Cybersecurity
Citrix NetScaler and Kiteworks Zero-Days Exploited in Oct 2026
In September and October 2026, attackers exploited previously unknown vulnerabilities in Citrix NetScaler ADC, Citrix NetScaler Gateway, and Kiteworks appliances. The reporting, from security firm Res...
NetScaler FortiMail Zero-Day Exploits Hit: October 2026 Recap
This week's security recap is crowded: exploited zero-days, AI-related data leaks, Spectre attacks, phishing tricks and ransomware arrests. The headline items are the **NetScaler FortiMail zero-day ex...
Citrix NetScaler Zero-Day Patch Is Third in One Week
Citrix has issued another emergency fix for its NetScaler appliances, just one week after patching two zero-day vulnerabilities that were being actively exploited. The latest Citrix NetScaler zero-day...
iOS Zero-Click CoreGraphics Flaw CVE-2026-86950 Patched
Apple has issued an urgent patch for a newly disclosed iOS zero-click CoreGraphics vulnerability, a flaw that Computerworld says underscores "the precarious nature of mobile endpoint security." The bu...
ShinyHunters 'Rey' Detained in Jordan, Cooperating With FBI
A suspected member of ShinyHunters known as "Rey" has been detained in Jordan and is reportedly cooperating with the FBI. The news is another sign of pressure on the extortion group, but the ShinyHunt...
NetScaler Zero-Day Crashes Hit Fully Patched Gateways
Administrators who run NetScaler as a VPN and remote-access gateway are reporting something unsettling: devices rebooting spontaneously, and in large numbers. According to heise online, security resea...
Apple Zero-Day Pegasus Serbia Patch Tied to 14 Targets
Apple has released an emergency fix for a zero-day vulnerability in CoreGraphics, and the context is serious: at least 14 people in Serbia reportedly faced Pegasus spyware attacks. The Apple zero-day ...
Verify Software Updates: TrueConf Supply-Chain Malware Lesson
For years, the standard advice was simple: keep your software up to date. That advice still holds, but a growing wave of supply-chain attacks shows that the update itself can be the threat. Attackers ...
FortiMail Zero-Day CVE-2026-104286 Exploited: CVSS 9.8 Flaw
Fortinet has warned that a critical flaw in its FortiMail email security platform is being exploited in real attacks before many organizations had a chance to prepare. The FortiMail zero-day CVE-2026-...
Zammad Zero-Day Chain Behind DIVD Breach: What to Do Now
A help desk is one of the most trusted inboxes an organization runs. Customers paste in account details, error logs, names, and sometimes documents, assuming the data sits safely behind the platform. ...