North Korea now using female operatives in remote IT worker schemes
New research reveals DPRK remote IT worker cells now include female operatives aimed at infiltrating companies hiring remote contractors.
Read digestSecurity Intel Feed
Cyber Hose
Page 21 of 92
wolfSSL OCSP stapling v2 accepts non-CA chain certificates as issuers
Seven wolfSSL vulnerabilities disclosed, including three CVSS 8.3 flaws in certificate validation and TLS handshake handling.
In this digest
- CVE-2026-89102 — wolfSSL — CVSS 8.3 — OCSP stapling v2 multi accepts non-CA chain certificates as issuers
- CVE-2026-89136 — wolfSSL — CVSS 8.3 — Client accepts unsolicited RawPublicKey server certificate type
- CVE-2026-93302 — wolfSSL — CVSS 8.3 — Trusted peer certificate match ignores public key, allowing forged CA clones
Two Unpatched Citrix NetScaler RCE Zero-Days Under Active Exploitation
Unpatched Citrix NetScaler RCE zero-days under active exploitation lead this run, alongside a novel AI-powered breach of DIVD.
In this digest
Audit: 10 of 14 AI Helm charts ship with API auth disabled by default
A Sorami audit finds insecure defaults across 15 AI Helm charts, plus a CVSS 8.6 D-Link DIR-895L RCE vulnerability.
In this digest
Five Elasticsearch DoS vulnerabilities fixed in 8.19.22, 9.4.7
Elastic patched five denial-of-service flaws in Elasticsearch 8.x and 9.x causing uncontrolled resource consumption.
In this digest
ShinyHunters bypasses WAF rules in Oracle PeopleSoft attacks
ShinyHunters exploits Oracle PeopleSoft via WAF bypass, Lunex Stealer abuses AMD driver, and a CVSS 9.8 WordPress plugin flaw surfaces.
In this digest
Local AI model modifies Windows credential dumper to evade EDR
A local uncensored AI model altered a Windows credential dumper to bypass detection by two EDR products in lab tests.
In this digest
Rumours of two actively exploited Citrix NetScaler zero-days
Rumours of two actively exploited Citrix NetScaler zero-days have spread publicly, with Citrix declining to comment.
In this digest
Two GitHub Actions re-enabled with Mini Shai-Hulud payload still
Compromised GitHub Actions in the Mini Shai-Hulud campaign were re-enabled and served malware to ~15,000 repos, plus a Joomla SQL injection patch.
In this digest
x47c-ai-botnet
A new Windows botnet dubbed x47C weaponizes XAI Grok AI APIs to drain resources, SecurityWeek reports.
In this digest
Assess Your Exposure
Start with the free Posture Self-Check to see where you stand against the current threat landscape.
Free Posture Self-Check