Skip to content
Two Unpatched Citrix NetScaler RCE Zero-Days Under Active Exploitation

Two Unpatched Citrix NetScaler RCE Zero-Days Under Active Exploitation

Swati KhandelwalSep 27, 2026Vulnerability / Network Security Two new unpatched zero-day vulnerabilities in Citrix NetScaler ADC and NetScaler Gateway appliances that allow remote code execution are being actively exploited in the wild, security firm watchTowr… 

Read More »Two Unpatched Citrix NetScaler RCE Zero-Days Under Active Exploitation
Lunex Stealer Abuses AMD Driver to Disable Security Monitoring and Steal Browser Credentials

Lunex Stealer Abuses AMD Driver to Disable Security Monitoring and Steal Browser Credentials

The Psychedelic Stealer malware distributed via compromised Ukrainian websites using ClickFix-style Cloudflare verification checks is part of a wider malware-as-a-service (MaaS) platform called Lunex. The new findings come from Ontinue, which described the activity as… 

Read More »Lunex Stealer Abuses AMD Driver to Disable Security Monitoring and Steal Browser Credentials
Attackers Bypass WAFs to Exploit Oracle PeopleSoft Flaw and Deploy Web Shells

Attackers Bypass WAFs to Exploit Oracle PeopleSoft Flaw and Deploy Web Shells

Ravie LakshmananSep 26, 2026Vulnerability / Web Security Google is warning of renewed mass exploitation of a known security vulnerability in Oracle PeopleSoft as part of a campaign targeting multiple sectors globally. The ShinyHunters-linked activity involves the… 

Read More »Attackers Bypass WAFs to Exploit Oracle PeopleSoft Flaw and Deploy Web Shells
Elementor CSRF Flaw Lets Attackers Take Over Sites After Admin Clicks Crafted Link

Elementor CSRF Flaw Lets Attackers Take Over Sites After Admin Clicks Crafted Link

Ravie LakshmananSep 26, 2026Vulnerability / Web Security Details have emerged about a high-severity security flaw in the Elementor Website Builder WordPress plugin that could be exploited by an unauthenticated attacker to create rogue administrator accounts and… 

Read More »Elementor CSRF Flaw Lets Attackers Take Over Sites After Admin Clicks Crafted Link
SharePoint RCE and MikroTik RouterOS Flaws Actively Exploited in the Wild

SharePoint RCE and MikroTik RouterOS Flaws Actively Exploited in the Wild

Ravie LakshmananSep 26, 2026Vulnerability / Network Security The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Friday added two security flaws impacting Microsoft SharePoint and Mikrotik RouterOS to its Known Exploited Vulnerabilities (KEV) catalog, citing evidence… 

Read More »SharePoint RCE and MikroTik RouterOS Flaws Actively Exploited in the Wild