NetScaler HTTP/2 Bomb and ARToken PhaaS — CVE-2026-8451
Citrix patches CVE-2026-8451 NetScaler info disclosure and HTTP/2 Bomb DoS. Talos exposes ARToken M365 PhaaS panel.
Posts tagged: Phishing
PAN-OS Auth Bypass CVE-2026-0257 Exploited in the Wild
CVE-2026-0257 PAN-OS GlobalProtect auth bypass now exploited. Plus FBI dismantles $1.9B PhaaS operation and France's Tchap platform breached.
Email Security Stack: SEG vs API-Based vs Integrated
Compare the three email security architectures — SEG, API-based, and integrated — with vendor analysis, feature comparison, and a framework for customer …
QR Code Phishing (Quishing): That Parking Meter QR Code Is Malicious
How quishing attacks bypass email security scanners, harvest Microsoft 365 credentials, and exploit physical QR code placements — with detection and defense …
UAT-8302 China-Nexus APT Exposed by Cisco Talos
UAT-8302 APT targets governments with NetDraft and VSHELL, Cisco acquires Astrix Security for non-human identity, DigiCert revokes certs after breach.
Microsoft Defender Zero-Day Exploited Pre-Disclosure
CISA adds Microsoft Defender zero-day to KEV. Unit 42 Zealot AI agent pwns cloud. CanisterSprawl npm worm self-propagates. Talos Q1 2026 IR data.
CVE-2026-40372 — Microsoft ASP.NET Core OOB Patch
CVE-2026-40372 ASP.NET Core privilege escalation gets emergency patch, AirSnitch bypasses WPA2/3 enterprise Wi-Fi, phishing back to 33% in Q1.
Microsoft April 2026 Patch Tuesday — SharePoint 0-Day
Microsoft patches 167 flaws including exploited CVE-2026-32201 SharePoint zero-day. n8n phishing abuse, fake Ledger app, Mirax RAT proxy botnet.