Microsoft says Star Blizzard uses RedFlick to deploy CosmicPulse
Microsoft says the Russian state actor shifted to mass phishing and a one-click malware delivery technique, affecting more than 100 organizations, mostly in the US and UK.
Tag: CISA
CISA flags two high-severity flaws in Lantronix G520 gateways
Two vulnerabilities in the cellular gateway's update mechanism could let attackers run code with root privileges, CISA said, with fixed firmware available from Lantronix.
CISA lists nine Anjvision YSSD-RTMP-H5 flaws with no fix planned
CISA says the worst of the nine vulnerabilities scores 9.8 and could give an attacker full control of the device, and that the vendor has not responded.
BreakingApple Multiple Products flaw CVE-2026-86950 is being actively exploited, CISA warns
CISA added the Apple Multiple Products vulnerability to its Known Exploited Vulnerabilities catalog on September 29, 2026, with a federal remediation deadline of October 2, 2026.
BreakingCISA Flags Two Exploited Citrix NetScaler Zero-Days in KEV List
CISA said threat actors are exploiting two critical NetScaler ADC and Gateway flaws globally, among eight vulnerabilities disclosed by Citrix.
BreakingMikroTik RouterOS flaw CVE-2026-67279 is being actively exploited, CISA warns
CISA added the MikroTik RouterOS vulnerability to its Known Exploited Vulnerabilities catalog on September 25, 2026, with a federal remediation deadline of September 28, 2026.
BreakingMicrosoft SharePoint flaw CVE-2026-65660 is being actively exploited, CISA warns
CISA added the Microsoft SharePoint vulnerability to its Known Exploited Vulnerabilities catalog on September 25, 2026, with a federal remediation deadline of September 28, 2026.
BreakingWordPress Core flaw CVE-2026-87902 is being actively exploited, CISA warns
CISA added the WordPress Core vulnerability to its Known Exploited Vulnerabilities catalog on September 25, 2026, with a federal remediation deadline of September 28, 2026.