News Archives • Page 9 of 631 • Daily CyberSecurity

DOJ Charges 17 Iranians in Mabna Institute Cyber Theft Mabna Institute cyber theft indictment chart showing IRGC-linked hacking of universities and companies

Mabna Institute cyber theft indictment chart showing IRGC-linked hacking of universities and companies

DOJ Charges 17 Iranians in Mabna Institute Cyber Theft

Do Son August 19, 2026

At a glance Actor or group Mabna Institute (Iran-based), allegedly for the IRGC Activity type Spearphishing, credential...

CISA KEV Adds Four Exploited Flaws in SharePoint, vCenter CISA KEV Catalog adds four exploited vulnerabilities in SharePoint VMware vCenter macOS and Windows IKE

CISA KEV Catalog adds four exploited vulnerabilities in SharePoint VMware vCenter macOS and Windows IKE

CISA KEV Adds Four Exploited Flaws in SharePoint, vCenter

Do Son August 19, 2026

TL;DR CISA added four vulnerabilities to its Known Exploited Vulnerabilities Catalog on August 18, 2026. Each entry...

CVE-2026-17482: IBM Remote Code Execution Flaw (CVSS 9.8) IBM remote code execution exploitation flow and CVE-2026-17482 critical CVSS 9.8 impact

CVE-2026-17482: IBM Remote Code Execution Flaw (CVSS 9.8)

Do Son August 19, 2026

TL;DR Security researchers discovered multiple severe vulnerabilities in IBM Documentation Offline. Most notably, a critical IBM remote...

Chrome Update Fixes 15 Flaws, Two Critical in WebGL, Dawn Chrome security update patching 15 vulnerabilities including critical WebGL and Dawn buffer overflow flaws

Chrome security update patching 15 vulnerabilities including critical WebGL and Dawn buffer overflow flaws

Chrome Update Fixes 15 Flaws, Two Critical in WebGL, Dawn

Do Son August 19, 2026

TL;DR Google shipped a Chrome security update on August 26, 2026. It fixes 15 vulnerabilities, including two...

Armored Likho Still Toolkit Deploys Covert Spying Implants Armored Likho Still Toolkit architecture and Armored Likho Still Toolkit analysis flow

Armored Likho Still Toolkit architecture and Armored Likho Still Toolkit analysis flow

Armored Likho Still Toolkit Deploys Covert Spying Implants

Do Son August 19, 2026

At a glance Actor or group: Armored Likho (also known as Eagle Werewolf) Activity type: Cyber espionage...

YouTube View Count Metric Undergoes Major Overhaul YouTube view count metric interface showing immediate clicks registering as views

YouTube View Count Metric Undergoes Major Overhaul

Do Son August 18, 2026

YouTube recently announced a sweeping, structural modification regarding how it calculates the global view count metric for...

macOS Tahoe 26.7 Code Reveals Unreleased Apple Devices macOS Tahoe 26.7 leaks exposing Apple hardware roadmap

macOS Tahoe 26.7 Code Reveals Unreleased Apple Devices

Do Son August 18, 2026

Apple historically maintains strict secrecy regarding unreleased hardware products. However, the company’s own operating systems occasionally become...

D-Link DWR-M961 Router Hit by Command Injection and Buffer Overflow Flaws D-Link router command injection CVE-2026-71958 buffer overflow

D-Link DWR-M961 Router Hit by Command Injection and Buffer Overflow Flaws

Do Son August 18, 2026

D-Link patched 15 flaws in its DWR-M961 router this month. Most are D-Link router command injection bugs,...

CVE-2026-68138: PoC Exploit Enables Linux Kernel Privilege Escalation CVE-2026-68138 Linux kernel privilege escalation qdisc rate-table race condition use-after-free proof-of-concept exploit to root

CVE-2026-68138 Linux kernel privilege escalation qdisc rate-table race condition use-after-free proof-of-concept exploit to root

CVE-2026-68138: PoC Exploit Enables Linux Kernel Privilege Escalation

Do Son August 18, 2026

TL;DR A researcher released proof-of-concept exploit code for CVE-2026-68138, a race condition in the Linux kernel traffic-control...

MongoDB Patches 32 Vulnerabilities, Including CVE-2026-19001 Arbitrary Code Execution Flaw (CVSS 9.5) MongoDB security vulnerabilities CVE-2026-19001 BI Connector ODBC Driver diagram

MongoDB security vulnerabilities CVE-2026-19001 BI Connector ODBC Driver diagram

MongoDB Patches 32 Vulnerabilities, Including CVE-2026-19001 Arbitrary Code Execution Flaw (CVSS 9.5)

Do Son August 18, 2026

TL;DR: MongoDB security vulnerabilities now total 32 disclosed flaws across MongoDB Server, the BI Connector ODBC Driver,...

Kimi Work Silently Uploads Five Recent Agent Sessions With Feedback Reports Kimi Work privacy feedback tool agent session upload Moonshot AI desktop client

Kimi Work privacy feedback tool agent session upload Moonshot AI desktop client

Kimi Work Silently Uploads Five Recent Agent Sessions With Feedback Reports

Do Son August 18, 2026

A developer at RuntimeWire recently identified a privacy issue within Moonshot AI’s Kimi Work desktop client. When...

CVE-2026-71290: Apache HttpClient Flaw Lets Attackers Intercept and Modify Traffic (CVSS 9.1) Apache HttpClient TLS vulnerability CVE-2026-71290 MITM diagram

Apache HttpClient TLS vulnerability CVE-2026-71290 MITM diagram

CVE-2026-71290: Apache HttpClient Flaw Lets Attackers Intercept and Modify Traffic (CVSS 9.1)

Do Son August 18, 2026

TL;DR: Apache disclosed two Apache HttpClient TLS vulnerabilities in its HttpComponents Client library this month. The more...

PoC Discloses for CVE-2026-64849: watchTowr Sees Attacks on MLflow SSRF MLflow vulnerability CVE-2026-64849 unauthenticated full-read SSRF webhook redirect bypass reaching cloud metadata

MLflow vulnerability CVE-2026-64849 unauthenticated full-read SSRF webhook redirect bypass reaching cloud metadata

PoC Discloses for CVE-2026-64849: watchTowr Sees Attacks on MLflow SSRF

Do Son August 18, 2026

TL;DR A default MLflow tracking server can be turned into a proxy for reading internal services. Tracked...

Microsoft Removes WMIC from Default Windows 11 Installs Windows 11 optional features interface showing the WMIC command-line utility

Microsoft Removes WMIC from Default Windows 11 Installs

Do Son August 18, 2026

Microsoft previously signaled its firm intention to gradually deprecate the Windows Management Instrumentation Command-line (WMIC) utility. According...

NIST Asks for Help Putting People First in Cybersecurity NIST human-centered cybersecurity concept paper guidelines feedback human element people-first security

NIST human-centered cybersecurity concept paper guidelines feedback human element people-first security

NIST Asks for Help Putting People First in Cybersecurity

Do Son August 18, 2026

On August 12, 2026, NIST released a concept paper on human-centered cybersecurity. The paper lays out a...

SpaceXAI Launches Cursor Origin Beta for AI-Driven Git Hosting Cursor Origin Git hosting interface demonstrating AI agent integration and high-volume commits

Cursor Origin Git hosting interface demonstrating AI agent integration and high-volume commits

SpaceXAI Launches Cursor Origin Beta for AI-Driven Git Hosting

Do Son August 18, 2026

SpaceXAI previously announced its ambitious plan to launch a revolutionary code hosting service named Cursor Origin. Fortunately,...

SafePal Data Breach Exposes Order Information of 39,798 Customers SafePal data breach order information exposed 39798 customers authorization flaw phishing risk crypto wallet

SafePal data breach order information exposed 39798 customers authorization flaw phishing risk crypto wallet

SafePal Data Breach Exposes Order Information of 39,798 Customers

Do Son August 18, 2026

At a Glance Organization SafePal (crypto hardware wallet maker) Data exposed Names, emails, shipping addresses, phone numbers,...

North Carolina Confirms Apple Wallet Digital ID Support, More States Ahead Apple Wallet digital ID North Carolina driver's license mobile ID TSA airport

Apple Wallet digital ID North Carolina driver's license mobile ID TSA airport

North Carolina Confirms Apple Wallet Digital ID Support, More States Ahead

Do Son August 18, 2026

Apple has spent recent years aggressively championing a paperless, digitized way of life, and one strand of...

GEEKOM Mini PC Driver Downloads Found Bundled With Backdoor Since 2024 GEEKOM driver backdoor malware mini PC AMD infected download page

GEEKOM Mini PC Driver Downloads Found Bundled With Backdoor Since 2024

Do Son August 18, 2026

Domestic mini PC manufacturer GEEKOM was recently discovered to be distributing driver downloads through its official website...

Kimsuky AI Operations Reveal New Cyber Tactics Kimsuky AI operations flow diagram by North Korea threat actor

Kimsuky AI Operations Reveal New Cyber Tactics

Do Son August 18, 2026

At a glance Actor: Kimsuky (suspected North Korea threat actor) Activity type: Spear phishing and AI experimentation...

Windows 11 WinRE Gains Automatic Wi-Fi Reconnection for Cloud Rebuild Windows 11 WinRE automatic Wi-Fi network recovery Cloud Rebuild Quick Machine Recovery

Windows 11 WinRE automatic Wi-Fi network recovery Cloud Rebuild Quick Machine Recovery

Windows 11 WinRE Gains Automatic Wi-Fi Reconnection for Cloud Rebuild

Do Son August 18, 2026

Microsoft has improved the networking capabilities of the WinRE recovery environment in the latest Windows 11 Insider...

CVE-2026-75045: Unauthenticated Attacker Could Download YouTrack Database Backups CVE-2026-75045 JetBrains YouTrack vulnerability unauthenticated attacker download database backups shared draft signature

CVE-2026-75045 JetBrains YouTrack vulnerability unauthenticated attacker download database backups shared draft signature

CVE-2026-75045: Unauthenticated Attacker Could Download YouTrack Database Backups

Do Son August 18, 2026

TL;DR JetBrains fixed eight security flaws in YouTrack, its issue-tracking platform. The most serious, CVE-2026-75045, is rated...