Understand the threat. Build the defense.
MAG212 explains the attacks and vulnerabilities that matter in plain language, then shows you what to do about them. Every analysis cites its sources and ends with practical steps you can take today, whether you protect a family, a small business or an enterprise network.
Latest analysis
New explainers on the vulnerabilities and incidents security teams are dealing with right now: what happened, who is affected and what to do.
AI Pentest Agents on Both Sides: OpenAI’s Daybreak Launches the Same Week Attackers Used AntiFox
OpenAI announced Daybreak Red Team, which uses coordinated agents to test web applications, and Defense Factory, which drafts patches as GitHub pull requests. A day earlier, attackers used…
Read the analysis
SignDrop: A Public Windows Exploit Uses Microsoft Defender’s Privileges to Reach SYSTEM, and There’s No Patch Yet
Researcher Nightmare Eclipse released SignDrop, a local privilege-escalation exploit that abuses how the Windows Common Log File…
Operation Endgame Takes Down Gootloader, CastleRAT and StealC Infrastructure and Recovers Over 6 Million Credentials
Europol says police and private partners actioned 235 servers and 257 domains behind Gootloader, CastleRAT and StealC, cleaned…
Microsoft 365 Outage Enters Day Two: What Microsoft Has Said, What It Hasn’t and What IT Teams Should Do
Microsoft 365 and Exchange Online were still degraded on 13 November, a day after the outage began. Microsoft has paused…
Citrix NetScaler: 28 Flaws in ADC and Gateway, One Affecting Every Appliance, Plus a 9.4 Console Bypass
Citrix bulletin CTX697305 fixes 28 CVEs in NetScaler ADC and Gateway, including CVE-2026-120868 (9.3), which affects default…
N-able N-central Zero-Day ‘4EverAble2Shell’ Exploited Within Hours on the Newest Build, With No Fix Yet
A public exploit for N-able N-central gave attackers root on servers running the latest Hotfix 2 build, and Huntback counted 21…
From a VPN Portal to an ESXi Wiper: Inside the Check Point Gateway Intrusions (PHP2Shell and CVE-2026-123039)
Check Point says attackers chained the PHP2Shell flaw in the Mobile Access portal with a Gaia privilege escalation,…
MAG212 CYBER Daily · 13 November 2026: Check Point Gateway to ESXi Wiper, N-central Zero-Day, NetScaler and Microsoft 365
From the edge to the hypervisor: Check Point details gateway intrusions that went from PHP2Shell to root, a hidden implant and an ESXi wiper; N-able N-central servers were mining Monero within hours of a new exploit with no fix yet; Citrix fixes 28 NetScaler flaws plus a Console bypass; Microsoft 365 enters a second…
Each issue pairs every story with a defensive field guide: an architecture diagram, the controls that actually help and the steps to verify you are protected.
Free security tools
Practical tools built for everyday security decisions. They run in your browser, and the sensitive ones never send your data anywhere.
Learn cybersecurity step by step
Structured learning paths that take you from the basics to professional skills, using our articles, cheat sheets and tools along the way.
Pick the path that fits you, from staying safe online to professional security skills, and track your progress as you go.
Start a learning path →About MAG212
MAG212 is an independent cybersecurity publication founded and edited by El Mostafa Ouchen, an IT and cybersecurity professional with more than 20 years of experience in enterprise networking, systems administration and digital infrastructure.
Every story is checked against primary sources, which we link so you can verify them yourself. The goal is defense: helping readers understand threats and protect what matters.
About us · Editorial policy · Books by the editor