Curated news, CVE analysis, and threat reports from the world's top cybersecurity sources.
The NCSC has issued an urgent advisory for UK organizations to address vulnerabilities in Citrix NetScaler ADC and Gateway, noting that two of the flaws are being actively exploited. Prompt mitigation is critical to prevent potential compromise of network infrastructure.
AI agents are moving into production faster than security teams can govern them. They are connecting to apps, handling data, calling APIs, and acting across business systemsoften without the same controls applied to human users.
Cybersecurity researchers have disclosed details of a new botnet malware called Carbonato that's targeting exposed Docker daemons to deploy an open-source artificial intelligence (AI) agent framework called Hermes Agent . "The implant installs the framework unchanged, then overwrites its SOUL.md persona file," ThreatDown said .
This article from Broadcom (Symantec) educates security teams about the growing threat of SVG-borne attacks. It explains how SVG files can embed malicious code and bypass conventional defenses, and provides guidance on detection and prevention strategies.
ShinyHunters claims to have breached the FBI and accessed systems including FBI MedLink, stealing medical examination records of agents. The group shared samples with the BBC, which reported the data appears genuine and includes highly personal health information.
Cryptocurrency exchange Bitget has resumed Bitcoin withdrawals suspended after suspected North Korean hackers breached its systems last week and stole over $350 million.