Citrix NetScaler CVE-2026-8452: SAML Heap Overflow to Root RCE and Web Shell Deployment
1. Overview Article Title : CISA: Hackers now exploiting Citrix NetScaler RCE flaw in attacks Source : BleepingComputer / CISA / Citrix Publication…
Последние новости
⚑ Сообщить о проблемеTech news from the best sources
Все темы
AI
Gear
News
Tech
agents
ai
api
architecture
automation
beginners
career
database
devchallenge
devops
javascript
llm
machinelearning
mcp
opensource
performance
productivity
programming
python
react
security
showdev
testing
tutorial
typescript
webdev
TA4922 PackClient Attacks: From Tax Documents to DLL Side-Loading and RAT Deployment
1. Overview Article Title : Carry-On Compromise: TA4922 Packs PackClient Publisher : Proofpoint Threat Research Publication Date : August 27, 2026 S…
SPEAKINGSTONE and DARKLANTERN in ZBT-Based White-Label Routers: WAN-Accessible Root Shell and DNS Hijacking
1. Overview Article Title : Chinese Routers Sold Worldwide Contain Backdoors Source : Dark Reading / VulnCheck Publication Date : 2026-08-27 Origina…
Safely Analyzing Obfuscated JavaScript: Step-by-Step Phishing Kit Restoration
1. Basic Information Article Title : JavaScript obfuscation: From party trick to phishing kit Publisher : Cisco Talos Publication Date : 2026-08-27…
Nearly 700 Rogue AI Agents Coordinated in the Hugging Face Attack: Lateral Movement from Artifactory Across Multiple Regions
1. Basic Information Article Title : Nearly 700 rogue AI agents coordinated in the Hugging Face attack Publisher : BleepingComputer / OpenAI Publica…
Attacks on Water OT: Over 100 Internet-Exposed Systems Targeted in July
1. Overview Title : CISA: Over 100 Internet-Exposed Water Systems Targeted in July Cyberattacks Source : SecurityWeek Published : 2026-08-26 Origina…
When AI Infrastructure Becomes the Target: Attacks Observed on LiteLLM, RAGFlow, and Kestra
1. Basic Information Article Title : When AI infrastructure becomes the target: Securing gateways and control points Publisher : Microsoft Security…
NovaCookies: Microsoft 365 AiTM Exploiting Trusted Docusign and Microsoft Redirects
1. Overview Article Title : NovaCookies at scale: Inside the $320 Phishing Service Targeting Hundreds of Organizations Publisher : Island Publicatio…
Gitea CVE-2026-60004: Active Exploitation of RCE via diffpatch API to Install Git Hooks
1. Basic Information Article Title : CISA Adds One Known Exploited Vulnerability to Catalog Publisher : CISA Publication Date : 2026-08-25 Original…
Unit 42: Real-World Prevalence of 405 AI-Related Malware Samples and Evaluation of Existing Defenses
1. Basic Information Article Title : The State of AI-Enabled Malware August 2026: From Brand Abuse to Agentic Execution Publisher : Unit 42 Publicat…
Reconstructing JavaScript from HTML Tag Names: An XSS and WAF Blocklist Evasion Technique
1. Basic Information Article Title : What's in a tag name? JavaScript, apparently Published By : PortSwigger Research Publication Date : 2026-08-25…
FURUNO FA-50: Hard-coded Credentials and Missing Authentication for Certain Settings (CVE-2026-59769 / CVE-2026-67578)
1. Basic Information Article Title : FURUNO ELECTRIC FA-50 CLASS B AIS TRANSPONDER uses hard-coded credentials and misses authentication for additio…
CISA "A Tale of Two SOCs": Detection and Containment from Two Red Team Assessments
1. Basic Information Article Title : A Tale of Two SOCs: Insights From Two Red Team Assessments Publisher : CISA Publication Date : 2026-08-25 Origi…
Active Exploitation of Oracle HTTP Server / WebLogic Proxy Plug-in CVE-2026-21962
1. Basic Information Article Title : CISA Adds One Known Exploited Vulnerability to Catalog Publisher : CISA Publication Date : 2026-08-24 Original…
JarService / zhima Malware Entering via Insecure Android Car Head Unit Update Paths
1. Basic Information Article Name : The invisible passenger in your car Source : Kaspersky Securelist Publication Date : 2026-08-21 Update Date : No…
E4del / PINHOLE Using FTP Banners for Command Retrieval
1. Basic Information Article Title : FTP Banners: The New Dead Drop Resolver Delivering Novel RATs Publisher : SOCRadar Threat Research Unit Publica…
TrueConf Server Exploitation: PhantomCore Delivered via CVE-2026-72529 / 72530
1. Basic Information Article Title : Head Mare APT Group exploits vulnerabilities in unpatched TrueConf server to deliver PhantomCore malware to con…
Three Russian-Linked Clusters Abuse Legitimate Authentication Flows
1. Basic Information Article Title : Going with the Flow(s): Distinct Clusters Target Individuals of Interest to Russia Publisher : Google Threat In…
SynkLoader Deploying Multi-Stage Modules via Teams Phishing
1. Basic Information Article Title : SynkLoader: when you throw in everything but the kitchen sink Publisher : Expel Publication Date : 2026-08-20 U…
JavaScript Sandbox Escape via Type Confusion in isolated-vm
1. Basic Information Article Name : GHSA-864f-rcv7-6rh4: Critical Type Confusion Vulnerability in isolated-vm Publisher : Endor Labs Publication Dat…
Rust Crate Tampering: Multi-Stage Info-Stealer Malware Launched via build.rs
1. Basic Information Article Title : ArrayRef Rust Crate Supply Chain Attack Publisher : StepSecurity Publication Date : 2026-08-20 Severity : Criti…
MLflow CVE-2026-64849: Cloud Credential Theft via Webhook SSRF
1. Basic Information Article Title : Unauthenticated SSRF in MLflow Webhooks Publisher : MLflow Security Advisory / CISA Publication Date : 2026-08-…
UAT-10147 AI-Assisted Intrusion and SPECTRE Malware
1. Basic Information Article Title : UAT-10147: A Chinese-speaking adversary integrates agentic AI into post-compromise operations Publisher : Cisco…
Manic Android Malware: Information Theft via Transparent Overlays and Short-Range Device Relaying
1. Basic Information Article Title : Manic: A blend between banking malware and spyware Publisher : ThreatFabric Publish Date : 2026-08-20 Severity…
Zimbra CVE-2026-73570: Unauthenticated Command Injection via SMTP
1. Basic Information Article Title : Actively exploited vulnerability in Zimbra Collaboration Suite Publisher : CERT Polska Publication Date : 2026-…
SilkParasite: Cloud C2 and Multi-Language RATs Targeting Central Asia
1. Basic Information Article Title : SilkParasite: Tracking a China-Nexus APT Across Central Asia Publisher : Bitdefender Publication Date : August…
LSHIY: Large-Scale Password Spraying Abusing ROPC and IPv6
LSHIY: Large-Scale Password Spraying Abusing ROPC and IPv6 1. Basic Information Article Title : How the LSHIY Password-Spraying Attack Abuses OAuth’…
Operation CameraSwarm: Over 14,000 Dahua Cameras Compromised via Three Attack Vectors
Operation CameraSwarm: Over 14,000 Dahua Cameras Compromised via Three Attack Vectors 1. Basic Information Article Title : Operation CameraSwarm: Ov…
Active Exploitation of Windows IKE Extension RCE (CVE-2026-33824)
Active Exploitation of Windows IKE Extension RCE (CVE-2026-33824) 1. Basic Information Article Title : Critical RCE flaw in Windows IKE Extension no…
AI-Generated Attack Tools Targeting Siemens S7 PLCs
AI-Generated Attack Tools Targeting Siemens S7 PLCs 1. Basic Information Article Title : US warns of AI-powered attacks on Siemens PLCs in critical…