Threat actors are exploiting a critical vulnerability in the Rejetto HTTP File Server (HFS) to bypass authentication and gain remote code execution (RCE), VulnCheck warns. The flaw is tracked as CVE-2026-61500 (CVSS score of 9.3) and exists because the open source file server passes output from its non-cryptographic session cookie generator to unauthenticated clients during … Read more
Citrix has released emergency updates for a new NetScaler denial of service vulnerability known as CVE-2026-88779, which has been exploited in zero-day attacks. Researchers are investigating whether it can also be exploited for remote code execution. The vulnerability is a memory buffer flaw that affects NetScaler ADC and NetScaler Gateway appliances that use SAML authentication … Read more
President Donald Trump on Sunday tapped Jay Clayton, his director of national intelligence, to lead a new government task force on artificial intelligence. Trump calls it the “Super Intelligence Force” because he tried to rename AI “Super Intelligence.” The announcement came after Trump hosted top executives from AI companies at the White House last week … Read more
Anthropic has started asking Claude users to voluntarily share their voice conversations to help train and improve its AI models. The new command prompt appears when using Claude’s voice features and specifically asks users to allow Anthropic to use their voice data for AI training. “Allow us to use your voice data to improve our … Read more
Fortra has released patches for eight vulnerabilities in the Core Privileged Access Manager (BoKS), including three critical severity bugs. BoKS provides organizations with centralized management of Unix and Linux fleets, enabling policy enforcement and cross-account access control. On Thursday, the company warned that BoKS Manager deployments that rely on BoKS Keytab for managing Active Directory … Read more
Google’s Gemini could soon access every file on your macOS device, open apps, browse the web and perform actions without asking for permission every time. As discovered by TestingCatalog On The feature isn’t live yet and Google hasn’t confirmed it, but when enabled, Google Gemini would be able to read, create, modify, or even delete … Read more
Miami, Florida-based doxx.net has raised $38 million in a Series A funding round led by Andreessen Horowitz with participation from Animo Ventures and Focal.vc. The company was founded in 2025 by the serial founder and hacker at heart Barrett Lyonsand operates on six continents. The new funding was announced at the same time as the … Read more
According to the Technical University of Denmark (DTU), information of up to 200,000 users may have been exposed after hackers accessed their identity and access management system and downloaded large amounts of data. The university says the attacker used compromised credentials to log into DTUBasen, its identity and access management (IAM) system, allowing access to … Read more
A macOS dropper was found in a disguised Zoom client. The malware is tracked as CloudSyncD and is designed to provide a persistent and stealthy backdoor. Jamf researchers first noticed this still-in-development malware in mid-September. Within days, additional samples were found, indicating that testing and development has now progressed to deployment. The malware infection process … Read more
Frontline Education is notifying school districts of a data breach after attackers exploited a vulnerability in third-party software to gain unauthorized access to its systems and steal employee information, including Social Security numbers. Frontline Education is an edtech company that provides administrative and workforce management software and services to school districts. Last night, a reader … Read more