The Candiru spyware was delivered to Al Jazeera Media Network’s devices via targeted online advertisements in a zero-click attack that only required the malicious ads to be displayed on the victim’s device. Citizen Labs researchers who investigated the attacks called the technique AdFection and noted that their report was the first public technical confirmation of … Read more
BeyondTrust warned customers on Thursday to fix a critical flaw in its Remote Support (RS) that has been exploited in zero-day attacks since late August. Remote Support is the company’s enterprise-wide support solution that helps IT service desks, help desks and customer support teams resolve issues remotely. Tracked as CVE-2026-102764actively exploited this Authentication bypass The … Read more
Palo Alto Networks has released security updates for a high-severity PAN-OS RCE zero-day, tracked as CVE-2026-0322, that has been exploited to attack firewalls. The vulnerability affects the PAN-OS management interface and allows authenticated attackers with network access to execute code as root on vulnerable devices. Palo Alto Networks confirmed in a safety notice announced on … Read more
A Chinese-speaking hacker launched cyberattacks that rocked South Korea’s financial sector earlier this month using the ARTEX AI penetration testing suite and Claude agents. The perpetrator targeted several Korean banks, including Shinhan Bank, KB Kookmin Bank and Hana Bank, by exposing customers’ personal and credit card information and in some cases causing system failures. The … Read more
Hackers abuse legitimate Bing search result redirects as click-through URLs in Google Search Ads to direct users to fake Claude installers that carry out ClickFix attacks. The technique, dubbed “Adception” by security researchers at Push Security, appears designed to bypass advertising security checks by using Bing’s trusted domain as an advertising target before redirecting victims … Read more
Citrix has released emergency updates for a new NetScaler denial of service vulnerability known as CVE-2026-88779, which has been exploited in zero-day attacks. Researchers are investigating whether it can also be exploited for remote code execution. The vulnerability is a memory buffer flaw that affects NetScaler ADC and NetScaler Gateway appliances that use SAML authentication … Read more
The Warlock ransomware group continues to target SharePoint servers in attacks on critical infrastructure, government and educational institutions, Symantec reports. Warlock is believed to be operated by a China-based hacking group called Longlegs and Storm-2603, which has been linked to malicious operations such as CL-CRI-1040, CamoFei and ChamelGang. Last year, Chinese state-sponsored groups Linen Typhoon … Read more
Fortinet is warning customers about a critical FortiMail vulnerability, CVE-2026-104286, which is being actively exploited in zero-day attacks to execute unauthorized code or commands on vulnerable devices. The vulnerability is classified as critical with a CVSS score of 9.8 and affects the FortiMail administration interface. “A vulnerability related to improper restriction of a pathname to … Read more
Is Zero Trust Still Effective in the AI ​​Age? A new book by John Kindervag says yes, but that requires correct implementation. John Kindervag introduced the concept of Zero Trust in a Forrester Research report titled No more tough centers: introducing the zero trust model of information security published in 2010. Since then, the concept … Read more
Cisco has released security updates to address a critical zero-day in Catalyst SD-WAN Manager (tracked as). CVE-2026-76504), which attackers actively exploit to gain administrator rights. Catalyst SD-WAN Manager, formerly known as SD-WAN vManage, is network management software that allows administrators to monitor and manage up to 6,000 SD-WAN devices from a single dashboard. “In September … Read more