News Archives • Page 12 of 663 • Daily CyberSecurity

OpenSSL Patches 14 Vulnerabilities, Including High-Severity DTLS Memory Leak OpenSSL vulnerabilities fixed in the September 29, 2026 advisory, including the high-severity DTLS flaw CVE-2026-84782 and X.509 use-after-free CVE-2026-84783

OpenSSL vulnerabilities fixed in the September 29, 2026 advisory, including the high-severity DTLS flaw CVE-2026-84782 and X.509 use-after-free CVE-2026-84783

OpenSSL Patches 14 Vulnerabilities, Including High-Severity DTLS Memory Leak

Do Son September 29, 2026

TL;DR OpenSSL fixed 14 OpenSSL vulnerabilities in a security advisory on September 29, 2026. One is rated...

macOS SMB Kernel Flaw CVE-2026-84543: Details and PoC Exploit Released macOS SMB kernel vulnerability CVE-2026-84543 in SMBFS, with technical details and proof-of-concept exploit released by researcher Peter Malone

macOS SMB kernel vulnerability CVE-2026-84543 in SMBFS, with technical details and proof-of-concept exploit released by researcher Peter Malone

macOS SMB Kernel Flaw CVE-2026-84543: Details and PoC Exploit Released

Do Son September 29, 2026

TL;DR Researcher Peter Malone has published full details and proof-of-concept code for CVE-2026-84543, a macOS SMB kernel...

ShinyHunters Renews Oracle PeopleSoft Attacks With One-Character WAF Bypass North Korean hackers behind open-source supply chain attacks on axios, debug, and chalk NPM packages

North Korean hackers behind open-source supply chain attacks on axios, debug, and chalk NPM packages

ShinyHunters Renews Oracle PeopleSoft Attacks With One-Character WAF Bypass

Do Son September 29, 2026

Changing one letter to its URL code let attackers walk past firewall rules meant to block a...

Octopus Server Flaw CVE-2026-101169 Allows Code Execution via Insecure Deserialization Octopus Server vulnerability CVE-2026-101169 insecure JSON deserialization enabling code execution in the Octopus Deploy server process

Octopus Server vulnerability CVE-2026-101169 insecure JSON deserialization enabling code execution in the Octopus Deploy server process

Octopus Server Flaw CVE-2026-101169 Allows Code Execution via Insecure Deserialization

Do Son September 29, 2026

TL;DR Octopus Deploy has fixed a high-severity Octopus Server vulnerability, CVE-2026-101169. An authenticated user who can edit...

Codex Revamps and Reopens the ChatGPT Pro 20x Tier Codex interface displaying the new ChatGPT Pro 20x subscription tier and API pricing adjustments

Codex interface displaying the new ChatGPT Pro 20x subscription tier and API pricing adjustments

Codex Revamps and Reopens the ChatGPT Pro 20x Tier

Do Son September 29, 2026

Tibo, the Codex engineering manager, has announced on social media a notable change. Starting tomorrow, the ChatGPT...

New MacSync macOS Infostealer Targets Crypto Wallets Diagram of the new MacSync macOS infostealer showing how the MacSync macOS infostealer infects Apple devices

Diagram of the new MacSync macOS infostealer showing how the MacSync macOS infostealer infects Apple devices

New MacSync macOS Infostealer Targets Crypto Wallets

Do Son September 29, 2026

At a Glance Attribute Details Malware Family MacSync (originally advertised as Mac.c) Threat Actor Unknown cybercriminals (Malware-as-a-Service...

SectopRAT Malware Variant Hidden in Legitimate Software Python NodeStealer malware upgraded with keylogging, clipboard monitoring, screenshot capture, and dual Telegram bot C2 for Facebook data theft

Python NodeStealer malware upgraded with keylogging, clipboard monitoring, screenshot capture, and dual Telegram bot C2 for Facebook data theft

SectopRAT Malware Variant Hidden in Legitimate Software

Do Son September 29, 2026

At a Glance Attribute Details Malware Family SectopRAT (also known as ArechClient2) Threat Actor Unknown (Unconfirmed attribution)...

Operation Master Turns GlobalProtect Breaches Into Brazilian Invoice Fraud Operation Master invoice fraud pipeline from GlobalProtect VPN breach to fake utility bills

Operation Master invoice fraud pipeline from GlobalProtect VPN breach to fake utility bills

Operation Master Turns GlobalProtect Breaches Into Brazilian Invoice Fraud

Do Son September 29, 2026

Fake energy bills went out to Brazilian customers more than 2.4 million times this summer. Each one...

Android Toll Fraud Malware Found on Google Play Diagram of the Google Play Android toll fraud malware infection chain showing how Android toll fraud malware executes

Diagram of the Google Play Android toll fraud malware infection chain showing how Android toll fraud malware executes

Android Toll Fraud Malware Found on Google Play

Do Son September 29, 2026

At a Glance Attribute Details Malware Family Android Toll Fraud family (including Messenger Pro and AqMu builds)...

Exploited Citrix NetScaler Flaw CVE-2026-88771: Details and PoC Now Public Citrix NetScaler CVE-2026-88771 pre-auth command injection exploited in the wild, with technical details and a proof-of-concept detection tool released by watchTowr

Citrix NetScaler CVE-2026-88771 pre-auth command injection exploited in the wild, with technical details and a proof-of-concept detection tool released by watchTowr

Exploited Citrix NetScaler Flaw CVE-2026-88771: Details and PoC Now Public

Do Son September 29, 2026

TL;DR watchTowr has published a technical analysis and a public proof-of-concept for CVE-2026-88771, a Citrix NetScaler flaw...

Apache Karaf Vulnerabilities Let Low-Privilege Users Reach Admin and Code Execution Apache Karaf vulnerabilities CVE-2026-92142, CVE-2026-91012 and CVE-2026-91048 allowing privilege escalation and remote code execution, fixed in Karaf 4.4.12

Apache Karaf vulnerabilities CVE-2026-92142, CVE-2026-91012 and CVE-2026-91048 allowing privilege escalation and remote code execution, fixed in Karaf 4.4.12

Apache Karaf Vulnerabilities Let Low-Privilege Users Reach Admin and Code Execution

Do Son September 29, 2026

TL;DR The Apache Karaf project has fixed four Apache Karaf vulnerabilities in version 4.4.12. Two are rated...

wolfSSL 5.9.4 Fixes 10 Vulnerabilities, Including TLS Authentication Bypass Flaws wolfSSL vulnerabilities fixed in release 5.9.4, including TLS authentication bypass flaws CVE-2026-93302, CVE-2026-89102 and CVE-2026-89136

wolfSSL vulnerabilities fixed in release 5.9.4, including TLS authentication bypass flaws CVE-2026-93302, CVE-2026-89102 and CVE-2026-89136

wolfSSL 5.9.4 Fixes 10 Vulnerabilities, Including TLS Authentication Bypass Flaws

Do Son September 29, 2026

TL;DR wolfSSL shipped version 5.9.4 on September 25, 2026, fixing 10 wolfSSL vulnerabilities. Three are rated High,...

OpenAI Delays GPT-6.1 Astra Release Over Safety Concerns OpenAI GPT-6.1 Astra concept showing AI authorization boundaries and model safety concerns

OpenAI GPT-6.1 Astra concept showing AI authorization boundaries and model safety concerns

OpenAI Delays GPT-6.1 Astra Release Over Safety Concerns

Do Son September 29, 2026

OpenAI initially planned to release the upgraded GPT-6.1 Astra model soon. However, internal security evaluations revealed a...

Google Outlines ChromeOS Sunset and Transition Plan ChromeOS logo fading into the new Android-based Googlebook OS interface

Google Outlines ChromeOS Sunset and Transition Plan

Do Son September 29, 2026

As the highly anticipated “Googlebooks” laptop product line prepares for its official market debut on October 4th,...

Critical LXD Vulnerabilities Let Container Users Write Files as Root on the Host Critical LXD vulnerabilities CVE-2026-87799, CVE-2026-85185 and CVE-2026-85526 enabling root file writes on the host through migration and btrfs backup restore

Critical LXD vulnerabilities CVE-2026-87799, CVE-2026-85185 and CVE-2026-85526 enabling root file writes on the host through migration and btrfs backup restore

Critical LXD Vulnerabilities Let Container Users Write Files as Root on the Host

Do Son September 29, 2026

TL;DR Canonical has patched three critical LXD vulnerabilities rated CVSS 9.6 to 9.9. Each one lets a...

Authlib Signature Bypass Vulnerability Exposes Apps Diagram showing the Authlib signature bypass vulnerability attack path and CVE-2026-96760 forge process

Diagram showing the Authlib signature bypass vulnerability attack path and CVE-2026-96760 forge process

Authlib Signature Bypass Vulnerability Exposes Apps

Do Son September 29, 2026

TL;DR CERT/CC released an advisory warning of an Authlib signature bypass vulnerability tracked as CVE-2026-96760. This flaw...

Critical WatchGuard AP Vulnerabilities Patched in Version 3.4.8 Diagram showing the WatchGuard AP vulnerabilities and OS command injection attack chain

Diagram showing the WatchGuard AP vulnerabilities and OS command injection attack chain

Critical WatchGuard AP Vulnerabilities Patched in Version 3.4.8

Do Son September 29, 2026

TL;DR On September 29, 2026, WatchGuard disclosed three severe WatchGuard AP vulnerabilities. These flaws allow attackers to...

Portal for ArcGIS Vulnerabilities Fixed in September Update Diagram illustrating Portal for ArcGIS vulnerabilities and CVE-2026-69227 attack paths

Diagram illustrating Portal for ArcGIS vulnerabilities and CVE-2026-69227 attack paths

Portal for ArcGIS Vulnerabilities Fixed in September Update

Do Son September 29, 2026

TL;DR On September 24, 2026, Esri released Security Update 4 to patch three Portal for ArcGIS vulnerabilities....

Exploited Apple Zero-Day Vulnerability Patched Diagram showing the exploited Apple zero-day vulnerability and CVE-2026-86950 attack path

Exploited Apple Zero-Day Vulnerability Patched

Do Son September 29, 2026

TL;DR On September 29, 2026, Apple issued emergency updates to remediate an actively exploited Apple zero-day vulnerability....

PostgreSQL RCE Vulnerability Details and PoC Disclosed Diagram explaining the critical PostgreSQL RCE vulnerability and CVE-2026-15742 attack path

Diagram explaining the critical PostgreSQL RCE vulnerability and CVE-2026-15742 attack path

PostgreSQL RCE Vulnerability Details and PoC Disclosed

Do Son September 29, 2026

TL;DR PostgreSQL developers patched a critical integer wraparound flaw in the fuzzystrmatch module. This PostgreSQL RCE vulnerability...

Linux Container Escape Flaw Details and PoC Disclosed Diagram of a critical Linux container escape flaw and CVE-2026-80521 attack path

Linux Container Escape Flaw Details and PoC Disclosed

Do Son September 28, 2026

TL;DR Security researchers disclosed a critical Linux container escape flaw affecting the core operating system kernel. The...

OpenAI to Unveil Project ‘O’ at DevDay Abstract visualization of a persistent AI agent operating in the background

OpenAI to Unveil Project ‘O’ at DevDay

Do Son September 28, 2026

As the generative artificial intelligence landscape pivots decisively from reactive conversational chatbots toward proactive, autonomous “Agentic AI,”...

Critical Alert 4 Active Exploits Detected Today