Hackers exploit Citrix NetScaler zero-day to deploy web shells
Citrix NetScaler zero-day under active exploitation headlines this run, alongside a GitHub supply chain campaign and a WordPress plugin flaw.
In this digest
Security Intel Feed
Cyber Hose
Page 11 of 92
Read digest
FortiBleed Attackers Lock Victims Out of 86,000+ Fortinet Devices
Over 86,000 Fortinet devices worldwide are compromised by FortiBleed attackers who lock out admins and maintain persistence.
In this digest
Shai-Hulud npm Worm Resurfaces, Compromises tensorlake Package
The Shai-Hulud npm worm returns, compromising tensorlake and stealing tokens, credentials, and wallets from 100,000+ npm users.
In this digest
- Shai-Hulud npm Worm Resurfaces, Compromises tensorlake Package and Slips Past Registry Scanning
- Public PoC released for critical VMware VMXNET3 guest-to-host flaw CVE-2026-59346
- Elastic patches 14 flaws across Elasticsearch, Kibana and Endpoint, incl. Kibana cross-tenant data interception (CVE-2026-102406)
US offers $10 million reward for Chinese 'Hafnium' hacker Zhang Yu
The US targets Chinese hacker Zhang Yu for leading Hafnium attacks stealing COVID-19 research from over 60,000 US entities.
In this digest
MonsterCloud CEO charged with defrauding ransomware victims via
MonsterCloud's owner secretly paid ransomware attackers for keys while charging clients for proprietary decryption services.
In this digest
ccTLD registry hijacks mint unauthorized TLS certificates for Google
Attackers hijacked country-code domain registries to mint unauthorized HTTPS certificates for Google and other major brands; Chrome blocked them automatically.
In this digest
FBI warns FortiBleed campaign compromised 86,644 Fortinet devices
FBI warns FortiBleed has compromised 86,644 Fortinet devices across 194 countries, plus a Southern Company breach and PoeLLM botnet in this run.
In this digest
Advantest confirms personal data stolen in February ransomware attack
Advantest confirms a February ransomware attack exposed personal data including SSNs and passports, affecting notified individuals.
In this digest
EY breach exposes Goldman Sachs, Man Group client tax data
EY breach via third-party platform exposed tax data of Goldman Sachs and Man Group clients; Atlassian patches critical flaw in 8 Data Center products.
In this digest
Cyberattack on Arizona Court System Steals Data of 1.3 Million People
Arizona court breach exposes 1.3M people's SSNs and case records, while IBM Langflow OSS faces multiple critical CVEs including CVSS 9.8 RCE flaws.
In this digest
Assess Your Exposure
Start with the free Posture Self-Check to see where you stand against the current threat landscape.
Free Posture Self-Check