July 1, 2026
- UNC1151 (Ghostwriter) is running targeted Gmail phishing lures themed around "suspicious account activity," with public domain-hunting and campaign analysis available. resident.ngo / Censys · Threat Activity
in CitrixBleed Returns: watchTowr Discloses a New NetScaler Pre-Auth Memory Overread