inionline.net https://validator.w3.org/feed/docs/rss2.html As AI Reshapes the SOC Career Ladder, Satisfaction Rises for 91%, but Entry Gets Harder for Nearly Half Attackers Exploit Zimbra Flaw to Deploy Web Shells and Harvest Authentication Secrets Attackers Abuse MSP360 to Deploy ScreenConnect in Dual-RMM Phishing Attacks Cisco Warns of Attackers Exploiting Critical Authentication Bypass in SD-WAN Manager Russia’s Star Blizzard Ditches ClickFix to Widen Phishing Net Attackers Abuse ChatGPT Custom GPTs to Deliver RAT via ClickFix Lures Know Your Enemy: Browser-Based Attack Techniques in 2026 AI Coding Agents Exposed 13,000 Internal Images, Including Billing Records, on GitHub US-Focused CSuite Phishing Steals Microsoft 365 Sessions and Deploys RMM Tools for Remote Access Attackers Exploit NetScaler Flaw for Root Access, Deploy WHIPSHOT and SLAPSHOT OpenSSL Fixes High-Severity DTLS Flaw That Can Leak Heap Memory Unencrypted South Africa Seeks Help After Cyberattack Targets Air Traffic Control Citrix NetScaler CVE-2026-88772 Exploit Details Show Pre-Auth Path to Shellcode Execution Apple Zero-Day Vulnerability Weaponized in Targeted Attacks Unsloth Studio Flaw Turns Routine Model Inspection Into Code Execution French Tax Data Theft Using Stolen Staff Passwords Went Undetected for Seven Weeks Russia’s Star Blizzard Targets 100+ Organizations With Fake Event Invites to Deliver Backdoor Cloudflare Announces Public Certificate Authority for the Post-Quantum Web New Spectre-v2 BTR Attack Leaks Linux Memory Despite Existing Defenses ‘NeedyMantis’ Provides Long-Term Access to Compromised Networks Dual NetScaler Zero-Days Trigger Chaos for Citrix Customers Kiteworks Fixes Critical Flaw Found During Nine-Hour Precautionary Shutdown 101 Malicious npm Packages Add Developers’ WhatsApp Accounts to Groups Without Consent Dutch Police Arrest 24-Year-Old Amsterdam Man in ShinyHunters Investigation Official MCP Python SDK Flaw Can Let Malicious Servers Steal OAuth Credentials OpenAI Shelves GPT-6.1 Astra After Tests Find Deception and Unauthorized Actions OpenAI Pauses Tool Use After Agent Bypasses Internet Controls to Reach External Chatbot Citrix NetScaler RCE zero-day Vulnerabilities One Packet Can Crash OT Servers in Industrial Sectors Carbonato Botnet Puts an AI Agent on Hacked Docker Hosts Apple Patches CoreGraphics Flaw Possibly Exploited in Targeted Attacks AI Agents Are Privileged Users; Who Is Auditing Their Access? Hackers Use NeedyMantis to Maintain Long-Term Access in Breached Networks IAM for AI agents: A Practical Enterprise Framework Bitget Says Attacker Exploited Third-Party Security Product Flaw to Steal $388M RatHat Android Malware Console Uses Gemini to Identify Higher-Value Victims Chrome Store Hosts ‘Poper Blocker’ Spyware Downloaded by Millions JadePuffer AI Actor Compromises Azure Tenant in Destructive Cloud Attack ⚡ Weekly Recap: $387M Crypto Hack, Citrix Exploits, AI Agents Go Off-Script, and More Threats Webinar: How to Govern AI Agents, Reduce Excessive Access, and Control Shadow AI Carbonato Botnet Compromises Docker Hosts to Deploy Telegram-Controlled Hermes AI Agent JADEPUFFER-Linked Attackers Used Compromised Service Principals to Delete Azure Resources CISA Says Attackers Are Exploiting Two Critical Citrix NetScaler Flaws Globally Warning: Two Unpatched Citrix NetScaler RCE Zero-Days Under Active Exploitation Lunex Stealer Abuses AMD Driver to Disable Security Monitoring and Steal Browser Credentials Attackers Bypass WAFs to Exploit Oracle PeopleSoft Flaw and Deploy Web Shells Zero Trust for AI Agents Starts With Fixing Zero Visibility Elementor CSRF Flaw Lets Attackers Take Over Sites After Admin Clicks Crafted Link SharePoint RCE and MikroTik RouterOS Flaws Actively Exploited in the Wild Kiteworks Urges Customers to Shut Down Systems for 9 Hours Over Possible Cyber Attack