FortiMail Gateway Zero-Day Under Active Exploitation
Fortinet has warned customers that a critical zero-day vulnerability in FortiMail is being actively exploited in the wild, putting internet-exposed email security gateways at immediate risk.
Insights
News, insights and how-to guides
Security news, Microsoft and Azure updates, and practical guides on cloud infrastructure, custom applications and data, from the Alcaeus Services team.
Filtered by category: News Clear filter
MI5 Warns of CGTRI Front Linked to Chinese Intelligence
The U.K.’s domestic security service, MI5, has issued an unusually direct public warning about the China General Technology Research Institute (CGTRI), alleging that the research body has strong links to China’s Ministry of State…
Citrix NetScaler Wave: New Zero-Day Threatens SAML-Configured Systems
A new high-severity zero-day affecting Citrix NetScaler ADC and NetScaler Gateway has emerged following the disclosure of two critical remote code execution vulnerabilities in the same product family.
Apple Tightens macOS Full Disk Access Controls as AI Agents Expand Their Reach
Apple is preparing to introduce additional controls around Full Disk Access (FDA) in macOS, responding to growing privacy and security concerns surrounding increasingly capable AI agents.
KillSec Ransomware Takedown: International Operation Seizes Infrastructure and 110 TB of Stolen Data
An international law-enforcement operation has disrupted the KillSec ransomware-as-a-service (RaaS) group, taking control of its leak site, seizing core infrastructure and securing at least 110 terabytes of stolen data.
China-Aligned TA419 Targets U.S. AI Policy Experts with AitM Phishing
A highly targeted credential-phishing campaign has placed artificial intelligence policy and regulatory experts in the crosshairs of a China-aligned espionage group tracked by Proofpoint as TA419.
PhantomSub: 101 Malicious npm Packages Abuse Baileys to Manipulate WhatsApp Accounts
Security researchers have uncovered a malicious npm campaign involving 101 packages that abuse the open-source Baileys WhatsApp project to silently manipulate developers' authenticated WhatsApp accounts.
Russian APT Star Blizzard Uses RedFlick Phishing Chain to Deploy CosmicPulse Backdoor
Microsoft Threat Intelligence has detailed a major evolution in the phishing operations of Star Blizzard, a Russian state threat actor associated by CISA with the Russian Federal Security Service (FSB) Centre 18.
Apple Zero-Day CVE-2026-86950 Exploited in Targeted Attacks
Apple has patched a high-severity out-of-bounds write vulnerability affecting iOS, iPadOS and macOS after receiving a report that the flaw may have been exploited in an extremely sophisticated attack against specific targeted individuals.
Critical WordPress Core Vulnerability CVE-2026-87902 Exploited Within Hours
A critical vulnerability in WordPress Core is already being targeted in the wild, only hours after details of the flaw became public.
OpenAI Expands Dedicated Cybersecurity AI With GPT-5.6-Cyber
OpenAI is expanding its cybersecurity-focused AI capabilities with GPT-5.6-Cyber, a specialized model designed for advanced vulnerability research, exploit validation and authorized security testing.
ShinyHunters Claims Massive FBI Data Breach Through Alleged PeopleSoft Zero-Day
The cyber-extortion group ShinyHunters claims it breached systems associated with the U.S. Federal Bureau of Investigation (FBI) and stole sensitive information belonging to current and former employees as well as FBI job applicants.