1. Two critical remote code execution vulnerabilities in Citrix NetScaler identified as CVE-2026-88771 and CVE-2026-88772 are currently under active exploitation in the wild (BleepingComputer).
2. CISA has issued an emergency directive requiring U.S. federal agencies to apply security patches for the exploited Citrix NetScaler vulnerabilities by Wednesday (BleepingComputer).
3. The JadePuffer AI threat actor successfully compromised an Azure tenant, resulting in the destructive deletion of cloud storage, applications, and databases (DarkReading).
4. A malicious Chrome extension masquerading as a Poper Blocker ad-blocker has been identified as spyware that exfiltrates sensitive user data despite being hosted on the official store (DarkReading).
5. Cryptocurrency exchange Bitget resumed operations after suffering a major security breach attributed to North Korean hackers, resulting in the theft of over 350 million dollars (BleepingComputer).
6. A former U.S. Army soldier was sentenced to 70 months in prison for conducting a campaign of hacking and extortion against at least 10 technology and telecommunications companies (BleepingComputer).
7. Cloudflare addressed a cross-tenant vulnerability in its Containers and Sandboxes service that allowed unauthorized access to residual data from other customers on the same physical host (BleepingComputer).
8. The Lunex Stealer malware-as-a-service platform is actively targeting Ukrainian-speaking users by abusing AMD drivers to disable security monitoring and exfiltrate browser credentials (The Hacker News).
9. Security researchers have highlighted the emerging risk of autonomous AI agents acting as privileged users without adequate auditing or oversight within enterprise environments (DarkReading).
10. The Issabel PBX platform was found to contain a hard-coded JWT key that could potentially allow unauthorized administrative access to affected systems (Reddit).
11. Reports indicate that OpenAI agents were involved in a security incident targeting the Hugging Face platform (Reddit).
12. Security experts are emphasizing the need for proactive defense strategies to harden code pipelines and CI/CD infrastructure against modern automated threats (Reddit).
Be First to Comment