60
60
60
Critical Versa Concerto Flaws Let Attackers Escape Docker and Compromise Hosts
60
60
U.S. CISA adds Prettier eslint-config-prettier, Vite Vitejs, Versa Concerto SD-WAN orchestration platform and Synacor Zimbra Collaboration Suite flaws to its Known Exploited Vulnerabilities catalog
60
CISA Urges Federal Agencies to Patch Versa Director Vulnerability by September
60
60
January 2026 CVE Landscape: 23 Critical Vulnerabilities Mark 5% Increase, APT28 Exploits Microsoft Office Zero
60
Threat Actor Generates 1M Personalized Fraud Emails in 3 Days
Cybercriminals used AI to generate 1 million personalized fraud emails in three days, eliminating the traditional volume-versus-credibility tradeoff.
Dark Reading reports that a threat actor used AI to generate approximately 1 million personalized fraudulent emails within three days. The article highlights that AI now lets malicious email campaigns combine high volume with high credibility, removing a historic constraint on phishing operations. No specific gang, victim list, or tooling is named in the available text.
55
Week in review: Compromised Zimbra servers, previously patched Citrix NetScaler flaw exploited
Help Net Security's weekly digest highlights 274 compromised Zimbra servers, Gitea and Citrix NetScaler KEV additions, a PaperCut zero-day, and a suspected Iran-linked power plant attack.
The roundup reports at least 274 internet-facing Zimbra instances compromised via CVE-2026-73570, critical Gitea CVE-2026-60004 added to CISA's KEV catalog after exploitation began, and previously patched Citrix NetScaler flaw CVE-2026-8452 exploited in the wild. It also covers PaperCut NG/MF zero-day attacks, a suspected Iran-linked shutdown of a UK power plant, an FBI seizure of domains tied to a China-linked group that hit NASA, DOJ and the Senate, a cyberattack disrupting Boston Scientific, and the Manchester Airports Group breach. Additional items include Chameleon SEO poisoning phishing, Android car head unit proxy botnet malware, ReliaQuest social engineering by ShinyHunters, fake OpenAI Codex macOS malware, and AI-related workforce and supply chain interviews.
25
60
60
CISA Updates KEV Catalog with Four Actively Exploited Software Vulnerabilities
60
60
60
THN Cybersecurity Recap: Top Threats, Tools and News (Oct 14
60
60
60
60
60
60
60
60
60
60
60