CSO Online

New CitrixBleed-like NetScaler flaw sees exploit attempts in the wild

Citrix NetScaler received patches for another memory leak vulnerability similar to CitrixBleed, as well as memory overflow, file read and denial-of-service issues ...

Claude Helped a Hacker Find a Massive Ticketing Flaw. Nearly Every Major U.S. Music ...

A cybersecurity researcher revealed this week that Anthropic's Claude artificial intelligence assisted him in discovering a ...

Claude Helped a Hacker Find a Way to Issue Tickets to Almost Every US Music Festival

A researcher found that using Anthropic’s Claude Opus 4.7, he could break into the website of Front Gate—used by every ...
CSO Online

Hackers exploit critical PTC Windchill PLM software flaw

The popular product lifecycle management platform is under active exploitation for an RCE vulnerability that could put ...
Tech Times

Cisco SD-WAN Zero-Day Exploit: Mandiant Reveals Malicious CSV Opened Root Shell

Cisco SD-WAN zero-day CVE-2026-20245 was exploited months before disclosure: Mandiant reveals how a malicious CSV file ...
The Hacker News

Popular WordPress Plugin Scripts Tampered to Plant Hidden Backdoors on Sites

An attacker tampered with trusted JavaScript files used by WordPress sites running PushEngage, OptinMonster, and TrustPulse, turning those files into a way to break into the sites. When a site ...
Hacker

One Empty Header to Admin: How an Auth Bypass Breaks OpenBullet2

Saved hostages from Goldenface. Also enjoys hockey. OpenBullet2 is a cross-platform automation suite powered by .NET. It can send requests to a target web app and offers a wide range of tools for ...
Dark Reading

Patch Now: Another Palo Alto Auth Bypass Bug Under Active Exploit

Attackers are exploiting a security vulnerability in Palo Alto Networks' PAN-OS GlobalProtect VPN technology that allows them to bypass authentication and gain VPN access without valid credentials. In ...
Gizmodo

Google Says It Found Evidence of Hackers Using AI to Discover a Zero-Day Vulnerability

As AI models continue to get more powerful, it’s not too surprising that some people are trying to use them for crime. The Google Threat Intelligence Group said on Monday that it has identified, for ...
Bleeping Computer

Google: Hackers used AI to develop zero-day exploit for web admin tool

Researchers at Google Threat Intelligence Group (GTIG) say that a zero-day exploit targeting a popular open-source web administration tool was likely generated using AI. The exploit could be leveraged ...
CoinTelegraph

Hackers used AI to craft zero-day attack to bypass 2FA: Google

Google’s Threat Intelligence Group says it has “high confidence” a threat actor used an AI model to help discover and weaponize a vulnerability in a popular system admin tool. Google’s Threat ...
The Verge

Severe Linux Copy Fail security flaw uncovered using AI scanning help

Some distributions have already released patches or mitigations for the exploit, including Arch Linux and RedHat Fedora. Some distributions have already released patches or mitigations for the ...