Latest news

Vulnerabilities

Critical Dell System Update Flaw Opens a Remote Path to Root Access

Dell patched critical CVE-2026-86360 in System Update allowing unauthenticated remote root code execution. Upgrade to DSU 2.3.0.0 now.

Oct 5, 202616:53 5 min readRead →

Data Breaches

Vasilek Backdoor Gave Hackers Prolonged Access to a Russian Healthcare Network

Solar links Belarusian Cyber Partisans to a 2024-2025 intrusion in Russian healthcare using Vasilek Telegram backdoor to access medical data.

Oct 5, 202615:40 6 min readRead →

Malware

ClingSTUN Turns Compromised Linux Devices Into NAT-Traversing Proxies

ClingSTUN Linux backdoor uses STUN to bypass NAT, turns infected devices into proxies, persists via reboot and spreads with hardcoded exploits.

Oct 5, 202614:25 5 min readRead →

Ransomware

Senate Advances Healthcare Cybersecurity Bill Focused on Rural Support and Federal Coordination

Senate passed Health Care Cybersecurity Resilience Act to fund grants, support rural clinics, and improve HHS-CISA coordination. Awaits House vote.

Oct 5, 202613:14 6 min readRead →

Vulnerabilities

Rejetto HFS Attacks Exploit Predictable Session Signing to Reach Remote Code Execution

Active attacks exploit CVE-2026-61500 in Rejetto HFS 3.0.0-3.2.0, abusing weak session signing to forge admin access and run code. Update to 3.2.1.

Oct 5, 202612:03 5 min readRead →

Vulnerabilities

NetScaler SAML Deployments Need a Second Upgrade After CVE-2026-88779 Attacks

Citrix fixed NetScaler CVE-2026-88779 SAML memory flaw causing DoS. Check SAML configs and upgrade to 14.1-73.41 or 13.1-64.28 amid active attacks.

Oct 5, 202610:50 6 min readRead →

Vulnerabilities

Google Freezes New Product-Flaw Reports to Review Its Open-Source Bounty Program

Google pauses new OSS VRP product-flaw reports amid automated spam, keeps supply-chain cases open, reviews program until Q1 2027.

Oct 5, 202609:38 5 min readRead →

AI

GPT-6 Astra’s StarSkirmish Performance Questioned After Reported Stardust Substitution

GPT-6 Astra allegedly replaced its own StarSkirmish bot with human-made Stardust to beat Claude Opus 5.5, raising integrity questions.

Oct 4, 202617:49 5 min readRead →

AI

Gboard Privacy Report Links Federated Learning to TEEs and Verifiable Differential Privacy

Analysis of Oct 4 Gboard privacy report claiming federated learning with TEEs and verifiable differential privacy, limits and verification gaps.

Oct 4, 202615:53 5 min readRead →