Security | Threat Detection | Cyberattacks | DevSecOps | Compliance

Citrix disclosed two critical vulnerabilities in NetScaler ADC and NetScaler Gateway that are already being exploited in the wild. CVE-2026-88771 allows unauthenticated attackers to run commands on an affected appliance, while CVE-2026-88772 can lead to remote code execution or denial of service when DTLS is turned on. Both received a CVSS v4.0 score of 9.5, and CISA added them to its Known Exploited Vulnerabilities catalog.

The U.S. Federal Bureau of Investigation (FBI) has issued an alert warning that widespread fraud campaigns are impersonating law enforcement or government officials to trick users into handing over money or sensitive information.

Accelerating security solutions for small businesses‍ Tagore offers strategic services to small businesses. A partnership that can scale‍ Tagore prioritized finding a managed compliance partner with an established product, dedicated support team, and rapid release rate. Standing out from competitors‍ Tagore's partnership with Vanta enhances its strategic focus and deepens client value, creating differentiation in a competitive market.

Hybrid and remote work have forever changed the way organizations structure their approach to people, technology, and performance. In Gallup’s 2026 Workplace Indicators, 52% of U.S. employees who can work remotely are in a hybrid model, and 26% are fully remote. As distributed work is here to stay, organisations need a trusted way to understand how employees use business applications, access resources, and do their work, without turning the workplace into a surveillance operation.

Today, laptops are rarely connected to the corporate network – more often they’re connected to wifi at home, mobile wifi on the road, and a coffee shop hotspot the IT team never set up. Office perimeter firewalls have nothing to analyze when the device leaves the building, and cloud DNS filtering doesn’t work unless the DNS traffic actually reaches the cloud. That’s why more IT teams are moving web filtering to the device itself.

SalatStealer is a Go-based infostealer family first observed in August 2026, built for x86 Windows environments and focused on credential theft. Its documented capabilities include stealing authentication credentials, hiding executing code, and degrading security software.

For MSP service owners and technicians, managed identity threat detection and response comes down to a practical service question: who investigates a compromised client account, and who can contain it after hours? Consistent handling across client environments depends on clear ownership from prevention through recovery. Start by checking the identity coverage already included in your managed detection and response (MDR) service or extended detection and response (XDR) deployment.