The Restricted Note Took Citrix Offline
A leaked Dutch note unplugged Citrix NetScaler this weekend. Here's the cybersecurity play if your gateway is still live. Check your exposure.
September 2026
Nice Driver. Shame About the Sensors.
Lunex used an AMD driver to mute cybersecurity sensors, then stole browser cookies. See what to page on when your watchers go quiet.
PeopleSoft Became a Global Web Shell Farm
PeopleSoft is serving web shells past WAFs. If your cybersecurity still ends at the proxy, hunt the ERP first.
When Cybersecurity Detection Fires After the Money Leaves
Alerts fired. $351M still left. Late cybersecurity is a receipt, not a control. Check the transfer-window fixes.
Storm-3168 Used Stolen Principals for Azure Recon and Deletion
Storm-3168 used stolen Azure principals for recon and deletion as 100 million AT&T records showed. Audit your cybersecurity identity inventory now.
The Fake Docker Provider Cost 222 Pulls
A fake Docker Terraform provider hit 222 pulls on HashiCorp. See what that means for your cybersecurity stack, then lock the registry path.
80,000 Relays. Months of Model Theft
80,000 AI relays clone frontier models while your cybersecurity logs call them customers. Audit the keys before the copy ships.
Talos Catalogued an Implant With No Pilot
CLOSEDQUORUM picks its own next move. If your cybersecurity still hunts tired operators, start with the controls here.
That Remote Laptop Never Left Town
Japan busted a laptop farm. If your cybersecurity still trusts a shipped Mac, start with the ship-to address. Audit it today.
Your Group Policy Is a Hostile Sysadmin Now
PAYLOAD ransomware now lives in Group Policy. Here's the cybersecurity work your EDR will not do for you. Check those GPO ACLs.