Towr says two unpatched NetScaler RCE flaws were exploited before fixes, while Citrix has yet to publish a bulletin or patch.

Explore the latest news, real-world incidents, expert analysis, and trends in Citrix+CVE — only on The Hacker News, the ...

Lunex uses BYOVD to disable kernel security callbacks before stealing browser credentials and cryptocurrency wallets.

Explore the latest news, real-world incidents, expert analysis, and trends in Adwarex+Spyware — only on The Hacker News, the ...

Explore the latest news, real-world incidents, expert analysis, and trends in hackwiser+hacking — only on The Hacker News, ...

ShinyHunters-linked attackers exploit CVE-2026-35273 in Oracle PeopleSoft, bypassing WAF rules to deploy web shells on dozens ...

Kiteworks urges a nine-hour precautionary shutdown after federal intelligence warned a threat actor may target some systems.

GitHub disabled two actions-cool Actions again after re-enabled repositories left malicious May 18 tags able to execute ...

Elementor 4.3.0 and 4.3.1 contain a CSRF flaw that can create an admin account when a logged-in administrator opens a crafted ...

The vulnerability in question is CVE-2026-48842 (CVSS score: 8.1), a pre-authentication SQL injection in the virtuser_query ...

Explore the latest news, real-world incidents, expert analysis, and trends in Proseware+Inc+cybersecurity+incident — only on The Hacker News, the leading cybersecurity and IT news platform.