China-Aligned TA419 Targets U.S. AI Policy Experts With Microsoft AitM Phishing - A new China-nexus cyber espionage group known as TA419 has been attributed to multiple credential phishing campaigns targeting artificial intelligence (AI) experts working for U.S. think tanks, universities, and legal sector organizations. The campaigns have impersonated prominent economists and AI policymakers,...
Analyzing 2026's most prevalent browser attack techniques - 4 in 5 ClickFix attacks are reached via search engine results. 30+ criminal device code phishing kits in the wild, up from zero last year. 90% of phishing kits generated with the help of AI. Phishing domains active for an average of 2 days before being rotated for a fresh one.
N0n ransomware: what you need to know - N0n is a newly-emerged cyber extortion gang. The group was first spotted in the middle of September 2026, and within days it had published on its dark web leak site details of what it claimed to be around a dozen victims. Since then, the tally has continued to grow. Read more in my article on the Fortra...
Frontline Education breach exposes school district employee data - Frontline Education is notifying school districts of a data breach after attackers exploited a vulnerability in third-party software to gain unauthorized access to its systems and steal employee information, including Social Security numbers.
Warlock Exploits SharePoint Flaws to Disable Security Tools and Deploy Ransomware - The suspected China-linked threat actor known as Warlock is still continuing to weaponize Microsoft SharePoint vulnerabilities, likely both old and new , in attacks targeting organizations in Portuguese- and Spanish-speaking countries. The activity, observed by the Symantec and Carbon Black Threat Hunter...
New NetScaler Zero-Day Exploited in Targeted Attacks Can Knock SAML Deployments Offline - Citrix has released security updates for a high-severity security flaw in NetScaler ADC and Citrix NetScaler Gateway that has been exploited as part of targeted zero-day attacks. The vulnerability, tracked as CVE-2026-88779 , carries a CVSS score of 8.7 out of 10.0. "CVE-2026-88779 is a memory overflow...
Citrix patches NetScaler SAML zero-day exploited in attacks - Citrix has released emergency updates for a new NetScaler denial-of-service vulnerability tracked as CVE-2026-88779 that has been exploited in zero-day attacks, with researchers investigating whether it can also be exploited for remote code execution.
