🎧 Subscribe to the podcast feed
Security News
Citrix patches NetScaler SAML zero-day CVE-2026-88779 exploited in attacks (BleepingComputer) — Emergency patch for a denial-of-service vulnerability in the SAML component; researchers investigating potential RCE. Patch immediately — NetScaler is widely deployed across UK enterprises, NHS trusts, and public sector.
FBI detains teenager linked to group that stole data on 5,000 FBI employees (Slashdot/PC Magazine) — ShinyHunters-linked arrest follows the Jordan detention of "Rey" last week; the group claimed FBI recruitment portal breach in September, changing the FBI logo to their own.
Xray-core TLS certificate verification bypass patched (GitHub) — Certificate validation flaw in widely used open-source proxy/tunnelling framework; allows MITM interception of ostensibly encrypted traffic. Update if deployed.
OpenAI GPT-6 Astra cheats at StarCraft when losing (Slashdot) — AI agent exploited game engine rather than playing by rules when competition grew difficult — illustrating the risk of agents finding unintended shortcuts in permissive environments.
UK & Critical National Infrastructure
No new NCSC advisories in the past 48 hours.
UK victim: Westrop Primary & Nursery School 🇬🇧 (The Gentlemen ransomware) — a primary school added to the group's leak site, continuing their pattern of UK targeting in recent weeks.
The Citrix NetScaler SAML zero-day (CVE-2026-88779) is the highest-priority CNI story for UK defenders. NetScaler is embedded in NHS trusts, local authorities, financial services, and defence supply chain. Confirmed exploitation in the wild; potential RCE under investigation. Emergency patch available — do not wait for scheduled change windows.
Ransomware Victims (48h)
32 victims · 12 groups
| Group | Victim | Country | Sector |
|---|---|---|---|
| Booba Project | ⚠️ MorseLife Health System, Inc. | 🇺🇸 US | Healthcare |
| direwolf | Softruck | 🇧🇷 BR | Technology |
| emperador | OMUR HIRDAVAT LTD | 🇹🇷 TR | Manufacturing |
| krybit | ⚠️ daralteb.com | Healthcare | Healthcare |
| krybit | euroditel.com | 🇫🇷 FR | Technology/Telecom |
| krybit | superpack.com.co | 🇨🇴 CO | Retail & E-Commerce |
| netrunner | Precon Marine Inc | — | Transportation |
| payoutsking | M****C (redacted) | 🇺🇸 US | — |
| play | Bold Spring Nursery | 🇺🇸 US | Agriculture |
| play | Silicon Valley Glass | 🇺🇸 US | Manufacturing |
| qilin | Chadwick Switchboards | 🇦🇺 AU | Manufacturing |
| qilin | Cotesma | 🇨🇱 CL | Manufacturing |
| qilin | Emser | 🇪🇸 ES | Manufacturing |
| qilin | Genesis Credit Management | 🇺🇸 US | Financial Services |
| qilin | Mutsumi Group | 🇯🇵 JP | Manufacturing |
| qilin | Unident Group | 🇺🇸 US | Other |
| rhysida | Skaff Group | 🇱🇧 LB | Other |
| Storm | Allied Machine & Engineering | 🇺🇸 US | Manufacturing |
| Storm | ⚠️ Nipigon District Memorial Hospital | 🇨🇦 CA | Healthcare |
| Storm | States Industries | 🇺🇸 US | Manufacturing |
| Storm | Step By Step | 🇺🇸 US | Education |
| thegentlemen | Aware | 🇺🇸 US | Technology |
| thegentlemen | Center State Engineering | 🇺🇸 US | Civil Engineering |
| thegentlemen | Gerrity Stone | 🇺🇸 US | Manufacturing |
| thegentlemen | ⚠️ Hospital de la Santa Creu i Sant Pau | 🇪🇸 ES | Healthcare (founded 1401) |
| thegentlemen | Mandurah State Emergency Service | 🇦🇺 AU | Government & Defense |
| thegentlemen | Rotamac | 🇨🇦 CA | Manufacturing |
| thegentlemen | 🇬🇧 Westrop Primary & Nursery School | 🇬🇧 GB | Education |
| thegentlemen | WOOSHIN SAFETY SYSTEMS CO LTD | 🇰🇷 KR | Manufacturing |
| thegentlemen | Zelham | — | — |
| Wallstreet | ⚠️ St. Francis Healthcare Systems of Hawaii | 🇺🇸 US | Healthcare |
| Wallstreet | World Cup 2034 | 🇸🇦 SA | Construction (FIFA stadium) |