News Archives • Page 21 of 631 • Daily CyberSecurity

Mitel Patches MiCollab Command Injection Flaw (CVSS 9.8) That Lets Attackers Gain Control of the System MiCollab command injection and OpenScape UC vulnerability advisories from Mitel showing CVSS 9.8 and CVSS 8.0 severity ratings

MiCollab command injection and OpenScape UC vulnerability advisories from Mitel showing CVSS 9.8 and CVSS 8.0 severity ratings

Mitel Patches MiCollab Command Injection Flaw (CVSS 9.8) That Lets Attackers Gain Control of the System

Do Son July 28, 2026

TL;DR Mitel published two advisories. The first covers a MiCollab command injection bug rated critical at CVSS...

Panduit IntraVUE vulnerability CVE-2026-42933 CVSS 10 rating enabling OT segmentation bypass in industrial networks

Panduit IntraVUE Vulnerability CVE-2026-42933 (CVSS 10) Bypasses OT Segmentation

Do Son July 28, 2026

TL;DR CISA published ICS advisory ICSA-26-204-04 on July 23, 2026. It details five security bugs in Panduit...

TeamCity RCE Flaw CVE-2026-63077 (CVSS 9.8) Enables Unauthenticated Command Execution TeamCity RCE vulnerability CVE-2026-63077 in TeamCity On-Premises rated CVSS 9.8

TeamCity RCE vulnerability CVE-2026-63077 in TeamCity On-Premises rated CVSS 9.8

TeamCity RCE Flaw CVE-2026-63077 (CVSS 9.8) Enables Unauthenticated Command Execution

Do Son July 28, 2026

TL;DR JetBrains patched a critical TeamCity RCE tracked as CVE-2026-63077. The flaw scores a CVSS of 9.8...

CVE-2026-42533: NGINX Heap Overflow Enables RCE and ASLR Bypass, Public PoC Released CVE-2026-42533 NGINX heap overflow proof-of-concept enabling an ASLR bypass and RCE

CVE-2026-42533 NGINX heap overflow proof-of-concept enabling an ASLR bypass and RCE

CVE-2026-42533: NGINX Heap Overflow Enables RCE and ASLR Bypass, Public PoC Released

Do Son July 28, 2026

TL;DR: A public proof-of-concept now targets CVE-2026-42533, an NGINX heap overflow rated CVSS 9.2. The bug lets...

Fraggap Linux kernel vulnerability CVE-2026-53362 enabling local privilege escalation through a UDPv6 out-of-bounds write

Fraggap Linux Kernel Vulnerability: Full Details and PoC Exploit Code Now Public

Do Son July 28, 2026

A researcher has published full technical details and working proof-of-concept code for a Linux kernel vulnerability named...

OVSwrap local root vulnerability CVE-2026-64531 in the Linux kernel Open vSwitch datapath

OVSwrap Local Root Vulnerability (CVE-2026-64531): Exploit Details and PoC Publicly Disclosed

Do Son July 28, 2026

TL;DR The OVSwrap local root flaw lets an unprivileged user gain root on many Linux systems. It...

Microsoft Unveils Project Perception, an Agentic Security System Microsoft Project Perception agentic security system with red, blue, and green AI team agents, a security context layer, and actuators for the AI era

Microsoft Project Perception agentic security system with red, blue, and green AI team agents, a security context layer, and actuators for the AI era

Microsoft Unveils Project Perception, an Agentic Security System

Do Son July 28, 2026

Attackers already strike at machine speed with AI. Defenders, meanwhile, still drown in thousands of indigestible security...

Insikt Group Finds Four New Golden Chickens Malware Families Golden Chickens malware chain showing ChonkyChicken malware and TinyEgg delivered through ClickFix fake verification pages

Golden Chickens malware chain showing ChonkyChicken malware and TinyEgg delivered through ClickFix fake verification pages

Insikt Group Finds Four New Golden Chickens Malware Families

Do Son July 28, 2026

At a glance Actor or group TAG-195, also tracked as Golden Chickens and Venom Spider; deployment observed...

JadeProx Used TriBack Loader Against a Vietnamese Hospital, Malaysia’s Foreign Ministry, and Hong Kong Schools ACR Stealer infection chain starting with a ClickFix lure to steal browser credentials

ACR Stealer infection chain starting with a ClickFix lure to steal browser credentials

JadeProx Used TriBack Loader Against a Vietnamese Hospital, Malaysia’s Foreign Ministry, and Hong Kong Schools

Do Son July 28, 2026

At a Glance Actor or group JadeProx, a China-nexus cluster named by Group-IB; no known group named...

Fake Job Interviews Deliver PylangGhost and GolangGhost RATs to Crypto Workers ClickFake Interview campaign delivering PylangGhost RAT and GolangGhost RAT to crypto professionals

ClickFake Interview campaign delivering PylangGhost RAT and GolangGhost RAT to crypto professionals

Fake Job Interviews Deliver PylangGhost and GolangGhost RATs to Crypto Workers

Do Son July 28, 2026

At a glance Threat actor Famous Chollima, also called Wagemole; North Korea-aligned Activity type Social engineering via...

Kimi K3 Opens Weights as Agents Push Past Sandbox Boundaries

Do Son July 28, 2026

Moonshot AI’s much-watched Kimi K3 model has opened its weights. K3 is the world’s first 3T-class open-weight...

Windows 11 Experimental Builds Face a Time Bomb on August 11 Windows 11 Experimental Future Platforms time bomb expiring on August 11 with forced full-screen expiration popups, fixed by updating to Build 29634.1000

Windows 11 Experimental Builds Face a Time Bomb on August 11

Do Son July 28, 2026

Windows 10 and 11 preview builds carry a built-in dedicated digital certificate that controls their expiry date....

Google Quietly Ships Native Chrome for Linux Arm64 With DRM Google native Chrome for Linux Arm64 build running on Raspberry Pi OS desktop with account sync and Widevine DRM support for streaming video

Google native Chrome for Linux Arm64 build running on Raspberry Pi OS desktop with account sync and Widevine DRM support for streaming video

Google Quietly Ships Native Chrome for Linux Arm64 With DRM

Do Son July 28, 2026

Do you run the desktop edition of Raspberry Pi OS? If so, Google Chrome’s native Chrome for...

NVIDIA and Microsoft Launch Open Secure AI Alliance After Hack NVIDIA and Microsoft launch the Open Secure AI Alliance with 27 founding members to strengthen cybersecurity defense after the Hugging Face AI attack

NVIDIA and Microsoft launch the Open Secure AI Alliance with 27 founding members to strengthen cybersecurity defense after the Hugging Face AI attack

NVIDIA and Microsoft Launch Open Secure AI Alliance After Hack

Do Son July 28, 2026

NVIDIA founder Jensen Huang recently announced a new coalition. Together with Microsoft and others, the company has...

libssh2 Flaws Let Malicious SSH Servers Corrupt Client Memory libssh2 vulnerabilities let a malicious SSH server corrupt heap memory in SSH and SFTP clients

libssh2 vulnerabilities let a malicious SSH server corrupt heap memory in SSH and SFTP clients

libssh2 Flaws Let Malicious SSH Servers Corrupt Client Memory

Do Son July 28, 2026

TL;DR Four new libssh2 vulnerabilities put SSH and SFTP clients at risk. Each one lets a malicious...

Kemp LoadMaster vulnerabilities warning covering OS command injection and privilege escalation flaws

Progress Patches Five Kemp LoadMaster Vulnerabilities

Do Son July 28, 2026

TL;DR Progress fixed five Kemp LoadMaster vulnerabilities in a July 2026 bulletin. Three allow OS command injection,...

Apache ActiveMQ Patches Authorization Bypass and DoS Flaws Apache ActiveMQ vulnerability alert covering authorization bypass and AMQP denial-of-service flaws

Apache ActiveMQ vulnerability alert covering authorization bypass and AMQP denial-of-service flaws

Apache ActiveMQ Patches Authorization Bypass and DoS Flaws

Do Son July 28, 2026

TL;DR The Apache Software Foundation fixed two Apache ActiveMQ vulnerabilities. One lets a low-privilege user bypass write...

CISA KEV Additions: Arista VeloCloud and FortiOS Flaws Now Exploited CISA KEV additions listing two known exploited vulnerabilities in Arista VeloCloud and FortiOS

CISA KEV additions listing two known exploited vulnerabilities in Arista VeloCloud and FortiOS

CISA KEV Additions: Arista VeloCloud and FortiOS Flaws Now Exploited

Do Son July 27, 2026

TL;DR: On July 27, 2026, CISA made two KEV additions. Both are known exploited vulnerabilities. One is...

CVE-2026-16812: VeloCloud Orchestrator OS Command Injection (CVSS 10) Exploited in the Wild CVE-2026-16812 VeloCloud command injection exploited in the wild affecting VeloCloud Orchestrator

CVE-2026-16812 VeloCloud command injection exploited in the wild affecting VeloCloud Orchestrator

CVE-2026-16812: VeloCloud Orchestrator OS Command Injection (CVSS 10) Exploited in the Wild

Do Son July 27, 2026

TL;DR: Arista confirmed that CVE-2026-16812, a VeloCloud command injection flaw, is under active attack. The bug scores...

VMRay Exposes Operation STANDOFF, a Russian-Speaking Intrusion Campaign Hidden Behind GitHub Operation STANDOFF infrastructure map showing a Russian-speaking threat group hiding C2 servers behind GitHub redirects

Operation STANDOFF infrastructure map showing a Russian-speaking threat group hiding C2 servers behind GitHub redirects

VMRay Exposes Operation STANDOFF, a Russian-Speaking Intrusion Campaign Hidden Behind GitHub

Do Son July 27, 2026

At a glance Actor or group Unnamed Russian-speaking crew tracked as Operation STANDOFF; self-branded “GG Influence” and...

Kimsuky Hacked South Korean Groupware Vendors With New Gomir Variants Kimsuky Gomir variant attack chain showing the DriveTroy backdoor using Google Drive as a covert C2 channel

Kimsuky Gomir variant attack chain showing the DriveTroy backdoor using Google Drive as a covert C2 channel

Kimsuky Hacked South Korean Groupware Vendors With New Gomir Variants

Do Son July 27, 2026

At a glance Actor or group Kimsuky, a North Korea-linked group also tracked as Springtail, Thallium and...

Plane authorization bypass CVE-2026-15342 exposing multi-tenant workspace assets

Unpatched Plane Authorization Bypass CVE-2026-15342 Exposes Other Workspaces

Do Son July 27, 2026

TL;DR CERT/CC published an advisory on July 21, 2026 for a Plane authorization bypass. Tracked as CVE-2026-15342,...