Citrix Gear Under Active Attack Again With Another Zero-Day Summary Citrix has disclosed three new vulnerabilities in its NetScaler ADC and NetScaler Gateway products. One of them, CVE-2025-7775, is a…
Malicious Scanning Waves Slam Remote Desktop Services Summary Researchers have observed two large waves of coordinated scans targeting Microsoft Remote Desktop Protocol (RDP) authentication portals in late August 2025. GreyNoise…
When One Hospital Gets Ransomware, Others Feel the Pain Summary Ransomware against a single healthcare provider often ripples across entire communities, forcing nearby hospitals to absorb diverted ambulances and unscheduled…
1M Farmers Insurance Customers’ Data Compromised Summary Farmers Insurance, Farmers Insurance Exchange and affiliated companies filed breach notification documents after a security incident involving a third‑party vendor. The incident occurred…
JSON Config File Leaks Azure ActiveDirectory Credentials Summary Researchers from Resecurity’s HUNTER team discovered an appsettings.json file for an ASP.NET Core application that was publicly accessible on the Internet and…
Proof-of-Concept in 15 Minutes? AI Turbocharges Exploitation Summary An AI-driven offensive research pipeline built by two independent Israeli researchers can generate proof-of-concept (PoC) exploit code for real-world vulnerabilities in a…
Jaguar Land Rover Shuts Down in Scramble to Secure ‘Cyber Incident’ Summary Jaguar Land Rover (JLR) confirmed it shut down parts of its IT systems after a reported “cyber incident”…
Hackers Are Sophisticated & Impatient — That Can Be Good Summary Ensar Seker explains that modern ransomware crews behave like professional SaaS organisations: organised, efficient and driven to move quickly…
NIST Enhances Security Controls for Improved Patching Summary The US National Institute of Standards and Technology (NIST) has revised its Security and Privacy Control catalog (version 5.2.0) to strengthen guidance…
Amazon Stymies APT29 Credential Theft Campaign Summary Researchers and Amazon’s threat-intelligence team disrupted a watering-hole credential-theft campaign conducted by APT29 (aka Midnight Blizzard/Cozy Bear/Nobelium), a group tied to Russia’s SVR.…
