Cyber Daily News

Cyber Daily News for September 2nd, 2026 Cyber Daily News is also available via podcast! https://feeds.transistor.fm/cyber-daily-news Stories mentioned in today's briefing: - Attackers Access Aesto Health AWS Infrastructure, Exposing 9.5 Million Records https://securityaffairs.com/198250/data-breach/attackers-access-aesto-health-aws-infrastructure-exposing-9-5-million-records.html - Hackers Target Langflow in CVE-2026-0768 Attacks https://securityaffairs.com/198270/hacking/hackers-target-langflow-in-cve-2026-0768-attacks.html - Chaotic Eclipse Releases GenDigital Avast Antivirus ZeroDay PrettyPrague https://securityaffairs.com/198243/hacking/chaotic-eclipse-releases-gendigital-avast-antivirus-zeroday-prettyprague.html - SonicWall Warns of Two SMA1000 Zero-Days Exploited in Attacks https://www.securityweek.com/sonicwall-warns-of-two-sma1000-zero-days-exploited-in-attacks/ - North Korea-linked IT Workers Are Getting Hired Inside Western Companies https://securityaffairs.com/198227/apt/north-korea-linked-it-workers-are-getting-hired-inside-western-companies.html

Cyber Daily News for September 1st, 2026 Cyber Daily News is also available via podcast! https://feeds.transistor.fm/cyber-daily-news Stories mentioned in today's briefing: - Critical JFrog Artifactory Vulnerability Reportedly Exploited in the Wild https://www.securityweek.com/critical-jfrog-artifactory-vulnerability-reportedly-exploited-in-the-wild/ - McKesson Confirms Data Breach as Attacker Deadline Looms https://www.securityweek.com/mckesson-confirms-data-breach-as-attacker-deadline-looms/ - PaperCut Exploitation Escalates to Active Intrusions https://www.securityweek.com/papercut-exploitation-escalates-to-active-intrusions/ - China-linked Fire Ant Hides Inside Trusted Infrastructure https://securityaffairs.com/198183/apt/china-linked-fire-ant-hides-inside-trusted-infrastructure.html - ValleyRAT: When Legitimate Software Becomes a Malware Delivery Tool https://securityaffairs.com/198191/security/valleyrat-when-legitimate-software-becomes-a-malware-delivery-tool.html

Cyber Daily News for August 31st, 2026 Cyber Daily News is also available via podcast! https://feeds.transistor.fm/cyber-daily-news Stories mentioned in today's briefing: - Critical GiveWP Flaw Lets Attackers Run Commands on WordPress Servers https://securityaffairs.com/198156/security/critical-givewp-flaw-lets-attackers-run-commands-on-wordpress-servers.html - Extortion Group FulcrumSec Claims 86GB Manchester Airports Group Data Theft https://securityaffairs.com/198143/cyber-crime/extortion-group-fulcrumsec-claims-86gb-manchester-airports-group-data-theft.html - Hackers Are Probing PaperCut Servers, and 47% Still Have No Patch https://securityaffairs.com/198107/uncategorized/hackers-are-probing-papercut-servers-and-47-still-have-no-patch.html - More Details Emerge on Exploited PaperCut Vulnerabilities https://www.securityweek.com/more-details-emerge-on-exploited-papercut-vulnerabilities/ - Judge Says Pentagon’s Measures Against Anthropic Were ‘Illegal and Baseless’ https://www.securityweek.com/judge-says-pentagons-measures-against-anthropic-were-illegal-and-baseless/

Cyber Daily News for August 30th, 2026 Cyber Daily News is also available via podcast! https://feeds.transistor.fm/cyber-daily-news Stories mentioned in today's briefing: - Window to Tackle Surge in AI-Enabled Cyber Attacks Narrowing, Tech Giants Warn https://www.infosecurity-magazine.com/news/window-ai-attacks-narrowing-tech/ - Threat Actors Abuse Cursor Agent AI to Assist Ransomware Operations https://www.infosecurity-magazine.com/news/abuse-cursor-agent-ransomware/ - Chinese Hacker Group QTFY Uses Custom-Built Platforms to Target US Infrastructure, FBI Warns https://www.infosecurity-magazine.com/news/chinese-qtfy-us-infrastructure-fbi/ - Rhysida Ransomware Group Targets Berlin Government Ahead of Vote https://securityaffairs.com/198064/cyber-crime/rhysida-ransomware-group-targets-berlin-government-ahead-of-vote.html - Philippine Nuclear and Naval Targets Hit by Suspected Chinese Operator https://securityaffairs.com/198041/intelligence/philippine-nuclear-and-naval-targets-hit-by-suspected-chinese-operator.html

Cyber Daily News for August 29th, 2026 Cyber Daily News is also available via podcast! https://feeds.transistor.fm/cyber-daily-news Stories mentioned in today's briefing: - Fake Voicemail SVG Attachments Fuel Large-Scale Phishing Campaign https://www.infosecurity-magazine.com/news/fake-voicemail-svg-files-bypass/ - Philippine Nuclear and Naval Targets Hit by Suspected Chinese Operator https://securityaffairs.com/198041/intelligence/philippine-nuclear-and-naval-targets-hit-by-suspected-chinese-operator.html - Trump Targets Foreign Technology in New U.S. Power Grid Security Order https://securityaffairs.com/198025/security/trump-targets-foreign-technology-in-new-u-s-power-grid-security-order.html - Love Electric Breach: 877,000 Driver Records Offered for $600 https://securityaffairs.com/198033/data-breach/love-electric-breach-877000-driver-records-offered-for-600.html - Russian APT BlueDelta Uses HOOKEDGE to Target Defense and Diplomatic Organizations https://securityaffairs.com/197996/apt/russian-apt-bluedelta-uses-hookedge-to-target-defense-and-diplomatic-organizations.html

Cyber Daily News for August 28th, 2026 Cyber Daily News is also available via podcast! https://feeds.transistor.fm/cyber-daily-news Stories mentioned in today's briefing: - PaperCut Zero-Day Under Active Attack: Emergency Patch Released https://securityaffairs.com/197980/uncategorized/papercut-zero-day-under-active-attack-emergency-patch-released.html - Threat Actors Abuse Cursor Agent AI to Assist Ransomware Operations https://www.infosecurity-magazine.com/news/abuse-cursor-agent-ransomware/ - Manchester Airports Group Hit by Cyber Incident https://www.infosecurity-magazine.com/news/manchester-airports-data-breach/ - U.S. CISA adds Red Hat, Linux Kernel, Ajax.NET Professional, Microsoft SQL Server, and Citrix NetScaler flaws to its Known Exploited Vulnerabilities catalog https://securityaffairs.com/197975/hacking/u-s-cisa-adds-red-hat-linux-kernel-ajax-net-professional-microsoft-sql-server-and-citrix-netscaler-flaws-to-its-known-exploited-vulnerabilities-catalog.html - Dark Caracal Deploys New Go Malware With Ethereum-Based C2 Fallback https://securityaffairs.com/197948/apt/dark-caracal-deploys-new-go-malware-with-ethereum-based-c2-fallback.html

Cyber Daily News for August 27th, 2026 Cyber Daily News is also available via podcast! https://feeds.transistor.fm/cyber-daily-news Stories mentioned in today's briefing: - CISA Red Team Fully Compromised Two Critical Infrastructure Orgs https://securityaffairs.com/197901/hacking/cisa-red-team-fully-compromised-two-critical-infrastructure-orgs.html - CISA Warns Water Utilities: Find Your Exposed PLCs Before Attackers Do https://securityaffairs.com/197891/ics-scada/cisa-warns-water-utilities-find-your-exposed-plcs-before-attackers-do.html - FBI Seizes China-Linked Hacking Platforms QScan and QTRouter Used Against Critical Infrastructure https://securityaffairs.com/197873/apt/fbi-seizes-china-linked-hacking-platforms-qscan-and-qtrouter-used-against-critical-infrastructure.html - OpenAI banned Russian ChatGPT accounts backing covert influence operation https://securityaffairs.com/197878/intelligence/openai-banned-russian-chatgpt-accounts-backing-covert-influence-operation.html - Average Cyber Insurance Losses Increase Despite Fewer Claims https://www.infosecurity-magazine.com/news/cyber-insurance-losses-increase/

Cyber Daily News for August 26, 2026 Cyber Daily News is also available via podcast! https://feeds.transistor.fm/cyber-daily-news Stories mentioned in today's briefing: - Two CVSS 9.8 Auth Bypasses in miniOrange SAML WordPress Plugin Were Exploited Before Any Database Even Listed the Paid Editions as Vulnerable https://securityaffairs.com/197815/security/two-cvss-9-8-auth-bypasses-in-miniorange-saml-wordpress-plugin-were-exploited-before-any-database-even-listed-the-paid-editions-as-vulnerable.html - U.S. CISA adds Gitea flaw to its Known Exploited Vulnerabilities catalog https://securityaffairs.com/197854/security/u-s-cisa-adds-gitea-flaw-to-its-known-exploited-vulnerabilities-catalog.html - Chrome 152 Patches Over 300 Vulnerabilities https://www.securityweek.com/chrome-152-patches-over-300-vulnerabilities/ - When the Algorithm Fires You: Uber Faces €825M Fine https://securityaffairs.com/197823/laws-and-regulations/when-the-algorithm-fires-you-uber-faces-e825m-fine.html - 88 ID Verification Breaches Show the Cost of Collecting Identity Data https://securityaffairs.com/197855/reports/88-id-verification-breaches-show-the-cost-of-collecting-identity-data.html - Operation Jackal: 58 Arrests Expose the Money Laundering Machine Behind Global Scams https://securityaffairs.com/197843/cyber-crime/operation-jackal-58-arrests-expose-the-money-laundering-machine-behind-global-scams.html - Norway ’s Digital Government Infrastructure Hit by a new DDoS Attack https://securityaffairs.com/197826/cyber-warfare-2/norway-s-digital-government-infrastructure-hit-by-a-new-ddos-attack.html - WhatsApp Adds Stronger Security as Passkeys Hit 1 Billion https://securityaffairs.com/197837/security/whatsapp-adds-stronger-security-as-passkeys-hit-1-billion.html

Cyber Daily News for August 25th, 2026 Cyber Daily News is also available via podcast! https://feeds.transistor.fm/cyber-daily-news Stories mentioned in today's briefing: - US Sanctions Mabna Institute Hackers for Iranian Cyber-Attacks https://www.infosecurity-magazine.com/news/us-sanctions-mabna-institute/ - Fake Codex Download Uses Google Sites to Deliver macOS Malware https://www.infosecurity-magazine.com/news/fake-codex-download-google-sites/ - Doubloon Dredger Abuses Notion to Harvest Authentication Tokens https://www.infosecurity-magazine.com/news/doubloon-dredger-notion/ - U.S. CISA adds maximum-severity Oracle flaw to its Known Exploited Vulnerabilities catalog https://securityaffairs.com/197801/security/u-s-cisa-adds-maximum-severity-oracle-flaw-to-its-known-exploited-vulnerabilities-catalog.html - CISA Warns of Exploited Oracle WebLogic Vulnerability https://www.securityweek.com/cisa-warns-of-exploited-oracle-weblogic-vulnerability/

Cyber Daily News for August 24th, 2026 Cyber Daily News is also available via podcast! https://feeds.transistor.fm/cyber-daily-news Stories mentioned in today's briefing: - Wake-Up Call for CNI After Iranian Attack Shuts Down UK Power Plant https://www.infosecurity-magazine.com/news/cni-iranian-attack-shuts-uk-power/ - Researchers Uncover Thousands of Leaked AWS Keys https://www.infosecurity-magazine.com/news/researchers-thousands-eaked-aws/ - Encrypted Prompts Defeat Grok and Gemini Guardrails; Chat Histories Stolen https://thecyberexpress.com/encrypted-prompts-defeat-grok-gemini-guardrail/ - iAuthFlow v2: The $10,000 Phishing Toolkit That Survives Your Password Reset https://securityaffairs.com/197748/cyber-crime/iauthflow-v2-the-10000-phishing-toolkit-that-survives-your-password-reset.html - Slovakia Warns of Cyber Risks in Road Speed Cameras https://securityaffairs.com/197764/hacking/slovakia-warns-of-cyber-risks-in-road-speed-cameras.html

Cyber Daily News for August 23rd, 2026 Cyber Daily News is also available via podcast! https://feeds.transistor.fm/cyber-daily-news Stories mentioned in today's briefing: - UK Power Plant Disabled for Four Days by Iran-Linked Hackers, Concurrent with US Water Attacks https://securityaffairs.com/197734/cyber-warfare-2/uk-power-plant-disabled-for-four-days-by-iran-linked-hackers-concurrent-with-us-water-attacks.html - Zero-Click Grok Chat History Theft: Adversa AI Demonstrates Cryptographic Context Injection https://securityaffairs.com/197717/hacking/zero-click-grok-chat-history-theft-adversa-ai-demonstrates-cryptographic-context-injection.html - ToxicPanda 2.0 Gets a Major Upgrade, Expanding Attacks Across 16 Countries https://securityaffairs.com/197681/breaking-news/toxicpanda-2-0-gets-a-major-upgrade.html

Cyber Daily News for August 22nd, 2026 Cyber Daily News is also available via podcast! https://feeds.transistor.fm/cyber-daily-news Stories mentioned in today's briefing: - Critical Flaw in NASA/JPL Open-Source Spacecraft Command Software Allowed Unauthenticated Command Execution https://securityaffairs.com/197689/hacking/critical-flaw-in-nasa-jpl-open-source-spacecraft-command-software.html - Six Maximum-Severity Flaws Found in Cisco Products https://securityaffairs.com/197640/security/six-maximum-severity-flaws-found-in-cisco-products.html - Fake Conferences, OAuth and WhatsApp: Inside Russia’s New Espionage Tactics https://securityaffairs.com/197630/apt/fake-conferences-oauth-and-whatsapp-inside-russias-new-espionage-tactics.html - Encrypted Prompts Bypass AI Safety Guardrails in Grok and Gemini https://www.securityweek.com/encrypted-prompts-bypass-ai-safety-guardrails-in-grok-and-gemini/ - New Phishing Toolkit Uses Passkeys to Maintain Access After Password Resets https://www.securityweek.com/new-phishing-toolkit-uses-passkeys-to-maintain-access-after-password-resets/

Cyber Daily News for August 21st, 2026 Cyber Daily News is also available via podcast! https://feeds.transistor.fm/cyber-daily-news Stories mentioned in today's briefing: - NSA, CISA, FBI, DOE, and EPA Warn of Active AI-Assisted Attacks on Siemens S7 PLCs https://securityaffairs.com/197566/ics-scada/nsa-cisa-fbi-doe-and-epa-warn-of-active-ai-assisted-attacks-on-siemens-s7-plcs.html - Poland’s CERT Warns of Active Exploitation of Critical Zimbra Collaboration Suite Flaw https://securityaffairs.com/197610/security/polands-cert-warns-of-active-exploitation-of-critical-zimbra-collaboration-suite-flaw.html - Cl0p Targets 40+ Organizations Through PTC Windchill Flaw https://securityaffairs.com/197587/cyber-crime/cl0p-targets-40-organizations-through-ptc-windchill-flaw.html - MLflow Vulnerability Exploited for Cloud Credential Theft https://www.securityweek.com/mlflow-vulnerability-exploited-for-cloud-credential-theft/ - CISA Urges Immediate Patching of Exploited TrueConf Vulnerabilities https://www.securityweek.com/cisa-urges-immediate-patching-of-exploited-trueconf-vulnerabilities/

Cyber Daily News for August 20th, 2026 Cyber Daily News is also available via podcast! https://feeds.transistor.fm/cyber-daily-news Stories mentioned in today's briefing: - US Indicts 17 Iranians Over Years-Long Cyber Espionage Campaign https://securityaffairs.com/197551/intelligence/us-indicts-17-iranians-over-years-long-cyber-espionage-campaign.html - Cl0p Ransomware Group Names Over 40 Victims of PTC Windchill Campaign https://www.securityweek.com/cl0p-ransomware-group-names-over-40-victims-of-ptc-windchill-campaign/ - Critical GitLab Flaw Exploited Shortly After Disclosure https://www.securityweek.com/critical-gitlab-flaw-exploited-shortly-after-disclosure/ - Exploitation Expected for Critical Authentication Bypass Patched in Citrix NetScaler https://www.securityweek.com/exploitation-expected-for-critical-authentication-bypass-patched-in-citrix-netscaler/ - Hackers Using AI to Target Siemens PLCs in Critical US Sectors https://www.securityweek.com/hackers-using-ai-to-target-siemens-plcs-in-critical-us-sectors/

Cyber Daily News for August 19th, 2026 Cyber Daily News is also available via podcast! https://feeds.transistor.fm/cyber-daily-news Stories mentioned in today's briefing: - Over 500 Critical Infrastructure Organizations Hit by Medusa Ransomware https://www.infosecurity-magazine.com/news/critical-infrastructure-medusa/ - U.S. CISA adds Apple macOS, Microsoft SharePoint, Broadcom VMware vCenter, and Microsoft IKE flaws to its Known Exploited Vulnerabilities catalog https://securityaffairs.com/197490/hacking/u-s-cisa-adds-apple-macos-microsoft-sharepoint-broadcom-vmware-vcenter-and-microsoft-ike-flaws-to-its-known-exploited-vulnerabilities-catalog.html - Wiz AI Agent Finds Critical Snowflake GitHub Repo Flaw Advanced Security Missed https://www.infosecurity-magazine.com/news/wiz-ai-agent-finds-snowflake/ - 50,000 Stripe Secrets Leaked in Public Code https://securityaffairs.com/197504/cyber-crime/50000-stripe-secrets-leaked-in-public-code.html - US Charges 17 Iranian Hackers, Offers $10 Million Rewards for 5 of Them https://www.securityweek.com/us-charges-17-iranian-hackers-offers-10-million-rewards-for-5-of-them/

Cyber Daily News for August 18th, 2026 Cyber Daily News is also available via podcast! https://feeds.transistor.fm/cyber-daily-news Stories mentioned in today's briefing: - GitLab Patches Critical Unauthenticated GraphQL Vulnerability https://securityaffairs.com/197454/hacking/gitlab-patches-critical-unauthenticated-graphql-vulnerability.html - New Mirai-Based Evooo1Bot Botnet Targets Linux Devices https://securityaffairs.com/197434/malware/new-mirai-based-evooo1bot-botnet-targets-linux-devices.html - LiteLLM Supply-Chain Attack – Technology, Banking and Healthcare the Most Affected https://securityaffairs.com/197377/hacking/litellm-supply-chain-attack-technology-banking-and-healthcare-the-most-affected.html - Heights Finance Data Breach Impacts at Least 1.2 Million Individuals https://www.securityweek.com/heights-finance-data-breach-impacts-at-least-1-2-million-individuals/ - WordPress Plugin Flaw Exposes 40,000 Sites to Admin Takeover https://www.infosecurity-magazine.com/news/wordpress-plugin-flaw-40000-sites/

Cyber Daily News for August 17th, 2026 Cyber Daily News is also available via podcast! https://feeds.transistor.fm/cyber-daily-news Stories mentioned in today's briefing: - Fortune 500 Companies Hit in Azure Data Theft Campaign https://www.securityweek.com/fortune-500-companies-hit-in-azure-data-theft-campaign/ - Critical SAP Commerce Cloud Vulnerability Exploited 3 Days After Disclosure https://www.securityweek.com/critical-sap-commerce-cloud-vulnerability-exploited-3-days-after-disclosure/ - Akira Ransomware Uses Safe Mode to Bypass EDR https://securityaffairs.com/197339/malware/akira-ransomware-uses-safe-mode-to-bypass-edr.html - Infostealers Harvest 1.7 Billion Credentials in Six Months https://www.infosecurity-magazine.com/news/infostealers-17-billion/ - Mustang Panda Upgrades CoolClient With a Kernel Rootkit https://securityaffairs.com/197274/apt/mustang-panda-upgrades-coolclient-with-a-kernel-rootkit.html

Cyber Daily News for August 16th, 2026 Cyber Daily News is also available via podcast! https://feeds.transistor.fm/cyber-daily-news Stories mentioned in today's briefing: - Sophisticated Cyberattack Exposes Data of 678,000 French Taxpayers https://securityaffairs.com/197287/cyber-crime/sophisticated-cyberattack-exposes-data-of-678000-french-taxpayers.html - APT36 Suspected in PATCHCORD Espionage Campaign Using Google Sheets C2 https://securityaffairs.com/197266/intelligence/apt36-suspected-in-patchcord-espionage-campaign-using-google-sheets-c2.html - SAP Commerce Cloud CVE-2026-58231 Exploited in the Wild https://securityaffairs.com/197244/security/sap-commerce-cloud-cve-2026-58231-exploited-in-the-wild.html - Crooks Are Buying Your Expired Domains and Using Them to Deliver Malware https://securityaffairs.com/197251/uncategorized/crooks-are-buying-your-expired-domains-and-using-them-to-deliver-malware.html

Cyber Daily News for August 15th, 2026 Cyber Daily News is also available via podcast! https://feeds.transistor.fm/cyber-daily-news Stories mentioned in today's briefing: - GeoServer Zero-Day Is Already Being Probed. That’s the Problem https://securityaffairs.com/197216/hacking/geoserver-zero-day-is-already-being-probed-thats-the-problem.html - macOS Screen Sharing Flaw Exploited to Deploy Monero Miners https://securityaffairs.com/197234/uncategorized/macos-screen-sharing-flaw-exploited-to-deploy-monero-miners.html - Researchers Confirm ExfilSquad’s Access to Sensitive Data Across 13 Organizations https://www.infosecurity-magazine.com/news/exfilsquads-13-organizations/ - Apple warned hundreds of users of mercenary spyware attacks https://securityaffairs.com/197208/malware/apple-warned-hundreds-of-users-of-mercenary-spyware-attacks.html - Trivy, Not LiteLLM Behind the 2,500 Org Compromise https://www.securityweek.com/trivy-not-litellm-behind-the-2500-org-compromise/

Cyber Daily News for August 14th, 2026 Cyber Daily News is also available via podcast! https://feeds.transistor.fm/cyber-daily-news Stories mentioned in today's briefing: - vCenter Flaw Exploited Just Five Days After Disclosure https://www.infosecurity-magazine.com/news/vcenter-cve-2026-59310-exploited/ - Adobe Commerce CVE-2026-71362 Comes Under Attack Shortly After Public Disclosure https://securityaffairs.com/197149/hacking/adobe-commerce-cve-2026-71362-comes-under-attack-shortly-after-public-disclosure.html - Hackers Exploiting Unpatched GeoServer Zero-Day https://www.securityweek.com/hackers-exploiting-unpatched-geoserver-zero-day/ - U.S. CISA adds Metabase, Windows, and Cisco Secure Firewall flaws to its Known Exploited Vulnerabilities catalog https://securityaffairs.com/197110/hacking/u-s-cisa-adds-metabase-windows-and-cisco-secure-firewall-flaws-to-its-known-exploited-vulnerabilities-catalog.html - Researchers Link 'Jewelbug' Chinese APT to Hack-for-Hire Operations https://www.infosecurity-magazine.com/news/researchers-link-chinese-apt-hack/