î „Swati Khandelwalî ‚Oct 02, 2026Vulnerability / Application Security A critical vulnerability in GitLab’s AI Gateway has been identified, allowing a logged-in user with Duo Agent Platform access to execute commands on the gateway under specific circumstances. GitLab released an advisory addressing …
Spanish authorities have apprehended a 16-year-old believed to be the mastermind behind the KillSec ransomware group. KillSec is accused of pilfering sensitive information from various organizations and threatening to expose it on their leak site unless a ransom was paid. …
Microsoft Security Research team has discovered that threat actors are exploiting a patched security flaw in Zimbra Collaboration Suite (ZCS) to deploy web shells and access mailbox data. The flaw in question is CVE-2026-73570, an unauthenticated operating system command injection …
Attackers Exploit Zimbra Flaw to Deploy Web Shells and Harvest Authentication Secrets Read More »
18 San Francisco, USA, September 29th, 2026, CyberNewswire Archipelo has introduced Salmon, an Execution Verification Infrastructure (EVI) for AI agents and autonomous systems. Powered by a cryptographic protocol, Salmon aims to make execution history verifiable, establishing a secure environment for …
î „Ravie Lakshmananî ‚Sep 28, 2026Vulnerability / Endpoint Security Apple has recently released security updates to fix a vulnerability found in older versions of iOS, iPadOS, and macOS that may have been exploited in targeted attacks. The vulnerability, known as CVE-2026-86950, involves …
Apple Patches CoreGraphics Flaw Possibly Exploited in Targeted Attacks Read More »
î „Swati Khandelwalî ‚Sep 27, 2026Vulnerability / Network Security Recently, Citrix confirmed the exploitation of two critical vulnerabilities in Citrix NetScaler ADC and NetScaler Gateway that allow remote code execution. The company released fixes for both vulnerabilities, along with addressing six other …
Two Unpatched Citrix NetScaler RCE Zero-Days Under Active Exploitation Read More »
The Psychedelic Stealer Malware Unveiled as Part of Lunex Malware-as-a-Service Platform The Psychedelic Stealer malware, which is being distributed through compromised Ukrainian websites with ClickFix-style Cloudflare verification checks, has been identified as a component of the larger malware-as-a-service (MaaS) platform …
î „Ravie Lakshmananî ‚Sep 25, 2026Malware / Supply Chain Attack GitHub Actions have once again come under scrutiny as two popular workflows were disabled after being compromised during the May 2026 Mini Shai-Hulud campaign. The repositories associated with these actions have been …
î „Swati Khandelwalî ‚Sep 24, 2026Vulnerability / Mobile Security A recent security flaw has been discovered in OnePlus devices running OxygenOS, allowing a malicious app to gain root access without requiring any special permissions. Security researcher Rasmus Moorats identified and exploited two …
Unpatched OnePlus Flaws Let Installed Android Apps Gain Root Without Permissions Read More »
The cybersecurity community has recently uncovered Go-based malware being distributed through two Go Modules and two Terraform providers. This marks a significant development as threat actors are now utilizing the centralized repository hosted by HashiCorp to distribute malicious payloads. The …
