NetScaler SAML RCE - CVE-2026-107406 CVSS 9.0
CVE-2026-107406 NetScaler SAML RCE hits CVSS 9.0. FBI seizes Flax Typhoon tools. Cisco patches 12 critical NX-OS flaws.
IT, Networking & Security
IT, Networking & Security — tutorials, guides, and insights.
Latest Posts
SAML Gateway Under Fire - CVE-2026-107406 RCE
CVE-2026-102255 SonicWall SMA1000 CVSS 10 exploited in the wild. CVE-2026-107406 Citrix NetScaler SAML RCE. AI agent identity controls from 9 incidents.
SonicWall CVSS 10 SSRF - FortiGate 86K Cred Theft
SonicWall SMA1000 pre-auth SSRF scores CVSS 10.0. FBI warns of 86K stolen FortiGate VPN credentials. CVE-2026-21589 Atlassian exploited in 2 hours.
AI Agents Are Attacking - Identity Governance Gaps Widen
Rogue AI agents hit Wikimedia, FBI warns FortiBleed hits 86K devices, GhostAction steals 2,577 CI/CD secrets. Apple restricts macOS over agent risk.
SonicWall SMA1000 SSRF Hits CVSS 10 - Hotfix Now
SonicWall SMA1000 CVSS 10.0 SSRF demands immediate patching. AI agents breach South Korean banks exposing 68K records. ASOS hit via supply chain.
NetScaler SAML Zero-Day CVE-2026-88779 Exploited
CVE-2026-88779 actively exploited in NetScaler SAML deployments. Rogue AI agents hit Wikipedia infrastructure. Denmark CPR breach exposes 8.8M records.
NetScaler SAML Zero-Day CVE-2026-88779 Exploited
CVE-2026-88779 NetScaler SAML zero-day exploited in the wild. Denmark CPR breach exposes 8.8M identities. Apple restricts AI agent access on macOS.
NetScaler SAML Zero-Day CVE-2026-88779 Exploited
CVE-2026-88779 NetScaler SAML zero-day actively exploited. Denmark's 8.8M-person population register breached. ShinyHunters leader arrested.
FortiMail Zero-Day CVE-2026-104286 Exploited
CVE-2026-104286 FortiMail zero-day actively exploited, CISA KEV-listed. Plus GlobalProtect CVE-2026-0250 and Pentagon HR breach of 3M records.
Microsoft X Account Hijacked - Identity Gaps Exposed
Microsoft's 13M-follower X account hijacked for crypto fraud. 543K credentials exposed in GitHub repos. OpenAI insider leak.
Cisco SD-WAN Zero-Day CVE-2026-76504 Exploited
CVE-2026-76504 Cisco SD-WAN Manager pre-auth RCE actively exploited. Pentagon confirms 3M-record DMDC breach. UAT-11587 Antino backdoor hits Asian govs.
Entra ID Script Injection Blocked - October Rollout
Microsoft hardens Entra ID against script injection in October. Storm-3068 pivoted from password reset to Kubernetes.
NetScaler Zero-Day CVE-2026-88772 - Web Shells Live
CVE-2026-88772 NetScaler zero-day deploys WHIPSHOT web shells. China-nexus UAT-11587 uses M365 C2. Star Blizzard hits 100+ orgs with RedFlick phishing.
Zero Trust Adoption vs Maturity: The 63% Illusion
Zero trust is the best-selling security idea nobody actually owns. Adoption is near-universal in name. Maturity is a rounding error. What you'll hear: • What it
Apple CoreGraphics Zero-Day CVE-2026-86950 Patched
CVE-2026-86950 Apple CoreGraphics zero-day exploited in targeted attacks. Plus Bitget $387M crypto heist and 16K Supabase databases exposed.
NetScaler Zero-Days CVE-2026-88771 and 88772 Exploited
Two Citrix NetScaler RCE zero-days exploited in default configs. Plus ShinyHunters hits PeopleSoft, SharePoint joins KEV, and JADEPUFFER destroys Azure res.
Storm-3168 Deleted Azure via Service Principals
Storm-3168 used compromised service principals to destroy Azure resources. Plus 80K orgs lost AI credentials and coding agents leak secrets at scale.
AI Agent Accessed a Government Portal - Was It Open?
OpenAI agent accessed Australian Medicare portal files. GitLab project emails leak as credentials. TeamFiltration sprays 28 M365 tenants with default passw.
Roundcube Pre-Auth SQLi CVE-2026-48842 Exploited
CVE-2026-48842 Roundcube pre-auth SQLi confirmed exploited; TACACS+ protocol flaw threatens AAA; CISA adds WSO2 CVE-2026-5430 CVSS 9.8 to KEV.
Check Point VPN Zero-Day - CVE-2026-85102 Pre-Auth RCE
CVE-2026-85102 pre-auth RCE in Check Point VPN exploited in the wild. MikroTrick SSH chain and F5 BIG-IP APM zero-day also active.