Zscaler Report Highlights AI-Assisted Ransomware and Data-Theft Pressure
Zscaler’s ThreatLabz 2026 Ransomware Report says ransomware is rising and describes AI-assisted tactics, data theft, and targeting of privileged employees. How to use the finding The claims are vendor-report findings,…
OpenSSL DTLS Flaw CVE-2026-84782: Patch and Assess Exposure
CVE-2026-84782 is a reported OpenSSL DTLS handshake retransmission issue that may cause plaintext heap-memory disclosure or denial of service. Defender checklist Inventory DTLS-dependent services, including embedded products. Confirm OpenSSL versions…
Apple Issues Updates for Reported Zero-Day Vulnerability
Apple has released iOS and macOS updates that address CVE-2026-86950, reported by Meta’s product security team and described in security reporting as a zero-day. What to do now Deploy current…
CISA Warns of Active Exploitation of Citrix NetScaler Zero-Days
CISA warns that Citrix NetScaler ADC and Gateway flaws CVE-2026-88771 and CVE-2026-88772 are actively exploited. The alert covers eight newly disclosed vulnerabilities in products used for application delivery and remote…
Kiteworks Lifts Precautionary Shutdown Advisory After Threat Investigation
Kiteworks has lifted a precautionary advisory that asked customers with self-managed deployments to take systems offline for a nine-hour window. The company issued the guidance after receiving what it described…
Dutch Police Confirm Arrest in ShinyHunters Investigation
Dutch authorities have confirmed the arrest of a 24-year-old man from Amsterdam in an investigation involving the ShinyHunters group. Police said the person was expected to appear before the Rotterdam…
Microsoft Details NeedyMantis Post-Compromise Malware Used in Targeted Intrusions
Microsoft has published an analysis of NeedyMantis, a modular post-compromise malware family used to maintain access in targeted intrusions. Microsoft observed it at telecommunications organizations, universities, medical nonprofits, intergovernmental organizations,…
MCP Python SDK OAuth Flaw Can Expose Credentials to Malicious Servers
A security advisory for the official Model Context Protocol Python SDK warns that affected OAuth client implementations can send OAuth credentials to an attacker-controlled token endpoint when they connect to…
Apple Patches CoreGraphics Zero-Day Reportedly Used in Targeted Attacks
Apple has issued security updates for CVE-2026-86950, an out-of-bounds write in CoreGraphics that can lead to arbitrary code execution when a device processes a maliciously crafted file. Apple says it…
Citrix NetScaler Zero-Days Under Active Exploitation: What Defenders Need to Do
Citrix has disclosed two critical remote-code-execution vulnerabilities in NetScaler ADC and NetScaler Gateway that were exploited before public disclosure. The flaws, CVE-2026-88771 and CVE-2026-88772, each carry a CVSS v4 score…