CISA Warns of Hackers Exploiting Two Citrix NetScaler 0-Days to Execute Code Remotely

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Threat actors are actively exploiting two critical zero-day vulnerabilities in Citrix NetScaler ADC and NetScaler Gateway appliances, allowing them to execute code remotely on exposed systems. The flaws, tracked as CVE-2026-88771 and CVE-2026-88772, received a CVSS v4 severity score of …

Threat Intelligence Guide for US SOC Teams and CISOs: How to Choose the Right Solution 

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Choosing an enterprise threat intelligence solution is about more than just data volume or integrations. The right provider should deliver relevant intelligence, fit existing workflows, and help security teams investigate threats faster.  While SOCs may prioritize rapid investigation and enrichment …

Criminal IP to Showcase Threat Intelligence and AITEM at Security Days Fall 2026 Tokyo

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Torrance, California, October 13th, 2026, CyberNewswire Criminal IP, developed by AI SPERA, will participate in Security Days Fall 2026 Tokyo, taking place October 21–23, 2026, at the TAKANAWA GATEWAY Convention Center. At booth B20, Criminal IP will showcase Criminal IP …

G2A.COM Reports 35% Growth in Security Software Orders, Outpacing VPN Growth

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Amsterdam, Netherlands, October 13th, 2026, CyberNewswire Antivirus and security software orders grow more than twice as fast as VPN orders, accounting for 43% of cybersecurity purchases on the marketplace  G2A.COM, a digital marketplace that serves more than 35 million users …

ICMacOS Malware Evolves to Steal Credentials and Provide Persistent Remote Mac Access

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

ICMacOS malware has grown from a tool that steals passwords and cryptocurrency wallet data into a remote access trojan that can keep attackers connected to infected Macs. Its newer version adds a live command channel and a startup mechanism, giving …

XWorm Malware Can Spy Through Your Microphone and Hijack Logged-In Browser Sessions

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

XWorm malware is moving beyond password theft, giving attackers tools to listen through infected computers, track their location, and control browsers where users are already logged in. Its growing plugin collection turns a compromised Windows device into both a spying …

Critical Ghostscript Flaw Lets Attackers Use Malicious PDFs to Execute Code

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A critical vulnerability in Ghostscript could allow attackers to use specially made PDF files to run code on vulnerable servers. The flaw, tracked as CVE-2026-39919, affects Ghostscript versions before 10.08.0 and has a CVSS severity score of 9.8 out of …

SAP Security Update Patches Critical Code Injection and Memory Corruption Vulnerabilities

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

SAP has released its October 2026 security updates, fixing critical code injection, access control, and cloud security flaws alongside a high-severity memory corruption issue. The October 13 release includes 16 new security notes, four GitHub security advisories and two updates …

Kimsuky Hackers Use Malicious Resume Documents to Deploy Funhouse Ransomware

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Kimsuky hackers have used a malicious résumé document to deploy Funhouse ransomware through a chain of scripts and remote access tools. The attack begins with a Hangul Word Processor document disguised as a job application, turning a routine work file …

Fake Web3 Accelerator Uses Malicious npm Packages to Target Crypto Founders

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A fake Web3 accelerator called Apex has been using malicious npm packages to target cryptocurrency start-ups and founders with what appeared to be free AI credits, coding tools, smart-contract audits, investment access, and invitations to in-person events. Behind the polished …