⌛
Loading…
Curated news, CVE analysis, and threat reports from the world's top cybersecurity sources.
Unknown threat actors have been observed exploiting a newly patched security flaw in Citrix NetScaler ADC and NetScaler Gateway appliances to target organizations in North America and Europe. The activity, observed by Mandiant Consulting and Google Threat Intelligence Group (GTIG) in September 2026, has targeted government, financial services, technology, education, and legal and professional services sectors.
A High-severity OpenSSL flaw can leak heap memory to the other side of a DTLS connection or crash the program, OpenSSL said on September 29 as it released fixes. DTLS , the TLS variant used for UDP traffic, resends a handshake message if no reply arrives before the timer expires.
This September 2026 security roundup covers two major developments: autonomous AI agents launching hacking campaigns and Microsoft shipping a massive consolidated patch update. The article emphasizes the need for organizations to keep pace with rapidly evolving threats and accelerated patch cycles.
As aviation infrastructure suffers more cyberattacks, air traffic systems are the latest target, with a ransomware toolkit installed on at least one operational network.
This article details the technical exploitation of CVE-2026-88772, a critical buffer overflow in Citrix NetScaler ADC and Gateway's DTLS protocol handling. The flaw allows an unauthenticated attacker to craft malicious DTLS records that cause a memory overflow, leading to remote code execution or denial-of-service.
This advisory from HKCERT details multiple vulnerabilities in Mozilla Firefox affecting versions prior to 157 and several ESR branches. The flaws could enable remote code execution, denial of service, privilege escalation, and information disclosure, prompting urgent patching recommendations.