Google’s Mandiant and Threat Intelligence Group (GTIG) have published details on attacks exploiting the NetScaler zero-days that Citrix patched over the weekend. The vulnerabilities are tracked as CVE-2026-88771 and CVE-2026-88772, and they affect NetScaler ADC and NetScaler Gateway instances. Attackers… Read More "Government, Finance Orgs Targeted in Weeks-Long NetScaler Zero-Day Attacks"
AI-Found Vulnerabilities More Likely to Enable RCE, Google Says
Vulnerabilities found with the help of AI are disproportionately likely to enable remote code execution (RCE), as disclosures and exploitation both accelerated in 2026. In research published September 30, Google Threat Intelligence Group (GTIG) found that 50% of vulnerabilities it… Read More "AI-Found Vulnerabilities More Likely to Enable RCE, Google Says"
Google: AI Is Changing the Pace and Profile of Vulnerability Discovery
The number of vulnerabilities disclosed each month doubled in 2026, and the monthly average of vulnerabilities exploited in the wild nearly doubled, according to a new report from Google Threat Intelligence Group (GTIG). Analyzing disclosures from January 2025 through August… Read More "Google: AI Is Changing the Pace and Profile of Vulnerability Discovery"
US-Focused CSuite Phishing Steals Microsoft 365 Sessions and Deploys RMM Tools for Remote Access
ANY.RUN researchers traced a US-focused CSuite phishing campaign across 351 sandbox analyses, with 51% of submissions coming from the United States. Technology, manufacturing, government, and consulting organizations showed the highest exposure. By combining Microsoft 365 session theft with remote-access tool… Read More "US-Focused CSuite Phishing Steals Microsoft 365 Sessions and Deploys RMM Tools for Remote Access"
Unsloth’s model picker had a code-execution problem
That’s not necessarily dangerous by itself. Some legitimate Hugging Face models, including IBM Granite Speech and Vision, DeepSeek-OCR, ChatGLM, and earlier Qwen releases, need custom code to work properly, Fogel said. The problem was that Unsloth enabled the feature automatically… Read More "Unsloth’s model picker had a code-execution problem"
Trump, Six AI Giants Sign ‘Super Intelligence’ Safety Accord
The White House has secured a voluntary safety commitment from six major AI companies, with the firms agreeing to implement internal controls, independent audits and board-level oversight for frontier models. President Donald Trump and the executives signed the White House… Read More "Trump, Six AI Giants Sign ‘Super Intelligence’ Safety Accord"
WatchGuard Patches Critical Fireware OS Code Injection Vulnerability
WatchGuard on Tuesday announced fixes for 15 vulnerabilities in Fireware OS, including a critical-severity remote code execution (RCE) bug. Tracked as CVE-2026-86131 (CVSS score of 9.2), the flaw is described as a code injection issue in how the operating system… Read More "WatchGuard Patches Critical Fireware OS Code Injection Vulnerability"
Know Your Enemy: Browser-Based Attack Techniques in 2026
Given that the browser is where business apps are accessed and used, it makes sense that attacks are happening there too. Most breaches today begin in a browser session. Often, they never leave it, with the entire attack chain from… Read More "Know Your Enemy: Browser-Based Attack Techniques in 2026"
AI Boosts SOC Analyst Capacity but Limits Skill Development
AI is helping SOC analysts free up their time for more high-value work, yet many believe it is also hindering the development of on-the-job skills, according to a new study from Swimlane. The security operations (SecOps) specialist polled 500 security… Read More "AI Boosts SOC Analyst Capacity but Limits Skill Development"
Sexually Explicit Deepfake Sites Target 100-Plus Politicians in Europe
Almost 150 politicians across Europe have been included on harmful deepfake pornography websites over the last few years, according to new research seen by WIRED. Some of the politicians, who are overwhelmingly women, have had their likeness included in explicit… Read More "Sexually Explicit Deepfake Sites Target 100-Plus Politicians in Europe"