Xcitium Logo
Iran-Linked Hackers Suspected in Minnesota Water Attack
Iran-Linked Hackers Suspected in Minnesota Water Attack

More than 30 water utilities across Minnesota got hit at once. That’s not a metaphor. A...

Certighost Flaw Lets Low-Privilege Users Fake Your DC
Certighost Flaw Lets Low-Privilege Users Fake Your DC

Active Directory has one job, decide who gets to act as a domain controller. A flaw patched this...

MedusaHVNC Hides On A Desktop You’ll Never See
MedusaHVNC Hides On A Desktop You’ll Never See

Picture someone browsing through your own accounts right now. They’re using your saved...

Fastjson Zero-Day Has No Patch, Attackers Already In
Fastjson Zero-Day Has No Patch, Attackers Already In

A critical flaw in Fastjson, the Java library Alibaba built for parsing JSON, is being actively...

Fake Notepad++ Plugin Hijacks a Trusted Editor to Deliver MATCHBOIL.V2 Malware
Fake Notepad++ Plugin Hijacks a Trusted Editor to Deliver MATCHBOIL.V2 Malware

A trusted code editor becomes the vessel for spyware malware. According to CERT-UA, the latest...

Stadler Rail Ransomware Attack: Swiss Train Giant Refused $12.3M
Stadler Rail Ransomware Attack: Swiss Train Giant Refused $12.3M

Refusing The Ransom: What Stadler Decided Stadler Rail, the Swiss train manufacturer, refused a...

FakeGit Exposed: How 7,600 GitHub Repos Are Spreading SmartLoader Malware
FakeGit Exposed: How 7,600 GitHub Repos Are Spreading SmartLoader Malware

A Massive Trust Exploit Hides In Plain Sight On GitHub A newly documented campaign, dubbed FakeGit,...

7-Zip CVE-2026-14266: How a Malicious XZ Archive Triggers Remote Code Execution
7-Zip CVE-2026-14266: How a Malicious XZ Archive Triggers Remote Code Execution

Inside The 7-Zip XZ Flaw Attackers Could Weaponize The recently discovered 7-Zip security issue,...

Coca-Cola’s Fairlife Halts US Production After Ransomware Strike
Coca-Cola’s Fairlife Halts US Production After Ransomware Strike

A Sudden Halt at One of Coca-Cola’s Fastest-Growing Brands Fairlife, had been hit by a...