Microsoft X Account Hijacked in Apparent Crypto Pump-and-Dump Scheme
Attackers hijacked Microsoft’s official X account in an apparent cryptocurrency pump-and-dump scheme, according to BleepingComputer. The account has more than 13 million followers, making it a high-value channel for fraudulent…
Microsoft Digital Defense Report 2026 Emphasizes Connected Security Signals
Microsoft has published insights from its 2026 Digital Defense Report, arguing that defenders need to connect signals across endpoints, identities, cloud environments, applications, email, networks, and threat intelligence. The company’s…
Dell Urges Patching of Maximum-Severity Container Storage Module Flaws
Dell has issued fixes for two maximum-severity vulnerabilities in Container Storage Modules, the components used to connect Dell enterprise storage arrays to Kubernetes environments. According to BleepingComputer, the flaws could…
Warlock Ransomware Exploits SharePoint Vulnerabilities Against Critical Sectors
The China-linked Warlock ransomware group has reportedly targeted a water utility, telecom provider, regional government body, and university by exploiting SharePoint vulnerabilities for initial access. BleepingComputer reported that the activity…
GitLab Warns of Critical RCE Vulnerability in AI Gateway Service
GitLab has warned customers to patch a critical vulnerability in its AI Gateway service after reporting that the flaw could allow arbitrary command execution on vulnerable instances. The issue puts…
MetaMask Exits Affected Ethereum Validators During Security Incident
MetaMask says it is responding to an ongoing security incident affecting part of its infrastructure and has taken affected Ethereum validators out of service as a precaution. The company said…
OpenAI Says It Disrupted a Coordinated Reasoning-Extraction Campaign
OpenAI says it identified and disrupted a coordinated campaign designed to extract protected model reasoning at scale. The company attributed a core cluster of the activity to people associated with…
CISA Adds Actively Exploited Cisco SD-WAN Manager Auth Bypass to KEV
CISA has added CVE-2026-76504, a critical authentication-bypass vulnerability in Cisco Catalyst SD-WAN Manager, to its Known Exploited Vulnerabilities catalog after reports of active exploitation. Cisco says the issue can allow…
FortiMail Zero-Day CVE-2026-104286 Is Under Active Exploitation
Fortinet has warned that CVE-2026-104286, a critical FortiMail vulnerability, is being exploited in the wild. The flaw can let an unauthenticated attacker write arbitrary files on an affected system through…
Citrix NetScaler Exploitation Uses CSS-Like Web Shell Paths and Superuser Creation
Threat hunters have reported post-exploitation activity against Citrix NetScaler ADC and Gateway systems that includes attacker-created superuser accounts and web shells mapped to paths resembling CSS resources. The activity follows…