A sophisticated password spray campaign dubbed “LSHIY” has targeted Azure Command-Line Interface (CLI) authentication across 64 organizations, generating over 81 million malicious login attempts. Threat actors exploited Azure CLI’s programmatic access capabilities to bypass traditional authenticatio
Cybercriminals are leveraging malicious Google Ads to distribute MacSync stealer malware disguised as Anthropic’s Claude AI coding assistant. The campaign targets macOS users searching for “Claude Code” or similar terms, redirecting them to fake landing pages that deliver a weaponized application bu
Over 900 Oracle E-Business Suite (EBS) instances remain exposed to internet-facing attacks, with threat actors actively exploiting known vulnerabilities to gain unauthorized access. These publicly accessible systems represent critical enterprise infrastructure managing finance, HR, supply chain, and
Citrix has disclosed six critical vulnerabilities affecting NetScaler ADC and Gateway products that could enable denial-of-service (DoS) attacks and memory corruption exploits. The vulnerabilities, ranging from CVE-2025-22392 to CVE-2025-22397, impact multiple NetScaler versions and require immediat
CVE-2026-33825, a critical authentication bypass vulnerability in BlueHammer enterprise collaboration software, is now actively exploited by ransomware operators. With a CVSS score of 9.8, this flaw allows unauthenticated attackers to gain administrative access and deploy ransomware payloads. CISA h
Citrix has released critical security patches for six vulnerabilities affecting NetScaler ADC and NetScaler Gateway products. The most severe flaw (CVE-2025-24181) allows unauthenticated attackers to read sensitive files from vulnerable systems. Additional vulnerabilities enable denial-of-service at
A sophisticated China-linked advanced persistent threat (APT) group has deployed a previously unknown backdoor malware targeting critical infrastructure and government networks across Southeast Asia. The campaign, active since late 2023, demonstrates advanced tradecraft including custom tooling, liv
The notorious Russian-language cybercrime forum XSS.is has been shut down, removing a major marketplace where ransomware operators, initial access brokers, and malware developers converged. Despite this significant disruption, the ransomware ecosystem shows remarkable resilience as actors migrate to
Citrix has patched a critical vulnerability in NetScaler ADC and Gateway appliances that shares alarming similarities with the infamous CitrixBleed exploit. CISA has added this flaw to its Known Exploited Vulnerabilities catalog, signaling active or imminent exploitation. Organizations running affec
A newly disclosed prompt injection attack dubbed “BioShocking” exploits AI-powered browsers to bypass safety mechanisms and execute unauthorized actions including data exfiltration, credential theft, and malicious navigation. The technique leverages carefully crafted prompts that manipulate the AI a