⌛
Loading…
Curated news, CVE analysis, and threat reports from the world's top cybersecurity sources.
In this article Star Blizzard TTPs observed in 2026 Defending against Star Blizzard and RedFlick-related activity Microsoft Defender detections Hunting queries Indicators of compromise Since January 2026, Microsoft has observed Russian state threat actor Star Blizzard evolve their detection evasion capabilities through large-scale phishing campaigns, the use of accounts on compromised websites, and a novel malware delivery technique that Microsoft tracks as “RedFlick”. These changes represent a notable shift in the actor’s operational tradecraft and support ongoing cyberespionage activity targ.
This article warns about a malware campaign that distributes the Node.js-based JSCEAL malware through Facebook ads impersonating a cryptocurrency exchange. The ads lure users with promises of cryptocurrency rewards, leading to infection.
The critical vulnerabilities, which impact default configurations of NetScaler products, essentially give attackers a skeleton key to customers' networks.
This article covers CVE-2026-86950, a zero-day vulnerability in Apple's CoreGraphics framework that was exploited in highly targeted attacks. The out-of-bounds write issue allows arbitrary code execution when a malicious file is processed, and Apple has fixed it in emergency updates for iOS, iPadOS, and macOS. The attack is described as extremely sophisticated and targeted at specific individuals running older iOS versions.
Kiteworks on Monday said it worked with federal intelligence authorities over the weekend as it identified and addressed a critical security vulnerability during the scheduled precautionary shutdown . "During the shutdown, this activity led to the discovery of a previously unknown critical vulnerability confined to a capability that is enabled for less than 1% of the customer base," the company said in a statement.
This article discusses Gen Digital's initiative to create the first standardized benchmarks for AI protection. It highlights the current absence of such standards and the importance of having reliable metrics to ensure AI agent safety.