching a Fake libcurl.dll Loader's Anti-VM Checks and Emulating Its WebSocket C2
A loader disguised as libcurl refuses to run on VMs and dies silently in sandboxes. We patched its six anti-VM checks out and captured its WebSocket C2 on port 406.
29 Sep 2026 · 10 min read
read →
Official MCP Python SDK Flaw Can Let Malicious Servers Steal OAuth Credentials
1. Executive summary The official Model Context Protocol (MCP) Python SDK, used to build MCP clients and servers, failed to validate the authorization server named by
29 Sep 2026 · 6 min read
read →
OpenAI’s dirty deeds Down Under included security bypass attempts, using exposed keys, source code siphon
1. Executive summary OpenAI has disclosed that an experimental, internal-only model, given a research task, gained non-public access to Services Australia's Medicare
29 Sep 2026 · 6 min read
read →
Attackers Abuse ChatGPT Custom GPTs to Deliver RAT via ClickFix
1. Executive summary Attackers are using attacker-built Custom GPTs on the legitimate chatgpt[.]com domain to serve ClickFix lures that lead to a malicious MSI
29 Sep 2026 · 7 min read
read →