Hackers Exploit Critical Citrix NetScaler RCE Flaw to Deploy Web Shells and Malware
A critical flaw in Citrix NetScaler ADC and NetScaler Gateway is being used to run commands on exposed appliances, install web shells and deliver malware.…
Year: 2026
DOQEX Achieves Cyber Essentials Certification to Strengthen Security Standards
UK-based secure data exchange specialist DOQEX has achieved Cyber Essentials certification, adding another recognised security standard to its existing portfolio of accreditations. The York-based company,…
North Korea Hit by Multiple Waves of DDoS Attacks, Knocking Over 40 Websites Offline
Multiple waves of DDoS attacks disrupted North Korea’s internet infrastructure this week, intermittently knocking over 40 official websites offline for about 32 hours. Network monitoring…
Drone program compliance: What a CTO says most agencies get wrong
In this interview with Help Net Security, Nick Donarski, CTO at RotorLab, explains what councils, records clerks, insurers, and auditors expect from a public safety…
eMudhra to Exit Global SSL/TLS Business After 8 Intermediate CA Keys Found Easily Guessable
eMudhra, an Indian certificate authority (CA), will withdraw from its global SSL/TLS certificate business, its board decided on Thursday. The decision came five days after…
MPs ask finance regulators how they will deal with Google Cloud after outage
MPs have asked regulators for details of how they will respond to a Google Cloud outage now the IT supplier falls within their regulatory remit…
53% vs.19%: The budget divide separating AI leaders from everyone else
IDC research reveals that organizations achieving the strongest AI and business outcomes invest nearly three times more of their IT budgets in modernization than their…
Tech and Security Companies Respond to PHP2Shell Vulnerabilities
Tech vendors, cybersecurity companies and government agencies have published advisories, detections and mitigations for the PHP2Shell vulnerabilities, while many software makers are still checking whether…
Australia sanctions 2 over North Korean fake IT workers scheme for nuclear funds
Australia said on Friday it had sanctioned two North Korean individuals and companies over the use of “fraudulent” IT workers and cybercrime to earn cash…
TikTok ads for fake stalkerware apps are scamming people who download them
Fake “stalkerware” apps promoted on TikTok are being used to lure would-be snoops into paying for services that do not deliver the invasive capabilities advertised,…
PHP2Shell exposes the weakness in coordinated vulnerability disclosure
Two critical vulnerabilities discovered in the widely-used PHP programming language have shaken up enterprises, and the ramifications will take some time to truly understand. But…
ASPM in the AI Era Pt 2: Prioritize AppSec Risk
In Part 1, we established how to centralize your AppSec tools, correlate assets, and map scanner coverage across repositories. Establishing visibility is an essential baseline,…