Apple Plans Tighter macOS Full Disk Access Controls Over AI Agent Data Access
Apple Plans Tighter macOS Full Disk Access Controls Over AI Agent Data Access Ravie LakshmananOct 05, 2026Vulnerability / Artificial Intelligence Apple has…
Tag: malware
Attackers Target Rejetto HFS Flaw That Enables Admin Session Forgery and RCE
Attackers Target Rejetto HFS Flaw That Enables Admin Session Forgery and RCE Ravie LakshmananOct 05, 2026Vulnerability / Web Security A critical security…
New NetScaler Zero-Day Exploited in Targeted Attacks Can Knock SAML Deployments Offline
New NetScaler Zero-Day Exploited in Targeted Attacks Can Knock SAML Deployments Offline Ravie LakshmananOct 05, 2026Zero-Day / Vulnerability Citrix has released security…
Antino Backdoor Uses Outlook and OneDrive for C2 in China-Nexus Espionage Campaign
Antino Backdoor Uses Outlook and OneDrive for C2 in China-Nexus Espionage Campaign Ravie LakshmananOct 02, 2026Cyber Espionage / Malware Government and policy…
Android 17 Advanced Protection Locks Accessibility Services to Verified Accessibility Tools
Android 17 Advanced Protection Locks Accessibility Services to Verified Accessibility Tools Ravie LakshmananOct 02, 2026Mobile Security / Android Google has announced a…
ThreatsDay: AI-Powered Zero-Day Chain, 543K Live Secrets, Model Inspection RCE and 13 More Stories
ThreatsDay: AI-Powered Zero-Day Chain, 543K Live Secrets, Model Inspection RCE and 13 More Stories Ravie LakshmananOct 01, 2026Hacking News / Cybersecurity News…
WordPress Backdoor Rebuilds Itself After Cleanup Using Files, Database, and Shared Memory
WordPress Backdoor Rebuilds Itself After Cleanup Using Files, Database, and Shared Memory Ravie LakshmananOct 01, 2026Vulnerability / Web Security Cybersecurity researchers have…
Citrix NetScaler Post-Exploitation Payload Creates Superuser, Maps Web Shell to CSS-Like URLs
Citrix NetScaler Post-Exploitation Payload Creates Superuser, Maps Web Shell to CSS-Like URLs Ravie LakshmananOct 01, 2026Vulnerability / Web Security Threat actors have…
Bitget Confirms Third-Party Zero-Day Behind $387.5 Million Cryptocurrency Theft
Bitget Confirms Third-Party Zero-Day Behind $387.5 Million Cryptocurrency Theft Ravie LakshmananOct 01, 2026Vulnerability / Zero-Day Cryptocurrency exchange Bitget on Wednesday confirmed that…
Attackers Exploit Zimbra Flaw to Deploy Web Shells and Harvest Authentication Secrets
Attackers Exploit Zimbra Flaw to Deploy Web Shells and Harvest Authentication Secrets Ravie LakshmananSep 30, 2026Vulnerability / Email Security Threat actors have…