Posts of last few hours

Citrix Confirmed Two New NetScaler Flaws Exploited as Zero-Day
Citrix confirmed two critical NetScaler zero-days were exploited before patches were available, with attackers able to remotely execute code. Citrix confirmed that two critical zero-day vulnerabilities in NetScaler ADC and NetScaler Gateway were exploited before the company released patches. The flaws allow remote code execution, meaning attackers can potentially take control of affected appliances. The […]
https://securityaffairs.com/199873/security/citrix-confirmed-two-new-netscaler-flaws-exploited-as-zero-day.html
Cloudflare’s 2026 Annual Founders’ Letter
The Internet is changing more today than at any point since Cloudflare launched back on September 27, 2010. As automated traffic surpasses human activity, we reflect on the rise of AI agents, new creators, and how we can help build a fair, sustainable future for the web.
https://blog.cloudflare.com/cloudflares-2026-annual-founders-letter/
Citrix Confirms NetScaler 0-Day RCE Vulnerabilities Actively Exploited in Attack

Citrix has released emergency security updates for NetScaler ADC and NetScaler Gateway after confirming that attackers are exploiting two critical remote code execution vulnerabilities against unmitigated appliances. The flaws, CVE-2026-88771 and CVE-2026-88772, each carry a CVSS v4.0 score of 9.5 and can let remote, unauthenticated adversaries execute code, placing internet-facing gateways at immediate risk. Because […]

The post Citrix Confirms NetScaler 0-Day RCE Vulnerabilities Actively Exploited in Attack appeared first on Cyber Security News.

https://cybersecuritynews.com/citrix-confirms-netscaler-0-day/
Citrix confirms two NetScaler RCE zero-days exploited in attacks
Citrix has confirmed that two critical NetScaler remote code execution vulnerabilities, tracked as CVE-2026-88771 and CVE-2026-88772, are being exploited in attacks and that it has released security updates to fix the flaws. [...]
https://www.bleepingcomputer.com/news/security/citrix-admins-warned-to-shut-down-netscalers-over-2-exploited-zero-days/
New Windows Process Injection Attack Evades EDR Monitoring Without WriteProcessMemory

A Windows process injection method disclosed by security researcher Two Seven One Three sidesteps two APIs closely associated with remote code injection: VirtualAllocEx and WriteProcessMemory. Dubbed console named-pipe injection, the technique delivers payload bytes through a child console process’s redirected standard input and repurposes memory Windows has already populated. It can disrupt detections built around […]

The post New Windows Process Injection Attack Evades EDR Monitoring Without WriteProcessMemory appeared first on Cyber Security News.

https://cybersecuritynews.com/windows-process-injection-evades-edr/
SECURITY AFFAIRS AI-CYBERSECURITY NEWSLETTER ROUND 1
Security Affairs AI-CYBERSECURITY newsletter includes a collection of the best articles and research on AI in the international landscape Artificial intelligence is rapidly changing cybersecurity, reshaping both the techniques used by attackers and the tools available to defenders. AI agents can automate tasks, analyze large amounts of data, discover vulnerabilities and accelerate offensive operations. At […]
https://securityaffairs.com/199862/ai/security-affairs-ai-cybersecurity-newsletter-round-1.html
原域名已变更且将在2024年彻底废弃，请访问 https://govuln.com/news/ 查看新的RSS订阅
原域名已变更且将在2024年彻底废弃，请访问 https://govuln.com/news/ 查看新的RSS订阅
https://govuln.com/news/url/x8dB
SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 116
Security Affairs Malware newsletter includes a collection of the best articles and research on malware in the international landscape Malware Newsletter Threat Intel | One Kit, Forty Companies: How a Malware-as-a-Service Platform Used GitHub as a Distribution Network for its Campaign   Group Policy hijacked: PAYLOAD ransomware weaponizes Active Directory GPO   ChainScript: Tracing a Node.js RAT […]
https://securityaffairs.com/199850/malware/security-affairs-malware-newsletter-round-116.html
Cloudflare fixes Containers cross-tenant flaw exposing customer data
Cloudflare has fixed a vulnerability in Containers and Sandboxes that allowed customers with a Workers Paid account to recover residual data from other customers' containers on the same physical host. [...]
https://www.bleepingcomputer.com/news/security/cloudflare-fixes-containers-cross-tenant-flaw-exposing-customer-data/
Security Affairs newsletter Round 597 by Pierluigi Paganini – INTERNATIONAL EDITION
A new round of the weekly Security Affairs newsletter has arrived! Every week, the best security articles from Security Affairs are free in your email box. Enjoy a new round of the weekly SecurityAffairs newsletter, including international press. OpenAI Agents Accessed US Government Websites Without Authorization Exploit.in Database Reveals the Roots of Today’s Ransomware Ecosystem […]
https://securityaffairs.com/199841/breaking-news/security-affairs-newsletter-round-597-by-pierluigi-paganini-international-edition.html
Anthropic turns Claude into an AI marketplace with 2,000+ plugins and connectors
Anthropic has just announced a new Claude Marketplace, and it brings all AI-related tools into one place, including plugins, connectors, agents, and more. [...]
https://www.bleepingcomputer.com/news/artificial-intelligence/anthropic-turns-claude-into-an-ai-marketplace-with-2-000-plus-plugins-and-connectors/
В США хотят обязать крупные VPN блокировать пиратские сайты
Новый законопроект позволит через суд требовать ограничения доступа к зарубежным ресурсам.
https://www.securitylab.ru/news/577970.php
Одна ссылка против 2 млн Wordpress сайтов. В Elementor нашли опасную дыру
Обычный переход по URL отдает права суперпользователя чужим людям.
https://www.securitylab.ru/news/577949.php
OnePlus15手机本地提权Root分析
OnePlus15手机本地提权Root分析
https://mp.weixin.qq.com/s?__biz=MzU3MTY5MzQxMA==&mid=2247485498&idx=1&sn=cc614f6fde7b4f0dfc7b86b1eb26d7cb
NileCTF
Name: NileCTF (an NileCTF 2026 event.)
Date: Sept. 25, 2026, noon — 27 Sept. 2026, 12:00 UTC  [add to calendar]
Format: Jeopardy
On-line
Location: Only Egyptian high school students
Offical URL: https://nilectf.com/register
Rating weight: 0
Event organizers: Cyb3r_Ph4nt0ms
https://ctftime.org/event/3449
4 уязвимости уже под атакой: CISA добавила в каталог SharePoint, WSO2, MikroTik и Adobe Commerce
Поддельный токен позволяет атакующему добраться до административной учётной записи.
https://www.securitylab.ru/news/577958.php
Meta 屏蔽了巴西总统的 FB 主页以及竞选广告
距离 2026 年 10 月巴西大选不到两周，Meta 本周短暂屏蔽了巴西现任总统卢拉的 FB 主页以及竞选连任广告，在抗议和投诉之后，Meta 恢复了主页，但卢拉的竞选团队认为此举损害了总统的竞选活动。Meta 是在本周三屏蔽了卢拉的主页，未给出任何理由。卢拉竞选团队投诉称，数字环境在政治辩论中发挥着核心作用，限制卢拉的广告账户损害了其开展竞选活动的能力。此举使卢拉与其他候选人相比处于不平等的地位。卢拉竞选团队以及其所属的劳工党要求 Meta 保留所有数字证据，考虑诉诸巴西最高选举法院。

https://www.solidot.org/story?sid=85487
Охота за редкими Pokémon дошла до слежки за курьером. Суд отправил нарушителя под такой же контроль
Безобидное коллекционирование в какой-то момент перешло границу, за которой началось уголовное дело.
https://www.securitylab.ru/news/577944.php
【安全圈】SharePoint 代码注入漏洞出现实际攻击，已发布补丁仍需核对
关键词漏洞美国网络安全与基础设施安全局（CISA）在 9 月 25 日将 SharePoint 漏洞 CVE-
https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652079129&idx=3&sn=8eab1210d63abf0b373ad59028f7c1ad
【安全圈】两个恶意 GitHub Actions 曾重新上线，旧工作流需排查
关键词恶意代码安全公司 Socket 在 9 月 24 日披露，两个曾卷入 Mini Shai-Hulud 供
https://mp.weixin.qq.com/s?__biz=MzIzMzE4NDU1OQ==&mid=2652079129&idx=2&sn=df0e0e05d2843681315bf1ebf88e985d

Managed ad