News Archives • Page 6 of 631 • Daily CyberSecurity

RDK-B WebUI Vulnerabilities Let Attackers Bypass Login RDK-B WebUI vulnerabilities authentication bypass CVE-2026-19505 broadband gateway diagram

RDK-B WebUI vulnerabilities authentication bypass CVE-2026-19505 broadband gateway diagram

RDK-B WebUI Vulnerabilities Let Attackers Bypass Login

Do Son August 21, 2026

TL;DR CERT/CC disclosed five RDK-B WebUI vulnerabilities on August 19, 2026. The worst flaw lets a remote,...

Leaked Corporate AWS Keys Expose Full Admin Rights leak

Leaked Corporate AWS Keys Expose Full Admin Rights

Do Son August 21, 2026

At a glance Factor Details Organization Multiple enterprises, AI developers, and cloud users globally Data Exposed 64,024...

CVE-2026-18963: Unauthenticated Account Takeover Flaw Hits Keycloak Keycloak account takeover CVE-2026-18963 unauthenticated password reset flaw diagram

Keycloak account takeover CVE-2026-18963 unauthenticated password reset flaw diagram

CVE-2026-18963: Unauthenticated Account Takeover Flaw Hits Keycloak

Do Son August 21, 2026

TL;DR Keycloak 26.7.2 fixes five flaws, released on August 19, 2026. The most severe, CVE-2026-18963, allows a...

Android Head Unit Malware Recruits Vehicles into Botnet Diagram illustrating Android head unit malware and the Android head unit malware botnet infection chain

Diagram illustrating Android head unit malware and the Android head unit malware botnet infection chain

Android Head Unit Malware Recruits Vehicles into Botnet

Do Son August 21, 2026

At a glance Factor Details Malware Family JarService dropper and zhima proxy module Threat Actor MoYu Group...

Cisco Talos Exposes UAT-10147 Agentic AI Attacks Diagram showing UAT-10147 agentic AI attacks and automated intrusion workflows

Cisco Talos Exposes UAT-10147 Agentic AI Attacks

Do Son August 21, 2026

At a glance Factor Details Actor UAT-10147 (Suspected Chinese-speaking cybercrime threat group) Activity Type Search engine optimization...

Google Preferred Sources: A New Era for News SEO Google Preferred Sources button and Gemini AI integration transforming Discover feed SEO strategies

Google Preferred Sources button and Gemini AI integration transforming Discover feed SEO strategies

Google Preferred Sources: A New Era for News SEO

Do Son August 21, 2026

To empower users to effortlessly support and follow their cherished news publishers and websites, Google recently unveiled...

CVE-2026-67567 (CVSS 9.9): Red Hat Flaws Enable Privilege Escalation in ACM and FreeIPA Red Hat privilege escalation vulnerabilities CVE-2026-67567 ACM and FreeIPA CVE-2026-11861 CVE-2026-13097 advisory

Red Hat privilege escalation vulnerabilities CVE-2026-67567 ACM and FreeIPA CVE-2026-11861 CVE-2026-13097 advisory

CVE-2026-67567 (CVSS 9.9): Red Hat Flaws Enable Privilege Escalation in ACM and FreeIPA

Do Son August 21, 2026

TL;DR Red Hat disclosed three high-severity flaws that enable privilege escalation. The worst, CVE-2026-67567 (CVSS 9.9), hits...

Operation ASTERIX: Crypto Scam Used AI and Fake Wallets Operation ASTERIX crypto fraud attack chain showing vishing calls and fake wallet apps stealing seed phrases

Operation ASTERIX crypto fraud attack chain showing vishing calls and fake wallet apps stealing seed phrases

Operation ASTERIX: Crypto Scam Used AI and Fake Wallets

Do Son August 21, 2026

At a glance Actor Unnamed crypto fraud operator (single host) Activity type Phishing, vishing, fake wallet malware,...

CVE-2026-32475 (CVSS 9.8): Elementor Pro Flaw Risks Complete Site Compromise for 6 Million Sites Elementor Pro CVE-2026-32475 unauthenticated arbitrary file upload vulnerability risking complete site compromise on WordPress

Elementor Pro CVE-2026-32475 unauthenticated arbitrary file upload vulnerability risking complete site compromise on WordPress

CVE-2026-32475 (CVSS 9.8): Elementor Pro Flaw Risks Complete Site Compromise for 6 Million Sites

Do Son August 21, 2026

TL;DR CVE-2026-32475 is a CVSS 9.8 unauthenticated arbitrary file upload flaw in Elementor Pro. It affects an...

GitHub Infrastructure Outage: The True Cause GitHub infrastructure outage graph showing peak server loads and traffic spikes

GitHub Infrastructure Outage: The True Cause

Do Son August 21, 2026

This week, Microsoft’s code hosting platform, GitHub, experienced a prolonged and widespread outage. This disruption significantly impacted...

Projextor Malware Hides in Fake PDF and Recipe Apps Projextor Electron malware fake PDF converter and recipe apps diagram showing injected scripts and desktop capture

Projextor Electron malware fake PDF converter and recipe apps diagram showing injected scripts and desktop capture

Projextor Malware Hides in Fake PDF and Recipe Apps

Do Son August 21, 2026

At a glance Malware family Projextor (Electron-based) Threat actor Unknown; shared code base, no confirmed single operator...

Operation QUICSILVER Targets Myanmar Government With Go Backdoor Operation QUICSILVER infection chain showing VHD lure delivering the QUICAgent Go backdoor to Myanmar government targets

Operation QUICSILVER infection chain showing VHD lure delivering the QUICAgent Go backdoor to Myanmar government targets

Operation QUICSILVER Targets Myanmar Government With Go Backdoor

Do Son August 21, 2026

At a glance Actor or group Unnamed China-nexus actor (moderate confidence) Activity type Cyber espionage, custom Go...

Android 17 Memory Limits: Stricter App Constraints Android 17 memory limits diagram showing system terminating apps with severe memory leaks

Android 17 Memory Limits: Stricter App Constraints

Do Son August 21, 2026

Google continues to fortify the memory management framework across the Android ecosystem, as noted on the Android...

Windows 11 Gaming Issues Emerge After August Update Windows 11 gaming issues causing EXCEPTION_ACCESS_VIOLATION errors and system reboots

Windows 11 Gaming Issues Emerge After August Update

Do Son August 21, 2026

Following feedback from numerous gamers, Microsoft is officially investigating Windows 11 gaming issues that emerged after installing...

Sakura Internet Breach Exposes 1.36 Million Customer Accounts Sakura Internet data breach 1.36 million customer accounts Japan cloud provider

Sakura Internet data breach 1.36 million customer accounts Japan cloud provider

Sakura Internet Breach Exposes 1.36 Million Customer Accounts

Do Son August 21, 2026

Japanese cloud computing and data center services provider Sakura Internet recently issued a security advisory disclosing that...

CVE-2026-77647 (CVSS 9.8): Unauthenticated SPIP RCE Exploited in the Wild SPIP CVE-2026-77647 unauthenticated remote code execution vulnerability exploited in the wild patch 4.4.20

SPIP CVE-2026-77647 unauthenticated remote code execution vulnerability exploited in the wild patch 4.4.20

CVE-2026-77647 (CVSS 9.8): Unauthenticated SPIP RCE Exploited in the Wild

Do Son August 21, 2026

TL;DR CVE-2026-77647 is a CVSS 9.8 unauthenticated remote code execution flaw in the SPIP CMS. It affects...

CVE-2026-19586 (CVSS 9.3): Pre-Authentication OS Command Injection Hits Omada Gateways TP-Link Omada gateway CVE-2026-19586 pre-authentication OS command injection vulnerability advisory OpenVPN Server

TP-Link Omada gateway CVE-2026-19586 pre-authentication OS command injection vulnerability advisory OpenVPN Server

CVE-2026-19586 (CVSS 9.3): Pre-Authentication OS Command Injection Hits Omada Gateways

Do Son August 21, 2026

TL;DR TP-Link patched three Omada gateway vulnerabilities. The most severe, CVE-2026-19586, is a pre-authentication OS command injection...

CVE-2026-69836 (CVSS 10): Entra ID Remote Code Execution Flaw Microsoft Entra ID remote code execution vulnerability CVE-2026-69836 CVSS 10 exploited in the wild advisory

Microsoft Entra ID remote code execution vulnerability CVE-2026-69836 CVSS 10 exploited in the wild advisory

CVE-2026-69836 (CVSS 10): Entra ID Remote Code Execution Flaw

Do Son August 21, 2026

Update: Microsoft updated its safety alert on August 21, 2026. Initially, the report marked the bug as...

CVE-2026-59270: Spring Security LDAP Flaw Lets Attackers Read or Modify Directory Entries Spring Security vulnerabilities advisory showing CVE-2026-59270 embedded LDAP flaw exposing in-memory directory entries

Spring Security vulnerabilities advisory showing CVE-2026-59270 embedded LDAP flaw exposing in-memory directory entries

CVE-2026-59270: Spring Security LDAP Flaw Lets Attackers Read or Modify Directory Entries

Do Son August 21, 2026

TL;DR VMware disclosed four Spring Security vulnerabilities. The most severe, CVE-2026-59270, rates CVSS 9.4 (CRITICAL). Its embedded...

CVE-2026-77176: Kata Containers Flaw Mounts Arbitrary Guest Rootfs Paths CVE-2026-77176 Kata Containers genpolicy vulnerability mounting arbitrary guest rootfs paths in Confidential Containers

CVE-2026-77176 Kata Containers genpolicy vulnerability mounting arbitrary guest rootfs paths in Confidential Containers

CVE-2026-77176: Kata Containers Flaw Mounts Arbitrary Guest Rootfs Paths

Do Son August 21, 2026

TL;DR CVE-2026-77176 is a CVSS 8.1 flaw in Kata Containers genpolicy. A malicious operator can mount arbitrary...

CVE-2026-52929: PoC Exploit Published for Linux SCTP Privilege Escalation Linux kernel CVE-2026-52929 SCTP privilege escalation proof-of-concept exploit code demonstration on Ubuntu

Linux kernel CVE-2026-52929 SCTP privilege escalation proof-of-concept exploit code demonstration on Ubuntu

CVE-2026-52929: PoC Exploit Published for Linux SCTP Privilege Escalation

Do Son August 21, 2026

TL;DR A researcher published proof-of-concept exploit code for CVE-2026-52929, a Linux kernel SCTP flaw rated CVSS 7.5....

Spring GraphQL vulnerabilities security advisory dashboard showing CVE-2026-59285 remote code execution

Spring GraphQL Vulnerabilities: Seven Flaws Patched, One Enables RCE

Do Son August 20, 2026

TL;DR VMware disclosed seven Spring GraphQL vulnerabilities and related Spring Cloud flaws on August 20, 2026. All...