Attackers are actively probing a critical vulnerability in Citrix NetScaler Gateway, tracked as CVE-2026-3055, which could leak sensitive data. This flaw, a memory overread issue, has a CVSS score of 9.3 and affects systems configured as a SAML Identity Provider (SAML IDP). Citrix issued security updates this week to address this and another vulnerability. Without […]
Russia-linked TA446, notorious for its persistent targeting strategies, has turned its focus to iPhones by utilizing the DarkSword iOS exploit kit. This advanced threat group, also known as SEABORGIUM and ColdRiver, is conducting spear-phishing campaigns aimed at compromising iOS devices through malevolent emails. TA446 has been a thorn in the side of NATO countries since […]
The European Commission has experienced a data breach after the cyberattack on its Europa.eu web platform, which hackers from the ShinyHunters extortion group have claimed. This incident underscores the growing cybersecurity threats targeting governmental institutions. As cybercriminals become more sophisticated, the breach raises questions about the robustness of digital defenses across critical entities within the […]
PolyShell attacks hit Magento as cybercriminals exploit vulnerabilities in version 2 of Magento Open Source and Adobe Commerce installations. Reports indicate that more than half of all vulnerable stores have been targeted. The PolyShell vulnerability poses a significant threat to online retailers using the affected versions. Attackers may leverage this exploit to gain unauthorized access […]
TP-Link has swiftly addressed a critical vulnerability in its Archer NX series by releasing a patch, following the discovery of a missing authentication check. This oversight allowed unprivileged attackers to upload firmware maliciously, posing significant security risks to users. The patch arrives amid TP-Link’s ongoing legal challenges. The company is currently embroiled in a lawsuit […]
A large-scale phishing campaign has hit GitHub, targeting software developers by utilizing fake Visual Studio Code security alerts. These alerts mimic legitimate advisories, urging developers to download a “patched” version via a misleading link. The phishing scheme has surfaced with thousands of nearly identical posts in GitHub repositories, creating the illusion of urgency and legitimacy […]
NVIDIA has rolled out critical updates to address severe security vulnerabilities in its primary AI and machine learning frameworks. These vulnerabilities, found in Megatron-LM, Triton Inference Server, and others, posed risks of remote code execution (RCE) and denial-of-service (DoS) attacks. The patches aim to fortify NVIDIA’s ecosystem against potential exploitation. Among the notable vulnerabilities are […]
Aqua Security’s Trivy scanner has been compromised in a recent supply chain attack, highlighting vulnerabilities in open-source infrastructure. A cybercriminal infiltrated Trivy by exploiting a misconfiguration in the GitHub Actions environment. This breach began in late February 2026, leading to the hijack of credentials and distribution of malicious software versions. The compromised version, v0.69.4, disguised […]
TeamPCP hackers have compromised the litellm Python package, a tool with over 95 million monthly downloads, used to route requests across various large language model providers. Cybersecurity firms Endor Labs and JFrog discovered a sophisticated backdoor in versions 1.82.7 and 1.82.8 of the package on the Python Package Index (PyPI). The threat actors injected malicious […]
Darktrace unveils its new Adaptive Human Defense system, aiming to tailor security training and protection measures within organizations. This innovative system intends to transform cybersecurity by customizing defense strategies according to each company’s unique needs. Adaptive Human Defense uses advanced algorithms to enhance security training for employees, making it an integral part of a firm’s […]
The latest PwC Annual Threat Dynamics 2026 report highlights a concerning surge in identity attacks as artificial intelligence continues to reshape the cyber threat landscape. The report, which draws from a comprehensive study of recent cybersecurity trends, indicates that AI-powered tactics have given attackers innovative methods to infiltrate businesses and compromise sensitive information. These new […]
RSA panel says pacts between the public and private sectors are crucial in countering China’s sophisticated cyber threats, particularly through initiatives like the Typhoon programs. Despite a high-profile conference on the urgent need for collaboration, empty chairs symbolized the lack of government representation at the RSA 2026 discussion. Panelists stressed that government involvement is vital, […]