News Archives • Page 23 of 631 • Daily CyberSecurity

Anthropic Claude Opus 5 Rivals Fable 5 at Half the Price Anthropic Claude Opus 5 model overview showing knowledge work, coding gains, relaxed safety classifiers, and the new effort setting

Anthropic Claude Opus 5 model overview showing knowledge work, coding gains, relaxed safety classifiers, and the new effort setting

Anthropic Claude Opus 5 Rivals Fable 5 at Half the Price

Do Son July 25, 2026

Many observers assumed Anthropic had quietly sidelined the Opus line. That assumption now looks premature. The once-flagship...

FastJson RCE CVE-2026-16723 Exploited in the Wild as Details and PoC Exploit Code Go Public FastJson RCE vulnerability CVE-2026-16723 remote code execution attacks by industry pie chart across financial services and healthcare

FastJson RCE vulnerability CVE-2026-16723 remote code execution attacks by industry pie chart across financial services and healthcare

FastJson RCE CVE-2026-16723 Exploited in the Wild as Details and PoC Exploit Code Go Public

Do Son July 25, 2026

TL;DR A critical FastJson RCE vulnerability, CVE-2026-16723, carries a CVSS score of 9.0. Full technical details and...

NadMesh Botnet Targets AI Services and Cloud Environments NadMesh botnet targeting cloud systems and presenting an AI infrastructure threat.

NadMesh botnet targeting cloud systems and presenting an AI infrastructure threat.

NadMesh Botnet Targets AI Services and Cloud Environments

Do Son July 24, 2026

The NadMesh botnet recently emerged as a significant danger to modern cloud networks. Researchers observed this Go-based...

CVE-2026-50454: Public PoC Shows Windows AppResolver Elevation of Privilege to SYSTEM Windows AppResolver LPE CVE-2026-50454 UAC bypass chain to a SYSTEM shell and Elevation of Privilege

Windows AppResolver LPE CVE-2026-50454 UAC bypass chain to a SYSTEM shell and Elevation of Privilege

CVE-2026-50454: Public PoC Shows Windows AppResolver Elevation of Privilege to SYSTEM

Do Son July 24, 2026

TL;DR A researcher has published a write-up and proof-of-concept code for the Windows AppResolver LPE. The chain...

Konnectivity Vulnerability Lets Unauthenticated Attackers Intercept Control-Plane Traffic Konnectivity vulnerability CVE-2026-16242 letting an unauthenticated agent join the routing pool and intercept control-plane traffic

Konnectivity vulnerability CVE-2026-16242 letting an unauthenticated agent join the routing pool and intercept control-plane traffic

Konnectivity Vulnerability Lets Unauthenticated Attackers Intercept Control-Plane Traffic

Do Son July 24, 2026

A critical Konnectivity vulnerability lets a remote attacker slip into a cluster without any credentials. Tracked as...

Tycon Power Monitor Authentication Bypass CVE-2026-61884 Rated CVSS 9.8 Tycon authentication bypass CVE-2026-61884 in TPDIN-Monitor-WEB2 rated CVSS 9.8

Tycon authentication bypass CVE-2026-61884 in TPDIN-Monitor-WEB2 rated CVSS 9.8

Tycon Power Monitor Authentication Bypass CVE-2026-61884 Rated CVSS 9.8

Do Son July 24, 2026

TL;DR CISA published advisory ICSA-26-202-01 on July 21, 2026. It covers a critical Tycon authentication bypass in...

GoSerpent Backdoor Drives a Patient Cyber Espionage Campaign Against Southeast Asian Governments GoSerpent backdoor cyber espionage attack chain against Southeast Asian government networks

GoSerpent backdoor cyber espionage attack chain against Southeast Asian government networks

GoSerpent Backdoor Drives a Patient Cyber Espionage Campaign Against Southeast Asian Governments

Do Son July 24, 2026

At a glance Malware family GoSerpent backdoor, plus McMx, Stowaway, ThumbcacheService, and TmcLoader/TmcPayload Threat actor Unconfirmed. Kaspersky...

Google Gemini Spark Expands Access to Pro and Ultra Subscribers Google Gemini Spark agentic AI assistant running in the Google Workspace sidebar, drafting Gmail replies and Google Docs reports

Google Gemini Spark agentic AI assistant running in the Google Workspace sidebar, drafting Gmail replies and Google Docs reports

Google Gemini Spark Expands Access to Pro and Ultra Subscribers

Do Son July 24, 2026

Google has widened access to Gemini Spark, the agentic AI assistant it unveiled at Google I/O 2026....

Google DMA Fine of €890 Million Lands in Brussels

Do Son July 24, 2026

The European Commission has issued a statement imposing a penalty of €890 million on Google, roughly one...

TAG-150 Attack Chain Deploys DenoRAT Malware Head Mare TrueConf attack PhantomCore backdoor diagram

TAG-150 Attack Chain Deploys DenoRAT Malware

Do Son July 24, 2026

A recent cyberattack targeted a financial institution using a ClickFix social engineering lure. This incident revealed an...

North Korean Contagious Interview Campaign Hides Malware in Fake Coding Tests AccountDumpling Phishing Google AppSheet Abuse AI-Generated Malware PureRAT Campaign RondoDoX Botnet, Next.js React2Shell EchoGather, Paper Werewolf Salt Typhoon, Telecom Espionage BreachForums, Conor Fitzpatrick Ransomware Negotiation, DOJ Investigation MirrorFace group - Earth Kasha Emperor Dragonfly

AccountDumpling Phishing Google AppSheet Abuse AI-Generated Malware PureRAT Campaign RondoDoX Botnet, Next.js React2Shell EchoGather, Paper Werewolf Salt Typhoon, Telecom Espionage BreachForums, Conor Fitzpatrick Ransomware Negotiation, DOJ Investigation MirrorFace group - Earth Kasha Emperor Dragonfly

North Korean Contagious Interview Campaign Hides Malware in Fake Coding Tests

Do Son July 24, 2026

At a glance Actor / group DPRK-aligned group behind the Contagious Interview campaign (Elastic tracks it as...

ACR Stealer Spreads Through ClickFix Lures in Two Attack Chains ACR Stealer infection chain starting with a ClickFix lure to steal browser credentials

ACR Stealer infection chain starting with a ClickFix lure to steal browser credentials

ACR Stealer Spreads Through ClickFix Lures in Two Attack Chains

Do Son July 24, 2026

At a glance Malware family ACR Stealer (infostealer; linked to a rebrand of Amatera Stealer) Threat actor...

LG Disables McAfee Ad Popups on Monitors After Backlash LG monitor adware warning showing unwanted McAfee pop-ups and bloatware installation

LG Disables McAfee Ad Popups on Monitors After Backlash

Do Son July 24, 2026

Unsanctioned Desktop Advertising Sparks Outrage Netizens recently observed an unsettling phenomenon: upon connecting newly acquired LG monitors,...

ADAudit Plus Flaw CVE-2026-6516 Allows Unauthenticated Remote Code Execution at CVSS 10 ADAudit Plus vulnerability CVE-2026-6516 enabling unauthenticated remote code execution on Active Directory audit servers

ADAudit Plus vulnerability CVE-2026-6516 enabling unauthenticated remote code execution on Active Directory audit servers

ADAudit Plus Flaw CVE-2026-6516 Allows Unauthenticated Remote Code Execution at CVSS 10

Do Son July 24, 2026

TL;DR ManageEngine patched a critical ADAudit Plus vulnerability tracked as CVE-2026-6516. Two weaknesses in the product’s Agent...

Public Exploit Code Released for Knot Resolver DNS-over-QUIC Remote Code Execution Flaw Knot Resolver RCE through a DNS-over-QUIC heap overflow with publicly disclosed PoC exploit code

Knot Resolver RCE through a DNS-over-QUIC heap overflow with publicly disclosed PoC exploit code

Public Exploit Code Released for Knot Resolver DNS-over-QUIC Remote Code Execution Flaw

Do Son July 24, 2026

TL;DR A researcher published full technical details and working proof-of-concept exploit code for a Knot Resolver RCE...

CERT/CC Warns of Six Logto Vulnerabilities in SSO and MFA Handling Logto vulnerabilities enabling SSO authentication bypass across OIDC, OAuth 2.1, and SAML sign-in flows

Logto vulnerabilities enabling SSO authentication bypass across OIDC, OAuth 2.1, and SAML sign-in flows

CERT/CC Warns of Six Logto Vulnerabilities in SSO and MFA Handling

Do Son July 24, 2026

TL;DR CERT/CC published vulnerability note VU#492466 on 23 July 2026, covering six flaws in the Logto identity...

DOJ Indicts Chinese National Over Gift Card Fraud Scheme in New Hampshire Gift card fraud conspiracy indictment tied to a wire fraud conspiracy charge and a New Hampshire electronics warehouse

Gift card fraud conspiracy indictment tied to a wire fraud conspiracy charge and a New Hampshire electronics warehouse

DOJ Indicts Chinese National Over Gift Card Fraud Scheme in New Hampshire

Do Son July 24, 2026

At a glance Actor Jinbin Ren, 38, a Chinese national who lived in Lynnfield, Massachusetts; co-conspirators unnamed...

Google Ships Chrome 150 Update Fixing Four High-Severity Memory Bugs Chrome security update patching a Codecs sandbox escape and use-after-free flaws in Chrome 150

Chrome security update patching a Codecs sandbox escape and use-after-free flaws in Chrome 150

Google Ships Chrome 150 Update Fixing Four High-Severity Memory Bugs

Do Son July 24, 2026

TL;DR Google pushed Chrome 150.0.7871.186/.187 to the Stable channel on 23 July 2026. This Chrome security update...

Google Selfie Video Sign-In Recovers Locked Accounts Google selfie video sign-in setup screen showing guided head movements for account recovery and liveness verification

Google selfie video sign-in setup screen showing guided head movements for account recovery and liveness verification

Google Selfie Video Sign-In Recovers Locked Accounts

Do Son July 23, 2026

We live in an age thoroughly dependent on digital accounts. How, then, does one prove one is...

HTTP/2 DoS Vulnerability Lets Attackers Exhaust Server Memory via Stalled Flow Control HTTP/2 DoS vulnerability caused by stalled flow control exhausting server memory across multiple HTTP/2 implementations

HTTP/2 DoS vulnerability caused by stalled flow control exhausting server memory across multiple HTTP/2 implementations

HTTP/2 DoS Vulnerability Lets Attackers Exhaust Server Memory via Stalled Flow Control

Do Son July 23, 2026

A newly disclosed HTTP/2 DoS vulnerability affects several server implementations at once. A remote, unauthenticated attacker can...

TA488 and TA458 Steal Government Email Using Half-Click Webmail Exploits Half-click exploits chain showing webmail zero-days used by TA488 and TA458 against Zimbra, SOGo and Roundcube mailservers

Half-click exploits chain showing webmail zero-days used by TA488 and TA458 against Zimbra, SOGo and Roundcube mailservers

TA488 and TA458 Steal Government Email Using Half-Click Webmail Exploits

Do Son July 23, 2026

At a Glance Actor or group TA488 (Void Blizzard, Laundry Bear) and TA458 (Operation RoundPress), both Russia-aligned...

JetBrains Patches 18 Flaws, Including Two CVSS 10 Bugs in IntelliJ IDEA Remote Development JetBrains vulnerabilities across IntelliJ IDEA, WebStorm and TeamCity, including CVE-2026-64812 remote development flaws enabling arbitrary code execution

JetBrains vulnerabilities across IntelliJ IDEA, WebStorm and TeamCity, including CVE-2026-64812 remote development flaws enabling arbitrary code execution

JetBrains Patches 18 Flaws, Including Two CVSS 10 Bugs in IntelliJ IDEA Remote Development

Do Son July 23, 2026

TL;DR JetBrains fixed 18 vulnerabilities across GoLand, IntelliJ IDEA, PhpStorm, PyCharm, TeamCity, and WebStorm. Two IntelliJ IDEA...