Citrix NetScaler Keeps Rebooting Following the 0-Day Patch

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Citrix NetScaler customers are reporting repeated appliance reboots after installing build 14.1-73.37, the emergency update released for two zero-day flaws under active attack. The failures appear linked to crafted SAML authentication traffic that crashes the nsaaad service. Citrix says its …

Debian has Patched 1,313 Flaws in Massive Update Leading to DoS and Privilege Escalation Attacks

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Debian has released a major Linux kernel security update covering 1,313 CVE entries, addressing flaws that could allow privilege escalation, denial of service, and information leaks. The fixes are available for Debian’s stable release, Trixie, in Linux source package version …

Hackers Turned a Microsoft SQL Server Into a Command and Data Exfiltration Channel

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Hackers turned a Microsoft SQL Server into a channel for running commands and moving collected files in an intrusion linked to a Viva Aerobus environment. Their own publicly accessible server then exposed attack tools and stolen material to unrelated internet …

Hackers Poison Trusted Software Updates to Steal Developer and Cloud Credentials

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Hackers are turning trusted software updates into a route for stealing developer and cloud credentials. Recent supply chain incidents show how a single altered package, build action, or publishing token can place malware inside routine development workflows. The risk is …

Critical Red Hat Satellite Flaw Could Enable Root Password Theft and Code Execution Attacks

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Red Hat has fixed a high-impact vulnerability in Red Hat Satellite that could allow a low-privileged authenticated user to access sensitive host information, including root passwords. Under unsafe configurations, the flaw could also escalate to arbitrary command execution as the …

Multiple Cpanel/WHM Vulnerabilities Allow Arbitrary Command Execution On Server

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Multiple security flaws in cPanel & WHM could let attackers run malicious scripts in an administrator’s browser session or execute arbitrary commands as root. The vulnerabilities were disclosed on September 29, 2026, and affect all supported cPanel & WHM versions …

OpenClaw Launches Free Open-source Enterprise Agent Platform for AI Agents

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

OpenClaw has launched OpenClaw Enterprise (OCE), a free, open-source platform that helps organizations run persistent AI agents with stronger security and central oversight. Announced on September 29, 2026, the project targets businesses that want agents to handle ongoing work without …

Exposed WordPress Backups Became a Gold Mine of AWS and Email Credentials

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Exposed WordPress backups have become a valuable source of cloud and email credentials for attackers using a toolkit called TIKTOUK. Rather than relying on one technique, its components search websites for sensitive files, recover stored passwords, and collect secrets from …

Zammad 0-Day Vulnerabilities Exploited to Gain Remote Code Execution and Root Access

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Two critical Zammad zero-day flaws, reportedly exploited against the Dutch Institute for Vulnerability Disclosure (DIVD), could allow session hijacking, remote command execution as the Zammad service user, and potential root privilege escalation. The vulnerabilities are tracked as CVE-2026-102489 and CVE-2026-102490. …

Free iCloud Account Could Let Attackers Spoof Any @icloud.com Address and Pass Email Security Checks

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Security researcher Timo Longin, working with the SEC Consult Vulnerability Lab, disclosed two email spoofing flaws in Apple’s iCloud mail infrastructure that could have let someone with a free iCloud account send messages that appeared to come from any @icloud.com …