News Archives • Page 12 of 617 • Daily CyberSecurity

CVE-2026-58443: Gitea Flaw (CVSS 9.6) Details and PoC Exploit Code Publicly Disclosed Gitea vulnerability CVE-2026-58443 public-only token writing to private repository

Gitea vulnerability CVE-2026-58443 public-only token writing to private repository

CVE-2026-58443: Gitea Flaw (CVSS 9.6) Details and PoC Exploit Code Publicly Disclosed

Do Son July 20, 2026

TL;DR A critical Gitea vulnerability, CVE-2026-58443 (CVSS 9.6), lets a public-only token push commits into a private...

OAuth Client ID Spoofing Lets Attackers Enumerate Entra ID Accounts Without a Trace OAuth client ID spoofing enabling stealthy account enumeration against Microsoft Entra ID sign-in logs

OAuth client ID spoofing enabling stealthy account enumeration against Microsoft Entra ID sign-in logs

OAuth Client ID Spoofing Lets Attackers Enumerate Entra ID Accounts Without a Trace

Do Son July 20, 2026

At a Glance Field Detail Actors UNK_pyreq2323 and UNK_OutFlareAZ (two independent, unattributed clusters) Activity Account enumeration and...

Critical Apache Doris Flaw (CVE-2026-58319) Exposes Admin APIs to Unauthenticated Attackers Apache Doris vulnerability CVE-2026-58319 improper authentication in Frontend HTTP API

Apache Doris vulnerability CVE-2026-58319 improper authentication in Frontend HTTP API

Critical Apache Doris Flaw (CVE-2026-58319) Exposes Admin APIs to Unauthenticated Attackers

Do Son July 20, 2026

TL;DR The Apache Doris project has patched a critical Apache Doris vulnerability, tracked as CVE-2026-58319. Some Frontend...

CVE-2026-56451: CVSS 10 Siemens Opcenter X Flaw Grants Full Unauthorized Access Siemens Opcenter X authentication bypass vulnerability CVE-2026-56451 JWT forgery

Siemens Opcenter X authentication bypass vulnerability CVE-2026-56451 JWT forgery

CVE-2026-56451: CVSS 10 Siemens Opcenter X Flaw Grants Full Unauthorized Access

Do Son July 20, 2026

TL;DR Siemens has patched a maximum-severity Opcenter X authentication bypass, tracked as CVE-2026-56451. The flaw scores 10.0...

HOLLOWGRAPH Malware Hides Command-and-Control in Microsoft 365 Calendars HOLLOWGRAPH malware using Microsoft Graph API abuse to hide command-and-control inside a Microsoft 365 calendar event dated 2050

HOLLOWGRAPH malware using Microsoft Graph API abuse to hide command-and-control inside a Microsoft 365 calendar event dated 2050

HOLLOWGRAPH Malware Hides Command-and-Control in Microsoft 365 Calendars

Do Son July 20, 2026

At a glance Malware family HOLLOWGRAPH, linked with high confidence to the Cavern backdoor framework Threat actor...

CrashStealer: New macOS Infostealer Poses as Apple Crash Reporter to Steal Wallets and Passwords CrashStealer macOS infostealer posing as Apple crash reporter to steal browser and crypto wallet data

CrashStealer macOS infostealer posing as Apple crash reporter to steal browser and crypto wallet data

CrashStealer: New macOS Infostealer Poses as Apple Crash Reporter to Steal Wallets and Passwords

Do Son July 20, 2026

At a Glance Field Detail Malware family CrashStealer (native C++ macOS infostealer) Threat actor Unattributed; part of...

Operation ShadowRecruit Uses Fake Government Job Ads to Plant SheetAgent RAT on Indian Systems Salt Typhoon Teleco Hack, Cisco Academy Link CVE-2025-0282 PoC exploit

Salt Typhoon Teleco Hack, Cisco Academy Link CVE-2025-0282 PoC exploit

Operation ShadowRecruit Uses Fake Government Job Ads to Plant SheetAgent RAT on Indian Systems

Do Son July 20, 2026

Operation ShadowRecruit targets Indian job seekers with SheetAgent RAT, abusing ControlR and Google Sheets for C2. Seqrite...

LabubaRAT Poses as NVIDIA Software to Hand Operators Full Control of Windows Hosts Exploited VMware

LabubaRAT Poses as NVIDIA Software to Hand Operators Full Control of Windows Hosts

Do Son July 20, 2026

At a Glance Malware family LabubaRAT (previously undocumented) Threat actor Unattributed; no group named Targets Windows hosts;...

Codex Cuts Its Context Window to 272K and Forbids rm -rf $HOME After Home-Directory Deletions Codex context window change: OpenAI lowers the limit to 272K and forbids rm -rf $HOME in the system prompt after deletions

Codex context window change: OpenAI lowers the limit to 272K and forbids rm -rf $HOME in the system prompt after deletions

Codex Cuts Its Context Window to 272K and Forbids rm -rf $HOME After Home-Directory Deletions

Do Son July 20, 2026

Because Codex is open source, we can watch the development team’s daily commits and spot notable changes...

Microsoft Ships KB5121767 Out-of-Band Update to Fix a Dell USB-C Compatibility Fault KB5121767 out-of-band update: Microsoft fix for the Dell USB-C driver compatibility fault on affected Precision and XPS laptops

KB5121767 out-of-band update: Microsoft fix for the Dell USB-C driver compatibility fault on affected Precision and XPS laptops

Microsoft Ships KB5121767 Out-of-Band Update to Fix a Dell USB-C Compatibility Fault

Do Son July 20, 2026

Last week, Microsoft released its routine July 2026 security update. However, the update was found to clash...

The Mac Pro That Never Shipped: Apple Secretly Built a New Intel Model and Killed Its “Extreme” Chips Mac Pro discontinuation: Apple's cheese-grater tower retired as the Mac Studio and Apple Silicon take over professional workflows

Mac Pro discontinuation: Apple's cheese-grater tower retired as the Mac Studio and Apple Silicon take over professional workflows

The Mac Pro That Never Shipped: Apple Secretly Built a New Intel Model and Killed Its “Extreme” Chips

Do Son July 20, 2026

In March of this year, Apple formally announced the discontinuation of the Mac Pro. The company removed...

Mid-July 2026: Weekly Threat Intelligence Report actively exploited vulnerabilities

Mid-July 2026: Weekly Threat Intelligence Report

Do Son July 20, 2026

Welcome to the CVE WATCHTOWER briefing. Our latest weekly threat intelligence report reveals an alarming surge in...

CVE-2026-52824: Default Docker Secret in Kimai Enables Account Takeover of Super Admin Accounts Kimai vulnerability CVE-2026-52824 account takeover via default Docker APP_SECRET

Kimai vulnerability CVE-2026-52824 account takeover via default Docker APP_SECRET

CVE-2026-52824: Default Docker Secret in Kimai Enables Account Takeover of Super Admin Accounts

Do Son July 20, 2026

TL;DR A critical Kimai vulnerability, CVE-2026-52824 (CVSS 9.1), affects the open-source time-tracking app’s official Docker image. The...

OpenSSL HollowByte Vulnerability Causes Memory Exhaustion Diagram explaining the OpenSSL HollowByte vulnerability and OpenSSL DoS attack mechanism

Diagram explaining the OpenSSL HollowByte vulnerability and OpenSSL DoS attack mechanism

OpenSSL HollowByte Vulnerability Causes Memory Exhaustion

Do Son July 20, 2026

TL;DR The Okta Red Team recently found a severe crash flaw in a core secure library. A...

SonicWall SMA Zero-Day Chain Roots VPN Appliances and Plants Hidden Malware SonicWall SMA zero-day exploit chain compromising SMA VPN appliances to deploy malware

SonicWall SMA zero-day exploit chain compromising SMA VPN appliances to deploy malware

SonicWall SMA Zero-Day Chain Roots VPN Appliances and Plants Hidden Malware

Do Son July 19, 2026

At a glance Actor / group UTA0533 (Volexity tracking cluster); no nation or identity confirmed Activity type...

US Justice Department Approves TikTok for Government Devices DOJ lifts TikTok ban for federal workers and allows government downloads

US Justice Department Approves TikTok for Government Devices

Do Son July 18, 2026

The United States Department of Justice recently announced a major policy shift. Federal workers can now legally...

Hugging Face Discloses Production Breach Driven by an Autonomous AI Agent Hugging Face breach driven by an autonomous AI agent attack exposing internal datasets and credentials

Hugging Face Discloses Production Breach Driven by an Autonomous AI Agent

Do Son July 18, 2026

At a glance Organization Hugging Face Data exposed A limited set of internal datasets and several service...

Meta and Anthropic Negotiate Computing Power Lease Meta AI computing power lease and Anthropic data center negotiations

Meta and Anthropic Negotiate Computing Power Lease

Do Son July 18, 2026

As the artificial intelligence arms race intensifies, computing power has emerged as the most coveted strategic resource....

Claude Fable 5 Subscription Changes Announced Claude Fable 5 subscription updates and AI computational limitations

Claude Fable 5 Subscription Changes Announced

Do Son July 18, 2026

Anthropic recently announced a major shift for its advanced AI models. Starting July 20, 2026, the company...

Active Exploitation and Public PoC Disclosed for CVE-2026-6875 ServiceNow Sandbox Escape Remote Code Execution Diagram of CVE-2026-6875 ServiceNow sandbox escape RCE and pre-auth code execution

Diagram of CVE-2026-6875 ServiceNow sandbox escape RCE and pre-auth code execution

Active Exploitation and Public PoC Disclosed for CVE-2026-6875 ServiceNow Sandbox Escape Remote Code Execution

Do Son July 18, 2026

TL;DR A critical flaw in the ServiceNow AI platform allows unauthenticated users to run arbitrary commands. DefusedCyber...

Cloudflare Blocks Critical WordPress wp2shell Vulnerability Cloudflare firewall blocking the critical WordPress wp2shell vulnerability and RCE attacks