⌛
Loading…
Curated news, CVE analysis, and threat reports from the world's top cybersecurity sources.
AhnLab ASEC tracked the SilverFox group distributing a malicious KakaoTalk installer via SEO poisoning. The installer's packaging evolved through multiple tools, and it bundled legitimate code with malware to appear authentic.
AhnLab ASEC reports two real-world attack cases exploiting an older Telerik UI vulnerability (CVE-2019-18935). The attackers used the remote code execution to install web shells and attempt privilege escalation.
Cloudflare has fixed a vulnerability in Containers and Sandboxes that allowed customers with a Workers Paid account to recover residual data from other customers' containers on the same physical host.
Anthropic has just announced a new Claude Marketplace, and it brings all AI-related tools into one place, including plugins, connectors, agents, and more.
This article reports that CISA has amplified Citrix's disclosure of eight new vulnerabilities in NetScaler ADC and Gateway, including two critical zero-days that are being actively exploited globally. CISA has added these two vulnerabilities to its Known Exploited Vulnerabilities catalog and urges organizations to assess exposure, prioritize mitigation, and preserve forensic evidence before patching.
Two critical vulnerabilities in Citrix NetScaler ADC and NetScaler Gateway that allow remote code execution have been exploited in the wild, Citrix confirmed on September 27. It released fixes for both, along with six other flaws.