GitHub has officially announced the release of npm version 12 with install scripts disabled by default, along with deprecating granular access tokens (GATs) designed to bypass two-factor ...

A ransomware operation that emerged barely 19 months ago has claimed 91 victims — 11 of them in June 2026 alone — by exploiting a critical pre-authentication vulnerability in Citrix NetScaler ...

Since early 2026, Arctic Wolf has investigated multiple breaches carried out using the Anubis ransomware. The attackers combined stolen VPN credentials and exploitation of CitrixBleed 2 (CVE-2025-5777 ...

Indiana University Health in Indianapolis and Tampa (Fla.) General Hospital have filed separate lawsuits against Change Healthcare and its parent company, UnitedHealth Group, alleging the companies ...

The bad actors that attacked the U.S. Federal Emergency Management Agency this summer in a data breach that roiled government officials and led to the firing of two dozen FEMA employees were able to ...

A “widespread cybersecurity incident” at the Federal Emergency Management Agency allowed hackers to make off with employee data from both the disaster management office and U.S. Customs and Border ...

Ever wonder what happens when attackers don’t break the rules—they just follow them better than we do? When systems work exactly as they’re built to, but that “by design” behavior quietly opens the ...

Citrix issues warning on password spraying attacks targeting NetScaler and NetScaler Gateway appliances deployed by organizations worldwide. Citrix has issued a fresh warning on password spraying ...

Citrix has gone on a European shopping trip, and come home with its bag of gifts bulging thanks to a pair of major buys: infosec outfits deviceTRUST and Strong Network. German outfit deviceTRUST's ...