News Archives • Page 29 of 631 • Daily CyberSecurity

GigaWiper Backdoor Bundles Disk Wiping Malware and Fake Ransomware illegal streaming networks complex criminal enterprises UAT-7290 China-nexus Espionage Adversarial Misuse of Generative AI

illegal streaming networks complex criminal enterprises UAT-7290 China-nexus Espionage Adversarial Misuse of Generative AI

GigaWiper Backdoor Bundles Disk Wiping Malware and Fake Ransomware

Do Son July 16, 2026

At a glance Malware family GigaWiper (Golang backdoor; code ties to Crucio and FlockWiper) Threat actor Not...

CISA Adds Oracle E-Business Suite and KNX Flaws to KEV Catalog CISA KEV catalog additions CVE-2026-46817 and CVE-2023-4346 illustration

CISA Adds Oracle E-Business Suite and KNX Flaws to KEV Catalog

Do Son July 16, 2026

TL;DR The CISA KEV catalog gained two entries on July 15, 2026. The agency confirmed active exploitation...

Splunk Enterprise vulnerabilities CVE-2026-20296 security advisory illustration

Splunk Fixes Three Splunk Enterprise Vulnerabilities Led by CVE-2026-20296 CSRF Flaw

Do Son July 16, 2026

TL;DR Splunk released patches on July 15, 2026 for three Splunk Enterprise vulnerabilities. The most serious, CVE-2026-20296,...

NGINX code execution vulnerability CVE-2026-42533 advisory illustration

NGINX Code Execution Vulnerability CVE-2026-42533 Patched Alongside Two Memory Flaws

Do Son July 16, 2026

TL;DR F5 has patched three memory safety flaws in NGINX Plus and NGINX Open Source. The most...

RabbitMQ Patches Two Critical Authentication Bypass Flaws RabbitMQ authentication bypass via TLS client cert forgery and OAuth2 JWKS flaw

RabbitMQ Patches Two Critical Authentication Bypass Flaws

Do Son July 15, 2026

TL;DR RabbitMQ has patched two critical flaws that allow authentication bypass. One breaks TLS client-certificate checks. The...

Fake Braintree NuGet Package Skims Credit Cards and Steals Merchant API Keys Braintree NuGet typosquat credit card skimmer stealing payment data and merchant API keys

Braintree NuGet typosquat credit card skimmer stealing payment data and merchant API keys

Fake Braintree NuGet Package Skims Credit Cards and Steals Merchant API Keys

Do Son July 15, 2026

At a Glance Malware family Braintree.Net typosquat, a multi-stage .NET implant with a companion harvester (DependencyInjector.Core) Threat...

CVE-2026-53412: CVSS 9.8 Zoom Vulnerability Allows Unauthenticated Account Takeover Zoom vulnerability CVE-2026-53412 account takeover flaw in Zoom Workplace for Windows

Zoom vulnerability CVE-2026-53412 account takeover flaw in Zoom Workplace for Windows

CVE-2026-53412: CVSS 9.8 Zoom Vulnerability Allows Unauthenticated Account Takeover

Do Son July 15, 2026

TL;DR Zoom has patched four flaws across its Windows products. The most severe Zoom vulnerability, CVE-2026-53412 (CVSS...

Clubfoot Wolf Hits Russian Firms With NetSupport Manager exfiltrating AWS credentials - fabrice package

Clubfoot Wolf Hits Russian Firms With NetSupport Manager

Do Son July 15, 2026

At a glance Actor / group Clubfoot Wolf (cluster tracked by BI.ZONE) Activity type Phishing that deploys...

JetBrains Fixes CVSS 10 YouTrack Authentication Bypass and Five More Flaws in IntelliJ IDEA and TeamCity JetBrains vulnerabilities CVE-2026-62422 YouTrack authentication bypass CVSS 10

JetBrains vulnerabilities CVE-2026-62422 YouTrack authentication bypass CVSS 10

JetBrains Fixes CVSS 10 YouTrack Authentication Bypass and Five More Flaws in IntelliJ IDEA and TeamCity

Do Son July 15, 2026

TL;DR JetBrains has patched six JetBrains vulnerabilities across YouTrack, IntelliJ IDEA, and TeamCity. The most severe, CVE-2026-62422...

Four Critical Coolify Vulnerabilities Allow Remote Code Execution and Cross-Team Server Access Coolify vulnerabilities enabling remote code execution and cross-tenant server access in the self-hosted PaaS

Coolify vulnerabilities enabling remote code execution and cross-tenant server access in the self-hosted PaaS

Four Critical Coolify Vulnerabilities Allow Remote Code Execution and Cross-Team Server Access

Do Son July 15, 2026

TL;DR Four critical Coolify vulnerabilities now have patches. Three score CVSS 9.9, and they let low-privileged members...

Cursor Zero-Day Vulnerability Remains Unpatched After Seven Months Cursor zero day vulnerability exploitation diagram, AI coding assistant security threat analysis

Cursor zero day vulnerability exploitation diagram, AI coding assistant security threat analysis

Cursor Zero-Day Vulnerability Remains Unpatched After Seven Months

Do Son July 15, 2026

The renowned cybersecurity firm Mindgard recently published an expose detailing a high-severity zero-day vulnerability harboring within Cursor,...

Google Images Turns 25: AI Personalization and Nano Banana Generation Arrive in Search Google Images 25th anniversary AI redesign with Nano Banana image generation

Google Images 25th anniversary AI redesign with Nano Banana image generation

Google Images Turns 25: AI Personalization and Nano Banana Generation Arrive in Search

Do Son July 15, 2026

Google Images, born in July 2001, has officially reached its 25th anniversary. To celebrate the milestone, Google...

CrySome RAT Spread Through Fake Freight Rate Confirmation Phishing NATS-as-C2 Sysdig CVE-2026-33017 Langflow RCE Microsoft Phone Link Hijack CloudZ Pheno Plugin Insider Threat BlackCat (ALPHV) OFAC Sanctions DPRK IT Workers Transparent Tribe APT36 React2Shell, EtherRAT SideWinder Espionage, Netlify Phishing DDNS Abuse, C2 Infrastructure Hacking Health Club

NATS-as-C2 Sysdig CVE-2026-33017 Langflow RCE Microsoft Phone Link Hijack CloudZ Pheno Plugin Insider Threat BlackCat (ALPHV) OFAC Sanctions DPRK IT Workers Transparent Tribe APT36 React2Shell, EtherRAT SideWinder Espionage, Netlify Phishing DDNS Abuse, C2 Infrastructure Hacking Health Club

CrySome RAT Spread Through Fake Freight Rate Confirmation Phishing

Do Son July 15, 2026

Malware family CrySome RAT, a .NET remote access trojan Threat actor Not named; no confirmed attribution Target...

RedWing Android Malware Rents Out Spyware and Bank Theft on Telegram RedWing Android malware panel sold as malware-as-a-service on Telegram with banking overlays

RedWing Android malware panel sold as malware-as-a-service on Telegram with banking overlays

RedWing Android Malware Rents Out Spyware and Bank Theft on Telegram

Do Son July 15, 2026

Malware family RedWing (Android spyware/RAT; suspected new variant of Oblivion) Threat actor Unnamed operators; suspected Russian-nexus, not...

CVE-2026-10577: CVSS 10 Access Control Vulnerability Hits Rockwell Automation 1715 Redundant I/O Modules Rockwell Automation vulnerability CVE-2026-10577 access control flaw in 1715 Redundant I/O

Rockwell Automation vulnerability CVE-2026-10577 access control flaw in 1715 Redundant I/O

CVE-2026-10577: CVSS 10 Access Control Vulnerability Hits Rockwell Automation 1715 Redundant I/O Modules

Do Son July 15, 2026

TL;DR A maximum-severity Rockwell Automation vulnerability, CVE-2026-10577, affects the 1715 Redundant I/O EtherNet/IP adapter (1715-AENTR). The access...

Malicious Go Module Exposes a 222-Repository GitHub Lure Network Malicious Go module exposing GitHub lure network of 222 repositories in Operation Muck and Load

Malicious Go module exposing GitHub lure network of 222 repositories in Operation Muck and Load

Malicious Go Module Exposes a 222-Repository GitHub Lure Network

Do Son July 15, 2026

Actor / group Unnamed actor tracked as “Operation Muck and Load”; overlaps with the ischhfd83 cluster Activity...

GodDamn Ransomware Rebrands Beast and Uses a Malicious Signed Driver to Disable Defenses North Korean hackers behind open-source supply chain attacks on axios, debug, and chalk NPM packages

North Korean hackers behind open-source supply chain attacks on axios, debug, and chalk NPM packages

GodDamn Ransomware Rebrands Beast and Uses a Malicious Signed Driver to Disable Defenses

Do Son July 15, 2026

At a Glance Malware family GodDamn ransomware (rebrand of Beast, formerly Monster) Threat actor Hyadina, a ransomware-as-a-service...

Notepad++ v8.9.7 Fixes 5 Vulnerabilities, All With Public Details and PoC Exploit Code Notepad++ vulnerabilities public PoC exploit code path traversal CVE-2026-52886

Notepad++ vulnerabilities public PoC exploit code path traversal CVE-2026-52886

Notepad++ v8.9.7 Fixes 5 Vulnerabilities, All With Public Details and PoC Exploit Code

Do Son July 15, 2026

TL;DR Notepad++ v8.9.7 fixes five security flaws in the popular Windows editor. Technical details and proof-of-concept exploit...

Chrome 150 Security Update Fixes 15 Flaws, Including Two Critical Use-After-Free Bugs Chrome security update 150 fixing critical use-after-free flaws CVE-2026-15764 and CVE-2026-15765

Chrome security update 150 fixing critical use-after-free flaws CVE-2026-15764 and CVE-2026-15765

Chrome 150 Security Update Fixes 15 Flaws, Including Two Critical Use-After-Free Bugs

Do Son July 15, 2026

TL;DR Google has shipped a Chrome security update that raises the Stable channel to 150.0.7871.124/.125 on Windows...

Passkey Phishing Campaign Uses Vishing Calls to Hijack Microsoft Entra Accounts Passkey phishing vishing attack targeting Microsoft Entra passkey enrollment by O-UNC-066

Passkey phishing vishing attack targeting Microsoft Entra passkey enrollment by O-UNC-066

Passkey Phishing Campaign Uses Vishing Calls to Hijack Microsoft Entra Accounts

Do Son July 15, 2026

At a Glance Actor O-UNC-066 (Okta); tracked as CL-CRI-1147 / “Pink” by Palo Alto Unit 42; linked...

CISA Warns Three SharePoint Server Vulnerabilities Are Exploited in the Wild, Urges Hardening CISA alert on SharePoint vulnerabilities exploited in the wild including CVE-2026-56164

CISA alert on SharePoint vulnerabilities exploited in the wild including CVE-2026-56164

CISA Warns Three SharePoint Server Vulnerabilities Are Exploited in the Wild, Urges Hardening

Do Son July 15, 2026

TL;DR CISA has confirmed active exploitation of three SharePoint vulnerabilities: CVE-2026-32201, CVE-2026-45659, and CVE-2026-56164. Threat actors chain...

Node.js Backdoor Hides Its C2 on the TON Blockchain Mercenary Akula European Financial Targeting AI-Generated Malware React2Shell Exploit UAT-8837 Critical Infrastructure Attack APT36, BOSS Linux BRICKSTORM Malware, China Espionage Curly COMrades, MucorAgent Chinese APT - HTTP Client Tools Shuckworm Cyber Espionage

Mercenary Akula European Financial Targeting AI-Generated Malware React2Shell Exploit UAT-8837 Critical Infrastructure Attack APT36, BOSS Linux BRICKSTORM Malware, China Espionage Curly COMrades, MucorAgent Chinese APT - HTTP Client Tools Shuckworm Cyber Espionage

Node.js Backdoor Hides Its C2 on the TON Blockchain

Do Son July 15, 2026

At a glance Malware family Node.js backdoor (tracked as “TonRAT” by some researchers) Threat actor Unattributed; no...