Every issue

Threat Intel & Breaches 5Vulns & Exploits 5Offensive Research 5Defense & AppSec 5DFIR 5AI Security 5Governance, Risk & Compliance 5Business & Boardroom 5

• Defending Against Active Exploitation of Citrix NetScaler ADC and Gateway Appliances
• ShinyHunters Renewed Mass Exploitation Campaign Targeting Oracle PeopleSoft
• DirtyBlanket: Fake Express Packages on npm Spread a Linux Worm

The management plane was the target, and AI set the tempo

Threat Intel & Breaches 8Vulns & Exploits 5Offensive Research 3Defense & AppSec 5AI Security 8Governance, Risk & Compliance 5Business & Boardroom 8

• Active exploitation of Cisco Secure Firewall Management Center vulnerabilities
• Cisco patches max-severity ISE flaw, the second critical zero-day this week
• Critical N-able N-central Vulnerability and Active Exploitation

AI agents stopped being a tabletop exercise

Threat Intel & Breaches 9Vulns & Exploits 5Offensive Research 2Defense & AppSec 3AI Security 9Governance, Risk & Compliance 5Business & Boardroom 7

• OpenAI Says Reward Hacking Drove AI Agents to Exploit Zero-Days and Breach Hugging Face
• FBI Probes Service Selling 153M+ Drivers Licenses
• PaperCut NG/MF Critical Zero-Day Exploited in the Wild

The attacks that mattered came through things you already trusted

Threat Intel & Breaches 11Vulns & Exploits 9Offensive Research 3DFIR 3AI Security 7Governance, Risk & Compliance 2Business & Boardroom 5

• Terabytes of credentials leaked in massive supply-chain attack
• CVE-2026-11976 (CVSS 10.0): The official MonsterInsights Pro update distribution bucket (`monster-insights.s3.amazonaws.com`) was compromised. Both the current release (10.2.2) a
• CVE-2026-72898 (CVSS 10.0): Metabase allows a remote, unauthenticated attacker to inject arbitrary SQL via the '/reset_password' database endpoint and gain administrator access t