US soldier sentenced to 70 months for extorting 10 tech, telecom firms
Former US Army soldier sentenced for hacking and extorting AT&T, Verizon, and other tech firms; Python MaaS infostealer targets 17 browsers.
In this digest
Security Intel Feed
Cyber Hose
Page 20 of 92
Read digest
Operation Master: GlobalProtect Flaw Enables Massive Fraud Campaign
A GlobalProtect authentication bypass fueled Operation Master, a campaign that stole records and sent 2.4M fraud messages targeting Brazilian customers.
In this digest
New attack breaks Miranda post-quantum signature scheme
A key recovery attack drops Miranda's security from 146 to 46 bits by reducing its masked Gabidulin code to a polynomial-time MinRank instance.
Read digestCritical OS Command Injection in TOTOLINK N150RT Router
A critical CVSS 8.6 OS command injection affects TOTOLINK N150RT routers, posing severe risks to network security.
In this digest
Seetong T8108 debug service authentication flaw (CVE-2026-100886)
A CVSS 9.3 improper authentication vulnerability in Seetong T8108-series devices headlines this digest.
Read digestNezha 2.2.3 Host Header Injection OAuth2 redirect_uri CVE-2026-101090
Nezha 2.2.3 suffers a critical Host Header Injection vulnerability in OAuth2 redirect_uri with CVSS 9.3 severity.
In this digest
Citrix accused of downplaying security flaw used to hack governments
Citrix faces allegations of concealing a flaw used to hack governments, CISA confirms NetScaler bugs under attack, and PortSwigger launches AI pen-testing.
In this digest
Citrix NetScaler ADC and Gateway hit by four vulnerabilities
Four HIGH-severity Citrix NetScaler vulnerabilities with pre-disclosure exploitation, plus Joomla extension fixes and new CVEs across Fleet, pnpm, and more.
In this digest
AI voice-clone scam steals €95M from Intesa Sanpaolo's Fideuram
AI voice-clone fraud nets €95M from Intesa Sanpaolo's Fideuram, a new EDR-evading Windows injection technique emerges, and Wireshark patches 19 flaws.
In this digest
Multiple High-Severity Sylius Vulnerabilities Affecting Payments
Sylius versions before 2.1.16 and 2.2.9 have critical flaws including payment overwrite and admin password reset issues.
In this digest
Assess Your Exposure
Start with the free Posture Self-Check to see where you stand against the current threat landscape.
Free Posture Self-Check