71 websites hacked by T0$h!R0 AM!N

Citrix NetScaler Under Active Recon for CVE-2026-3055 (CVSS 9.3) Memory Overread Bug

CISA Adds CVE-2025-53521 to KEV After Active F5 BIG-IP APM Exploitation

TeamPCP Pushes Malicious Telnyx Versions to PyPI, Hides Stealer in WAV Files

China-Linked Red Menshen Uses Stealthy BPFDoor Implants to Spy via Telecom Networks

ThreatsDay Bulletin: PQC Push, AI Vuln Hunting, Pirated Traps, Phishing Kits and 20 More Stories

Coruna iOS Kit Reuses 2023 Triangulation Exploit Code in Recent Mass Attacks

FCC Bans New Foreign-Made Routers Over Supply Chain and Cyber Risk Concerns

Citrix Urges Patching Critical NetScaler Flaw Allowing Unauthenticated Data Leaks

TeamPCP Backdoors LiteLLM Versions 1.82.7–1.82.8 via Trivy CI/CD Compromise

FBI Warns Russian Hackers Target Signal, WhatsApp in Mass Phishing Attacks

Trivy Security Scanner GitHub Actions Breached, 75 Tags Hijacked to Steal CI/CD Secrets

Google Adds 24-Hour Wait for Unverified App Sideloading to Reduce Malware and Scams

Apple Warns Older iPhones Vulnerable to Coruna, DarkSword Exploit Kit Attacks

54 EDR Killers Use BYOVD to Exploit 35 Signed Vulnerable Drivers and Disable Security

New Perseus Android Banking Malware Monitors Notes Apps to Extract Sensitive Data

⚡ Weekly Recap: CI/CD Backdoor, FBI Buys Location Data, WhatsApp Ditches Numbers and More