Curated news, CVE analysis, and threat reports from the world's top cybersecurity sources.
CrowdStrike announced an expansion of its federal SOC modernization program, funded by CISA, to deliver SIEM-as-a-Service to government agencies. The service aims to improve threat detection and response for federal networks.
This article details post-exploitation activity following the exploitation of CVE-2026-88771 in Citrix NetScaler devices. Attackers are using the vulnerability to create superuser accounts, map web shells to CSS-like URLs, and attempt to steal configuration data.
Treasury’s Office of Foreign Assets Control (OFAC) targeted multiple Venezuelan nationals and several companies they control that are part of the effort to launder the money stolen from dozens of ATMs.
In yet another ClickFix-style campaign, threat actors abuse legitimate domains from OpenAI and Google to fool unsuspecting users.
The new White House Accord on so-called "Super Intelligence" calls on companies to implement greater controls and oversight over AI safety.
This article from LevelBlue SpiderLabs discusses observed exploitation artifacts for Citrix NetScaler vulnerability CVE-2026-88771. It provides hunt indicators such as file modifications and network patterns to help defenders detect active attacks.