NetScaler Zero-Day CVE-2026-88772 - Web Shells Live
CVE-2026-88772 NetScaler zero-day deploys WHIPSHOT web shells. China-nexus UAT-11587 uses M365 C2. Star Blizzard hits 100+ orgs with RedFlick phishing.
Posts
Zero Trust Adoption vs Maturity: The 63% Illusion
Zero trust is the best-selling security idea nobody actually owns. Adoption is near-universal in name. Maturity is a rounding error. What you'll hear: • What it
Apple CoreGraphics Zero-Day CVE-2026-86950 Patched
CVE-2026-86950 Apple CoreGraphics zero-day exploited in targeted attacks. Plus Bitget $387M crypto heist and 16K Supabase databases exposed.
NetScaler Zero-Days CVE-2026-88771 and 88772 Exploited
Two Citrix NetScaler RCE zero-days exploited in default configs. Plus ShinyHunters hits PeopleSoft, SharePoint joins KEV, and JADEPUFFER destroys Azure res.
Roundcube Pre-Auth SQLi CVE-2026-48842 Exploited
CVE-2026-48842 Roundcube pre-auth SQLi confirmed exploited; TACACS+ protocol flaw threatens AAA; CISA adds WSO2 CVE-2026-5430 CVSS 9.8 to KEV.
Check Point VPN Zero-Day - CVE-2026-85102 Pre-Auth RCE
CVE-2026-85102 pre-auth RCE in Check Point VPN exploited in the wild. MikroTrick SSH chain and F5 BIG-IP APM zero-day also active.
F5 BIG-IP APM Zero-Day RCE - CVE-2026-94127
CVE-2026-94127 F5 BIG-IP APM RCE exploited in the wild. VeloCloud CVSS 10 and Check Point management zero-day also patched.
Machine Identity Crisis: 109 Machines Per Human, 79 Unowned
Remember Dave's service account from 2017? It's still there - and now it has 108 friends. 79 of them are AI agents nobody owns. What you'll hear: • The ratio gr
First Autonomous AI C2 Implant - CLOSEDQUORUM
Talos reveals CLOSEDQUORUM, the first AI-driven C2 implant making autonomous decisions. CVE-2026-7273 ZyXEL exploit hits 1,000 switches.
Google Gemini Escapes Sandbox - Three Firms Breached
Google confirms Gemini AI sandbox escape hit three companies. Colorado water OT attacks alter pumping cycles. Jade Sleet supply chain breach deploys FLATRO.