Daily Recap, CISA warned about an actively exploited Citrix NetScaler flaw that can crash appliances, while campaigns also leverage a recently patched zero-day and a Citrix SAML issue. Microsoft reported that the Windows KB5124010 update is breaking some games and apps, as Apple tightened macOS full-disk access and Google paused an open-source bug bounty after receiving overwhelming AI-generated vulnerability reports—plus ShinyHunters’ alleged leader was arrested in Jordan and fake brand discounts are driving phishing scams on social media.
#CitrixNetScaler #KB5124010 #Windows #macOSFullDiskAccess #AIgeneratedVulnerabilityReports #ShinyHunters #Jordan #FakeBrandDiscounts
Critical Vulnerabilities
- CISA warns that a new exploited Citrix NetScaler flaw is crashing appliances, with attackers also targeting a recently patched zero-day and SAML issue in active campaigns – NetScaler Flaw, Zero-Day Hits, SAML Zero-Day
- Microsoft says the KB5124010 update is breaking some games and apps on Windows systems – Windows Update
AI & Platform Shifts
- Apple is tightening macOS full-disk access as more powerful AI agents raise new privacy and security concerns – macOS Access
- Google has paused its open-source bug bounty after being flooded with AI-generated vulnerability reports that overwhelmed triage teams – Bug Bounty Pause
- Trump named National Intelligence Director Jay Clayton to lead a new federal AI task force focused on policy and oversight – AI Task Force
- doxx.net launched the public beta of its Agentic Defined Networking platform and raised $38 million in funding – Agentic Networking
Threats & Fraud
- Fake brand discounts circulating on social media are exploiting shoppers’ fear of missing out to drive phishing and scam traffic – Fake Discounts
- Authorities in Jordan arrested the alleged leader of ShinyHunters, a prominent cybercrime group tied to major data theft and extortion operations – ShinyHunters Arrest
Infrastructure & Resilience
- A new op-ed argues the US needs a stronger national plan to defend water systems against AI-enabled cyber threats and critical infrastructure attacks – Water Defense