Cybersecurity, AI, etc.
Red teaming (offensive research, new TTPs, exploitation techniques, PoC releases, adversary simulation findings)
Microsoft’s Digital Defense Report 2026 says threat actors are using AI to compress portions of the attack lifecycle, including vulnerability discovery, phishing customization, malware creation, credential discovery, lateral movement, and…
A new review of publicly listed Model Context Protocol (MCP) servers argues that the ecosystem’s rapid growth has outpaced marketplace security controls. MCP is widely used to connect models and…
Veeam released Backup & Replication 12.3.2 P4 (build 12.3.2.4934) with fixes for four reported vulnerabilities. The most severe, CVE-2025-64393, is rated 9.4 and concerns insecure deserialization in the Mount Service…
Researchers have reported a ClickFix campaign in which malicious Custom GPTs hosted on ChatGPT were used as part of a path to remote-access malware. The reported flow redirected victims to…
Citrix has issued fixes for critical NetScaler ADC and Gateway vulnerabilities tracked as CVE-2026-88771 and CVE-2026-88772, according to current threat reporting. The report says attackers have used the flaws to…
Cisco has warned of CVE-2026-76504, a critical Catalyst SD-WAN Manager vulnerability reported with a CVSS score of 9.8. The issue may allow an unauthenticated remote attacker to send crafted requests…
A reported critical flaw in the Panda Kernel Memory Access Driver used by WatchGuard and Panda endpoint products could let a local authenticated attacker bypass an intended driver-authentication control and…
Researchers have reported on Cling malware, which targets vulnerable Realtek-based devices and disguises command-and-control traffic as Google STUN responses while building an IoT botnet. The reported behavior is a reminder…
An individual believed to lead the ShinyHunters extortion group was reportedly arrested in Jordan and is cooperating with the FBI, according to SecurityWeek reporting published October 5. The report should…
CISA added CVE-2026-88779, a Citrix NetScaler vulnerability affecting SAML deployments, to its Known Exploited Vulnerabilities catalog on October 4 after evidence of active exploitation. The issue has been described as…