Daily CyberSecurity • Page 83 of 774 • Zero-hour alerts. Unmatched analysis.

Active Exploitation and Public PoC Disclosed for CVE-2026-6875 ServiceNow Sandbox Escape Remote Code Execution

Diagram of CVE-2026-6875 ServiceNow sandbox escape RCE and pre-auth code execution

Active Exploitation and Public PoC Disclosed for CVE-2026-6875 ServiceNow Sandbox Escape Remote Code Execution

Do Son July 18, 2026

Attackers are exploiting a ServiceNow sandbox escape RCE in the wild. Public proof-of-concept details for CVE-2026-6875 pre-auth code execution are out.

Cloudflare Blocks Critical WordPress wp2shell Vulnerability Cloudflare firewall blocking the critical WordPress wp2shell vulnerability and RCE attacks

Cloudflare firewall blocking the critical WordPress wp2shell vulnerability and RCE attacks

Cloudflare Blocks Critical WordPress wp2shell Vulnerability

Do Son July 18, 2026

Cloudflare deploys emergency WAF rules to block the critical WordPress wp2shell vulnerability. Update your site now to prevent severe RCE security risks.

Microsoft Ends OneDrive Support for Windows 10 Microsoft ending OneDrive updates and support for Windows 10 lifecycle

Microsoft Ends OneDrive Support for Windows 10

Do Son July 18, 2026

Microsoft will gradually end OneDrive updates and support for Windows 10 versions 21H2 and 22H2. Discover the complete timeline and alternatives for users.

Ubuntu Pro Client Flaw CVE-2026-11386 Allows Arbitrary Code Execution With Root Privileges Ubuntu Pro Client vulnerability CVE-2026-11386 APT source injection arbitrary code execution root privileges

Ubuntu Pro Client vulnerability CVE-2026-11386 APT source injection arbitrary code execution root privileges

Ubuntu Pro Client Flaw CVE-2026-11386 Allows Arbitrary Code Execution With Root Privileges

Do Son July 18, 2026

Ubuntu Pro Client vulnerability CVE-2026-11386 (CVSS 9.0) lets a spoofed contract server inject APT sources and run code with root privileges.

WordPress Pre-Auth RCE CVE-2026-63030: Vulnerability Details and PoC Exploit Code Now Public

WordPress pre-auth RCE CVE-2026-63030 REST batch route confusion SQL injection public PoC

WordPress Pre-Auth RCE CVE-2026-63030: Vulnerability Details and PoC Exploit Code Now Public

Do Son July 18, 2026

WordPress pre-auth RCE CVE-2026-63030 chains a REST batch bug with SQL injection. Details and a public PoC are out. Update to WordPress 7.0.2 now.

APT-C-60 Attacks Target Japan With SpyGlace Malware APT-C-60 attacks on Japan using LNK files and legitimate services to deploy SpyGlace malware

APT-C-60 Attacks Target Japan With SpyGlace Malware

Do Son July 18, 2026

JPCERT/CC details new APT-C-60 attacks on Japan. The group abuses Proton Drive, LNK files, and GitHub to deploy SpyGlace malware.

CheapSSLWEB Review: Best Place to Buy Cheap SSL Certificates with SSL Automation cheapsslweb-ssl-provider

CheapSSLWEB Review: Best Place to Buy Cheap SSL Certificates with SSL Automation

Do Son July 18, 2026

As cyber threats continue to grow and SSL certificate lifecycles become shorter, businesses need a security provider...

Certera Review: A Trusted Leader in SSL Certificates, PKI, and Digital Trust Solutions

Do Son July 18, 2026

In today’s digital world, protecting websites, applications, users, and sensitive data requires more than simply installing an...

GoldPickaxe Banking Trojan Returns to Steal Faces and Bank Logins

Do Son July 17, 2026

The GoldPickaxe banking Trojan returns, stealing biometric data, SMS, and lock screens from Android users across Asia, Zimperium warns.

RokRAT Malware Hides in Fake PDF Files to Spy on Academics APT37 RokRAT malware delivered via fake PDF in Operation Capsule Vault spear-phishing

APT37 RokRAT malware delivered via fake PDF in Operation Capsule Vault spear-phishing

RokRAT Malware Hides in Fake PDF Files to Spy on Academics

Do Son July 17, 2026

Genians exposed Operation Capsule Vault, an APT37 campaign. The RokRAT malware hides inside a fake PDF to spy on academics and researchers.

CVE-2026-54523 (CVSS 9.6): Public PoC Exploit Enables Kyverno Privilege Escalation to Admin in Any Namespace Kyverno vulnerability CVE-2026-54523 privilege escalation to admin in any namespace including kube-system

Kyverno vulnerability CVE-2026-54523 privilege escalation to admin in any namespace including kube-system

CVE-2026-54523 (CVSS 9.6): Public PoC Exploit Enables Kyverno Privilege Escalation to Admin in Any Namespace

Do Son July 17, 2026

Kyverno vulnerability CVE-2026-54523 (CVSS 9.6) is public with PoC exploit code. It lets a tenant gain admin in any namespace. Update to v1.18.2.

Citrix Secure Access Vulnerability Lets Local Users Gain SYSTEM Privileges

Citrix Secure Access vulnerability CVE-2026-53565 privilege escalation illustration

Citrix Secure Access Vulnerability Lets Local Users Gain SYSTEM Privileges

Do Son July 17, 2026

Citrix patched CVE-2026-53565, a Citrix Secure Access vulnerability letting local users gain SYSTEM, plus the CVE-2026-53566 out-of-bounds read bug.

Misconfigured Server Exposes Three AiTM Phishing Operators Open directory exposing three AiTM phishing operators using Evilginx MFA bypass tooling

Open directory exposing three AiTM phishing operators using Evilginx MFA bypass tooling

Misconfigured Server Exposes Three AiTM Phishing Operators

Do Son July 17, 2026

A misconfigured server exposed three AiTM phishing operators running Evilginx MFA bypass and Device Code attacks on Microsoft 365 accounts.

292 Fake GitHub Repositories Deliver BoryptGrab Infostealer to Windows Users Fake GitHub repositories BoryptGrab infostealer attack chain diagram

292 Fake GitHub Repositories Deliver BoryptGrab Infostealer to Windows Users

Do Son July 17, 2026

Arctic Wolf found 292 fake GitHub repositories impersonating software vendors to deliver a BoryptGrab-lineage infostealer via DLL side-loading.

EU Orders Google to Open Android to Rival AI Assistants and Share Search Data Under the DMA

Do Son July 17, 2026

The Google DMA ruling forces Android to open core access to rival AI assistants and share search data by 2027, sparking privacy and security warnings.

Farewell NotebookLM: Google Rebrands Its AI Research Tool as Gemini Notebook, Adds Native Code Execution Gemini Notebook rebrand of NotebookLM with native code execution

Gemini Notebook rebrand of NotebookLM with native code execution

Farewell NotebookLM: Google Rebrands Its AI Research Tool as Gemini Notebook, Adds Native Code Execution

Do Son July 17, 2026

Google rebrands NotebookLM as Gemini Notebook, adding native code execution, AI Mode integration, and citing over 30 million active users.

Chrome Security Update Patches Three Critical Use-After-Free Flaws in CameraCapture, GPU, and Network Chrome security update 150.0.7871.128 critical use-after-free vulnerabilities CameraCapture GPU Network

Chrome security update 150.0.7871.128 critical use-after-free vulnerabilities CameraCapture GPU Network

Chrome Security Update Patches Three Critical Use-After-Free Flaws in CameraCapture, GPU, and Network

Do Son July 17, 2026

Chrome security update 150.0.7871.128 patches 7 flaws, including three critical use-after-free bugs in CameraCapture, GPU, and Network. Update now.

Supply Chain Trojan Targets Software Developers Through Project Files Seedworm Espionage Campaign 2026 ChromElevator Stealer DLL Sideloading SIM Swapping Crypto Theft Lazarus Comebacker, Aerospace Espionage Delete PlugX Malware

Seedworm Espionage Campaign 2026 ChromElevator Stealer DLL Sideloading SIM Swapping Crypto Theft Lazarus Comebacker, Aerospace Espionage Delete PlugX Malware

Supply Chain Trojan Targets Software Developers Through Project Files

Do Son July 17, 2026

Doctor Web found a supply chain trojan targeting software developers. This developer-targeting malware steals data, crypto wallets, and mines coins.

CVE-2026-9770: Information Disclosure Vulnerability Exposes Admin Credentials on TP-Link Kasa Cameras TP-Link Kasa vulnerability CVE-2026-9770 information disclosure flaw on EC70 and EC71 cameras

TP-Link Kasa vulnerability CVE-2026-9770 information disclosure flaw on EC70 and EC71 cameras

CVE-2026-9770: Information Disclosure Vulnerability Exposes Admin Credentials on TP-Link Kasa Cameras

Do Son July 17, 2026

TP-Link Kasa vulnerability CVE-2026-9770 (CVSS 8.6) lets local attackers intercept admin credentials on EC70 and EC71 cameras. Update firmware now.

CISA Adds FortiSandbox and SharePoint Flaws to KEV Catalog After Confirming Active Exploitation CISA KEV catalog adds three actively exploited FortiSandbox and SharePoint vulnerabilities

CISA KEV catalog adds three actively exploited FortiSandbox and SharePoint vulnerabilities

CISA Adds FortiSandbox and SharePoint Flaws to KEV Catalog After Confirming Active Exploitation

Do Son July 17, 2026

CISA KEV catalog adds three actively exploited flaws: FortiSandbox CVE-2026-25089, CVE-2026-39808, and SharePoint CVE-2026-58644. Patch by July 19.

7-Zip Vulnerability CVE-2026-14266 Allows Remote Code Execution Through Crafted XZ Data

7-Zip vulnerability CVE-2026-14266 XZ decompression heap buffer overflow remote code execution

7-Zip Vulnerability CVE-2026-14266 Allows Remote Code Execution Through Crafted XZ Data

Do Son July 16, 2026

7-Zip vulnerability CVE-2026-14266 (CVSS 7.0) allows remote code execution via crafted XZ data. Update to 7-Zip 26.02. No exploitation confirmed.

Grok Build Goes Open Source for Community Audits but GitHub Issues and PRs Stay Closed Grok Build open source release on GitHub with data sharing disabled

Grok Build open source release on GitHub with data sharing disabled

Grok Build Goes Open Source for Community Audits but GitHub Issues and PRs Stay Closed

Do Son July 16, 2026

Grok Build open source release lets the community audit the code with data sharing disabled by default, yet GitHub Issues and PRs remain closed.