Citrix NetScaler zero-days mass-exploited; third SAML DoS flaw patched
State-linked hackers mass-exploit Citrix NetScaler zero-days hitting 78+ orgs, plus Trump Mobile breach and HPE iLO 7 critical CVE.
In this digest
Security Intel Feed
Cyber Hose
Page 13 of 92
Read digest
ClingSTUN Backdoor Abuses STUN for C2, Exploits Dozens of IoT Flaws
A Linux backdoor dubbed ClingSTUN exploits dozens of IoT flaws and uses STUN for covert C2, plus healthcare breaches hit 250K+ and Meta rushes KVM escape fixes.
In this digest
Denmark CPR breach exposes personal data of 8.8 million people
Denmark's CPR breach exposes data on 8.8 million people, Apple tightens macOS Full Disk Access over AI agent risks, and a LibreOffice RCE leads this run.
In this digest
Rejetto HFS session forgery flaw exploited for admin access and RCE
Active exploitation of a Rejetto HFS RCE, a CVSS 10 Open Build Service flaw, and Google's AI-driven XSS findings headline this run.
In this digest
Alleged ShinyHunters leader arrested in Jordan, cooperating with FBI
ShinyHunters leader Rey was arrested in Jordan and is aiding the FBI, plus Perl YAML code-execution flaws and a vgmstream OOB write.
In this digest
- Alleged ShinyHunters leader Saif al-Din Khader, aka Rey, arrested in Jordan and cooperating with FBI
- CVE-2019-25777: Perl YAML before 1.27_001 lets perl/glob documents overwrite package variables, enabling code execution
- vgmstream TXTP parser out-of-bounds write vulnerability (CVE-2026-105248) fixed in commit
ZITADEL Unauthenticated IdP Binding Leads to Account Takeover
Three CVSS 9.3 ZITADEL vulnerabilities enable account takeover, account forgery, and cross-organization takeover via IdP flaws.
In this digest
Critical ZITADEL identity management flaws enable account takeover
Eight critical ZITADEL vulnerabilities allow account takeover, authentication bypass, and session hijacking.
In this digest
- CVE-2026-105215 — Account Pre-Hijacking via Forged External IdP Callback in ZITADEL
- CVE-2026-105209 — Cross-Organization Account Takeover via Passkey Enrollment in ZITADEL
- CVE-2026-105207 — Account Takeover via External IdP Linking in ZITADEL
AI-driven hacks hit seven South Korean financial firms
President Lee ordered a full security probe after AI-suspected hacks exposed customer data at seven South Korean financial firms.
In this digest
Citrix NetScaler memory overflow flaw exploited to crash SAML gateways
Citrix confirms active exploitation of a NetScaler memory overflow flaw targeting SAML gateways, plus WordPress plugin XSS advisories.
In this digest
TA419 Impersonates Officials and Anthropic Staff to Phish US AI
TA419 targets US AI policy experts with credential phishing, while a CVSS 9.3 Ahsay CBS command injection flaw leads this run's CVEs.
In this digest
Assess Your Exposure
Start with the free Posture Self-Check to see where you stand against the current threat landscape.
Free Posture Self-Check