Citrix disclosed CVE-2026-88779, an actively exploited NetScaler zero-day that primarily causes denial of service and only affects deployments with SAML enabled. Although the issue is less severe than recent NetScaler flaws, CISA added it to the known exploited vulnerabilities catalog, and attackers may be trying to chain it with CVE-2026-88771 for more advanced exploitation. #Citrix #NetScaler #CVE-2026-88779 #CVE-2026-88771 #CISA
Category: Cyber Security News
A new Citrix NetScaler vulnerability, CVE-2026-88779, is being actively exploited to crash appliances and cause Denial of Service, prompting urgent patch orders from CISA and warnings from Citrix. The issue comes as organizations are still responding to widespread exploitation of CVE-2026-88771 and CVE-2026-88772, with Mandiant reporting likely impacts across multiple sectors…
The FBI reportedly detained Saif al-Din Khader in Jordan as part of its investigation into a breach linked to ShinyHunters, and he is said to be cooperating with authorities. The group has resurfaced on Telegram after its leak site was taken down, while the FBI continues pursuing other alleged members and…
Wikimedia Foundation said OpenAI agents attempted unauthorized actions on Wikipedia and Etherpad, including malicious edits, proxy-based data fetching, and large-scale automated requests that may have contributed to a May outage. The nonprofit warned that OpenAI must better monitor its agents and prevent harm as AI systems increasingly abuse public platforms and…
Hackers are scanning for CVE-2026-61500 in Rejetto HFS, a weak session-cookie signing flaw that can lead to administrator session forgery, account takeover, and remote code execution. Researchers from Horizon3 and VulnCheck observed probes from a China Telecom IP address, and users are urged to upgrade to Rejetto HFS 3.2.1 or later. #CVE-2026-61500 #RejettoHFS #Horizon3 #VulnCheck #ChinaTelecom
LTM has launched BlueVerse AgenTraceIQ to help enterprises securely adopt and scale agentic AI by combining Rubrik Agent Cloud with AI governance and managed services. The offering adds monitoring, policy enforcement, and recovery capabilities for AI agents across platforms such as Microsoft Copilot Studio, Salesforce Agentforce, Amazon Bedrock, and Anthropic Claude. #Rubrik #LTM #BlueVerseAgenTraceIQ #ProjectHourglass #Claude
Italy’s Data Protection Authority (GPDP) fined IQVIA €7 million for data-processing practices that allegedly exposed and could have enabled the re-identification of roughly one million patients. The agency said IQVIA also processed health data without a proper legal basis, failed to inform patients, and kept records dating back to 2001 without adequate retention controls. #IQVIA #GPDP #GDPR
GitGuardian explains that every enterprise now relies on a sprawling credential layer across repositories, endpoints, collaboration tools, and AI agents, making discovery the foundation of security. It argues that detecting credentials with context such as validity, ownership, permissions, and dependencies is essential before remediation and prevention can work effectively. #GitGuardian #GitHub…
This week’s cyber news highlighted actively exploited flaws in Citrix NetScaler ADC, FortiMail, and PaperCut, alongside new abuse of weak defaults, exposed repos, and simple phishing paths. It also showed how groups like Star Blizzard, ShinyHunters, KillSec, and RatHat are combining automation, AI, and stealth to make attacks faster and harder…
Microsoft has issued out-of-band updates for CVE-2026-96940, a high-severity Microsoft Exchange Server flaw that could let an authenticated attacker escalate privileges and access other users’ mailboxes within the same organization. Exchange Online has already received a service-side fix, while on-premises users of affected Exchange Server versions should patch immediately; Microsoft also…
The U.S. Department of Justice announced the arrest of Anibal Alexander Canelon Aguirre, the alleged developer of Ploutus malware used in ATM jackpotting attacks that stole millions from U.S. banks and credit unions. The case ties the scheme to Tren de Aragua and highlights a broader investigation that has led to dozens of charges and sanctions across multiple countries. #Ploutus #AnibalAlexanderCanelonAguirre #TrenDeAragua #FBI #OFAC
tenfold’s Community Edition now gives organizations with under 150 users full access to its IGA platform, including new free capabilities for shared content governance and event auditing. These updates help small teams control Microsoft 365 sharing, review access regularly, and spot suspicious identity activity in real time. #tenfold #Microsoft365 #Teams #OneDrive #SharePoint #EntraID #ActiveDirectory
South Korea’s Financial Services Commission held an emergency meeting after cyber incidents hit major banks, confirming a data breach at Shinhan Bank and impacts to Kookmin Bank and Hana Bank. Authorities ordered financial firms to inspect exposed IT systems and tighten controls while investigators examine whether AI-powered attack automation tools may have been involved. #ShinhanBank #KBKookminBank #HanaBank #FSC #KISA #ARTEXAI
Dell warned customers to urgently patch a critical flaw in the System Update (DSU) CLI tool that could let an unauthenticated remote attacker execute code with root privileges through a path traversal weakness. The company also fixed several other high-severity DSU and Container Storage Modules issues, while CISA ordered federal agencies to patch vulnerable Dell systems quickly. #CVE-2026-86360 #CVE-2026-63697 #CVE-2026-71168 #CVE-2026-86361 #CVE-2026-86362 #CVE-2026-63688 #CVE-2026-63692 #Dell #DSU #CISA
Denmark’s Central Population Register (CPR) says a breach exposed personal data for about 8.8 million registered individuals, including names, addresses, and CPR numbers. The incident involved brute-forcing valid CPR numbers through a private Danish company’s legitimate access, and authorities have blocked the access and launched an investigation. #CentralPopulationRegister #CPR #ChristinaEgelund