Content is curated from many trusted industry sources, including vendor advisories, security blogs, bug bounty programs, and conference organizers worldwide.
Security researchers released the first public proof-of-concept for CVE-2026-86950, a CoreGraphics flaw Apple says may have been used against targeted individuals. A malicious PDF with a crafted embedded font crashes unpatched iPhones and Macs by triggering memory corruption, not code execution. This underscores the urgency of patching now.
Cyber attackers exploit a critical Zimbra Collaboration Suite (ZCS) flaw to breach email servers, deploy web shells and reverse shells, and maintain persistent access while attempting to steal sensitive email and authentication data. Researchers note stolen information is often archived on compromised hosts for later exfiltration. This risk is clear.!!
A CPT‑Algoritha Security briefing highlights 10 top cybercrime, cybersecurity, DFIR, AI, BFSI‑fraud, policing and national‑security developments. Notably, the Union Cabinet approved a ₹1,789.52‑crore AI‑powered Intelligent Traffic Management System for Delhi Police, signaling AI and security integration for policing in India.
Bitget confirmed attackers stole $387.5 million last week by exploiting a zero-day flaw in third-party security products, per SlowMist's ongoing investigation. The probe links malicious activity to third-party security tools, identifies a zero-day vulnerability, and notes a customized tool recovered from the attacker. This flags third-party risk now
The Centre for Police Technology (CPT) launches a 31‑day knowledge initiative for Cybersecurity Awareness Month 2026, spotlighting AI-powered security, computer forensics, tech law, cybercrime investigations, and emerging digital threats. The October program in India involves CERT‑In to raise awareness and bolster readiness against evolving cyber threats.
Threat actors are exploiting a critical pre-authentication command injection flaw in Citrix NetScaler ADC and NetScaler Gateway to deploy web shells and exfiltrate configuration data. LevelBlue THOR analyzed activity across multiple customer environments, noting malicious NetScaler instances targeted during these intrusions.
Centre for Police Technology launches a 31-day Cybersecurity Knowledge Series for police, LEAs, corporate investigators, DF, fraud and security pros, aligning with Cybersecurity Awareness Month. The series probes technologies reshaping cyber defence and crime, beginning with Day 1: Agentic AI Security demanding proactive thinking. More details soon.
A study found over 543,000 unique credentials remained valid in public GitHub repositories as of July 2026, underscoring persistent exposure of sensitive access data despite safeguards. The median public exposure lasted 784 days, illustrating long-term risk of credential leakage and potential misuse across projects and organizations.
MetaMask reported an ongoing security incident impacting part of its infrastructure and said it is actively addressing and remediating the issue in coordination with external partners and security advisors. The company emphasized that it has identified no immediate threat to MetaMask wallets at this time. MetaMask will provide updates. Stay tuned!!
OpenAI disrupted a coordinated campaign by Moonshot AI, a Chinese firm behind the Kimi model, that used thousands of accounts to extract training data and hidden reasoning from OpenAI models. The activity, detected in July, prompted security investigations and mitigations.
OpenAI attributed elements of the attack to individuals linked to Chinese firm MoonshotAI, yet offered no conclusive evidence. The CyberScoop report notes a purported novel encryption bypass used in a distillation attack, with the story first published there. The attribution remains unproven and disputed.
Threat actors conduct a ClickFix-style campaign that abuses legitimate OpenAI and Google domains to deceive users, leveraging trusted brands to host phishing pages, deliver malware, or harvest credentials, exploiting domain reputation to boost clicks and circumvent skepticism. This pattern exploits trust to drive traffic to fake pages and steal data
Security researchers released the first public proof-of-concept for CVE-2026-86950, a CoreGraphics flaw Apple says may have been used against targeted individuals. A malicious PDF with a crafted embedded font crashes unpatched iPhones and Macs by triggering memory corruption, not code execution. This underscores the urgency of patching now.
Cyber attackers exploit a critical Zimbra Collaboration Suite (ZCS) flaw to breach email servers, deploy web shells and reverse shells, and maintain persistent access while attempting to steal sensitive email and authentication data. Researchers note stolen information is often archived on compromised hosts for later exfiltration. This risk is clear.!!
A CPT‑Algoritha Security briefing highlights 10 top cybercrime, cybersecurity, DFIR, AI, BFSI‑fraud, policing and national‑security developments. Notably, the Union Cabinet approved a ₹1,789.52‑crore AI‑powered Intelligent Traffic Management System for Delhi Police, signaling AI and security integration for policing in India.
Bitget confirmed attackers stole $387.5 million last week by exploiting a zero-day flaw in third-party security products, per SlowMist's ongoing investigation. The probe links malicious activity to third-party security tools, identifies a zero-day vulnerability, and notes a customized tool recovered from the attacker. This flags third-party risk now
The Centre for Police Technology (CPT) launches a 31‑day knowledge initiative for Cybersecurity Awareness Month 2026, spotlighting AI-powered security, computer forensics, tech law, cybercrime investigations, and emerging digital threats. The October program in India involves CERT‑In to raise awareness and bolster readiness against evolving cyber threats.
Threat actors are exploiting a critical pre-authentication command injection flaw in Citrix NetScaler ADC and NetScaler Gateway to deploy web shells and exfiltrate configuration data. LevelBlue THOR analyzed activity across multiple customer environments, noting malicious NetScaler instances targeted during these intrusions.
Centre for Police Technology launches a 31-day Cybersecurity Knowledge Series for police, LEAs, corporate investigators, DF, fraud and security pros, aligning with Cybersecurity Awareness Month. The series probes technologies reshaping cyber defence and crime, beginning with Day 1: Agentic AI Security demanding proactive thinking. More details soon.
A study found over 543,000 unique credentials remained valid in public GitHub repositories as of July 2026, underscoring persistent exposure of sensitive access data despite safeguards. The median public exposure lasted 784 days, illustrating long-term risk of credential leakage and potential misuse across projects and organizations.
MetaMask reported an ongoing security incident impacting part of its infrastructure and said it is actively addressing and remediating the issue in coordination with external partners and security advisors. The company emphasized that it has identified no immediate threat to MetaMask wallets at this time. MetaMask will provide updates. Stay tuned!!
OpenAI disrupted a coordinated campaign by Moonshot AI, a Chinese firm behind the Kimi model, that used thousands of accounts to extract training data and hidden reasoning from OpenAI models. The activity, detected in July, prompted security investigations and mitigations.
OpenAI attributed elements of the attack to individuals linked to Chinese firm MoonshotAI, yet offered no conclusive evidence. The CyberScoop report notes a purported novel encryption bypass used in a distillation attack, with the story first published there. The attribution remains unproven and disputed.
Threat actors conduct a ClickFix-style campaign that abuses legitimate OpenAI and Google domains to deceive users, leveraging trusted brands to host phishing pages, deliver malware, or harvest credentials, exploiting domain reputation to boost clicks and circumvent skepticism. This pattern exploits trust to drive traffic to fake pages and steal data
Unlimited intelligence feeds and real-time alerts in the Secwiser app.
Download now