It turns out that cyber-threat actors can do quite a bit of damage with nothing more than an email address. New research from Aikido Security published today examines how a GitLab incoming email address acts as a highly privileged access… Read More "GitLab Email Addresses Can Be Weaponized for Supply Chain Attacks"
Logistics Giant Ceva Suffers Data Breach Impacting European Clients
A data breach at one of the world’s biggest logistics companies appears to have had a significant impact on its wider supply chain ecosystem of customers. Ceva Logistics is a subsidiary of the French CMA CGM Group, which is the world’s… Read More "Logistics Giant Ceva Suffers Data Breach Impacting European Clients"
Bitget Confirms Third-Party Zero-Day Behind $387.5 Million Cryptocurrency Theft
Cryptocurrency exchange Bitget on Wednesday confirmed that attackers who stole $387.5 million last week exploited a zero-day flaw in third-party security products, citing ongoing investigation findings from SlowMist. “Their investigation identified malicious activity involving third-party security products, including a zero-day… Read More "Bitget Confirms Third-Party Zero-Day Behind $387.5 Million Cryptocurrency Theft"
SASE Converges Network & Security Into One Cloud Solution
Part 2 of a three-part series Hybrid cloud systems and enterprises’ adoption of edge computing has solved a number of modern problems, from the latency demands of real-time applications to the regulatory demands of data privacy in a global economy.… Read More "SASE Converges Network & Security Into One Cloud Solution"
OpenAI Launches Two-Tier Access Program Alongside GPT 5.6 Cyber
OpenAI is launching GPT‑5.6‑Cyber, its newest large langue model (LLM) purpose-trained for cybersecurity tasks, based on its latest frontier AI model, GPT‑5.6 Sol. The AI company also tweaked its Daybreak program to introduce two new tiers, Daybreak Blue – for… Read More "OpenAI Launches Two-Tier Access Program Alongside GPT 5.6 Cyber"
Prompt-Injection Bug Hits $4B Agentic AI App ‘Manus’
A simple but powerful prompt-injection vulnerability in a popular AI platform, Manus, could have opened the door for data theft and compromise —- and showcases the ongoing risk that users face from prompt injection. Manus is an agentic AI app… Read More "Prompt-Injection Bug Hits $4B Agentic AI App ‘Manus’"
Suisan City, California, Responds to Cyber Incident Amid Wave of US Lo
Suisan City in California is continuing to grapple with an ongoing cyber-incident, amid a spate of cyber-attacks targeting local authorities in the US. The City government declared a state of emergency after its IT network was infected by “malicious software”… Read More "Suisan City, California, Responds to Cyber Incident Amid Wave of US Lo"
Citrix NetScaler Post-Exploitation Payload Creates Superuser, Maps Web Shell to CSS-Like URLs
Ravie LakshmananOct 01, 2026Vulnerability / Web Security Threat actors have been observed exploiting a critical pre-authentication command injection vulnerability in Citrix NetScaler ADC and NetScaler Gateway to drop web shells and attempt theft of configuration data. LevelBlue’s Threat Hunt Operations… Read More "Citrix NetScaler Post-Exploitation Payload Creates Superuser, Maps Web Shell to CSS-Like URLs"
How to Build a SASE Framework for Modern Cybersecurity
Part 3 of a three-part series Secure access service edge (SASE) technology has demonstrated it can address many of the security concerns that arise at the intersection of on-premises, cloud, and edge systems, which many organizations need to combine to… Read More "How to Build a SASE Framework for Modern Cybersecurity"
Cursor Security Bug Allowed Repositories to Execute Commands Pre Trust
A flaw in Cursor’s command-line coding agent has been found to allow a cloned repository to run any command it chose on a developer’s machine before they were asked whether they trusted it, and outside the sandbox even when the… Read More "Cursor Security Bug Allowed Repositories to Execute Commands Pre Trust"