[SPONSOREDNUBIVANCE]
Nobody's watching your logs at 2 AM.
Full SOC coverage without building one. Nubivance deploys and manages Rapid7 InsightIDR and MDR for organizations that need detection and response, not another dashboard.
Get coverageMalware & Ransomware
Cisco Discloses SD-WAN Zero-Day Exploited in Attacks
Cisco is urging organizations to act fast after discovering a critical zero-day vulnerability in its Catalyst SD-WAN Manager, which is already being exploited by attackers to gain administrative privileges. Upgrade to a fixed software release ASAP to protect your network from potential breaches.
Browser Attacks Evolve, Exploit Gaps in Traditional Security Tools
Traditional security tools are struggling to keep up with the rapidly evolving world of phishing attacks, where 89% of malicious domains are active for less than two days, rendering blocklists almost useless. Sophisticated phishing kits and diverse delivery channels have made it easier for attackers to bypass multi-factor authentication and steal sensitive credentials.
CSuite Phishing Targets US Businesses with Dual Microsoft 365, RMM Attacks
US businesses are in the crosshairs of a cunning phishing attack that combines Microsoft 365 session theft with remote-access tool deployment, allowing hackers to turn a single incident into widespread account compromise, fraud, and persistent system access. This dual-threat attack path puts companies at risk of devastating breaches.
ChatGPT Abused to Deliver Trojan Malware via ClickFix Attacks
Beware of a sneaky malware attack that's using ChatGPT and other trusted brands to trick you into downloading Trojan malware via a clever ClickFix scheme. Don't fall for it - no legitimate site will ever ask you to copy and paste a command to prove you're human!
Citrix NetScaler Flaw Exploited for Root Access, Web Shell Deployment
Security experts have uncovered a critical Citrix NetScaler flaw, CVE-2026-88772, that's being exploited to gain root access and deploy web shells, with attackers targeting ADC and Gateway appliances worldwide. This severe vulnerability, scoring 9.5 on the CVSS scale, allows for a devastating memory overflow that bypasses authentication and hands over total control.
Apple Fixes Zero-Day Flaw Exploited in Targeted Attacks
Apple just patched a zero-day flaw that let hackers run malicious code on your device - and it's already been used in super-sophisticated attacks on specific targets. Processing a malicious file could give attackers free rein, so update your iOS to stay safe!
Dutch Police Apprehend Alleged ShinyHunters Leader
A major blow has been dealt to the notorious ShinyHunters cybercrime group with the arrest of a 24-year-old man in Amsterdam, accused of helping to orchestrate a string of high-profile extortion attacks that have netted at least $70 million since last year. The suspect has been ordered to be detained for 90 days in Rotterdam as authorities continue to crack down on the group's activities.
Mandiant Exposes Citrix NetScaler Zero-Day Exploits by Suspected State Actors
Dozens of organizations across North America and Europe, spanning critical sectors like government, finance, and education, have been impacted by a massive cyberattack exploiting a zero-day vulnerability in Citrix NetScaler appliances. The stealthy campaign, suspected to be carried out by state actors, went undetected for at least three weeks, allowing attackers to compromise a wide range of industries.
Custom ChatGPTs Target Users with ClickFix Malware Attacks
Researchers at Huntress uncovered a sneaky campaign where custom ChatGPT versions were used to trick victims into downloading ClickFix malware, leading to a remote access trojan (RAT) infection. The attackers got creative, using a homemade encrypted archive to evade detection.
Star Blizzard Exploits Fake Invites to Deploy Windows Backdoor
Over 100 organizations, primarily in the US and UK, have fallen prey to a sophisticated phishing scam that uses fake event invites to install a sneaky Windows backdoor, with Microsoft tracing the attacks back to a Russian hacking group. The campaign, which has been running in waves since January, appears to be targeting individuals and organizations with ties to Ukraine.
Hackers Exploit Citrix Zero-Day to Deploy Web Shells, Malware
Hackers were quick to pounce on a Citrix zero-day vulnerability, attempting to install a hidden PHP web shell just days before the flaw was publicly disclosed. This early activity sparked a wider campaign, enabling attackers to gain root access, deploy malware, and tunnel into internal networks using the newly disclosed CVE-2026-88771 and CVE-2026-88772 vulnerabilities.
Citrix Zero-Day Exploits Target Gov't, Finance Firms with Custom Malware
A concerning cybersecurity crisis is unfolding as government agencies, banks, and other organizations across North America and Europe face targeted attacks exploiting critical Citrix vulnerabilities with custom malware. The attacks, which have been observed in the wild, take advantage of two critical CVEs, CVE-2026-88771 and CVE-2026-88772, both rated 9.5 CVSS.
US Air Force Veterans Sentenced for Orchestrating BEC Scams
Two US Air Force veterans orchestrated a brazen multi-year scheme that scammed over $1.68 million from a victim in Iowa City, using a complex web of domestic and international co-conspirators to divert funds into their control.
New Spectre v2 Variant Exploits Linux Systems, Leaks Root Password Hashes
Researchers have uncovered a new Spectre v2 variant, dubbed Branch Target Reuse (BTR), that can exploit Linux systems and leak sensitive data, including root password hashes, in a matter of minutes. This attack can be executed in as little as 3-5 minutes, leaving systems vulnerable to potential breaches.
Malicious npm Packages Hijack Developers' WhatsApp Accounts
Beware of malicious npm packages that have been downloaded a staggering 490,000 times, hijacking developers' WhatsApp accounts and adding them to groups without consent. These 101 rogue packages exploit the popular Baileys WhatsApp open source project to pull off the scam.
AI Agent Breaches Dutch Cybersecurity Nonprofit Through Exploited Vulnerability
A Dutch nonprofit dedicated to exposing vulnerabilities was breached in a shocking attack that left investigators stunned, describing it as loud and extremely messy. The incident marks a serious turn of events for the volunteer-run organization, which has operated with relative calm for seven years.
[SPONSOREDNUBIVANCE]
Audit-ready is a season. It shouldn't be.
Evidence in spreadsheets, controls drifting between audits, frameworks multiplying on flat headcount. Nubivance runs continuous compliance on Rapid7 Cyber GRC - SOC 2, HIPAA, ISO 27001, PCI, CMMC.
End the scramble
Apple fixes exploited CoreGraphics zero-day in urgent patch rollout
Apple just dropped an urgent patch to fix a CoreGraphics zero-day vulnerability that's been exploited in targeted attacks - it's crucial to update your devices ASAP to stay protected. This swift fix comes after the flaw was used to launch attacks before a public fix was available.
RatHat Malware Evolves with AI-Powered Command Center
RatHat Malware is rapidly evolving with an AI-powered command center, having undergone three major command-and-control infrastructure updates in just six months, with nearly 100 deployments since April 2026. This malware-as-a-service model is getting smarter and more aggressive by the day.
Microsoft Tracks NeedyMantis Malware Enabling Persistent Network Access
Microsoft uncovered a sneaky malware operation, dubbed NeedyMantis, that's been secretly giving hackers prolonged access to compromised networks since at least October 2025. This stealthy threat has been targeting key sectors like telecommunications, universities, and government-linked organizations, primarily in campaigns linked to China.
Apple patches zero-day flaw in CoreGraphics exploited in targeted attacks
Apple just patched a zero-day flaw in CoreGraphics that was exploited in super-sophisticated targeted attacks - and you might want to update your devices ASAP! This out-of-bounds write vulnerability, tracked as CVE-2026-20700, could put your iOS device at risk if you're running an older version.
Ransomware Attack Disrupts Keio's Business Systems
Keio's business operations were disrupted after a ransomware attack was detected on its servers in the early hours of September 26, prompting swift action to shut down its network and prevent further damage. The company is now working closely with the police and external experts to investigate the incident and assess its impact.
Microsoft Exposes NeedyMantis Malware Used in Long-Term Network Breaches
Microsoft uncovered a sneaky malware called NeedyMantis that's used to secretly maintain long-term access to compromised networks. This lightweight but persistent threat is designed to fly under the radar, allowing attackers to keep a grip on networks for an extended period.
Apple Fixes CoreGraphics Flaw Targeted in Sophisticated Attacks
Apple patched a critical CoreGraphics flaw that could let hackers execute arbitrary code on your device, and warned that highly targeted attacks may have already exploited this vulnerability. The fix, which improves bounds checking, is now available for affected systems.
RatHat Malware Leverages Gemini to Target High-Value Android Victims
Meet RatHat, a sneaky Android banking trojan that's using Google's Gemini model to target high-value victims by estimating their bank balances and sorting them for maximum impact. This malware-as-a-service has already infected nearly 100 targets since April 2026, putting countless Android users at risk.