Cyber Daily News

Cyber Daily News for October 3rd, 2026 Cyber Daily News is also available via podcast! https://feeds.transistor.fm/cyber-daily-news Stories mentioned in today's briefing: - China-linked UAT-11587 uses the Antino backdoor and Microsoft 365 as a C2 channel https://securityaffairs.com/200264/apt/antino-backdoor-uses-your-inbox-as-its-control-panel.html - CISA adds actively exploited Zammad flaws to its Known Exploited Vulnerabilities catalog https://securityaffairs.com/200248/security/u-s-cisa-adds-zammad-gmbh-zammad-flaws-to-its-known-exploited-vulnerabilities-catalog.html - Fake Zoom installer targets macOS users with the CloudSyncD backdoor https://www.securityweek.com/macos-users-targeted-by-fake-zoom-installer-carrying-cloudsyncd-backdoor/ - Alleged Iranian state hacker Amir Barati extradited to the US https://www.securityweek.com/in-rare-move-iranian-hacker-accused-of-working-for-irgc-extradited-to-us/ - Microsoft: attackers use AI to...

Cyber Daily News for October 2nd, 2026 Cyber Daily News is also available via podcast! https://feeds.transistor.fm/cyber-daily-news Stories mentioned in today's briefing: - Operation KillSwitch: Police Dismantle KillSec Ransomware Group https://securityaffairs.com/200200/cyber-crime/operation-killswitch-police-dismantle-killsec-ransomware-group.html - Exploited Fortinet FortiMail Zero-Day Calls for Urgent Action https://www.securityweek.com/exploited-fortinet-fortimail-zero-day-calls-for-urgent-action/ - Zimbra Vulnerability Exploited in the Wild Prior to Public Disclosure https://www.securityweek.com/zimbra-vulnerability-exploited-in-the-wild-prior-to-public-disclosure/ - China-Linked Hackers Impersonate AI Experts to Target US Policy Insiders https://www.infosecurity-magazine.com/news/ta419-impersonates-ai-experts-us/ - AI Agents Aimed SQL Injection at US and Canadian Government Sites https://www...

Cyber Daily News for October 1st, 2026 Cyber Daily News is also available via podcast! https://feeds.transistor.fm/cyber-daily-news Stories mentioned in today's briefing: - AI agent chains two Zammad zero-days to breach vulnerability-disclosure group DIVD https://securityaffairs.com/200126/hacking/ai-agent-chains-zammad-zero-days-to-take-over-divd-systems-in-seconds.html - Government and finance orgs hit in weeks-long NetScaler zero-day attacks https://www.securityweek.com/government-finance-orgs-targeted-in-weeks-long-netscaler-zero-day-attacks/ - Cisco patches an exploited critical Catalyst SD-WAN Manager flaw, now in CISA's KEV catalog https://www.securityweek.com/cisco-patches-exploited-catalyst-sd-wan-zero-day-vulnerability/ - WatchGuard fixes a critical Fireware OS flaw allowing root-level remote code execution https://securityaffairs.com/200108/security/watchguard-fixes-critical-fireware-os-flaw-allowing-remote-code-execution.html

Cyber Daily News for September 30th, 2026 Cyber Daily News is also available via podcast! https://feeds.transistor.fm/cyber-daily-news Stories mentioned in today's briefing: - Three Million Affected in Pentagon Personnel Agency Data Breach https://securityaffairs.com/200017/uncategorized/three-million-affected-in-pentagon-personnel-agency-data-breach.html - Japanese railway operators Keio Corporation and Tokyo Metro disclose security breaches https://securityaffairs.com/200027/data-breach/japanese-railway-operators-keio-corporation-and-tokyo-metro-disclose-security-breaches.html - WHIPSHOT and SLAPSHOT: the tools behind an active Citrix NetScaler campaign https://securityaffairs.com/200046/security/whipshot-and-slapshot-the-tools-behind-an-active-citrix-netscaler-campaign.html - Amazon Bedrock AgentCore Flaws Could Expose AWS Credentials https://www.infosecurity-magazine.com/news/aws-agentcore-sdk-flaws-ai/ - RatHat's Evolving C2 Panel Points to Malware-as-a-Service Model ...

Cyber Daily News for September 29th, 2026 Cyber Daily News is also available via podcast! https://feeds.transistor.fm/cyber-daily-news Stories mentioned in today's briefing: - Deepfakes Are Becoming a Costly Reality for Businesses, Report Warns https://www.infosecurity-magazine.com/news/deepfakes-costly-reality-for/ - Nearly 400,000 Medicaid Beneficiaries Caught in DC Healthcare Alliance Data Exposure https://securityaffairs.com/199926/data-breach/nearly-400000-medicaid-beneficiaries-caught-in-medicaid-and-dc-healthcare-alliance-data-exposure.html - Apple Patches Meta-Reported Zero-Day Linked to 'Extremely Sophisticated Attack' https://www.securityweek.com/apple-patches-meta-reported-zero-day-linked-to-extremely-sophisticated-attack/ - Prison Sentence for Former US Soldier Who Hacked AT&T and Verizon https://www.securityweek.com/prison-sentence-for-former-us-soldier-who-hacked-att-and-verizon/ - AI Accounts Are Becoming the New Target...

Cyber Daily News for September 28th, 2026 Cyber Daily News is also available via podcast! https://feeds.transistor.fm/cyber-daily-news Stories mentioned in today's briefing: - Citrix confirms two NetScaler zero-days exploited before patches https://www.infosecurity-magazine.com/news/citrix-patches-critical-zero-days/ - Roundcube SQL injection flaw exploited in the wild https://securityaffairs.com/199882/security/roundcube-sql-injection-cve-2026-48842-is-now-being-exploited-in-the-wild.html - Kiteworks urges server shutdown over Advanced Forms flaw https://www.securityweek.com/kiteworks-urges-server-shutdown-finds-advanced-forms-vulnerability/ - MCP is creating major governance gaps, researchers warn https://www.infosecurity-magazine.com/news/mcp-creating-major-governance-gaps/

Cyber Daily News for September 27th, 2026 Cyber Daily News is also available via podcast! https://feeds.transistor.fm/cyber-daily-news Stories mentioned in today's briefing: - OpenAI Agents Accessed US Government Websites Without Authorization https://securityaffairs.com/199815/ai/openai-agents-accessed-us-government-websites-without-authorization.html - Microsoft SharePoint Flaw Now Exploited in Attacks https://www.securityweek.com/microsoft-sharepoint-flaw-cve-2026-65660-now-exploited-in-attacks/ - New x47.c Windows Botnet Weaponizes xAI Grok https://www.securityweek.com/new-x47-c-windows-botnet-weaponizes-xai-grok-ai-api-draining/ - Exploit.in Database Reveals the Roots of Today's Ransomware Ecosystem https://securityaffairs.com/199800/cyber-crime/exploit-in-database-reveals-the-roots-of-todays-ransomware-ecosystem.html - China and US Agree to Establish AI Safety Channel https://www.securityweek.com...

Cyber Daily News for September 26th, 2026 Cyber Daily News is also available via podcast! https://feeds.transistor.fm/cyber-daily-news Stories mentioned in today's briefing: - Bitget says North Korea-linked hackers stole $351.6 million https://securityaffairs.com/199754/cyber-crime/cryptocurrency-exchange-bitget-says-north-korea-linked-hackers-stole-351-6-million.html - ClickFix campaign abuses trusted websites to deploy Psychedelic Stealer https://securityaffairs.com/199731/malware/clickfix-campaign-abuses-trusted-websites-to-deploy-psychedelic-stealer.html - Kosovar owner of Rydox marketplace pleads guilty in US court https://www.securityweek.com/kosovar-owner-of-rydox-marketplace-pleads-guilty-in-us-court/ - CISA election security plan flags patching barriers and voter database attacks https://www.securityweek.com/cisa-election-security-plan-flags-patching-barriers-voter-database-attacks/

Cyber Daily News for September 25th, 2026 Cyber Daily News is also available via podcast! https://feeds.transistor.fm/cyber-daily-news Stories mentioned in today's briefing: - SalesBleed flaws in Salesforce Agentforce enabled zero-click data exfiltration https://www.securityweek.com/salesbleed-flaws-in-salesforce-agentforce-enabled-zero-click-data-exfiltration/ - Roundcube webmail vulnerability under active exploitation https://www.securityweek.com/roundcube-webmail-vulnerability-in-attackers-crosshairs/ - AI helps uncover MikroTrick attack chain in MikroTik RouterOS https://securityaffairs.com/199678/hacking/ai-helps-uncover-mikrotrick-attack-chain-in-mikrotik-routeros.html - AI-powered campaign targets hundreds of online retailers https://www.securityweek.com/ai-powered-campaign-targets-hundreds-of-online-retailers/ - Emerging ransomware gang n0n threatens to destroy backups https://www.infosecurity-magazine.com/news/ransomware-gang-uses-backup/

Cyber Daily News for September 24th, 2026 Cyber Daily News is also available via podcast! https://feeds.transistor.fm/cyber-daily-news Stories mentioned in today's briefing: - Critical WordPress Vulnerability Exploited Immediately After Disclosure https://www.securityweek.com/critical-wordpress-vulnerability-exploited-immediately-after-disclosure/ - CLOSEDQUORUM, the malware that asks four AI models what to do next https://securityaffairs.com/199640/malware/closedquorum-the-malware-that-asks-four-ai-models-what-to-do-next.html - Ransomware Attacks Reach Record High for 2026 https://www.infosecurity-magazine.com/news/ransomware-attacks-reach-record/ - AI-Powered Phishing Platform EvilTokens Disrupted by Microsoft https://www.securityweek.com/ai-powered-phishing-platform-eviltokens-disrupted-by-microsoft/ - ShinyHunters claims FBI breach after alleged PeopleSoft zero-day attack https://securityaffairs.com/199612/cyber-crime/shinyhunters-claims-fbi-breach-after-alleged-peoplesoft-zero-day-attack.html

Cyber Daily News for September 23rd, 2026 Cyber Daily News is also available via podcast! https://feeds.transistor.fm/cyber-daily-news Stories mentioned in today's briefing: - Fake LastPass on GitHub Led to an Infostealer That Killed 145 Security Tools https://securityaffairs.com/199577/malware/fake-lastpass-on-github-led-to-an-infostealer-that-killed-145-security-tools.html - Check Point Fixes a New Actively Exploited Critical Security Flaw https://securityaffairs.com/199549/security/check-point-fixes-a-new-actively-exploited-critical-security-flaw.html - Critical F5 BIG-IP Vulnerability Exploited as Zero-Day https://www.securityweek.com/critical-f5-big-ip-vulnerability-exploited-as-zero-day/ - Chaotic Eclipse Released BigDiskBuster, A PoC For Windows Defender Update DoS Zero-Day https://securityaffairs.com/199538/hacking/chaotic-eclipse-released-bigdiskbuster-a-poc-for-windows-defender-update-dos-zero-day.html - CVE-2026-87902: how close is yo...

Cyber Daily News for September 22nd, 2026 Cyber Daily News is also available via podcast! https://feeds.transistor.fm/cyber-daily-news Stories mentioned in today's briefing: - Contagious Interview: 30,000 devices infected by a fake job interview https://securityaffairs.com/199506/uncategorized/contagious-interview-30000-devices-infected-by-a-fake-job-interview.html - Fake LastPass Installers Push Kernel-Level EDR Killer, ‘Rapuncel’ Stealer https://www.securityweek.com/fake-lastpass-installers-push-kernel-level-edr-killer-rapuncel-stealer/ - ShinyHunters Claim Hack of Rival Ransomware Gang Clop https://www.infosecurity-magazine.com/news/shinyhunters-claim-hack-of-clop/ - Foreign Hackers Target Two Colorado Water Utilities https://securityaffairs.com/199480/ics-scada/foreign-hackers-target-two-colorado-water-utilities.html - ChainScript: the RAT that hides its command server inside a blockchain contract https://securityaffairs.com...

Cyber Daily News for September 21st, 2026 Cyber Daily News is also available via podcast! https://feeds.transistor.fm/cyber-daily-news Stories mentioned in today's briefing: - The Target Is No Longer the Model. It’s the Agent. https://securityaffairs.com/199454/ai/the-target-is-no-longer-the-model-its-the-agent.html - UK Police Data Faces Long-Standing Microsoft Cloud Security Concerns https://securityaffairs.com/199442/uncategorized/uk-police-data-faces-long-standing-microsoft-cloud-security-concerns.html - U.S. CISA adds Linux Kernel flaws to its Known Exploited Vulnerabilities catalog https://securityaffairs.com/199430/security/u-s-cisa-adds-linux-kernel-flaws-to-its-known-exploited-vulnerabilities-catalog-2.html - AI Hallucinations Nearly Triggered a US-China Military Confrontation https://securityaffairs.com/199415/ai/ai-hallucination-nearly-triggered-a-us-china-military-confrontation.html - SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 115 https://sec...

Cyber Daily News for September 20th, 2026 Cyber Daily News is also available via podcast! https://feeds.transistor.fm/cyber-daily-news Stories mentioned in today's briefing: - Brevo Supply-Chain Attack Infected Over 100,000 Websites https://securityaffairs.com/199355/hacking/brevo-supply-chain-attack-infected-over-100000-websites.html - Google Gemini also Broke Out of Its Test Environment https://securityaffairs.com/199392/ai/google-gemini-also-broke-out-of-its-test-environment.html - Cisco ISE Vulnerability With CVSS 10.0 Score Under Active Attack https://thecyberexpress.com/cisco-ise-cve-2026-76460/

Cyber Daily News for September 19th, 2026 Cyber Daily News is also available via podcast! https://feeds.transistor.fm/cyber-daily-news Stories mentioned in today's briefing: - Gyazo Data Breach Exposes 23 Million User Records https://securityaffairs.com/199338/data-breach/gyazo-data-breach-exposes-23-million-user-records.html - AI-Built Exploit and Sign-In Flaw Opened Path to Internal OpenAI Code https://www.securityweek.com/ai-built-exploit-and-sign-in-flaw-opened-path-to-internal-openai-code/ - New Settra Ransomware Variant Deployed in Attacks on Retail and Manufacturing https://www.infosecurity-magazine.com/news/settra-ransomware-retail/ - In Other News: Ransomware Developer Sentenced, Plugin4Shell AI Attack, Critical SAP Flaw https://www.securityweek.com/in-other-news-ransomware-developer-sentenced-plugin4shell-ai-attack-critical-sap-flaw/

Cyber Daily News for September 18th, 2026 Cyber Daily News is also available via podcast! https://feeds.transistor.fm/cyber-daily-news Stories mentioned in today's briefing: - Revolut Data Breach: 5 Months, 680 High-Profile Accounts, $3M Ransom https://www.securityweek.com/revolut-data-breach-5-months-680-high-profile-accounts-3m-ransom/ - Critical Orkes Conductor Vulnerability Exploited in Attacks https://www.securityweek.com/critical-orkes-conductor-vulnerability-exploited-in-attacks/ - Cyberattacks on Oil Tankers Put Maritime Critical Infrastructure at Risk https://securityaffairs.com/199280/hacking/cyberattacks-on-oil-tankers-put-maritime-critical-infrastructure-at-risk.html - NightmareStresser Goes Offline in Global DDoS-for-Hire Crackdown https://securityaffairs.com/199251/cyber-crime/nightmarestresser-goes-offline-in-global-ddos-for-hire-crackdown.html - New Chinese-Made ‘RatHat’ Android Malware Leverages AI to Steal Financial Data https://www.infosecurity-magazine.com...

Cyber Daily News for September 17th, 2026 Cyber Daily News is also available via podcast! https://feeds.transistor.fm/cyber-daily-news Stories mentioned in today's briefing: - AI Agent Carries Out Multi-Stage Data Theft Attack https://www.infosecurity-magazine.com/news/ai-agent-carries-out-multistage/ - AI Agents Can Retrain Own Models Mid-Task, Leaking Secrets and Erasing Refusals https://www.securityweek.com/ai-agents-can-retrain-own-models-mid-task-leaking-secrets-and-erasing-refusals/ - First Agentic AI Data Breach Reported to Spanish Regulator https://www.securityweek.com/first-agentic-ai-data-breach-reported-to-spanish-regulator/ - Pixel Modem Zero-Day Exploited in Targeted Attacks https://www.securityweek.com/pixel-modem-zero-day-exploited-in-targeted-attacks/ - US, UK, Dutch Agencies Expose Iranian ‘Chosen Brick’ Surveillance Malware https://www.securityweek.com/us-u...

Cyber Daily News for September 16th, 2026 Cyber Daily News is also available via podcast! https://feeds.transistor.fm/cyber-daily-news Stories mentioned in today's briefing: - Cisco Warns of Ongoing Exploitation of Critical Email Gateway Zero-Day https://securityaffairs.com/199137/hacking/cisco-warns-of-ongoing-exploitation-of-critical-email-gateway-zero-day.html - Texas Utility CenterPoint Energy Confirms Data Breach After Hacker Claims 7.49M Records Stolen https://securityaffairs.com/199170/data-breach/texas-utility-centerpoint-energy-confirms-data-breach-after-hacker-claims-7-49m-records-stolen.html - Shared Hosting at Risk: LiteSpeed Enterprise Bug Can Grant Root from a Single Tenant https://securityaffairs.com/199127/security/shared-hosting-at-risk-litespeed-enterprise-bug-can-grant-root-from-a-single-tenant.html - Oracle Patches 800+ Vulnerabilities in September 2026 Security Update https://www.securityweek.com/oracle-patches-800-vulnerabilities-in-september-2026-security-update/ ...

Cyber Daily News for September 15th, 2026 Cyber Daily News is also available via podcast! https://feeds.transistor.fm/cyber-daily-news Stories mentioned in today's briefing: - Root RCE Zero-Day in Cisco Secure Email Gateway Under Active Exploitation https://www.securityweek.com/root-rce-zero-day-in-cisco-secure-email-gateway-under-active-exploitation/ - Human Attacker Hits Machine-Speed Exploitation of Marimo RCE https://www.infosecurity-magazine.com/news/human-attacker-machine-speed/ - Non-Zero-Day VPN Flaw Left Japan ‘s Government Shared Network Platform Exposed: 246,000 Records at Risk https://securityaffairs.com/199090/security/non-zero-day-vpn-flaw-left-japan-government-shared-network-platform-exposed-246000-records-at-risk.html - Malicious Twitch Extension Exposes 31,000 Users' OAuth Tokens https://www.infosecurity-magazine.com/news/malicious-twitch-extension-oauth/ - Chinese Hackers Exploit Critical Tencent Software Flaw fo...

Cyber Daily News for September 14th, 2026 Cyber Daily News is also available via podcast! https://feeds.transistor.fm/cyber-daily-news Stories mentioned in today's briefing: - GitLab CVE-2026-85706: One HTTP Request, No Authentication, Full File Read – Exploited Within 24 Hours https://securityaffairs.com/198945/hacking/gitlab-cve-2026-85706-one-http-request-no-authentication-full-file-read-exploited-within-24-hours.html - OpenAI Agent Swarm Hacks RubyGems Package Manager https://www.infosecurity-magazine.com/news/openai-agent-swarm-hacks-rubygems/ - Three JFrog Artifactory Flaws Exploited for Backdoor Deployment https://www.securityweek.com/three-jfrog-artifactory-flaws-exploited-for-backdoor-deployment/ - ConnectWise Patches ScreenConnect Vulnerability Exploited in Worm-Like Attacks https://www.securityweek.com/connectwise-patches-screenconnect-vulnerability-exploited-in-worm-like-attacks/ - Telus Warns Customers of Account Breaches https://www.securityweek.co...

Cyber Daily News for September 13th, 2026 Cyber Daily News is also available via podcast! https://feeds.transistor.fm/cyber-daily-news Stories mentioned in today's briefing: - Anthropic: AI Misuse Is Entering a New Phase: From Cybercrime to Surveillance, Propaganda and Weapons https://securityaffairs.com/198905/ai/anthropic-ai-misuse-is-entering-a-new-phase-from-cybercrime-to-surveillance-propaganda-and-weapons.html - Revolut Exposed KYC Data After Fraudulent Government Email Passed Security Checks https://securityaffairs.com/198922/data-breach/revolut-exposed-kyc-data-after-fraudulent-government-email-passed-security-checks.html - BlueMoon Exploit Kit Chains Recent Chrome, Windows Zero-Days https://www.securityweek.com/bluemoon-exploit-kit-chains-recent-chrome-windows-zero-days/ - Conti Hacker Who Built Malware and Attacked Victims Gets Four-Year Sentence https://securityaffairs.com/198931/cyber-crime/conti-hacker-who-built-malware-and-attacked-victims-gets-four-year-sentence.html

Cyber Daily News for September 12th, 2026 Cyber Daily News is also available via podcast! https://feeds.transistor.fm/cyber-daily-news Stories mentioned in today's briefing: - Hackers Favor US Eastern Business Hours in M365 Phishing Campaign https://www.infosecurity-magazine.com/news/hackers-us-business-hours-m365/ - The AI Supply Chain Has a Security Problem, and Much of It Is Sitting on the Open Internet https://securityaffairs.com/198898/ai/the-ai-supply-chain-has-a-security-problem-and-much-of-it-is-sitting-on-the-open-internet.html - GitLab Vulnerability Exploited One Day After Disclosure https://www.securityweek.com/gitlab-vulnerability-exploited-one-day-after-disclosure/ - Trezor Says 347,000 Users Received Phishing Emails After Brevo Hack https://www.securityweek.com/trezor-says-347000-users-received-phishing-emails-after-brevo-hack/ - Check Point Patches Critical...

Cyber Daily News for September 11th, 2026 Cyber Daily News is also available via podcast! https://feeds.transistor.fm/cyber-daily-news Stories mentioned in today's briefing: - Most Organizations Skip Permissions Reviews Before Deploying AI Tools https://www.infosecurity-magazine.com/news/organizations-skip-permissions-ai/ - MantaxOtax Android Malware Combines Ransomware With Spyware https://www.infosecurity-magazine.com/news/mantaxotax-android-malware/ - FBI Publishes First-Ever Cyber Strategy, With Focus on Disrupting Threat Actors https://www.infosecurity-magazine.com/news/fbi-cyber-strategy-disrupting/ - UK Council Attack Linked to Mass Exploitation of SonicWall Flaw https://securityaffairs.com/198864/hacking/uk-council-attack-linked-to-mass-exploitation-of-sonicwall-flaw.html - Anthropic Says Russian Hackers Used Claude AI to Automate Malware...

Cyber Daily News for September 10th, 2026 Cyber Daily News is also available via podcast! https://feeds.transistor.fm/cyber-daily-news Stories mentioned in today's briefing: - Four Nation-State Actors Used the Same Chrome Zero-Day Exploit Kit Within 12 Days https://securityaffairs.com/198783/apt/four-nation-state-actors-used-the-same-chrome-zero-day-exploit-kit-within-12-days.html - New ‘ShieldCrash’ Zero-Day Exploit Targets Microsoft Defender https://www.securityweek.com/new-shieldcrash-zero-day-exploit-targets-microsoft-defender/ - U.S. CISA adds Microsoft Windows, N-able N-central, and Adobe flaws to its Known Exploited Vulnerabilities catalog https://securityaffairs.com/198802/hacking/u-s-cisa-adds-microsoft-windows-n-able-n-central-and-adobe-flaws-to-its-known-exploited-vulnerabilities-catalog.html - US Agencies Warn Chinese AI Firms Are Extracting Advanced AI Models https://securityaffairs.com/198770/security/us-agencies-warn-chinese-ai-firms-are-extracting-advanced-ai-models.html - NHIs...

Cyber Daily News for September 9th, 2026 Cyber Daily News is also available via podcast! https://feeds.transistor.fm/cyber-daily-news Stories mentioned in today's briefing: - Microsoft’s Biggest Patch Tuesday: 974 CVEs, 2 Zero-Days and 20 Wormable Bugs https://securityaffairs.com/198705/security/microsofts-biggest-patch-tuesday-974-cves-2-zero-days-and-20-wormable-bugs.html - Adobe Patches Over 170 Vulnerabilities, Including Commerce Zero-Day https://www.securityweek.com/adobe-patches-over-170-vulnerabilities-including-commerce-zero-day/ - Chrome 153 Patches Seventh Zero-Day of 2026 https://www.securityweek.com/chrome-153-patches-seventh-zero-day-of-2026/ - PoisonedRefresh: A Fileless Linux Rootkit That Injects PHP Web Shells Into F5 BIG-IP APM Server Memory https://securityaffairs.com/198746/malware/poisonedrefresh-a-fileless-linux-rootkit-that-injects-php-web-shells-into-f5-big-ip-apm-server-memory.html - WeChat Worm Can Hijack Accounts Wi...

Cyber Daily News for September 8th, 2026 Cyber Daily News is also available via podcast! https://feeds.transistor.fm/cyber-daily-news Stories mentioned in today's briefing: - Rhysida Publishes Berlin Government Data After €2m Extortion Demand Refused https://www.infosecurity-magazine.com/news/rhysida-berlin-data-extortion/ - North Korea-linked Hackers Hide a Backdoor Inside HAProxy https://securityaffairs.com/198656/apt/north-korea-linked-hackers-hide-a-backdoor-inside-haproxy.html - IT Help Desk Impersonation Lets Hackers Bypass MFA https://securityaffairs.com/198634/cyber-crime/it-help-desk-impersonation-lets-hackers-bypass-mfa.html - Condé Nast Data of 32.8 Million Users Offered for Sale After WIRED Leak https://securityaffairs.com/198628/data-breach/conde-nast-data-of-32-8-million-users-offered-for-sale-after-wired-leak.html - StyleSmuggler: The Magento Zero-Day Behind New Store Att...

Cyber Daily News for September 7th, 2026 Cyber Daily News is also available via podcast! https://feeds.transistor.fm/cyber-daily-news Stories mentioned in today's briefing: - Berlin Ransomware Leak Exposes State Secrets https://securityaffairs.com/198545/cyber-crime/berlin-ransomware-leak-exposes-state-secrets.html - Your MikroTik Router May Already Be Compromised: Look for SSH User “-2” https://securityaffairs.com/198538/security/your-mikrotik-router-may-already-be-compromised-look-for-ssh-user-2.html - Why AI Agent Sandboxes Are Failing Security Tests https://securityaffairs.com/198563/ai/why-ai-agent-sandboxes-are-failing-security-tests.html - Mathspace Breach Impacts More Than 1 Million Users in Australia, NZ https://thecyberexpress.com/mathspace-data-breach/ - G7, CISA Urge Urgent Shift to Post-Quantum Cryptography https://thecyberexpress.com/post-quantum-cryptography/

Cyber Daily News for September 6th, 2026 Cyber Daily News is also available via podcast! https://feeds.transistor.fm/cyber-daily-news Stories mentioned in today's briefing: - Crooks Behind Manchester Airports Group Hack Leaked Data of 8.8 Million People https://securityaffairs.com/198447/data-breach/crooks-behind-manchester-airports-group-hack-leaked-data-of-8-8-million-people.html - PaperCut Flaws Exploited in Attacks on U.S. and European Schools https://securityaffairs.com/198476/hacking/papercut-flaws-exploited-in-attacks-on-u-s-and-european-schools.html - PostgreSQL Hit by 12-Year-Old Vulnerability Allowing Server Takeover https://securityaffairs.com/198433/security/postgresql-hit-by-12-year-old-vulnerability-allowing-server-takeover.html - Broadcom Patches Critical VMware Workstation and Fusion VM-Escape Vulnerabilities https://securityaffairs.com/198465/security/broadcom-patches-critical-vmware-workstation-and-fusion-vm-escape-vulnerabilities.html - Elementor Pro WordPress Plugin Vulnerability...

Cyber Daily News for September 5th, 2026 Cyber Daily News is also available via podcast! https://feeds.transistor.fm/cyber-daily-news Stories mentioned in today's briefing: - Crooks Behind Manchester Airports Group Hack Leaked Data of 8.8 Million People https://securityaffairs.com/198447/data-breach/crooks-behind-manchester-airports-group-hack-leaked-data-of-8-8-million-people.html - PostgreSQL Hit by 12-Year-Old Vulnerability Allowing Server Takeover https://securityaffairs.com/198433/security/postgresql-hit-by-12-year-old-vulnerability-allowing-server-takeover.html - Chinese Hackers Use AI Agents in Multi-Country Cyber Campaign https://securityaffairs.com/198417/ai/chinese-hackers-use-ai-agents-in-multi-country-cyber-campaign.html - HPE Patches Critical RCE Vulnerabilities in AOS-CX https://www.securityweek.com/hpe-patches-critical-rce-vulnerabilities-in-aos-cx/ - Sangoma Switchvox Vulnerabilities Exploited in the Wild https://www.securityweek...

Cyber Daily News for September 4th, 2026 Cyber Daily News is also available via podcast! https://feeds.transistor.fm/cyber-daily-news Stories mentioned in today's briefing: - Manchester Airports Group Data on 8.8 Million People Leaked After Ransom Refusal https://www.securityweek.com/manchester-airports-group-data-on-8-8-million-people-leaked-after-ransom-refusal/ - Dark Web Service Nexus Sells 153M+ Driver’s Licenses https://securityaffairs.com/198388/security/dark-web-service-nexus-sells-153m-drivers-licenses.html - Google fixes the sixth actively exploited Chrome zero-day of 2026 https://securityaffairs.com/198405/security/google-fixes-the-sixth-actively-exploited-chrome-zero-day-of-2026.html - Cisco Fixed Critical RCE in Nexus 9000 Series Switches https://securityaffairs.com/198366/security/cisco-fixed-critical-rce-in-nexus-9000-series-switches.html - Pegasus and NoviSpy Used Against Serbian Protesters ht...

Cyber Daily News for September 3rd, 2026 Cyber Daily News is also available via podcast! https://feeds.transistor.fm/cyber-daily-news Stories mentioned in today's briefing: - 2,000 Leaked Documents Reveal How Russia Turns Engineering Students Into GRU Cyber Operators https://securityaffairs.com/198332/intelligence/2000-leaked-documents-reveal-how-russia-turns-engineering-students-into-gru-cyber-operators.html - OpenAI Astra Brings Autonomous Zero-Day Exploitation to AI https://securityaffairs.com/198317/ai/openai-astra-brings-autonomous-zero-day-exploitation-to-ai.html - SonicWall Patches Two New Actively Exploited Zero-Days in SMA 1000 VPNs https://securityaffairs.com/198303/security/sonicwall-patches-two-new-actively-exploited-zero-days-in-sma-1000-vpns.html - $536 and 8 Hours: AI Learns to Attack a Different PLC https://securityaffairs.com/198296/hacking/536-and-8-hours-ai-learns-to-attack-a-different-plc.html - Exploit Published for Fresh Cleo Harmony...

Cyber Daily News for September 2nd, 2026 Cyber Daily News is also available via podcast! https://feeds.transistor.fm/cyber-daily-news Stories mentioned in today's briefing: - Attackers Access Aesto Health AWS Infrastructure, Exposing 9.5 Million Records https://securityaffairs.com/198250/data-breach/attackers-access-aesto-health-aws-infrastructure-exposing-9-5-million-records.html - Hackers Target Langflow in CVE-2026-0768 Attacks https://securityaffairs.com/198270/hacking/hackers-target-langflow-in-cve-2026-0768-attacks.html - Chaotic Eclipse Releases GenDigital Avast Antivirus ZeroDay PrettyPrague https://securityaffairs.com/198243/hacking/chaotic-eclipse-releases-gendigital-avast-antivirus-zeroday-prettyprague.html - SonicWall Warns of Two SMA1000 Zero-Days Exploited in Attacks https://www.securityweek.com/sonicwall-warns-of-two-sma1000-zero-days-exploited-in-attacks/ - North Korea-linked IT Workers Are Getting Hired Inside Western Companies h...

Cyber Daily News for September 1st, 2026 Cyber Daily News is also available via podcast! https://feeds.transistor.fm/cyber-daily-news Stories mentioned in today's briefing: - Critical JFrog Artifactory Vulnerability Reportedly Exploited in the Wild https://www.securityweek.com/critical-jfrog-artifactory-vulnerability-reportedly-exploited-in-the-wild/ - McKesson Confirms Data Breach as Attacker Deadline Looms https://www.securityweek.com/mckesson-confirms-data-breach-as-attacker-deadline-looms/ - PaperCut Exploitation Escalates to Active Intrusions https://www.securityweek.com/papercut-exploitation-escalates-to-active-intrusions/ - China-linked Fire Ant Hides Inside Trusted Infrastructure https://securityaffairs.com/198183/apt/china-linked-fire-ant-hides-inside-trusted-infrastructure.html - ValleyRAT: When Legitimate Software Becomes a Malware Delivery Tool https://securityaffairs.com/198191/security/valleyrat-when-legitimate-software-becomes-a-malware-delivery-tool.html

Cyber Daily News for August 31st, 2026 Cyber Daily News is also available via podcast! https://feeds.transistor.fm/cyber-daily-news Stories mentioned in today's briefing: - Critical GiveWP Flaw Lets Attackers Run Commands on WordPress Servers https://securityaffairs.com/198156/security/critical-givewp-flaw-lets-attackers-run-commands-on-wordpress-servers.html - Extortion Group FulcrumSec Claims 86GB Manchester Airports Group Data Theft https://securityaffairs.com/198143/cyber-crime/extortion-group-fulcrumsec-claims-86gb-manchester-airports-group-data-theft.html - Hackers Are Probing PaperCut Servers, and 47% Still Have No Patch https://securityaffairs.com/198107/uncategorized/hackers-are-probing-papercut-servers-and-47-still-have-no-patch.html - More Details Emerge on Exploited PaperCut Vulnerabilities https://www.securityweek.com/more-details-emerge-on-exploited-papercut-vulnerabilities/ - Judge Says Pentagon’s Measures Against Anthropic Were ‘Illegal and...

Cyber Daily News for August 30th, 2026 Cyber Daily News is also available via podcast! https://feeds.transistor.fm/cyber-daily-news Stories mentioned in today's briefing: - Window to Tackle Surge in AI-Enabled Cyber Attacks Narrowing, Tech Giants Warn https://www.infosecurity-magazine.com/news/window-ai-attacks-narrowing-tech/ - Threat Actors Abuse Cursor Agent AI to Assist Ransomware Operations https://www.infosecurity-magazine.com/news/abuse-cursor-agent-ransomware/ - Chinese Hacker Group QTFY Uses Custom-Built Platforms to Target US Infrastructure, FBI Warns https://www.infosecurity-magazine.com/news/chinese-qtfy-us-infrastructure-fbi/ - Rhysida Ransomware Group Targets Berlin Government Ahead of Vote https://securityaffairs.com/198064/cyber-crime/rhysida-ransomware-group-targets-berlin-government-ahead-of-vote.html - Philippine Nuclear and...

Cyber Daily News for August 29th, 2026 Cyber Daily News is also available via podcast! https://feeds.transistor.fm/cyber-daily-news Stories mentioned in today's briefing: - Fake Voicemail SVG Attachments Fuel Large-Scale Phishing Campaign https://www.infosecurity-magazine.com/news/fake-voicemail-svg-files-bypass/ - Philippine Nuclear and Naval Targets Hit by Suspected Chinese Operator https://securityaffairs.com/198041/intelligence/philippine-nuclear-and-naval-targets-hit-by-suspected-chinese-operator.html - Trump Targets Foreign Technology in New U.S. Power Grid Security Order https://securityaffairs.com/198025/security/trump-targets-foreign-technology-in-new-u-s-power-grid-security-order.html - Love Electric Breach: 877,000 Driver Records Offered for $600 https://securityaffairs.com/198033/data-breach/love-electric-breach-877000-driver-records-offered-for-600.html - Russian APT BlueDelta Uses HOOKEDGE to Target Defense and...

Cyber Daily News for August 28th, 2026 Cyber Daily News is also available via podcast! https://feeds.transistor.fm/cyber-daily-news Stories mentioned in today's briefing: - PaperCut Zero-Day Under Active Attack: Emergency Patch Released https://securityaffairs.com/197980/uncategorized/papercut-zero-day-under-active-attack-emergency-patch-released.html - Threat Actors Abuse Cursor Agent AI to Assist Ransomware Operations https://www.infosecurity-magazine.com/news/abuse-cursor-agent-ransomware/ - Manchester Airports Group Hit by Cyber Incident https://www.infosecurity-magazine.com/news/manchester-airports-data-breach/ - U.S. CISA adds Red Hat, Linux Kernel, Ajax.NET Professional, Microsoft SQL Server, and Citrix NetScaler flaws to its Known Exploited Vulnerabilities catalog https://securityaffairs.com/197975/hacking/u-s-cisa-adds-red-hat-linux-kernel-ajax-net-professional-microsoft-sql-server-and-citrix-netscaler-flaws-to-its-known-exploited-vulnerabilities-catalog...

Cyber Daily News for August 27th, 2026 Cyber Daily News is also available via podcast! https://feeds.transistor.fm/cyber-daily-news Stories mentioned in today's briefing: - CISA Red Team Fully Compromised Two Critical Infrastructure Orgs https://securityaffairs.com/197901/hacking/cisa-red-team-fully-compromised-two-critical-infrastructure-orgs.html - CISA Warns Water Utilities: Find Your Exposed PLCs Before Attackers Do https://securityaffairs.com/197891/ics-scada/cisa-warns-water-utilities-find-your-exposed-plcs-before-attackers-do.html - FBI Seizes China-Linked Hacking Platforms QScan and QTRouter Used Against Critical Infrastructure https://securityaffairs.com/197873/apt/fbi-seizes-china-linked-hacking-platforms-qscan-and-qtrouter-used-against-critical-infrastructure.html - OpenAI banned Russian ChatGPT accounts backing covert influence operation https://securityaffairs.com/197878/intelligence/openai-banned-russian-chatgpt-accounts-backing-covert-influence-operation.html - Average Cyber Insurance Losses Increase Despite...

Cyber Daily News for August 26, 2026 Cyber Daily News is also available via podcast! https://feeds.transistor.fm/cyber-daily-news Stories mentioned in today's briefing: - Two CVSS 9.8 Auth Bypasses in miniOrange SAML WordPress Plugin Were Exploited Before Any Database Even Listed the Paid Editions as Vulnerable https://securityaffairs.com/197815/security/two-cvss-9-8-auth-bypasses-in-miniorange-saml-wordpress-plugin-were-exploited-before-any-database-even-listed-the-paid-editions-as-vulnerable.html - U.S. CISA adds Gitea flaw to its Known Exploited Vulnerabilities catalog https://securityaffairs.com/197854/security/u-s-cisa-adds-gitea-flaw-to-its-known-exploited-vulnerabilities-catalog.html - Chrome 152 Patches Over 300 Vulnerabilities https://www.securityweek.com/chrome-152-patches-over-300-vulnerabilities/ - When the Algorithm Fires You: Uber Faces €825M Fine https://securityaffairs.com/197823/laws-and-regulations/when-the-algorithm-fires-you-uber-faces-e825m-fine.ht...

Cyber Daily News for August 25th, 2026 Cyber Daily News is also available via podcast! https://feeds.transistor.fm/cyber-daily-news Stories mentioned in today's briefing: - US Sanctions Mabna Institute Hackers for Iranian Cyber-Attacks https://www.infosecurity-magazine.com/news/us-sanctions-mabna-institute/ - Fake Codex Download Uses Google Sites to Deliver macOS Malware https://www.infosecurity-magazine.com/news/fake-codex-download-google-sites/ - Doubloon Dredger Abuses Notion to Harvest Authentication Tokens https://www.infosecurity-magazine.com/news/doubloon-dredger-notion/ - U.S. CISA adds maximum-severity Oracle flaw to its Known Exploited Vulnerabilities catalog https://securityaffairs.com/197801/security/u-s-cisa-adds-maximum-severity-oracle-flaw-to-its-known-exploited-vulnerabilities-catalog.html - CISA Warns of Exploited Oracle WebLogic Vulnerability https...