4 posts
Fake Cloudflare checks spread LunexStealer on 100+ compromised sites, Android patches 25 vulnerabilities including 7 critical, and Rejetto HFS CVE-2026-61500 (CVSS 9.3) is under active scanning.
Citrix patches NetScaler SAML zero-day with CISA deadline October 7, China-aligned TA419 bypasses MFA via AitM session hijacking, and OpenSSL patches 14 flaws including a DTLS memory disclosure.
Fake ChatGPT variants spread RAT malware via ClickFix, AI search tools serve fraudulent bank contacts, and the first autonomous AI agent attack targeted cybersecurity nonprofit DIVD.
Zyxel and Veeam patches with CISA deadline tomorrow, EvilTokens PhaaS compromised 12,000 Microsoft accounts, and D-Link DIR-822A has a critical unpatched zero-day.