Citrix Patches Six NetScaler Flaws Allowing File Read and Denial-of-Service Citrix on Tuesday released security updates to address multiple flaws in NetScaler ADC (formerly Citrix ADC) and NetScaler Gateway (formerly Citrix Gateway) that could be exploited by an attacker to

Learn MoreCitrix Patches Six NetScaler Flaws Allowing File Read and Denial-of-Service

RustDuck Botnet Rebuilds in Rust to Hijack Routers and Servers for DDoS A new two-stage malware family called RustDuck is hijacking home routers, IP cameras, Android boxes, and poorly secured servers, then stitching them into a network built to knock

Learn MoreRustDuck Botnet Rebuilds in Rust to Hijack Routers and Servers for DDoS

CVE-2026-48558: SimpleHelp OIDC Flaw Added to KEV Authentication systems are built on trust.But when that trust is broken at the protocol layer, the entire security model collapses.That is exactly what happened with CVE-2026-48558, a critical vulnera … Read more Published

Learn MoreCVE-2026-48558: SimpleHelp OIDC Flaw Added to KEV

Langflow RCE Exploited to Deploy Monero Miner on Exposed AI App Endpoints Threat actors are continuing to exploit a critical Langflow vulnerability as part of fresh attacks designed to deliver a Monero cryptocurrency miner. The activity has been found to

Learn MoreLangflow RCE Exploited to Deploy Monero Miner on Exposed AI App Endpoints

Vulnerabilities in KTM System e-BOK software Vulnerabilities in KTM System e-BOK software CVE ID CVE-2026-35095 Publication date 30 June 2026 Vendor KTM System Product e-BOK Vulnerable versions All before 06.2026 Vulnerability type (CWE) Session … Read more Published Date: Jun

Learn MoreVulnerabilities in KTM System e-BOK software

Vulnerabilities in fzf software Vulnerabilities in fzf software CVE ID CVE-2026-53432 Publication date 30 June 2026 Vendor fzf Product fzf Vulnerable versions All before 0.73.1 Vulnerability type (CWE) Integer Overflow or Wraparound … Read more Published Date: Jun 30, 2026

Learn MoreVulnerabilities in fzf software

Court of Justice of the European Union (CJEU) has dismissed Google’s final appeal against a €4.1 billion ($4.7 billion) antitrust fine over the company’s use of Android to promote its Chrome browser and search service. […]

ConsentFix and ClickFix attacks steal Microsoft 365 tokens in seconds using fake prompts and OAuth flows. Learn how these MFA bypass tactics work and how to defend against them. […]

Microsoft has fixed a known issue causing the Copilot Chat or Copilot buttons in Classic Outlook to disappear for Windows users with the Copilot Chat (Basic) license. […]

Cisco confirmed that attackers are now exploiting a Unified Communications Manager (Unified CM) vulnerability patched in early June. […]