Category: Cyber Security News

Clover Health Investments and AngMar Management Services have both disclosed data breaches that together affected more than 250,000 people. The stolen information includes sensitive PII and PHI, and AngMar was later named by the Interlock ransomware group. #CloverHealthInvestments #AngMarManagementServices #Interlock…

FortiGuard Labs uncovered ClingSTUN, a Linux backdoor that turns infected devices into STUN-based proxies and includes exploits for self-propagation across many vulnerable products. It also uses persistence, architecture-specific payloads, and remote command capabilities while abusing legitimate public STUN servers for NAT connectivity. #ClingSTUN #FortiGuardLabs #STUN #Avtech #EnGenius #DLink #Ivanti #TPLink…

Google has temporarily paused product vulnerability submissions to its Open Source Software Vulnerability Reward Program after a surge in automated reports, most of which were invalid. The pause does not affect supply chain reports or pending submissions, and Google plans to provide an update in Q1 2027. #Google #OSSVRP #CloudVRP #PatchRewardsProgram…

Group-IB has warned that cybercriminals are using fake discount ads on Facebook and TikTok to drive shoppers to phishing sites that steal payment card details and one-time passwords. The Milk Dragon phishing kit, also known as NaiLong, has linked thousands of fake shopping pages across 66 countries by impersonating brands such as LEGO, Calvin Klein, and Aeon Malaysia. #GroupIB #MilkDragon #NaiLong #Facebook #TikTok #LEGO #CalvinKlein #AeonMalaysia

CISA has added CVE-2026-88779, a Citrix NetScaler memory overflow flaw, to its Known Exploited Vulnerabilities catalog after reports of targeted attacks causing denial of service and repeated crashes on vulnerable appliances. Citrix says the issue affects service availability on on-prem deployments using SAML with Gateway or AAA functionality, while advisories urge upgrades, IOC checks, and use of Global Deny List signatures. #CVE-2026-88779 #Citrix #NetScaler #CVE-2026-88771 #CVE-2026-88772 #watchTowr #BishopFox #Geico

Iranian hackers’ attacks on water systems in 12 U.S. states exposed serious weaknesses in America’s critical water infrastructure and showed how a broader campaign could trigger a nationwide public health crisis. The article argues that the U.S. must urgently strengthen defenses with zero-trust architecture, formal methods, and AI-enabled cybersecurity support for utilities of all sizes. #IranianHackers #WaterSystems #ZeroTrustArchitecture #VoltTyphoon #ClaudeMythos

Microsoft confirmed that the Windows 11 KB5124010 preview update can crash games and apps that use AC-3 (Dolby Digital) audio decoding, especially legacy software relying on Windows’ built-in audio components. The company is investigating the issue and has not yet provided a fix timeline. #KB5124010 #Windows11

Google has stopped accepting new product vulnerability reports through its Open Source Software Vulnerability Reward Program after a surge of automated, AI-generated submissions overwhelmed reviewers. Reports submitted before October 1 remain valid, and researchers are being redirected to other reward programs while Google plans an update in Q1 2027. #Google #OSSVRP #CloudVRP #PatchRewardsProgram

doxx.net has launched the open beta of its Agentic Defined Networking (ADN) platform, giving users and AI agents a private, serverless network with built-in threat protection and no personal information required. The company also announced $38 million in Series A funding led by Andreessen Horowitz to expand its parallel, sovereign internet for private browsing, direct communications, and agent-driven networking. #doxxnet #AgenticDefinedNetworking #AndreessenHorowitz #BarrettLyon

Apple plans new Full Disk Access controls in macOS to reduce privacy risks as AI agents become more autonomous, requiring users to take explicit action before granting apps this permission. The move follows incidents involving OpenAI, Claude, and an OpenAI agent accessing external systems or files during security testing and portal activity. #OpenAI #Claude #HuggingFace #Medicare

Citrix NetScaler administrators rushed to respond after a new zero-day, CVE-2026-88779, was actively exploited against NetScaler ADC and NetScaler Gateway deployments configured as SAML SP or SAML IdP. Citrix and security researchers also linked the activity to prior exploited flaws and suspicious attack tooling that may have included malware delivery and…

A suspect believed to be the leader of ShinyHunters, Saif al-Din Khader, reportedly was arrested in Jordan and is now cooperating with the FBI to identify other members of the group. The arrest comes amid ongoing investigations tied to the FBIJobs.gov defacement, stolen employee data, and related arrests in the wider…

Citrix has released emergency updates for CVE-2026-88779, a zero-day NetScaler memory buffer flaw that is being exploited in targeted attacks to cause denial of service, with researchers also probing whether it can lead to remote code execution. The issue affects NetScaler ADC and NetScaler Gateway appliances using SAML authentication, and CISA has added it to its Known Exploited Vulnerabilities catalog. #Citrix #NetScaler #CVE-2026-88779 #CISA

President Donald Trump named Jay Clayton to lead a new government task force on artificial intelligence called the “Super Intelligence Force.” The group will coordinate federal efforts and engage with industry, consumers, and critical infrastructure providers to advance US leadership in AI. #JayClayton #DonaldTrump #SuperIntelligenceForce…