Blog
North Korean Hackers Steal $387 Million from Bitget — Chainalysis AI Traces Every Dollar
North Korea's TraderTraitor group stole $387.5M from crypto exchange Bitget in September 2026. Chainalysis AI traced 23 cross-chain transfers in minutes. Here's what happened and how to defend against it.
Read More →CVE-2026-90970 (CVSS 9.9): GitLab AI Gateway Sandbox Escape Lets Attackers Execute Commands on Self-Hosted Servers
GitLab patches CVE-2026-90970, a CVSS 9.9 critical sandbox escape in its AI Gateway allowing authenticated RCE on self-hosted servers. Patch to 19.4.1 now.
Read More →Warlock Ransomware (CVE-2026-45659): Chinese APT Storm-2603 Hits Water, Telecom & Government via SharePoint
Chinese APT Storm-2603 (Longlegs) is actively hitting critical infrastructure via CVE-2026-45659 (SharePoint, CVSS 8.8). Learn the attack chain — BYOVD, SYSVOL staging, AD abuse — and how to defend your…
Read More →Operation KillSwitch: 16-Year-Old KillSec Ransomware Boss Arrested in International Europol Raid
Europol's Operation KillSwitch arrested three KillSec members including a 16-year-old leader in Spain. Here's what the takedown means for Indian enterprises and how to defend against data-theft extortion.
Read More →CVE-2026-104286 (CVSS 9.8): Fortinet FortiMail Zero-Day Actively Exploited — Unauthenticated File-Write Puts Mail Infrastructure at Risk
Fortinet FortiMail CVE-2026-104286 (CVSS 9.8) is being actively exploited. Unauthenticated attackers can write arbitrary files on all 7.2-8.0 branches. No patch yet — apply workarounds now.
Read More →CVE-2026-54154 (CVSS 10.0): Kiteworks Patches Max-Severity Code Injection After Federal Threat Intelligence Triggers Global Shutdown
CVE-2026-54154 (CVSS 10.0) lets unauthenticated attackers achieve RCE and root takeover of Kiteworks Email Protection Gateway. Patch to version 9.5.1 now.
Read More →CVE-2026-76504 (CVSS 9.8): Cisco SD-WAN Manager Authentication Bypass Actively Exploited — CISA Deadline Is October 3
Cisco Catalyst SD-WAN Manager carries a CVSS 9.8 authentication bypass (CVE-2026-76504) actively exploited in the wild. CISA KEV added Sep 30 — patch to fixed release by Oct 3 or…
Read More →StyleSmuggler (CVE-2026-75650, CVSS 10.0): Unauthenticated RCE Zero-Day Hits Adobe Commerce & Magento — Patch Plus Forensics Required
CVE-2026-75650 (StyleSmuggler) is a CVSS 10.0 unauthenticated RCE zero-day in Adobe Commerce and Magento, exploited since 4 Sep 2026 and deploying a Rust backdoor. Patch VULN-39341 plus forensics now.
Read More →CVE-2026-86950 (CVSS 8.8): Apple CoreGraphics Zero-Day Exploited in Extremely Sophisticated Targeted Attacks — Patch Now
Apple patched CVE-2026-86950, a CVSS 8.8 CoreGraphics zero-day exploited in extremely sophisticated targeted attacks. Update iOS 26.7.1 and macOS Tahoe now. CISA Oct 2 deadline.
Read More →CVE-2026-88771 & CVE-2026-88772 (CVSSv4 9.5): Citrix NetScaler Zero-Days Planted Webshells on 50,000+ Gateways — Patch Emergency Declared
Citrix NetScaler zero-days CVE-2026-88771 & CVE-2026-88772 (CVSSv4 9.5) exploited for weeks — webshells on 50K+ compromised gateways. Emergency patch and forensic guidance.
Read More →