⌛
Loading…
Curated news, CVE analysis, and threat reports from the world's top cybersecurity sources.
This article details a critical session forgery vulnerability in Rejetto HTTP File Server that stems from a weak pseudo-random number generator. Attackers can reconstruct the PRNG state and forge administrator session cookies, leading to full administrative access and remote code execution.
This article summarizes the week's top cybersecurity stories from Malwarebytes Labs, covering crypto scams, shadow AI, a Pentagon data breach, and more. It also includes updates on phishing, privacy issues, and critical software patches.
This article reports a high-severity zero-day vulnerability in Citrix NetScaler ADC and Gateway that leads to denial-of-service under specific SAML configurations. Citrix has observed targeted attacks and released security updates for affected versions.
This article reports a denial of service vulnerability in Citrix NetScaler ADC and Gateway products, tracked as CVE-2026-88779. The flaw is being actively exploited in the wild and can be triggered remotely to crash the targeted system.
This article from BleepingComputer covers the same Citrix NetScaler zero-day vulnerability, emphasizing that emergency patches were released. It notes that researchers are exploring the possibility of remote code execution exploitation, which would escalate the risk significantly.
Anthropic has begun asking Claude users to share their voice recordings for AI training purposes. The company emphasizes voluntary participation and data use for model improvement.