Threat research and vulnerability disclosures from vendors.
Zscaler’s ThreatLabz unit has published an analysis of how ransomware operators are using generative AI to speed up attacks after they gain an initial foothold. The research, drawn from the 2026 Ransomware Report, covers how attackers use GenAI to write…
Zscaler’s ThreatLabz has published an analysis of CVE-2026-88771, a critical remote code execution vulnerability in Citrix NetScaler ADC and NetScaler Gateway that carries a CVSS v3.1 score of 9.8. Citrix confirmed exploitation on unmitigated appliances and CISA added the flaw…
Zscaler has published a set of nine Zero Trust principles for governing AI agents in the enterprise, arguing that the least-privilege model built for human users over the past decade should now be applied to non-human identities. The principles cover…
Microsoft was the most impersonated brand in phishing attacks in the third quarter of 2026, accounting for 33% of all brand impersonation attempts tracked by Check Point Research, up from 23% in the previous quarter. Check Point said attackers favour…
The FBI has issued a public service announcement warning that fraudsters are using cloned candidate voices, logos and slogans to solicit fake campaign donations and harvest personal data ahead of the 2026 US midterm elections. The alert updates a similar…
A new class of AI decision model has emerged in the past month, with TypeSafe AI releasing Jev on 15 September, OpenAI opening a public beta of its Decisions API on 6 October, and Cribl publishing the open cribl-decision LoRA…
MITRE has published version 20 of its ATT&CK framework, widening its coverage of critical infrastructure, AI-enabled attacks and cyber espionage. The release adds two ICS campaigns: attacks on more than 30 Minnesota water and wastewater utilities, tracked as C0066, and…
F-Secure has published a Scam Encyclopedia, a continuously updated guide cataloguing more than 50 distinct types of online scam. The resource was compiled by the company’s Threat Intelligence team from decades of research and is hosted on its Illuminate Research…
Hub International Holdings has published its 2026 Middle Market Profitability & Resiliency Report, which found that 75% of middle market leaders do not fully understand what their insurance policies cover, even as more organisations adopt formal risk management programmes. The…
Attackers are exploiting a critical authenticated remote code execution flaw in Langflow, the open-source platform for building AI applications and agentic workflows, according to an alert from security firm Previdian. The vulnerability, tracked as CVE-2026-105740 and rated 9.9 on the…
