Citrix Patches Six NetScaler Flaws — One Already Under Active Attack
Citrix dropped patches for six vulnerabilities in NetScaler ADC and NetScaler Gateway this week. Some are nasty. And one of…
Security
Cybersecurity, vulnerabilities, threats, and defense
Claude Fable Is Back — But Users Say It’s Been Nerfed
Anthropic lifted the ban on Claude Fable, its most powerful model. It’s available to everyone now — even Max subscription…
ClickFix Goes Industrial: Researcher Uncovers API-Driven Malware Assembly Line
ClickFix — the social engineering trick that gets you to paste a malicious command yourself — has leveled up. Way…
Massive Azure CLI Password Spray Hits 78 Microsoft Accounts Across 81 Million Attempts
Huntress has flagged a massive ongoing password spray attack targeting Microsoft’s Azure CLI. The numbers are hard to ignore: more…
Anthropic Brings Claude Fable 5 Back Online After US Lifts Export Controls
Anthropic’s Claude Fable 5 is back. The US Commerce Department lifted export controls on June 30, and the model went…
Ransomware Gangs Exploit Citrix Bleed 2, BYOVD Tactics, Stolen Credentials
Anubis ransomware affiliates are exploiting the Citrix Bleed 2 vulnerability (CVE-2025-5777) to break into networks. CVSS 9.3. That’s about as…
Google Takes Down NetNut — The Proxy Botnet That Hit 2 Million Homes
Google, working with the FBI and Lumen, has taken a sledgehammer to NetNut. The residential proxy network — also known…
FBI Seizes NetNut Proxy Service and Popa Botnet Infrastructure
The FBI seized hundreds of domains tied to NetNut, a residential proxy service run by Israeli company Alarum Technologies. The…
AI Agent Runs First Fully Autonomous Database Ransomware Attack via Langflow Bug
Sysdig found something that sounds like a sci-fi plot: a ransomware attack planned and executed from start to finish by…
Why Identity Lifecycle Management Breaks for AI Agents
Identity lifecycle management was built for people. They have an employment record, a manager, and a departure date. AI agents…