Hackers Exploit Critical Citrix NetScaler RCE Flaw to Deploy Web Shells and Malware

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A critical flaw in Citrix NetScaler ADC and NetScaler Gateway is being used to run commands on exposed appliances, install web shells and deliver malware. Tracked as CVE-2026-88771, the vulnerability stems from improper input validation and can allow an unauthenticated …

Hacker With Limited Skills Used DeepSeek AI to Breach Indian University and Steal Over 5,200 Records

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

A cybercriminal using the online handle BUGSTER used artificial intelligence tools to support attacks on Indian organizations, including two universities. In one confirmed intrusion, the attacker stole a MongoDB database containing more than 5,200 records, including personal information about students …

Oracle Issues Emergency Java Update for Critical 9.1 HTTPS Trust Vulnerability

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Oracle has released an emergency Java security update to address CVE-2026-91403, a critical vulnerability affecting how Java applications trust digital certificates. Published on October 21, 2026, the alert assigns the flaw a CVSS 3.1 score of 9.1 and covers Oracle …

PwC Data Breach Claim – Everest Ransomware Group Claims to Have Stolen 590 GB of Data

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

The Everest ransomware group claims to have stolen 590.69 GB of data linked to PwC, the global professional services firm. The alleged haul includes human resources records, training files, and internal documents. The claim remains unverified, with no PwC response …

Critical Cisco Expressway Vulnerability Enables Remote Code Execution Attacks

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Cisco has released security updates for a critical Cisco Expressway vulnerability that could let remote attackers run operating system commands as root. Tracked as CVE-2026-76466, the flaw carries a CVSS score of 9.8 and affects vulnerable Expressway devices configured in …

Splunk Fixes 24 Security Flaws, Including Four Critical Vulnerabilities in Enterprise and SOAR

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Splunk has released security updates for 24 vulnerabilities in Splunk Enterprise and Splunk SOAR, including four critical flaws with CVSS scores from 9.3 to 9.9. Splunk published the fixes on October 21, 2026, across three advisories covering access control, input …

Quest Diagnostics Hacked – Attackers Accessed the System to Order Tests and View Results

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Quest Diagnostics has disclosed a cyberattack involving unauthorized access to its Quanum LSM system, which healthcare clients use to order laboratory tests and view results. The company discovered the incident on October 21, 2026, and suspended access to the platform …

Critical Unpatched Linux Kernel Flaws Accidentally Disclosed on Public List

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Several unpatched Linux-related security flaws were posted to public mailing lists in October, exposing technical details before fixes were ready. The reports, submitted by Trend Micro’s Zero Day Initiative (ZDI), include two critical flaws rated CVSS 9.0 that could let …

Gcore Makes Enterprise Security Bundle Free for Public Agencies Until End of the Year

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Contern, Luxembourg, October 22nd, 2026, CyberNewswire Gcore is offering its WAAP Enterprise plan free of charge to any government body or public agency until December 31, 2026. The offer follows the php2shell vulnerabilities that forced public websites offline across Europe …

Major U.S. Banks Detect Unauthorized AI Agents Operating Inside Customer Accounts

Blog WriterCybersecurity News - Original News Source is cybersecuritynews.com

Major U.S. banks are detecting third-party AI agents inside customer accounts, raising concerns that automated tools could act beyond the instructions customers give them. Some agents have contacted call centers or appeared to attempt independent actions, according to an Axios …