WHIPSHOT and SLAPSHOT: the tools behind an active Citrix NetScaler campaign
WHIPSHOT and SLAPSHOT: the tools behind an active Citrix NetScaler campaign Pierluigi Paganini September 30, 2026 Mandiant and GTIG detail active exploitation of a Citrix…
Month: October 2026
NIST NCCoE releases draft 5G cybersecurity white paper on false base stations
The US National Institute of Standards and Technology’s (NIST) National Cybersecurity Center of Excellence (NCCoE) has published an initial public draft 5G cybersecurity white paper…
Monetization Gateway beta: charge AI agents for consumption with HTTP 402
Today, we’re making the Cloudflare Monetization Gateway available as part of a closed beta, and showcasing four customer use cases that are in production today.…
DIVD says Zammad zero-days enabled AI-driven network breach
The Dutch Institute for Vulnerability Disclosure (DIVD) says that the breach of its network was possible by exploiting a chain of two zero-day vulnerabilities in…
Google Warns of Hackers Actively Exploiting Citrix 0-Day Vulnerabilities to Deploy Web Shells
Google has warned that threat actors are actively exploiting two critical Citrix NetScaler zero-day vulnerabilities to gain root access, install stealthy web shells, and move…
AI Is Making Software Cheaper to Attack. Defenders Need to Change the Price
By Ansgar Dodt, VP Product Management for Software Monetization at Thales Not every piece of software is worth attacking. Traditionally, that has offered software vendors…
PaperPhone Cluster Shows How One Bot Operator Can Look Like Thousands of Mobile Users
A large-scale scraping cluster dubbed PaperPhone, exposing how one operator can manufacture the appearance of tens of thousands of legitimate mobile users across dozens of…
Internet Society Launches Global Online Trust and Safety Hub as Part of Its Safer Internet Initiative
Washignton, DC, USA, September 30th, 2026, CyberNewswire The Internet Society today launched the Online Trust and Safety Hub, a free global resource center in multiple…
Signal brings encrypted local backups to iOS and desktop, adds cross-platform restore
Signal users who switch from an Android phone to an iPhone, or the other way around, can take their message history with them, and backups…
Attackers Abuse MSP360 to Deploy ScreenConnect in Dual-RMM Phishing Attacks
Ravie LakshmananSep 30, 2026Endpoint Security / Social Engineering Microsoft has warned of phishing campaigns distributing an installer for the MSP360 Remote Monitoring and Management (RMM)…
Post Office process redress scheme pays out £4m so far
Around £4m has been paid out so far to current and former subpostmasters as part of a scheme to redress losses related to non-Horizon processes,…
From data overload to decisive action – accelerating decisions with AI agents
The next evolution of AI is not just answering questions – it is deploying trained AI agents that act as intelligent experts within your business.…