Citrix has released critical security patches for six vulnerabilities affecting NetScaler ADC and NetScaler Gateway products. The most severe flaw (CVE-2025-24181) allows unauthenticated attackers to read sensitive files from vulnerable systems. Additional vulnerabilities enable denial-of-service at
A sophisticated China-linked advanced persistent threat (APT) group has deployed a previously unknown backdoor malware targeting critical infrastructure and government networks across Southeast Asia. The campaign, active since late 2023, demonstrates advanced tradecraft including custom tooling, liv
Citrix has patched a critical vulnerability in NetScaler ADC and Gateway appliances that shares alarming similarities with the infamous CitrixBleed exploit. CISA has added this flaw to its Known Exploited Vulnerabilities catalog, signaling active or imminent exploitation. Organizations running affec
AI-powered video surveillance systems now allow operators to search footage using natural language queries like “show me everyone wearing a red jacket” or “find people meeting in parking lots after 10 PM.” This technology, deployed across cities worldwide, transforms massive video archives into sear
GitHub’s Advisory Database has reached unprecedented volume levels, with vulnerability submissions now exceeding the platform’s review capacity. The backlog has created significant delays in security advisory publication, potentially leaving thousands of open-source projects vulnerable while maintai
The U.S. State Department has announced a $10 million bounty for information leading to the identification or location of members of two Russian cyber espionage groups, UNC5792 and UNC4221. These threat actors have conducted sophisticated campaigns targeting messaging applications and critical infra
Israeli cybersecurity training and simulation company Cyberbit has shut down its operations in Israel, laying off its local workforce while pivoting to focus exclusively on the United States market. The company, known for its cyber range training platforms and SOC simulation products, will continue
Russia-linked APT group Turla has been observed deploying a previously undocumented backdoor called STOCKSTAY in targeted espionage operations against Ukrainian entities. The sophisticated campaign leverages compromised infrastructure to establish persistent access, with the malware demonstrating ad
Bluekit, a sophisticated Phishing-as-a-Service (PHaaS) platform, leverages browser-in-the-middle (BitM) attacks to intercept authentication sessions and bypass multi-factor authentication (MFA) protections. Operating as a commercial service, Bluekit provides cybercriminals with turnkey phishing infr
A critical vulnerability (CVE-2026-55200) in libssh2, a widely-used SSH client library, has been publicly disclosed with a working proof-of-concept exploit available. The flaw allows malicious SSH servers to execute arbitrary code on connecting clients through memory corruption during the SSH handsh