News Archives • Page 8 of 604 • Daily CyberSecurity

ValleyRAT Malware Hits Japanese and Chinese Users Through Email Attacks ValleyRAT malware email campaign delivering DLL sideloading payload to Japanese and Chinese users

ValleyRAT malware email campaign delivering DLL sideloading payload to Japanese and Chinese users

ValleyRAT Malware Hits Japanese and Chinese Users Through Email Attacks

Do Son July 6, 2026

At a glance Details Malware family ValleyRAT (Remote Access Trojan) Threat actor Often linked to SilverFox; attribution...

Ousaban Banking Trojan Targets Spain and Portugal Ousaban banking trojan infection chain diagram showing malware delivery methods.

Ousaban Banking Trojan Targets Spain and Portugal

Do Son July 6, 2026

At a glance: Malware Family: Ousaban Threat Actor: Unknown (Suspected Latin American origin) Targets/Victims: Banking customers in...

TAG-182 Threat Cluster Spreads MarkiRAT Malware Diagram of TAG-182 threat cluster spreading MarkiRAT malware

TAG-182 Threat Cluster Spreads MarkiRAT Malware

Do Son July 6, 2026

At a glance: Actor/Group: TAG-182 threat cluster (suspected Iran-nexus) Activity Type: Cyber surveillance and malware distribution Targets/Victims:...

The Fall of HiAnime: Vietnamese Police Arrest Piracy Ring Vietnamese police conduct HiAnime piracy arrests, dismantling a massive illegal anime streaming syndicate.

Vietnamese police conduct HiAnime piracy arrests, dismantling a massive illegal anime streaming syndicate.

The Fall of HiAnime: Vietnamese Police Arrest Piracy Ring

Do Son July 6, 2026

In March 2026, HiAnime abruptly announced its closure and issued a farewell statement. This platform was arguably...

PHP Patches Remote DoS Flaw CVE-2026-12184 and an OpenSSL Memory Corruption Bug PHP remote DoS advisory graphic showing a PHP-FPM crash and openssl memory corruption

PHP remote DoS advisory graphic showing a PHP-FPM crash and openssl memory corruption

PHP Patches Remote DoS Flaw CVE-2026-12184 and an OpenSSL Memory Corruption Bug

Do Son July 6, 2026

TL;DR The PHP team fixed two flaws, including a PHP remote DoS that can crash a whole...

IBM WebSphere vulnerabilities CVE-2026-11712 CVE-2026-11595

Multiple IBM WebSphere Vulnerabilities Expose Systems

Do Son July 6, 2026

IBM discovered three security flaws affecting WebSphere Application Server versions 9.0 and 8.5. These IBM WebSphere vulnerabilities...

Weekly Threat Intelligence: The July 2026 Breaches Weekly Threat Intelligence Active Vulnerability Report

Weekly Threat Intelligence: The July 2026 Breaches

Do Son July 6, 2026

Welcome to the latest weekly threat intelligence briefing. Our cyber defense team processed 1,939 new vulnerabilities between...

FreeBSD Security Advisories Detail Critical Vulnerabilities Diagram of system vulnerabilities detailed in FreeBSD security advisories including CVE-2026-49420, CVE-2026-49429, and CVE-2026-49422

Diagram of system vulnerabilities detailed in FreeBSD security advisories including CVE-2026-49420, CVE-2026-49429, and CVE-2026-49422

FreeBSD Security Advisories Detail Critical Vulnerabilities

Do Son July 6, 2026

The FreeBSD Project published multiple FreeBSD security advisories today. These warnings expose critical flaws in OpenZFS, libalias,...

Kerberos Reflection Bypass CVE-2026-26128 Gets Public PoC Exploit Kerberos reflection CVE-2026-26128 SMB SYSTEM privilege escalation Windows Unicode SPN PoC exploit

Kerberos reflection CVE-2026-26128 SMB SYSTEM privilege escalation Windows Unicode SPN PoC exploit

Kerberos Reflection Bypass CVE-2026-26128 Gets Public PoC Exploit

Do Son July 6, 2026

TL;DR Synacktiv publicly disclosed a Kerberos reflection bypass tracked as CVE-2026-26128. The flaw lets a domain user...

ModSecurity Vulnerabilities Let Attackers Bypass WAF Rules ModSecurity vulnerabilities enabling WAF bypass via multipart parser and utf8toUnicode flaws (CVE-2026-52747, CVE-2026-52761)

ModSecurity vulnerabilities enabling WAF bypass via multipart parser and utf8toUnicode flaws (CVE-2026-52747, CVE-2026-52761)

ModSecurity Vulnerabilities Let Attackers Bypass WAF Rules

Do Son July 6, 2026

TL;DR The OWASP ModSecurity team patched two ModSecurity vulnerabilities in version 3.0.16. Both let attackers slip payloads...

FBI Warns of TeamPCP Supply Chain Attack TeamPCP supply chain attack and software supply chain compromise alert

FBI Warns of TeamPCP Supply Chain Attack

Do Son July 4, 2026

At a glance Actor TeamPCP Activity type Software supply chain compromise Targets Enterprise developers, security tools Scale...

Critical Security Flaws Found in Langflow OSS Diagram illustrating Langflow OSS vulnerabilities and CVE-2026-10134 execution paths

Critical Security Flaws Found in Langflow OSS

Do Son July 4, 2026

IBM security researchers discovered six severe Langflow OSS vulnerabilities. These flaws allow attackers to execute arbitrary code,...

DCMTK Vulnerabilities Expose Medical Imaging Systems to File Write and DoS DCMTK vulnerabilities enabling path traversal file write in the DICOM toolkit (CVE-2026-50003)

DCMTK vulnerabilities enabling path traversal file write in the DICOM toolkit (CVE-2026-50003)

DCMTK Vulnerabilities Expose Medical Imaging Systems to File Write and DoS

Do Son July 4, 2026

TL;DR CISA published an advisory for five DCMTK vulnerabilities on 30 June 2026. The DICOM toolkit powers...

GitHub CD-ROM Repository: Physical Code Discs GitHub CD-ROM repository physical code disc campaign commemoration

GitHub CD-ROM Repository: Physical Code Discs

Do Son July 3, 2026

Sony recently announced that it will cease production of physical game discs for new releases starting in...

Claude Fable 5 Subscription: Credits Required for Access Claude Fable 5 subscription model and credit purchase prompt interface

Claude Fable 5 Subscription: Credits Required for Access

Do Son July 3, 2026

Following the restoration of Claude Fable 5, Anthropic reset the weekly quotas for all premium subscribers, permitting...

Chrome Prepares to Auto-Pin Extensions to Toolbar Google Chrome settings page showcasing the new auto-pin extensions option for toolbars

Chrome Prepares to Auto-Pin Extensions to Toolbar

Do Son July 3, 2026

For a considerable epoch, Google Chrome has routinely concealed extension icons by defaulting them into a collapsed...

Claude Fable 5 Auto-Downgrades Tasks It Deems Too Simple Logs Prove It Claude Fable 5 model classifier downgrade log showing TOO_DUMB_TO_NEED_FABLE flag

Claude Fable 5 model classifier downgrade log showing TOO_DUMB_TO_NEED_FABLE flag

Claude Fable 5 Auto-Downgrades Tasks It Deems Too Simple Logs Prove It

Do Son July 3, 2026

Claude Fable 5 is back online. Developers using Claude Code can access the model through their existing...

Lazarus-Linked npm Malware Masquerades as Rollup Polyfills Lazarus npm malware masquerading as Rollup polyfill packages in a supply chain attack

Lazarus npm malware masquerading as Rollup polyfill packages in a supply chain attack

Lazarus-Linked npm Malware Masquerades as Rollup Polyfills

Do Son July 3, 2026

At a glance Actor Suspected North Korean Lazarus-linked group (attribution by TTP similarity) Activity npm supply chain...

Silent Swap Crypto Clipper Hides in Google Notes Extension Diagram showing the Silent Swap crypto clipper and Google Notes extension infection chain

Diagram showing the Silent Swap crypto clipper and Google Notes extension infection chain

Silent Swap Crypto Clipper Hides in Google Notes Extension

Do Son July 3, 2026

Unsigned software installers are distributing a dangerous new malware strain that quietly intercepts digital currency transactions. Security...

kernel.org Outage: Config Error Wipes All Linux Kernel Files kernel.org outage HTTP 404 error caused by Linux Foundation mirror configuration failure

kernel.org outage HTTP 404 error caused by Linux Foundation mirror configuration failure

kernel.org Outage: Config Error Wipes All Linux Kernel Files

Do Son July 3, 2026

Yesterday, reports emerged that kernel.org had deleted all hosted kernel files. Every archived and current kernel package...

EU Court Upholds €4.1 Billion Google Android Antitrust Fine

Do Son July 3, 2026

After nearly a decade of legal battles, the EU’s antitrust case against Google has finally reached its...

Glitch SPY Android RAT Spreads Through a Fake Polish Rental App Glitch SPY Android RAT distributed through a fake Polish rental app abusing Accessibility Service

Glitch SPY Android RAT distributed through a fake Polish rental app abusing Accessibility Service

Glitch SPY Android RAT Spreads Through a Fake Polish Rental App

Do Son July 3, 2026

At a glance Malware family Glitch SPY (Android RAT and builder platform) Threat actor Unattributed; operator unidentified...

Critical Alert 2 Active Exploits Detected Today