News Archives • Page 9 of 645 • Daily CyberSecurity

CVE-2026-76578 (CVSS 9.8): Critical FreeIPA Vulnerability

Do Son September 7, 2026

TL;DR Security researchers discovered FreeIPA CVE-2026-76578, a critical security flaw. This FreeIPA vulnerability carries a CVSS score...

Packagist Themes iOS Spyware Steals Crypto Wallet Seeds Trojanized streaming site causing Packagist themes iOS spyware infections

Packagist Themes iOS Spyware Steals Crypto Wallet Seeds

Do Son September 7, 2026

At a Glance Malware family: FUNNULL-hosted iOS spyware Threat actor: Suspected Vietnamese-operated group Targets or victims: Mobile...

PHP Web Server Rootkit Targets F5 BIG-IP Devices Linux PHP web server rootkit architecture and PHP web server rootkit memory injection flow

PHP Web Server Rootkit Targets F5 BIG-IP Devices

Do Son September 7, 2026

At a Glance Malware family Poisoned Refresh (Linux rootkit implant) Threat actor Unconfirmed (tracked by F5 as...

CVE-2026-86218 (CVSS 10): N-central Pre-Auth RCE Exploited in the Wild N-able N-central pre-auth remote code execution vulnerability CVE-2026-86218 exploited in the wild against RMM servers

N-able N-central pre-auth remote code execution vulnerability CVE-2026-86218 exploited in the wild against RMM servers

CVE-2026-86218 (CVSS 10): N-central Pre-Auth RCE Exploited in the Wild

Do Son September 7, 2026

N-able shipped an emergency hotfix for a maximum-severity flaw in its N-central platform on September 6, 2026....

Mirage Kitten Malware Targets Aviation and Fintech Sectors Mirage Kitten malware campaign delivering NodeRabbit

Mirage Kitten Malware Targets Aviation and Fintech Sectors

Do Son September 7, 2026

At a Glance Actor or group Allegedly Mirage Kitten (UNC1549, Smoke Sandstorm) Activity type Cyberespionage and remote...

StreamRat Banking Trojan Targets Spanish Android Users StreamRat banking trojan campaign fake Meta advertisement targeting Android devices

StreamRat banking trojan campaign fake Meta advertisement targeting Android devices

StreamRat Banking Trojan Targets Spanish Android Users

Do Son September 7, 2026

At a Glance Malware family: StreamRat Threat actor: Suspected Spanish-speaking developer using Mirax infrastructure Target or victims:...

Silver Fox Fake Software Installers Disable Windows Defender Spirals ransomware double extortion attack chain from IIS web shell to network encryption

Spirals ransomware double extortion attack chain from IIS web shell to network encryption

Silver Fox Fake Software Installers Disable Windows Defender

Do Son September 7, 2026

At a glance Campaign Counterfeit software-download / fake installer campaign Threat actor Consistent with Silver Fox (Yinhu);...

MikroTrick PoC: RouterOS Admin Rights Exploited In Wild MikroTik RouterOS MikroTrick vulnerability chain exploited in the wild for full administrative privileges via SSH, with public PoC exploit code

MikroTik RouterOS MikroTrick vulnerability chain exploited in the wild for full administrative privileges via SSH, with public PoC exploit code

MikroTrick PoC: RouterOS Admin Rights Exploited In Wild

Do Son September 7, 2026

CERT Polska confirmed active attacks against internet-facing MikroTik RouterOS devices on September 5, 2026. Attackers chain two...

Microsoft Project Zenith: A Ready-to-Code Windows 11 Experience for Developer PCs Microsoft Project Zenith ready-to-code Windows 11 developer experience with preinstalled tools

Microsoft Project Zenith ready-to-code Windows 11 developer experience with preinstalled tools

Microsoft Project Zenith: A Ready-to-Code Windows 11 Experience for Developer PCs

Do Son September 7, 2026

Microsoft has recently unveiled a new system named Project Zenith, offering developers a ready-to-code Windows 11 PC...

Cloudflare Raises Workers Size Limit to 64 MiB for Free and Paid Plans Cloudflare Workers size limit raised to 64 MiB uncompressed on free and paid plans

Cloudflare Workers size limit raised to 64 MiB uncompressed on free and paid plans

Cloudflare Raises Workers Size Limit to 64 MiB for Free and Paid Plans

Do Son September 7, 2026

According to the changelog published by Cloudflare, from today both the free and paid Workers subscription plans...

AI Agent Coordination: The Unprecedented OpenAI Breakout AI agent coordination diagram showing OpenAI models bypassing constraints

AI Agent Coordination: The Unprecedented OpenAI Breakout

Do Son September 7, 2026

On September 5, OpenAI publicly acknowledged the wiki incident. During this event, autonomous AI agents transformed public...

Exchange Online to Throttle and Block Outdated Exchange 2016 and 2019 Servers Exchange Online blocking outdated Exchange Server 2016 and 2019 in hybrid mail flow

Exchange Online blocking outdated Exchange Server 2016 and 2019 in hybrid mail flow

Exchange Online to Throttle and Block Outdated Exchange 2016 and 2019 Servers

Do Son September 7, 2026

Microsoft is beginning to sever outdated on-premises Exchange servers from cloud mail more sternly. From the second...

Weekly CVE Report: Daily Cybersecurity Beats CISA KEV on Exploited Flaws This weekly CVE report covers 10 exploited vulnerabilities added to CISA KEV and 2,316 new CVEs from Aug 31 to Sep 6, 2026. Patch fast.

This weekly CVE report covers 10 exploited vulnerabilities added to CISA KEV and 2,316 new CVEs from Aug 31 to Sep 6, 2026. Patch fast.

Weekly CVE Report: Daily Cybersecurity Beats CISA KEV on Exploited Flaws

Do Son September 7, 2026

Daily Cybersecurity flagged nine actively exploited vulnerabilities before or beyond CISA this week. That is the standout...

Roundcube Security Update Fixes 12 Webmail Flaws Roundcube Webmail security update patching a zero-click stored XSS and SSRF bypass across versions 1.6.19 and 1.7.4

Roundcube Webmail security update patching a zero-click stored XSS and SSRF bypass across versions 1.6.19 and 1.7.4

Roundcube Security Update Fixes 12 Webmail Flaws

Do Son September 6, 2026

Roundcube shipped a security update on September 6, 2026. The Roundcube security update patches 12 vulnerabilities across...

MikroTik RouterOS Vulnerability Exploited in the Wild: Patch and Defense Blueprint MikroTik RouterOS security update fixes critical vulnerability

MikroTik RouterOS security update fixes critical vulnerability

MikroTik RouterOS Vulnerability Exploited in the Wild: Patch and Defense Blueprint

Do Son September 5, 2026

Speed becomes vital when a manufacturer conceals vulnerability details. Consequently, rapid patching eclipses the need to understand...

StyleSmuggler: Magento Zero-Day RCE Exploited in the Wild StyleSmuggler Magento zero-day allowing unauthenticated remote code execution against Adobe Commerce stores under active attack

StyleSmuggler Magento zero-day allowing unauthenticated remote code execution against Adobe Commerce stores under active attack

StyleSmuggler: Magento Zero-Day RCE Exploited in the Wild

Do Son September 5, 2026

Attacks against Magento stores began on September 4, 2026. Security firm Sansec named the flaw StyleSmuggler. This...

US Offers $10M for IRGC Cyber Leader US Rewards for Justice poster offering $10 million for information on Iranian IRGC cyber commander Amir Yaryab

US Rewards for Justice poster offering $10 million for information on Iranian IRGC cyber commander Amir Yaryab

US Offers $10M for IRGC Cyber Leader

Do Son September 5, 2026

The United States government is prepared to pay up to 10 million dollars for actionable intelligence concerning...

Coder Registry Attack: Hijacked Cloudflare Pool Served Malicious Terraform Modules Coder registry attack serving malicious Terraform modules from a hijacked Cloudflare pool

Coder registry attack serving malicious Terraform modules from a hijacked Cloudflare pool

Coder Registry Attack: Hijacked Cloudflare Pool Served Malicious Terraform Modules

Do Son September 5, 2026

Attackers needed no counterfeit website to slip malicious Terraform modules to developers. Unknown intruders gained access to...

Google Workspace Integrates Gemini Live Features Google Workspace interface displaying Gemini Live integration across Gmail, Docs, and Keep applications

Google Workspace interface displaying Gemini Live integration across Gmail, Docs, and Keep applications

Google Workspace Integrates Gemini Live Features

Do Son September 5, 2026

As generative artificial intelligence progressively evolves from static text prompts into natural bidirectional voice interactions, Google announces...

CVE-2026-75754 (CVSS 10): ASUS Control Center Root RCE ASUS Control Center vulnerability CVE-2026-75754 allowing unauthenticated attackers to gain a root shell and full remote control

ASUS Control Center vulnerability CVE-2026-75754 allowing unauthenticated attackers to gain a root shell and full remote control

CVE-2026-75754 (CVSS 10): ASUS Control Center Root RCE

Do Son September 4, 2026

ASUS published CVE-2026-75754 on September 4, 2026. This ASUS Control Center vulnerability earns a maximum CVSS score...

The Gentlemen Ransomware Deploys in Under 24 Hours The Gentlemen ransomware attack chain showing GOLD SHERWOOD affiliates using GentleKiller EDR killer and Rclone data exfiltration

The Gentlemen ransomware attack chain showing GOLD SHERWOOD affiliates using GentleKiller EDR killer and Rclone data exfiltration

The Gentlemen Ransomware Deploys in Under 24 Hours

Do Son September 4, 2026

At a glance Malware family The Gentlemen ransomware (Go-based locker; Windows, Linux, ESXi builds) Threat actor GOLD...

Trezor Data Breach at ShipMonk Grows to 80,000 Customers Trezor data breach notice showing customer order data exposed through shipping provider ShipMonk in a third-party vendor breach

Trezor data breach notice showing customer order data exposed through shipping provider ShipMonk in a third-party vendor breach

Trezor Data Breach at ShipMonk Grows to 80,000 Customers

Do Son September 4, 2026

At a glance Organization Trezor (via shipping provider ShipMonk) Data exposed Names, emails, phone numbers, shipping addresses,...

Critical Alert 3 Active Exploits Detected Today