Blog

CISA confirmed active exploitation of two critical Citrix NetScaler zero-day flaws and added them to the KEV Catalog, alongside six additional vulnerabilities.

Citrix confirms two critical NetScaler RCE flaws are under attack and has shipped patches. Here is what is affected and what to do next.

Coding agents are storing API keys, credentials, and sensitive documents in plain-text memory. A new audit reveals how attackers exploit this exposure.

Two critical NetScaler ADC and Gateway flaws have been exploited in zero-day attacks to plant webshells for weeks. Patches are out, and CISA has ordered federal

The FBI's job applicant portals remain offline after ShinyHunters claimed to breach them via an Oracle PeopleSoft zero-day, exposing personnel data.

Apple fixes CVE-2026-86950, a CoreGraphics zero-day used in targeted attacks on iOS, with updates across iPhone, iPad, and Mac.

A forum image-upload flaw and an SSO misconfiguration were chained to take over ChatGPT and Codex accounts, including connected GitHub access.

New polling finds 66% of Americans oppose new AI data centers, rising to 72% when the project is proposed near their community.

Meta showed a pocket-sized wearable called Muse Charm that pairs with its Muse AI agent, with shipments planned for the December holidays.