Here are some of the top Cybersecurity news articles for the past week:
📱 Apple released urgent security updates across iOS, iPadOS, and macOS to fix a zero-day vulnerability in its CoreGraphics framework. The flaw was being actively exploited in targeted, “extremely sophisticated” attacks against iOS devices.
🛡️ Citrix rushed emergency patches for two critical zero-day vulnerabilities (CVE-2026-88771 and CVE-2026-88772) in NetScaler ADC and Gateway appliances after active exploitation was detected in the wild. CVE-2026-88772 is a memory overflow vulnerability that enables remote code execution on affected appliances.
🗄️ Security researchers discovered over 16,000 misconfigured Supabase database instances exposing readable data tables publicly on the internet. The exposed data includes personally identifiable information (PII), passwords, authentication tokens, government records, and private communications.
🚗 Major Japanese car-sharing platform Times Car confirmed a cyberattack compromising roughly 6.6 million user accounts. Exposed sensitive records include customer profile details, images of driver’s licenses, identity verification documents, phone numbers, and account credentials.
📁 Enterprise file-sharing provider Kiteworks lifted a precautionary advisory asking customers to shut down servers after deploying a patch for a critical software flaw. The vulnerability threatened severe disruptions and potential remote exploitation across enterprise file-transfer infrastructure.
