News Archives • Page 4 of 604 • Daily CyberSecurity

WAGO System I/O Flaw CVE-2026-4769 Leads to Full System Compromise WAGO System I/O field device early-boot flaw CVE-2026-4769 full system compromise

WAGO System I/O field device early-boot flaw CVE-2026-4769 full system compromise

WAGO System I/O Flaw CVE-2026-4769 Leads to Full System Compromise

Do Son July 13, 2026

TL;DR A critical flaw in WAGO System I/O field devices now has a fix. Tracked as CVE-2026-4769,...

Armored Likho APT Deploys New BusySnake Stealer Diagram showing BusySnake Stealer infection chain by Armored Likho APT

Armored Likho APT Deploys New BusySnake Stealer

Do Son July 13, 2026

At a Glance Actor or group: Armored Likho APT (suspected) Activity type: Spear-phishing and information theft Targets...

Indirect Prompt Injection Threatens AI Agents Diagram showing indirect prompt injection exploiting AI agent vulnerabilities

Indirect Prompt Injection Threatens AI Agents

Do Son July 13, 2026

At a Glance Malware Family: Indirect Prompt Injection (IPI) Threat Actor: Suspected GitHub user (Open-Agent-Utilities) Target: Autonomous...

SpaceX X Account Breach Exploited for Crypto Scam Official SpaceX X account breach promoting fraudulent crypto token

SpaceX X Account Breach Exploited for Crypto Scam

Do Son July 13, 2026

Yesterday, Elon Musk and Sam Altman engaged in a fierce public dispute on X. Meanwhile, an opportunistic...

Cursor Builds General AI Agent to Rival Claude Cowork Cursor AI general purpose agent competing with Claude Cowork for desktop computer control

Cursor AI general purpose agent competing with Claude Cowork for desktop computer control

Cursor Builds General AI Agent to Rival Claude Cowork

Do Son July 13, 2026

Cursor is an AI code editor acquired by Elon Musk for 60 billion dollars. The company is...

Weekly CVE Report: 1,571 New Flaws and 6 Actively Exploited Bugs (July 6–12, 2026) weekly CVE report actively exploited vulnerabilities

Weekly CVE Report: 1,571 New Flaws and 6 Actively Exploited Bugs (July 6–12, 2026)

Do Son July 13, 2026

Last week brought a heavy load for defenders. This weekly CVE report from CVE WATCHTOWER counts 1,571...

Mycelium Framework: First AI-as-a-Service Botnet TanStack Typosquatting npm Supply Chain Attack Axios Supply Chain Attack npm Poisoning eScan Supply Chain Attack Antivirus Compromise APT-36, NCERT WhatsApp Advisory FBI alert, Salesforce Salt Typhoon, APT group ConnectWise ScreenConnect hack Nation-state cyberattack FortiGate Leak - zkLend vulnerability - TRIPLESTRENGTH Threat Actor Group Dark Storm

TanStack Typosquatting npm Supply Chain Attack Axios Supply Chain Attack npm Poisoning eScan Supply Chain Attack Antivirus Compromise APT-36, NCERT WhatsApp Advisory FBI alert, Salesforce Salt Typhoon, APT group ConnectWise ScreenConnect hack Nation-state cyberattack FortiGate Leak - zkLend vulnerability - TRIPLESTRENGTH Threat Actor Group Dark Storm

Mycelium Framework: First AI-as-a-Service Botnet

Do Son July 13, 2026

At a Glance Malware Family: Mycelium Framework Threat Actor: Unknown (suspected underground developer) Targets or Victims: Enterprise...

CVE-2026-49844: Apache Log4j Emits Invalid JSON Logs Apache Log4j CVE-2026-49844 flaw producing invalid JSON in log4j-api output

CVE-2026-49844: Apache Log4j Emits Invalid JSON Logs

Do Son July 13, 2026

TL;DR Apache has patched a new flaw in Apache Log4j, tracked as CVE-2026-49844. The bug lets an...

decompress npm vulnerability CVE-2026-53486 path traversal in Node.js archive extraction

decompress npm Vulnerability CVE-2026-53486 (CVSS 9.1) Threatens 2.8 Million Weekly Downloads

Do Son July 12, 2026

TL;DR A high-severity decompress npm vulnerability lets crafted archives write files outside the extraction folder. Tracked as...

Apache IoTDB Fixes Path Traversal and Authentication Bypass Flaws (CVE-2026-24014) Apache IoTDB vulnerabilities path traversal and authentication bypass in DataNode RPC

Apache IoTDB vulnerabilities path traversal and authentication bypass in DataNode RPC

Apache IoTDB Fixes Path Traversal and Authentication Bypass Flaws (CVE-2026-24014)

Do Son July 11, 2026

TL;DR Apache IoTDB has patched three flaws in its time-series database. The worst is a critical path...

Silver Fox Ghost Distributor Delivers MODBEACON Trojan to Chosen Targets Harvester APT Linux Backdoor OT Cyberattack Iranian APT Operation Olalampo MuddyWater APT Prince of Persia APT, Tonnerre v50 Patchwork APT, DLL Sideloading Subtle Snail, cyber espionage ShadowSilk, cyber espionage Volt Typhoon APT Group - Chinese Cybersecurity Firm

Harvester APT Linux Backdoor OT Cyberattack Iranian APT Operation Olalampo MuddyWater APT Prince of Persia APT, Tonnerre v50 Patchwork APT, DLL Sideloading Subtle Snail, cyber espionage ShadowSilk, cyber espionage Volt Typhoon APT Group - Chinese Cybersecurity Firm

Silver Fox Ghost Distributor Delivers MODBEACON Trojan to Chosen Targets

Do Son July 11, 2026

At a glance Actor A Silver Fox (UTG-Q-1000) Ghost distributor — assessed “hybrid threat actor” Activity SEO-poisoned...

Apache Camel Vulnerabilities Expose Routes to Header Injection and SSRF Apache Camel vulnerabilities diagram showing header injection and server-side request forgery attack flow across Camel routes

Apache Camel vulnerabilities diagram showing header injection and server-side request forgery attack flow across Camel routes

Apache Camel Vulnerabilities Expose Routes to Header Injection and SSRF

Do Son July 10, 2026

TL;DR The Apache Camel project patched four high-severity flaws across five components. Three Apache Camel vulnerabilities let...

Gardyn IoT Hub Flaw CVE-2026-13768 (CVSS 10) Enables Unauthenticated Remote Code Execution Gardyn IoT Hub advisory graphic showing CVE-2026-13768 remote code execution risk on smart garden devices

Gardyn IoT Hub advisory graphic showing CVE-2026-13768 remote code execution risk on smart garden devices

Gardyn IoT Hub Flaw CVE-2026-13768 (CVSS 10) Enables Unauthenticated Remote Code Execution

Do Son July 10, 2026

TL;DR CISA published an advisory for three flaws in the Gardyn IoT Hub, the controller for Gardyn’s...

FreeBSD Patches Three Kernel Flaws That Enable Local Privilege Escalation FreeBSD privilege escalation advisory chart highlighting a kernel use-after-free and two local root flaws

FreeBSD privilege escalation advisory chart highlighting a kernel use-after-free and two local root flaws

FreeBSD Patches Three Kernel Flaws That Enable Local Privilege Escalation

Do Son July 10, 2026

TL;DR On June 30, 2026, the FreeBSD Project shipped three advisories covering FreeBSD privilege escalation bugs in...

Kafka Authentication Bypass in the OAUTHBEARER JWT Path Kafka authentication bypass through OAUTHBEARER JWT replay on Apache Kafka 4.0.x brokers

Kafka authentication bypass through OAUTHBEARER JWT replay on Apache Kafka 4.0.x brokers

Kafka Authentication Bypass in the OAUTHBEARER JWT Path

Do Son July 10, 2026

TL;DR A researcher disclosed a Kafka authentication bypass in the OAUTHBEARER login path. It affects Apache Kafka...

WSL Containers Now Runs on Windows 10 Too WSL Containers running on Windows 10 without Docker Desktop using wslc command in Windows Terminal

WSL Containers Now Runs on Windows 10 Too

Do Son July 10, 2026

Earlier this year, Microsoft released WSL Containers, its native container platform built directly into the Windows Subsystem...

CVE-2026-13753: HP Missing Authorization Vulnerability HP Deskjet missing authorization vulnerability CVE-2026-13753 exposing printer API security flaw

HP Deskjet missing authorization vulnerability CVE-2026-13753 exposing printer API security flaw

CVE-2026-13753: HP Missing Authorization Vulnerability

Do Son July 10, 2026

TL;DR Security researchers discovered an HP Deskjet missing authorization vulnerability in the 2800 printer series. This flaw,...

Claude Reflect Dashboard: Anthropic’s New AI Tool Claude Reflect dashboard interface visualizing AI usage statistics and productivity metrics.

Claude Reflect dashboard interface visualizing AI usage statistics and productivity metrics.

Claude Reflect Dashboard: Anthropic’s New AI Tool

Do Son July 10, 2026

Anthropic has announced the launch of “Reflect.” This innovative digital health and efficiency dashboard is tailored perfectly...

Linux kernel FUSE local privilege escalation via CVE-2026-31694 page cache overflow

Public PoC Discloses CVE-2026-31694, a Linux Kernel FUSE Local Privilege Escalation

Do Son July 10, 2026

TL;DR Researchers have published full details and working exploit code for CVE-2026-31694. This Linux kernel FUSE bug...

PamStealer macOS Malware Poses as Maccy to Steal Passwords PamStealer macOS malware delivering a Rust infostealer through a fake Maccy clipboard app

PamStealer macOS malware delivering a Rust infostealer through a fake Maccy clipboard app

PamStealer macOS Malware Poses as Maccy to Steal Passwords

Do Son July 10, 2026

Malware family PamStealer (Rust-based macOS infostealer) Threat actor Not attributed by Jamf Targets Apple Silicon Mac users;...

GNU Guix Vulnerabilities Expose guix substitute and guix pull GNU Guix vulnerabilities in guix substitute and guix pull enabling remote privilege escalation

GNU Guix vulnerabilities in guix substitute and guix pull enabling remote privilege escalation

GNU Guix Vulnerabilities Expose guix substitute and guix pull

Do Son July 10, 2026

TL;DR The GNU Guix project disclosed four GNU Guix vulnerabilities in early July 2026. Three affect the...

JADEPUFFER Marks the First AI-Driven Agentic Ransomware Attack JADEPUFFER agentic ransomware attack chain diagram from Langflow RCE to database extortion

JADEPUFFER agentic ransomware attack chain diagram from Langflow RCE to database extortion

JADEPUFFER Marks the First AI-Driven Agentic Ransomware Attack

Do Son July 10, 2026

At a Glance Malware family JADEPUFFER (agentic ransomware) Threat actor Unnamed operator; Sysdig assesses an autonomous AI...

Critical Alert 2 Active Exploits Detected Today