Security teams have more alerts, logs, and monitoring tools than ever. Yet when an attack happens, one simple question can still take too long to answer: Who or what is behind this activity, and what can they access? A suspicious login might belong to an employee. An unusual API callRead More »Webinar: See How Identity Blind Spots Put Your SOC at Risk and How to Close Them

A search result isn’t always safe. An access request isn’t always harmless. And a familiar account doesn’t always mean a familiar person is using it. Simple things to remember. Yet a surprising amount of this week’s trouble starts right there. Attackers are using fake websites, stolen access, and trusted toolsRead More »ThreatsDay: 59 Linux Kernel Bugs, Falcon Spyware, GSocket Backdoors + 17 More Stories

Public exploit code released earlier this week claims that a local Windows user can gain SYSTEM privileges through the Common Log File System driver. The proof of concept, called SignDrop, targets a log-authentication feature added to the driver last year. It abuses how clfs.sys creates companion files when a privilegedRead More »New SignDrop Zero-Day Exploit Turns Windows CLFS Security Feature Into SYSTEM Access

A critical flaw in Red Hat Quay allows an attacker who can access a Quay registry to read and overwrite private container images in every repository. Quay enables anonymous access by default, and while it is enabled, the attacker needs no account. When it is off, anyone with a validRead More »Critical Red Hat Quay Flaw Lets Attackers Read and Overwrite All Private Container Images in a Registry

Citrix has released patches for multiple critical security flaws impacting NetScaler ADC, Citrix NetScaler Gateway, and NetScaler Console that could lead to denial-of-service (DoS) or an authentication bypass. The critical vulnerabilities that impact NetScaler ADC and NetScaler Gateway are listed below – CVE-2026-120868 (CVSS score: 9.3) – A memory overflowRead More »Citrix Patches 12 NetScaler and Secure Access Client Flaws, Including Authentication Bypass

A wide range of data was stolen, including medical information, financial information, and Social Security numbers. 

Cybersecurity researchers have found that lookalike domains masquerading as artificial intelligence (AI) tools are being used to serve ClickFix-style lures, browser-hijacking malware, and a set of extensions that hijack user searches. This delivery pattern has been codenamed TypoPrompting by Island. “AI-app lookalikes that turn an attempt to reach a familiarRead More »186 Fake AI Domains Redirect Users to ClickFix Lures, Browser Malware, and Search Hijackers