News Archives • Page 28 of 663 • Daily CyberSecurity

Exchange Online to Throttle and Block Outdated Exchange 2016 and 2019 Servers Exchange Online blocking outdated Exchange Server 2016 and 2019 in hybrid mail flow

Exchange Online blocking outdated Exchange Server 2016 and 2019 in hybrid mail flow

Exchange Online to Throttle and Block Outdated Exchange 2016 and 2019 Servers

Do Son September 7, 2026

Microsoft is beginning to sever outdated on-premises Exchange servers from cloud mail more sternly. From the second...

Weekly CVE Report: Daily Cybersecurity Beats CISA KEV on Exploited Flaws This weekly CVE report covers 10 exploited vulnerabilities added to CISA KEV and 2,316 new CVEs from Aug 31 to Sep 6, 2026. Patch fast.

This weekly CVE report covers 10 exploited vulnerabilities added to CISA KEV and 2,316 new CVEs from Aug 31 to Sep 6, 2026. Patch fast.

Weekly CVE Report: Daily Cybersecurity Beats CISA KEV on Exploited Flaws

Do Son September 7, 2026

Daily Cybersecurity flagged nine actively exploited vulnerabilities before or beyond CISA this week. That is the standout...

Roundcube Security Update Fixes 12 Webmail Flaws Roundcube Webmail security update patching a zero-click stored XSS and SSRF bypass across versions 1.6.19 and 1.7.4

Roundcube Webmail security update patching a zero-click stored XSS and SSRF bypass across versions 1.6.19 and 1.7.4

Roundcube Security Update Fixes 12 Webmail Flaws

Do Son September 6, 2026

Roundcube shipped a security update on September 6, 2026. The Roundcube security update patches 12 vulnerabilities across...

MikroTik RouterOS Vulnerability Exploited in the Wild: Patch and Defense Blueprint MikroTik RouterOS security update fixes critical vulnerability

MikroTik RouterOS security update fixes critical vulnerability

MikroTik RouterOS Vulnerability Exploited in the Wild: Patch and Defense Blueprint

Do Son September 5, 2026

Speed becomes vital when a manufacturer conceals vulnerability details. Consequently, rapid patching eclipses the need to understand...

StyleSmuggler: Magento Zero-Day RCE Exploited in the Wild StyleSmuggler Magento zero-day allowing unauthenticated remote code execution against Adobe Commerce stores under active attack

StyleSmuggler Magento zero-day allowing unauthenticated remote code execution against Adobe Commerce stores under active attack

StyleSmuggler: Magento Zero-Day RCE Exploited in the Wild

Do Son September 5, 2026

Attacks against Magento stores began on September 4, 2026. Security firm Sansec named the flaw StyleSmuggler. This...

US Offers $10M for IRGC Cyber Leader US Rewards for Justice poster offering $10 million for information on Iranian IRGC cyber commander Amir Yaryab

US Rewards for Justice poster offering $10 million for information on Iranian IRGC cyber commander Amir Yaryab

US Offers $10M for IRGC Cyber Leader

Do Son September 5, 2026

The United States government is prepared to pay up to 10 million dollars for actionable intelligence concerning...

Coder Registry Attack: Hijacked Cloudflare Pool Served Malicious Terraform Modules Coder registry attack serving malicious Terraform modules from a hijacked Cloudflare pool

Coder registry attack serving malicious Terraform modules from a hijacked Cloudflare pool

Coder Registry Attack: Hijacked Cloudflare Pool Served Malicious Terraform Modules

Do Son September 5, 2026

Attackers needed no counterfeit website to slip malicious Terraform modules to developers. Unknown intruders gained access to...

Google Workspace Integrates Gemini Live Features Google Workspace interface displaying Gemini Live integration across Gmail, Docs, and Keep applications

Google Workspace interface displaying Gemini Live integration across Gmail, Docs, and Keep applications

Google Workspace Integrates Gemini Live Features

Do Son September 5, 2026

As generative artificial intelligence progressively evolves from static text prompts into natural bidirectional voice interactions, Google announces...

CVE-2026-75754 (CVSS 10): ASUS Control Center Root RCE ASUS Control Center vulnerability CVE-2026-75754 allowing unauthenticated attackers to gain a root shell and full remote control

ASUS Control Center vulnerability CVE-2026-75754 allowing unauthenticated attackers to gain a root shell and full remote control

CVE-2026-75754 (CVSS 10): ASUS Control Center Root RCE

Do Son September 4, 2026

ASUS published CVE-2026-75754 on September 4, 2026. This ASUS Control Center vulnerability earns a maximum CVSS score...

The Gentlemen Ransomware Deploys in Under 24 Hours The Gentlemen ransomware attack chain showing GOLD SHERWOOD affiliates using GentleKiller EDR killer and Rclone data exfiltration

The Gentlemen ransomware attack chain showing GOLD SHERWOOD affiliates using GentleKiller EDR killer and Rclone data exfiltration

The Gentlemen Ransomware Deploys in Under 24 Hours

Do Son September 4, 2026

At a glance Malware family The Gentlemen ransomware (Go-based locker; Windows, Linux, ESXi builds) Threat actor GOLD...

Trezor Data Breach at ShipMonk Grows to 80,000 Customers Trezor data breach notice showing customer order data exposed through shipping provider ShipMonk in a third-party vendor breach

Trezor data breach notice showing customer order data exposed through shipping provider ShipMonk in a third-party vendor breach

Trezor Data Breach at ShipMonk Grows to 80,000 Customers

Do Son September 4, 2026

At a glance Organization Trezor (via shipping provider ShipMonk) Data exposed Names, emails, phone numbers, shipping addresses,...

FreeSWITCH api-chat RCE Exploited in the Wild, Patch Now FreeSWITCH api-chat vulnerability exploited in the wild for remote code execution via SIP MESSAGE on FusionPBX servers

FreeSWITCH api-chat vulnerability exploited in the wild for remote code execution via SIP MESSAGE on FusionPBX servers

FreeSWITCH api-chat RCE Exploited in the Wild, Patch Now

Do Son September 4, 2026

SignalWire shipped FreeSWITCH 1.11.3 on August 28, 2026. The vendor called it an important release with critical...

Toy Ghouls Backdoor Uses HiveMQ and Element for C2 Rust supply chain attack on arrayref crate with proc-macro1 typosquat and DPRK infrastructure overlap

Rust supply chain attack on arrayref crate with proc-macro1 typosquat and DPRK infrastructure overlap

Toy Ghouls Backdoor Uses HiveMQ and Element for C2

Do Son September 4, 2026

At a glance Actor or group Toy Ghouls (aka Bearlyfy, Labubu, Laboo.boo, Feral Wolf) Activity type Custom...

AWS Password Spraying Campaign Targets Root Accounts Chart showing an AWS password spraying campaign targeting root logins with AWS password spraying

Chart showing an AWS password spraying campaign targeting root logins with AWS password spraying

AWS Password Spraying Campaign Targets Root Accounts

Do Son September 4, 2026

At a glance Actor or group Unidentified threat actors Activity type Password spraying Targets or victims AWS...

Spring Ring Vishing Campaign Targets Microsoft Teams Anatomy of the Spring Ring vishing campaign and Microsoft Teams phishing attacks

Spring Ring Vishing Campaign Targets Microsoft Teams

Do Son September 4, 2026

At a glance Actor or group Unidentified attackers Activity type Voice phishing via Microsoft Teams Targets or...

AiTM Phishing Campaign Targets Healthcare via Account Takeovers Layoff Phishing Scam Remcos RAT Malware Aruba Phishing, Phishing-as-a-Service PyPI, phishing CVE-2024-25608 PyPI Phishing, Credential Theft

Layoff Phishing Scam Remcos RAT Malware Aruba Phishing, Phishing-as-a-Service PyPI, phishing CVE-2024-25608 PyPI Phishing, Credential Theft

AiTM Phishing Campaign Targets Healthcare via Account Takeovers

Do Son September 4, 2026

At a Glance Category Details Threat Actor / Kit Sneaky 2FA (suspected Phishing-as-a-Service kit) Activity Type Adversary-in-the-Middle...

Apache Allura security vulnerabilities update

Apache Allura Security Vulnerabilities Patched in v1.21.0

Do Son September 4, 2026

Apache released a critical software update to fix multiple Apache Allura security vulnerabilities. These flaws include severe...

CVE-2026-52924 PoC Exploit Disclosed: 9.8 CVSS Linux Root Privilege Escalation Linux CVE-2026-52924 details and Linux CVE-2026-52924 PoC exploit release

Linux CVE-2026-52924 details and Linux CVE-2026-52924 PoC exploit release

CVE-2026-52924 PoC Exploit Disclosed: 9.8 CVSS Linux Root Privilege Escalation

Do Son September 4, 2026

Security team NebuSec published technical details and functional exploit code for a critical Linux flaw. This Linux...

GPT-6 Astra Updates Codex Pricing GPT-6 Astra Codex pricing token cost chart

GPT-6 Astra Updates Codex Pricing

Do Son September 4, 2026

According to updated OpenAI support documentation, the GPT-6 Astra context window now supports up to one million...

TP-Link Archer AX55 Flaws Expose Routers to Code Execution TP-Link Archer AX55 vulnerability advisory showing EasyMesh buffer overflow and hardcoded RSA key flaws CVE-2026-18167 CVE-2026-18330

TP-Link Archer AX55 vulnerability advisory showing EasyMesh buffer overflow and hardcoded RSA key flaws CVE-2026-18167 CVE-2026-18330

TP-Link Archer AX55 Flaws Expose Routers to Code Execution

Do Son September 4, 2026

TP-Link disclosed two vulnerabilities in the Archer AX55 v4 router on September 3, 2026. One flaw can...

Plex Issues Urgent Security Update for Media Server and Desktop Plex security update notice for Media Server 1.43.3 and Plex Desktop 1.115.0

Plex Issues Urgent Security Update for Media Server and Desktop

Do Son September 4, 2026

The streaming suite Plex recently dispatched a mass email urging users to upgrade both their client and...

Super Forms Vulnerability Exploited in the Wild: 13,000 Sites Face 9.8 CVSS Remote Code Execution Super Forms vulnerability CVE-2026-14894 arbitrary file upload remote code execution exploited in the wild WordPress plugin diagram

Super Forms vulnerability CVE-2026-14894 arbitrary file upload remote code execution exploited in the wild WordPress plugin diagram

Super Forms Vulnerability Exploited in the Wild: 13,000 Sites Face 9.8 CVSS Remote Code Execution

Do Son September 4, 2026

TL;DR Attackers are exploiting CVE-2026-14894 in the wild. This critical Super Forms vulnerability lets unauthenticated users upload...

Critical Alert 4 Active Exploits Detected Today