Cybersecurity, AI, etc.
Blue teaming (defensive research, detection engineering, incident response case studies, new detection/hunting methodologies)
Dell has issued fixes for two maximum-severity vulnerabilities in Container Storage Modules, the components used to connect Dell enterprise storage arrays to Kubernetes environments. According to BleepingComputer, the flaws could…
GitLab has warned customers to patch a critical vulnerability in its AI Gateway service after reporting that the flaw could allow arbitrary command execution on vulnerable instances. The issue puts…
MetaMask says it is responding to an ongoing security incident affecting part of its infrastructure and has taken affected Ethereum validators out of service as a precaution. The company said…
CISA has added CVE-2026-76504, a critical authentication-bypass vulnerability in Cisco Catalyst SD-WAN Manager, to its Known Exploited Vulnerabilities catalog after reports of active exploitation. Cisco says the issue can allow…
Fortinet has warned that CVE-2026-104286, a critical FortiMail vulnerability, is being exploited in the wild. The flaw can let an unauthenticated attacker write arbitrary files on an affected system through…
Threat hunters have reported post-exploitation activity against Citrix NetScaler ADC and Gateway systems that includes attacker-created superuser accounts and web shells mapped to paths resembling CSS resources. The activity follows…
A public proof-of-concept has been released for CVE-2026-86950, an Apple CoreGraphics vulnerability that Apple says may have been used in highly targeted attacks. The research demonstrates a crash triggered by…
Threat actors are abusing ChatGPT Custom GPTs to make malicious destinations look like legitimate AI product offerings, according to reporting based on Huntress research. The campaign directs victims to a…
Cisco’s Catalyst SD-WAN Manager is affected by CVE-2026-76504, a critical API authentication-bypass vulnerability that Cisco says has been exploited in the wild. Rapid7 reports that the flaw has a CVSS…
Citrix has warned that exploitation of CVE-2026-88771 and CVE-2026-88772 has been observed on unmitigated NetScaler deployments. The vendor’s security bulletin covers multiple NetScaler ADC and Gateway vulnerabilities, with the two…