Researchers Warn of Two More Unpatched NetScaler Zero-Days Already Under Attack
Security firm watchTowr says it has uncovered two additional, undisclosed remote-code-execution vulnerabilities in Citrix NetScaler during forensic investigations, and that both appear to have been exploited in real-world...
Apple Patches CoreGraphics Zero-Day Used in Spyware-Style Attacks on iPhones and iPads
Apple's iOS 26.7.1 and iPadOS 26.7.1 updates close CVE-2026-86950, an out-of-bounds write in CoreGraphics that attackers used in what Apple describes as an extremely sophisticated attack against specifically...
Pentagon Data Breach Exposes Personal Records of Nearly 3 Million Service Members and Veterans
A file-sharing flaw in the Defense Department's personnel records system went unnoticed for roughly nine months, exposing unencrypted Social Security numbers and other personal data for 2.76 million...
Citrix Rushes Emergency Patches as Hackers Actively Exploit NetScaler SAML Zero-Day
Citrix has shipped emergency fixes for CVE-2026-88779, a memory-overflow flaw in NetScaler ADC and Gateway's SAML components that attackers are actively exploiting to knock appliances offline. Administrators running...
South Korea Orders Financial-Sector Security Review After Wave of Data Breaches
South Korea has ordered a broad security review after banks and other financial firms disclosed breaches affecting customers, employees and contractors. Investigators are also examining signs of shared...
Patched Citrix NetScaler Appliances Are Crashing on Their Own, and Nobody’s Sure Why Yet
Citrix customers who rushed to install the emergency 14.1-73.37 build for two actively exploited NetScaler zero-days are now reporting repeated appliance reboots triggered by malformed SAML traffic. Citrix...
Microsoft Reissues Exchange Security Update to Close Cross-Mailbox Access Flaw
Microsoft has issued revised September 2026 Exchange Server updates for CVE-2026-96940, an 8.8-severity authorization flaw that could let an authenticated attacker access another user’s mailbox. Organizations that installed...
Suspected ShinyHunters Member Detained as FBI Data-Theft Inquiry Expands
A suspected ShinyHunters member has reportedly been detained in Jordan and is cooperating with investigators seeking other people linked to the group. The development follows unverified claims of...