Blog

Daily security roundup: NetScaler denial-of-service flaw under active attack, Dell System Update root exploit, and ransomware hits at healthcare and education.

Apple ships iOS 26.7.1, iPadOS 26.7.1, and macOS fixes for an out-of-bounds write flaw in Core Graphics that was exploited in targeted attacks.

Attackers exploited a Citrix NetScaler memory overflow flaw to install web shells, steal credentials, and pivot into internal networks.

Apple patches a CoreGraphics zero-day weaponized against specific individuals. Learn which iPhones and iPads are affected and how to respond.

Attackers exploit a Citrix NetScaler memory overflow flaw to gain root access and deploy WHIPSHOT web shells and SLAPSHOT tunnels across dozens of

CISA added one Apple vulnerability, CVE-2026-86950, to the Known Exploited Vulnerabilities Catalog on September 29, 2026.

A vulnerability in the official MCP Python SDK lets a malicious server steal OAuth credentials. Fixed in versions 1.30.0 and 2.2.0.

Security firm Gambit says an attacker chained Strix, Cairn, and Hermes AI agents to skim 600,000 cards from at least 27 companies for roughly $25 a target.

DIVD says a fully autonomous AI agent carried out a post-exploitation intrusion on its network, the first publicly described agentic AI-driven attack of its