News Archives • Page 13 of 617 • Daily CyberSecurity

Ubuntu Pro Client Flaw CVE-2026-11386 Allows Arbitrary Code Execution With Root Privileges Ubuntu Pro Client vulnerability CVE-2026-11386 APT source injection arbitrary code execution root privileges

Ubuntu Pro Client vulnerability CVE-2026-11386 APT source injection arbitrary code execution root privileges

Ubuntu Pro Client Flaw CVE-2026-11386 Allows Arbitrary Code Execution With Root Privileges

Do Son July 18, 2026

TL;DR Canonical shipped fixes for CVE-2026-11386 in USN-8555-1 on July 16, 2026. This Ubuntu Pro Client vulnerability...

WordPress pre-auth RCE CVE-2026-63030 REST batch route confusion SQL injection public PoC

WordPress Pre-Auth RCE CVE-2026-63030: Vulnerability Details and PoC Exploit Code Now Public

Do Son July 18, 2026

TL;DR WordPress shipped 7.0.2 on July 17, 2026 to fix a critical flaw chain. The bug is...

APT-C-60 Attacks Target Japan With SpyGlace Malware APT-C-60 attacks on Japan using LNK files and legitimate services to deploy SpyGlace malware

APT-C-60 Attacks Target Japan With SpyGlace Malware

Do Son July 18, 2026

At a glance Actor / group APT-C-60 (threat group) Activity Spear-phishing, LNK loader, SpyGlace backdoor Targets /...

GoldPickaxe Banking Trojan Returns to Steal Faces and Bank Logins GoldPickaxe banking Trojan stealing biometric data and lock screen credentials from an Android phone

GoldPickaxe banking Trojan stealing biometric data and lock screen credentials from an Android phone

GoldPickaxe Banking Trojan Returns to Steal Faces and Bank Logins

Do Son July 17, 2026

At a glance Malware family GoldPickaxe (Android banking Trojan, GoldDigger suite) Threat actor GoldFactory (confirmed by Zimperium;...

RokRAT Malware Hides in Fake PDF Files to Spy on Academics APT37 RokRAT malware delivered via fake PDF in Operation Capsule Vault spear-phishing

APT37 RokRAT malware delivered via fake PDF in Operation Capsule Vault spear-phishing

RokRAT Malware Hides in Fake PDF Files to Spy on Academics

Do Son July 17, 2026

At a glance Malware family RokRAT variant (x64) Threat actor Assessed highly likely APT37 (suspected, not confirmed)...

CVE-2026-54523 (CVSS 9.6): Public PoC Exploit Enables Kyverno Privilege Escalation to Admin in Any Namespace Kyverno vulnerability CVE-2026-54523 privilege escalation to admin in any namespace including kube-system

Kyverno vulnerability CVE-2026-54523 privilege escalation to admin in any namespace including kube-system

CVE-2026-54523 (CVSS 9.6): Public PoC Exploit Enables Kyverno Privilege Escalation to Admin in Any Namespace

Do Son July 17, 2026

TL;DR A critical Kyverno vulnerability, CVE-2026-54523 (CVSS 9.6), has been publicly disclosed with full technical details and...

Citrix Secure Access vulnerability CVE-2026-53565 privilege escalation illustration

Citrix Secure Access Vulnerability Lets Local Users Gain SYSTEM Privileges

Do Son July 17, 2026

TL;DR Cloud Software Group published bulletin CTX696734 for two flaws in Citrix Windows clients. CVE-2026-53565, a Citrix...

Misconfigured Server Exposes Three AiTM Phishing Operators Open directory exposing three AiTM phishing operators using Evilginx MFA bypass tooling

Open directory exposing three AiTM phishing operators using Evilginx MFA bypass tooling

Misconfigured Server Exposes Three AiTM Phishing Operators

Do Son July 17, 2026

At a glance Actor / group codemado, mail-argenta, saroula01 (online aliases) Activity AiTM phishing and OAuth Device...

292 Fake GitHub Repositories Deliver BoryptGrab Infostealer to Windows Users Fake GitHub repositories BoryptGrab infostealer attack chain diagram

292 Fake GitHub Repositories Deliver BoryptGrab Infostealer to Windows Users

Do Son July 17, 2026

At a Glance Malware family BoryptGrab-lineage in-memory infostealer Threat actor Unattributed; financially motivated, likely Russian-speaking Targets Opportunistic...

EU Orders Google to Open Android to Rival AI Assistants and Share Search Data Under the DMA

Do Son July 17, 2026

The European Commission has issued two major legally binding decisions against Google under the Digital Markets Act...

Farewell NotebookLM: Google Rebrands Its AI Research Tool as Gemini Notebook, Adds Native Code Execution Gemini Notebook rebrand of NotebookLM with native code execution

Gemini Notebook rebrand of NotebookLM with native code execution

Farewell NotebookLM: Google Rebrands Its AI Research Tool as Gemini Notebook, Adds Native Code Execution

Do Son July 17, 2026

NotebookLM, Google’s deep-research and AI note-taking tool beloved by professionals and students alike, has officially undergone a...

Chrome Security Update Patches Three Critical Use-After-Free Flaws in CameraCapture, GPU, and Network Chrome security update 150.0.7871.128 critical use-after-free vulnerabilities CameraCapture GPU Network

Chrome security update 150.0.7871.128 critical use-after-free vulnerabilities CameraCapture GPU Network

Chrome Security Update Patches Three Critical Use-After-Free Flaws in CameraCapture, GPU, and Network

Do Son July 17, 2026

TL;DR Google pushed Chrome 150.0.7871.128/.129 to the Stable channel on July 16, 2026. The release fixes seven...

Supply Chain Trojan Targets Software Developers Through Project Files Seedworm Espionage Campaign 2026 ChromElevator Stealer DLL Sideloading SIM Swapping Crypto Theft Lazarus Comebacker, Aerospace Espionage Delete PlugX Malware

Seedworm Espionage Campaign 2026 ChromElevator Stealer DLL Sideloading SIM Swapping Crypto Theft Lazarus Comebacker, Aerospace Espionage Delete PlugX Malware

Supply Chain Trojan Targets Software Developers Through Project Files

Do Son July 17, 2026

At a glance Malware family Multi-stage trojan (Doctor Web: Trojan.DownLoader49, BackDoor.Siggen2.5906, Trojan.BtcMine.3956) Threat actor Unknown; not attributed...

CVE-2026-9770: Information Disclosure Vulnerability Exposes Admin Credentials on TP-Link Kasa Cameras TP-Link Kasa vulnerability CVE-2026-9770 information disclosure flaw on EC70 and EC71 cameras

TP-Link Kasa vulnerability CVE-2026-9770 information disclosure flaw on EC70 and EC71 cameras

CVE-2026-9770: Information Disclosure Vulnerability Exposes Admin Credentials on TP-Link Kasa Cameras

Do Son July 17, 2026

TL;DR TP-Link has patched two information disclosure flaws in Kasa EC70 v4 and EC71 v4 cameras. The...

CISA Adds FortiSandbox and SharePoint Flaws to KEV Catalog After Confirming Active Exploitation CISA KEV catalog adds three actively exploited FortiSandbox and SharePoint vulnerabilities

CISA KEV catalog adds three actively exploited FortiSandbox and SharePoint vulnerabilities

CISA Adds FortiSandbox and SharePoint Flaws to KEV Catalog After Confirming Active Exploitation

Do Son July 17, 2026

TL;DR CISA added three vulnerabilities to its Known Exploited Vulnerabilities catalog on July 16, 2026. Two affect...

7-Zip vulnerability CVE-2026-14266 XZ decompression heap buffer overflow remote code execution

7-Zip Vulnerability CVE-2026-14266 Allows Remote Code Execution Through Crafted XZ Data

Do Son July 16, 2026

TL;DR The Zero Day Initiative published advisory ZDI-26-444 on July 15, 2026. It covers a 7-Zip vulnerability...

Grok Build Goes Open Source for Community Audits but GitHub Issues and PRs Stay Closed Grok Build open source release on GitHub with data sharing disabled

Grok Build open source release on GitHub with data sharing disabled

Grok Build Goes Open Source for Community Audits but GitHub Issues and PRs Stay Closed

Do Son July 16, 2026

Not long ago, the AI coding tool Grok Build triggered fierce community backlash for uploading developers’ complete...

CVE-2026-15378: Blind SSRF Flaw in Red Hat OpenShift AI Red Hat OpenShift AI blind SSRF flaw CVE-2026-15378 in guardrails-detectors component

CVE-2026-15378: Blind SSRF Flaw in Red Hat OpenShift AI

Do Son July 16, 2026

TL;DR Red Hat has flagged a critical flaw in Red Hat OpenShift AI. Tracked as CVE-2026-15378, it...

Microsoft Untangles Its Messy Windows Update Terminology: B Releases, Quality Updates, and More Windows monthly updates terminology explained including B release and quality updates

Windows monthly updates terminology explained including B release and quality updates

Microsoft Untangles Its Messy Windows Update Terminology: B Releases, Quality Updates, and More

Do Son July 16, 2026

Every month, Microsoft rolls out various Windows 10/11 updates in batches. These updates patch security vulnerabilities, fix...

Metabase Fixes CVE-2026-59827 and CVE-2026-59826 Remote Code Execution Flaws Metabase remote code execution via CVE-2026-59827 unsafe H2 deserialization flaw

Metabase remote code execution via CVE-2026-59827 unsafe H2 deserialization flaw

Metabase Fixes CVE-2026-59827 and CVE-2026-59826 Remote Code Execution Flaws

Do Son July 16, 2026

TL;DR Metabase has patched three critical flaws in its H2 database handling. Two carry CVE IDs and...

Apache IoTDB Patches Five Security Flaws, Upgrade to 2.0.10 Apache IoTDB time-series database server affected by five patched security vulnerabilities