News Archives • Page 38 of 663 • Daily CyberSecurity

CVE-2026-19598: Pods Plugin Flaw Enables Complete Site Takeover, Attacks Seen in the Wild Pods WordPress plugin CVE-2026-19598 privilege escalation vulnerability enabling complete site takeover attacks in the wild

Pods WordPress plugin CVE-2026-19598 privilege escalation vulnerability enabling complete site takeover attacks in the wild

CVE-2026-19598: Pods Plugin Flaw Enables Complete Site Takeover, Attacks Seen in the Wild

Do Son August 21, 2026

TL;DR CVE-2026-19598 is a CVSS 9.8 privilege escalation flaw in the Pods WordPress plugin. It lets unauthenticated...

CVE-2026-50112: Apache CloudStack Flaw Allows Cross-Tenant Remote Code Execution on KVM Hosts Apache CloudStack CVE-2026-50112 remote code execution vulnerability on KVM hypervisor host security release advisory

Apache CloudStack CVE-2026-50112 remote code execution vulnerability on KVM hypervisor host security release advisory

CVE-2026-50112: Apache CloudStack Flaw Allows Cross-Tenant Remote Code Execution on KVM Hosts

Do Son August 21, 2026

TL;DR Apache CloudStack shipped releases 4.20.3.1 and 4.22.1.1. They fix 20 CVEs across the platform. The most...

IBM AIX Vulnerabilities: Remote Code Execution Flaws Hit CVSS 9.9 IBM AIX vulnerabilities remote code execution CVSS 9.9 security patch chart

IBM AIX Vulnerabilities: Remote Code Execution Flaws Hit CVSS 9.9

Do Son August 21, 2026

TL;DR IBM patched a large batch of IBM AIX vulnerabilities on August 15, 2026. Many allow remote...

uutils coreutils stdbuf Flaw Lets Local Users Execute Arbitrary Code uutils coreutils vulnerability stdbuf LD_PRELOAD world-writable library flaw diagram

uutils coreutils vulnerability stdbuf LD_PRELOAD world-writable library flaw diagram

uutils coreutils stdbuf Flaw Lets Local Users Execute Arbitrary Code

Do Son August 21, 2026

TL;DR A uutils coreutils vulnerability affects the stdbuf tool in the Rust rewrite of GNU coreutils. By...

RDK-B WebUI Vulnerabilities Let Attackers Bypass Login RDK-B WebUI vulnerabilities authentication bypass CVE-2026-19505 broadband gateway diagram

RDK-B WebUI vulnerabilities authentication bypass CVE-2026-19505 broadband gateway diagram

RDK-B WebUI Vulnerabilities Let Attackers Bypass Login

Do Son August 21, 2026

TL;DR CERT/CC disclosed five RDK-B WebUI vulnerabilities on August 19, 2026. The worst flaw lets a remote,...

Leaked Corporate AWS Keys Expose Full Admin Rights leak

Leaked Corporate AWS Keys Expose Full Admin Rights

Do Son August 21, 2026

At a glance Factor Details Organization Multiple enterprises, AI developers, and cloud users globally Data Exposed 64,024...

CVE-2026-18963: Unauthenticated Account Takeover Flaw Hits Keycloak Keycloak account takeover CVE-2026-18963 unauthenticated password reset flaw diagram

Keycloak account takeover CVE-2026-18963 unauthenticated password reset flaw diagram

CVE-2026-18963: Unauthenticated Account Takeover Flaw Hits Keycloak

Do Son August 21, 2026

TL;DR Keycloak 26.7.2 fixes five flaws, released on August 19, 2026. The most severe, CVE-2026-18963, allows a...

Android Head Unit Malware Recruits Vehicles into Botnet Diagram illustrating Android head unit malware and the Android head unit malware botnet infection chain

Diagram illustrating Android head unit malware and the Android head unit malware botnet infection chain

Android Head Unit Malware Recruits Vehicles into Botnet

Do Son August 21, 2026

At a glance Factor Details Malware Family JarService dropper and zhima proxy module Threat Actor MoYu Group...

Cisco Talos Exposes UAT-10147 Agentic AI Attacks Diagram showing UAT-10147 agentic AI attacks and automated intrusion workflows

Cisco Talos Exposes UAT-10147 Agentic AI Attacks

Do Son August 21, 2026

At a glance Factor Details Actor UAT-10147 (Suspected Chinese-speaking cybercrime threat group) Activity Type Search engine optimization...

Google Preferred Sources: A New Era for News SEO Google Preferred Sources button and Gemini AI integration transforming Discover feed SEO strategies

Google Preferred Sources button and Gemini AI integration transforming Discover feed SEO strategies

Google Preferred Sources: A New Era for News SEO

Do Son August 21, 2026

To empower users to effortlessly support and follow their cherished news publishers and websites, Google recently unveiled...

CVE-2026-67567 (CVSS 9.9): Red Hat Flaws Enable Privilege Escalation in ACM and FreeIPA Red Hat privilege escalation vulnerabilities CVE-2026-67567 ACM and FreeIPA CVE-2026-11861 CVE-2026-13097 advisory

Red Hat privilege escalation vulnerabilities CVE-2026-67567 ACM and FreeIPA CVE-2026-11861 CVE-2026-13097 advisory

CVE-2026-67567 (CVSS 9.9): Red Hat Flaws Enable Privilege Escalation in ACM and FreeIPA

Do Son August 21, 2026

TL;DR Red Hat disclosed three high-severity flaws that enable privilege escalation. The worst, CVE-2026-67567 (CVSS 9.9), hits...

Operation ASTERIX: Crypto Scam Used AI and Fake Wallets Operation ASTERIX crypto fraud attack chain showing vishing calls and fake wallet apps stealing seed phrases

Operation ASTERIX crypto fraud attack chain showing vishing calls and fake wallet apps stealing seed phrases

Operation ASTERIX: Crypto Scam Used AI and Fake Wallets

Do Son August 21, 2026

At a glance Actor Unnamed crypto fraud operator (single host) Activity type Phishing, vishing, fake wallet malware,...

CVE-2026-32475 (CVSS 9.8): Elementor Pro Flaw Risks Complete Site Compromise for 6 Million Sites Elementor Pro CVE-2026-32475 unauthenticated arbitrary file upload vulnerability risking complete site compromise on WordPress

Elementor Pro CVE-2026-32475 unauthenticated arbitrary file upload vulnerability risking complete site compromise on WordPress

CVE-2026-32475 (CVSS 9.8): Elementor Pro Flaw Risks Complete Site Compromise for 6 Million Sites

Do Son August 21, 2026

TL;DR CVE-2026-32475 is a CVSS 9.8 unauthenticated arbitrary file upload flaw in Elementor Pro. It affects an...

GitHub Infrastructure Outage: The True Cause GitHub infrastructure outage graph showing peak server loads and traffic spikes

GitHub Infrastructure Outage: The True Cause

Do Son August 21, 2026

This week, Microsoft’s code hosting platform, GitHub, experienced a prolonged and widespread outage. This disruption significantly impacted...

Projextor Malware Hides in Fake PDF and Recipe Apps Projextor Electron malware fake PDF converter and recipe apps diagram showing injected scripts and desktop capture

Projextor Electron malware fake PDF converter and recipe apps diagram showing injected scripts and desktop capture

Projextor Malware Hides in Fake PDF and Recipe Apps

Do Son August 21, 2026

At a glance Malware family Projextor (Electron-based) Threat actor Unknown; shared code base, no confirmed single operator...

Operation QUICSILVER Targets Myanmar Government With Go Backdoor Operation QUICSILVER infection chain showing VHD lure delivering the QUICAgent Go backdoor to Myanmar government targets

Operation QUICSILVER infection chain showing VHD lure delivering the QUICAgent Go backdoor to Myanmar government targets

Operation QUICSILVER Targets Myanmar Government With Go Backdoor

Do Son August 21, 2026

At a glance Actor or group Unnamed China-nexus actor (moderate confidence) Activity type Cyber espionage, custom Go...

Android 17 Memory Limits: Stricter App Constraints Android 17 memory limits diagram showing system terminating apps with severe memory leaks

Android 17 Memory Limits: Stricter App Constraints

Do Son August 21, 2026

Google continues to fortify the memory management framework across the Android ecosystem, as noted on the Android...

Windows 11 Gaming Issues Emerge After August Update Windows 11 gaming issues causing EXCEPTION_ACCESS_VIOLATION errors and system reboots

Windows 11 Gaming Issues Emerge After August Update

Do Son August 21, 2026

Following feedback from numerous gamers, Microsoft is officially investigating Windows 11 gaming issues that emerged after installing...

Sakura Internet Breach Exposes 1.36 Million Customer Accounts Sakura Internet data breach 1.36 million customer accounts Japan cloud provider

Sakura Internet data breach 1.36 million customer accounts Japan cloud provider

Sakura Internet Breach Exposes 1.36 Million Customer Accounts

Do Son August 21, 2026

Japanese cloud computing and data center services provider Sakura Internet recently issued a security advisory disclosing that...

CVE-2026-77647 (CVSS 9.8): Unauthenticated SPIP RCE Exploited in the Wild SPIP CVE-2026-77647 unauthenticated remote code execution vulnerability exploited in the wild patch 4.4.20

SPIP CVE-2026-77647 unauthenticated remote code execution vulnerability exploited in the wild patch 4.4.20

CVE-2026-77647 (CVSS 9.8): Unauthenticated SPIP RCE Exploited in the Wild

Do Son August 21, 2026

TL;DR CVE-2026-77647 is a CVSS 9.8 unauthenticated remote code execution flaw in the SPIP CMS. It affects...

CVE-2026-19586 (CVSS 9.3): Pre-Authentication OS Command Injection Hits Omada Gateways TP-Link Omada gateway CVE-2026-19586 pre-authentication OS command injection vulnerability advisory OpenVPN Server

TP-Link Omada gateway CVE-2026-19586 pre-authentication OS command injection vulnerability advisory OpenVPN Server

CVE-2026-19586 (CVSS 9.3): Pre-Authentication OS Command Injection Hits Omada Gateways

Do Son August 21, 2026

TL;DR TP-Link patched three Omada gateway vulnerabilities. The most severe, CVE-2026-19586, is a pre-authentication OS command injection...

CVE-2026-69836 (CVSS 10): Entra ID Remote Code Execution Flaw Microsoft Entra ID remote code execution vulnerability CVE-2026-69836 CVSS 10 exploited in the wild advisory

Microsoft Entra ID remote code execution vulnerability CVE-2026-69836 CVSS 10 exploited in the wild advisory

CVE-2026-69836 (CVSS 10): Entra ID Remote Code Execution Flaw

Do Son August 21, 2026

Update: Microsoft updated its safety alert on August 21, 2026. Initially, the report marked the bug as...

Critical Alert 4 Active Exploits Detected Today