Real-time Actionable Vulnerability Intelligence

October 2, 2026

Cyber Security Week in Review: October 2, 2026

In brief: Cisco, Citrix, Apple patch zero-days in their software; DIVD, Belnet, Bitget breached via zero-day flaws; and more.

16 min read

October 1, 2026

Cisco fixes actively exploited Catalyst SD-WAN zero-day

Separately, Microsoft has warned that threat actors are exploiting a Zimbra vulnerability to remotely execute commands, deploy web shells, and access email and authentication data.

3 min read

September 30, 2026

Hackers exploited zero-days in security products to steal $387M from Bitget

The attackers compromised two security appliances and installed a web shell on one device and deployed malware and a custom withdrawal tool on a production wallet server.

2 min read

September 30, 2026

Attackers exploit Citrix NetScaler zero-days to deploy web shells

Researchers say the attacks can exploit the NetScaler Packet Processing Engine and result in root-level access on the underlying FreeBSD system.

4 min read

September 30, 2026

Russian Star Blizzard APT upgrades phishing and malware delivery with RedFlick technique

Microsoft has observed Star Blizzard targeting Ukrainian individuals and institutions, as well as international NGOs, think tanks, governments and financial organizations involved in supporting Ukraine.

3 min read