News Archives • Page 21 of 631 • Daily CyberSecurity

Full Exploit Disclosed: Public PoC and Technical Details Released for Critical ProFTPD SQL Injection ProFTPD SQL Injection CVE-2026-42167 Exploit

ProFTPD SQL Injection CVE-2026-42167 Exploit

Full Exploit Disclosed: Public PoC and Technical Details Released for Critical ProFTPD SQL Injection

Ddos April 29, 2026

Analysts from ZeroPath Research have uncovered a critical SQL injection vulnerability within the mod_sql extension of ProFTPD,...

Checkmarx Breach Supply Chain Attack Ivanti EPMM RCE CVE-2026-1281 Modular DS Vulnerability CVE-2026-23550 D-Link RCE Vulnerability CVE-2026-0625 Christmas 2025 GreyNoise Campaign, Japan-Based Initial Access Broker React2Shell Zero-Day, APT Active Exploitation WordPress vulnerability, authentication bypass FreePBX, zero-day Trend Micro Apex One, Remote Code Execution BitoPro Hack, Crypto Theft UNC5337 - CVE-2022-47945 Safe{Wallet} hack Fortinet vulnerability, CVE-2024-21762, FortiGate attack Balloonfly, Play ransomware Ivanti EPMM CVE-2025-4427 and CVE-2025-4428

Checkmarx Falls Victim to Credential Harvesting Attack

Ddos April 29, 2026

Checkmarx, a global leader in application security testing, has disclosed a significant breach of its internal systems....

CISA Sounds the Alarm: State-Sponsored Hackers Weaponize New Windows and ScreenConnect Flaws State-Sponsored Exploitation CISA KEV Catalog F5 BIG-IP RCE CISA KEV Catalog SolarWinds WHD Exploit CVE-2025-40551 Zimbra XSS Zero-Day CVE-2025-27915 Exploited Windows Security Vulnerabilities

State-Sponsored Exploitation CISA KEV Catalog F5 BIG-IP RCE CISA KEV Catalog SolarWinds WHD Exploit CVE-2025-40551 Zimbra XSS Zero-Day CVE-2025-27915 Exploited Windows Security Vulnerabilities

CISA Sounds the Alarm: State-Sponsored Hackers Weaponize New Windows and ScreenConnect Flaws

Ddos April 29, 2026

The Cybersecurity and Infrastructure Security Agency (CISA) has expanded its Known Exploited Vulnerabilities (KEV) Catalog, adding two...

Vimeo Data Exposed in Anodot Supply Chain Attack Third-Party Risk Vimeo Data Breach

Vimeo Data Exposed in Anodot Supply Chain Attack

Ddos April 29, 2026

Vimeo, the global video hosting giant, announced it has been swept up in a security incident involving...

Exploited in the Wild: PoC Released for cPanel CVE-2026-41940 Authentication Bypass Zero-Day CVE-2026-41940 cPanel Authentication

Exploited in the Wild: PoC Released for cPanel CVE-2026-41940 Authentication Bypass Zero-Day

Ddos April 29, 2026

cPanel, the industry-standard control panel that powers the graphical interfaces of millions of websites, has issued an...

Chrome Security Update Use After Free Chrome Security Update Critical Vulnerabilities Chrome Security Update CVE-2026-3062 Chrome Security Update V8 Engine Vulnerability Chrome Security Update CVE-2026-1862 CVE-2026-0628 Chrome 143 Update Chrome Safe Browsing UAF, CVE-2025-11756 Chrome Memory Flaws, CVE-2025-11460 Google Chrome, vulnerability CVE-2025-10200, CVE-2025-10201 Big Sleep CVE-2025-9478 Chrome Update, Security Vulnerabilities

Chrome Security Alert: Google Patches 30 Vulnerabilities in Massive Desktop Update

Ddos April 29, 2026

Google has released a significant security update for the Chrome stable channel, addressing 30 security fixes. The...

ClickUp Discloses Exposure of Customer Emails and API Token Feature Flag Exposure ClickUp Data Breach

ClickUp Discloses Exposure of Customer Emails and API Token

Ddos April 29, 2026

Productivity platform ClickUp has disclosed a configuration oversight that exposed the personal information of nearly 900 customers....

Git Push to Root: AI-Augmented Research Uncovers Critical GitHub RCE (CVE-2026-3854) GitHub RCE CVE-2026-3854

Git Push to Root: AI-Augmented Research Uncovers Critical GitHub RCE (CVE-2026-3854)

Ddos April 28, 2026

Wiz Research has unveiled a critical security flaw (CVE-2026-3854) within GitHub’s internal git infrastructure. The vulnerability, remarkably...

Langflow Alert: Path Traversal Flaw in Knowledge Bases API Risks Total Data Wipeout Langflow Vulnerability CVE-2026-42048 Langflow RCE CVE-2026-27966 Langflow Vulnerabilities CVE-2026-33017

Langflow Vulnerability CVE-2026-42048 Langflow RCE CVE-2026-27966 Langflow Vulnerabilities CVE-2026-33017

Langflow Alert: Path Traversal Flaw in Knowledge Bases API Risks Total Data Wipeout

Ddos April 28, 2026

Langflow, the popular visual framework for building and deploying AI-powered agents , has patched a critical security...

Apache Thrift Issues Massive Patch for Critical Cross-Language Flaws Apache Thrift Vulnerabilities Cross-Language Service Security Apache Thrift Security RPC Vulnerability

Apache Thrift Vulnerabilities Cross-Language Service Security Apache Thrift Security RPC Vulnerability

Apache Thrift Issues Massive Patch for Critical Cross-Language Flaws

Ddos April 28, 2026

Apache Thrift, the powerhouse framework used by tech giants to bridge communication between different programming languages, has...

Race Against the Clock: The 10-Minute Window Granting Root RCE in Nginx UI Nginx UI RCE CVE-2026-42238 Nginx UI PoC CVE-2026-33032

Race Against the Clock: The 10-Minute Window Granting Root RCE in Nginx UI

Ddos April 28, 2026

A newly disclosed vulnerability, tracked as CVE-2026-42238, in Nginx UI, the popular web-based manager designed to simplify...

Apache Camel Under Fire: Multiple RCE Flaws Expose Critical Integration Infrastructure Apache Camel RCE Header Injection

Apache Camel Under Fire: Multiple RCE Flaws Expose Critical Integration Infrastructure

Ddos April 28, 2026

Apache Camel, the ubiquitous open-source integration framework used to connect disparate data systems, is facing a significant...

Inside BlueNoroff’s “Self-Reinforcing” Deepfake Meeting Trap BlueNoroff Deepfakes Crypto Deepfake Phishing

Inside BlueNoroff’s “Self-Reinforcing” Deepfake Meeting Trap

Ddos April 28, 2026

Cybersecurity researchers at Arctic Wolf have uncovered a sophisticated, globally distributed campaign by the North Korean state-sponsored...

The .gov Illusion: Inside the 16,800-Domain “Operation Trust Trap” Campaign Operation Trust Trap Subdomain Trust Injection

The .gov Illusion: Inside the 16,800-Domain “Operation Trust Trap” Campaign

Ddos April 28, 2026

Cyble Research and Intelligence Labs (CRIL) has uncovered a massive coordinated infrastructure consisting of over 16,800 malicious...

The End of Unlimited AI: GitHub Copilot Shifts to “Pay-as-You-Go” Credits to Power the Agentic Era GitHub Copilot usage-based billing

The End of Unlimited AI: GitHub Copilot Shifts to “Pay-as-You-Go” Credits to Power the Agentic Era

Ddos April 28, 2026

The code-hosting vanguard GitHub has formally issued a proclamation—disseminated via both official channels and direct correspondence to...

Inside the Stealthy Evolution of Vidar Infostealer Vidar Infostealer Stealth Attack Framework

Inside the Stealthy Evolution of Vidar Infostealer

Ddos April 28, 2026

Vidar, once a straightforward credential stealer, has officially completed its transformation into a “multi-stage, stealth-driven attack framework”....

China Blocks Meta’s $2B Acquisition of Manus AI in Landmark Security Move Meta Manus AI acquisition block Meta acquisition Manus AI agent, Manus $100M ARR startup

Meta Manus AI acquisition block Meta acquisition Manus AI agent, Manus $100M ARR startup

China Blocks Meta’s $2B Acquisition of Manus AI in Landmark Security Move

Ddos April 28, 2026

As the Sino-American technological rivalry intensifies within the sphere of artificial intelligence, the Chinese government’s oversight of...

Attackers Are Weaponizing Foxit PDF Reader’s Reputation Foxit PDF Malware UltraVNC Hijack

Attackers Are Weaponizing Foxit PDF Reader’s Reputation

Ddos April 28, 2026

A recent report from G DATA highlights a sophisticated campaign targeting users of Foxit Software, a popular...

Patching the CVSS 10 RCE Hole in Gemini CLI Gemini CLI Security Update Headless RCE Patch

Patching the CVSS 10 RCE Hole in Gemini CLI

Ddos April 28, 2026

A critical update has been issued for Gemini CLI (@google/gemini-cli) and the run-gemini-cli GitHub Action to address...

Injection Flaws (CVE-2026-40967 & 40978) Hit Spring AI Vector Stores Spring AI Vulnerability LLM Memory Poisoning Spring AI Vulnerability Vector Store Injection

Spring AI Vulnerability LLM Memory Poisoning Spring AI Vulnerability Vector Store Injection

Injection Flaws (CVE-2026-40967 & 40978) Hit Spring AI Vector Stores

Ddos April 28, 2026

Two significant vulnerabilities have been disclosed in Spring AI that could allow attackers to manipulate database queries...

Critical Alert 1 Active Exploit Detected Today