Storm-2945, a sub-cluster of the Russian threat actor Midnight Blizzard, has been observed compromising the sign-in portals of hospitality-related organizations such as hotels since May 2026 in order ...

Spot the tropes before they spread. Recognize the common story elements behind election rumors — can you get BINGO?

NetScaler engineering and support teams are tracking a newly observed issue related to SAML authentication in customer-managed NetScaler deployments. This post explains what customers should review, h...

Attached: 2 images It looks like we may have #PitScaler 2 on our hands. I can see my patched honeypots, 13.1 and 14.1, are crashing. Multiple source IPs. grep -Ei 'proc nsaaad.*(SIGNALED|EXITED)|ma...

Key Findings In July 2026, a China-aligned threat actor Proofpoint tracks as TA419 conducted multiple credential phishing campaigns impersonating prominent economists and artificial

Cisco Talos uncovered a cluster of activity we track as UAT-11587 targeting government and policy organizations across Asia, including in Taiwan, India, the Philippines, and Cambodia, to deliver a pre...

Explore this post and more from the Citrix community

The tech giant, which allows companies to send large datasets over the internet, said it received a "credible threat" from law enforcement about an imminent attack.

The predicted wave of Iranian cyber retaliation never came

An exclusive interview with a first-time female operative, and a day-by-day record of her first three weeks inside a North Korean IT worker cell. Her training, her assignments, and the American front ...

Varys — info@b4c2.net

Team Cymru uncovered 10,800+ self-hosted LLM gateways relaying pooled credentials to frontier models like Claude, enabling model distillation and abuse.

Gambit Threat Intelligence reconstructed an ongoing campaign in which open source AI agents compromised online retailers for about $25 each.

On September 9, 2026, Volexity published a blog post detailing the simultaneous use of multiple chained zero-day exploits in Google Chrome (CVE-2026-85046, CVE-2026-87491) and Microsoft Windows (CVE-2...

Subscribe to our Election Rumor Rundowns, get in touch, and collaborate

Software developers and IT professionals are increasingly being targeted through fraudulent recruitment processes that exploit their trust in established development platforms. Candidates are invited ...

Empowering everyone to build reliable and efficient software.

Google’s Gemini hacked three companies in the first known breakout, after the model accessed the internet and breached external systems during an evaluation of its cybersecurity capabilities.

Multilateral Sanctions Monitoring Team

A practitioner wellbeing framework for cybersecurity operations. Four injuries, four zones, and what to do about them. - SoShinySoChrome/human-incident-response-framework

Cybersecurity experts told NBC News they were concerned that fundamental issues of cybersecurity weren’t being addressed.