Citrix NetScaler vulnerabilities (CVE-2026-88771, CVE-2026-88772) in active exploitation
On September 27, 2026, Citrix disclosed eight vulnerabilities affecting NetScaler Application Delivery Controller (ADC) and NetScaler Gateway. Two of these...
Month: September 2026
3 Consulting Myths Debunked by Unit 42 Experts
We interviewed three Unit 42 consultants to examine the most critical cybersecurity misconceptions observed in their casework across customer environments,...
U.S. Soldier Gets 70 Months in Prison for AT&T, Verizon Extortions
A U.S. Army soldier who pleaded guilty to hacking into multiple telecommunications companies and stealing mobile call and text metadata...
Friday Squid Blogging: Participatory Squid Dissection in October in Tennessee
I feel like someone who reads this blog will want to go to this: Families are invited to dive into...
On Anthropic’s AI Misuse Report
Earlier this month, Anthropic published a long report detailing all of the Claude misuses it detected. Daniel Meissler usefully summarized...
Risky Bulletin: Major vulnerability found in ancient TACACS+ networking protocol
This newsletter is brought to you by SpecterOps, the experts in Attack Path Management. You can subscribe to an audio...
Kiteworks recommends server shutdown pending possible attack
Threat ResearchadvisoryKiteworksOn September 25, 2026, reports emerged that Kiteworks (formerly Acellion) emailed customers that law enforcement alerted them about an...
Trust and the enticing consultancy offer
Welcome to this week’s edition of the Threat Source newsletter. In the cybersecurity industry, trust is the invisible currency. Every practitioner...
Malicious npm Packages That Evade Defenses
This is an impressive piece of malware. Its sophistication says nation-state to me, but there is no direct evidence and...
Srsly Risky Biz: Bring On the AI Lawsuits
Your weekly dose of Seriously Risky Business news is written by Tom Uren and edited by Amberleigh Jack. This week's...