RSS
Proof-of-concept exploit released for PHP vulnerabilities (CVE-2026-109618, CVE-2026-109619)
Threat Research
BRONZE SANDCASTLE deploys modified Meterpreter shells
Beyond the mailbox: Graph reconnaissance and ServiceNow user enumeration in a modern identity intrusion
X-ops
Sophos SecOps
ConnectWise Cloud Backup application abused in cross-tenant token sweep
Building intent-based access control without reading minds
AI Research
Citrix NetScaler vulnerability (CVE-2026-88779) in active exploitation
TerminalFix and Lorem Ipsum Loader enable covert tunneling
Citrix NetScaler vulnerabilities (CVE-2026-88771, CVE-2026-88772) in active exploitation
Kiteworks recommends server shutdown pending possible attack