Trained to betray: How post-training supply chain attacks hijack coding agents

Apple security advisory (AV26-1149)

Shipping giant Maersk says recent cyber incident affected legacy system

The incident is the latest in a string of attacks on ports and other shipping organizations worldwide, with Brazil’s largest port hit with ransomware last week.

2026-020: Critical Vulnerabilities in Citrix NetScaler ADC and NetScaler Gateway

On 12 November 2026, the Cloud Software Group published security bulletins for its Citrix products addressing 28 memory flaws in Citrix NetScaler ADC and Citrix NetScaler Gateway. One of these vulnerabilities, CVE-2026-120868, affects every deployment, including those using the default configuration. The vendor bulletin describes the impact as unpredictable behaviour and denial of service. Citrix reports no exploitat…

VU#580079: Arbitrary file read/write vulnerability in ImageMagick-based applications with default configuration

Overview Multiple arbitrary file read and write vulnerabilities have been identified in applications that use ImageMagick with insufficiently restrictive security policies. Collectively referred to as ImageTragick2, these issues arise when ImageMagick processes attacker-controlled SVG or PostScript content using dangerous coders or delegates permitted by its default or application-supplied configuration. An attacker…