Today's SummaryIn Japan, reports of unauthorized access continued today. In the last 7 days alone, there have been 35 newly ...

Cisco Talos details UAT-11587, a China-linked group using the Antino backdoor and Microsoft 365 as cover to spy on Asian governments.

A sign is posted on the exterior of a Citrix office complex on January 31, 2022 in Santa Clara, California. Justin Sullivan/Getty Images A covert espionage campaign against enterprise network ...

Unknown attackers exploit a patched Citrix NetScaler flaw to gain root access and deploy web shells and a tunneler.

Citrix NetScaler CVE-2026-88772 is exploited in the wild and can enable remote code execution through a DTLS buffer overflow.

Cybersecurity firms say attackers exploited the Citrix NetScaler CVE-2026-88772 zero-day to deploy custom web shells and tunneling malware, gain root access, steal credentials, and spread into ...

A single piece of attack code, quietly built to chain three unpatched flaws in Chrome and Windows, has ended up in the hands of at least four separate hacking crews within days of each other.

KATARU is a newly observed IoT malware strain that can turn poorly secured devices into DDoS attack nodes. The sample was captured after an attacker used repeated Telnet password guesses against a ...

Chinese People's Liberation Army (PLA) soldiers stand guard outside the Great Hall of the People before a press conference for the Chinese People's Political Consultative Conference (CPPCC) in Beijing ...

Four espionage groups used the BlueMoon Chrome+Windows exploit kit within 12 days. Researchers suspect AI development. Proofpoint published a detailed analysis of a Chrome-and-Windows exploit kit it ...

Multiple espionage-motivated threat actors have rapidly adopted a newly discovered exploit kit that chains Chrome browser and Microsoft Windows vulnerabilities to deploy backdoors and surveillance ...

Threat actors have begun exploiting a critical Microsoft SharePoint flaw following the release of proof-of-concept (PoC) exploit code by Rapid7. Tracked as CVE-2026-55040, the vulnerability was ...