Cyber Daily News

Cyber Daily News for July 28th, 2026 Cyber Daily News is also available via podcast! https://feeds.transistor.fm/cyber-daily-news Stories mentioned in today's briefing: - Reuters: OpenAI Agent Hacked Hugging Face for Days Before Being Detected https://securityaffairs.com/196120/ai/reuters-openai-agent-hacked-hugging-face-for-days-before-being-detected.html - U.S. CISA adds Arista VeloCloud Orchestrator and Fortinet FortiOS flaws to its Known Exploited Vulnerabilities catalog https://securityaffairs.com/196130/security/u-s-cisa-adds-arista-velocloud-orchestrator-and-fortinet-fortios-flaws-to-its-known-exploited-vulnerabilities-catalog.html - Coca-Cola Confirms Data Breach After Fairlife Ransomware Attack https://www.securityweek.com/coca-cola-confirms-data-breach-after-fairlife-ransomware-attack/ - MedusaHVNC Trojan Creates Hidden Desktops to Hijack Browsers and Steal Data https://securityaffairs.com/196111/malware/medusahvnc-trojan-creates-hidden-desktops-to-hijack-browsers-and-steal-data.html - Origin Energy Data Breach Affects 900,000 Australians https://www.securityweek.com/origin-energy-data-breach-affects-900000-australians/

Cyber Daily News for July 27th, 2026 Cyber Daily News is also available via podcast! https://feeds.transistor.fm/cyber-daily-news Stories mentioned in today's briefing: - LockBit5 and Qilin Lead Ransomware Attacks Against Italian Organizations https://securityaffairs.com/196045/security/lockbit5-and-qilin-lead-ransomware-attacks-against-italian-organizations.html - Hackers Hijack Hotel Wi-Fi to Steal Microsoft 365 Credentials https://securityaffairs.com/196017/security/hackers-hijack-hotel-wi-fi-to-steal-microsoft-365-credentials.html - DentaQuest Data Breach Potentially Impacts Over 23 Million People https://www.securityweek.com/dentaquest-data-breach-potentially-impacts-over-23-million-people/ - MCBS Data Breach Affects 1.2 Million Individuals https://www.securityweek.com/mcbs-data-breach-affects-1-2-million-individuals/ - Four Men Admit to $2.2M Medicaid Fraud Scheme Using ChatGPT https://thecyberexpress.com/minnesota-medicaid-fraud/

Cyber Daily News for July 26th, 2026 Cyber Daily News is also available via podcast! https://feeds.transistor.fm/cyber-daily-news Stories mentioned in today's briefing: - Iran-Linked Actors Breach Are Targeting US Water and Energy Control Systems https://securityaffairs.com/195991/apt/iran-linked-actors-breach-are-targeting-us-water-and-energy-control-systems.html - US Agencies Warn of Laundry Bear Campaign Targeting Unpatched Zimbra Servers https://securityaffairs.com/195901/apt/us-agencies-warn-of-laundry-bear-campaign-targeting-unpatched-zimbra-servers.html - OpenAI Fixes ChatGPT Agent Flaw That Could Let Attackers Forge an AI Insider https://www.securityweek.com/openai-fixes-chatgpt-agent-flaw-that-could-let-attackers-forge-an-ai-insider/ - Ransomware Attacks Targeting Universities on the Rise https://www.infosecurity-magazine.com/news/university-ransomware-attacks-rise/ - New Dolphin X Stealer Employs AI Profiling to Prioritize Targets https://www.infosecurity-magazine.com/news/new-dolphin-x-stealer-ai-targets/

Cyber Daily News for July 25th, 2026 Cyber Daily News is also available via podcast! https://feeds.transistor.fm/cyber-daily-news Stories mentioned in today's briefing: - ChatGPT Among Top 10 Most Impersonated Brands in Phishing Attacks, Says Check Point https://www.infosecurity-magazine.com/news/chatgpt-most-impersonated-brands/ - Thailand’s Ministry of Finance Targeted With Hermes AI Agent Running Unattended, Hades Implant Staged https://securityaffairs.com/195941/hacking/thailands-ministry-of-finance-targeted-with-hermes-ai-agent-running-unattended-hades-implant-staged.html - Hotel Wi-Fi Routers Compromised to Steal Corporate Login Credentials From Visitors https://www.infosecurity-magazine.com/news/hotel-wifi-dns-poisoning/ - In Other News: Dolphin X AI-Powered Malware, Car Anti-Theft Device Hack, 400 Linux Kernel Flaws https://www.securityweek.com/in-other-news-dolphin-x-ai-powered-malware-car-anti-theft-device-hack-400-linux-kernel-flaws/ - Industry Reactions to OpenAI Models Hacking Hugging Face: Feedback Friday https://www.securityweek.com/industry-reactions-to-openai-models-hacking-hugging-face-feedback-friday/

Cyber Daily News for July 24th, 2026 Cyber Daily News is also available via podcast! https://feeds.transistor.fm/cyber-daily-news Stories mentioned in today's briefing: - Russian Hackers Exploit New ‘Zero-Click’ Attack Against Western Organizations https://www.infosecurity-magazine.com/news/russian-hackers-zero-click/ - US Agencies Warn of Laundry Bear Campaign Targeting Unpatched Zimbra Servers https://securityaffairs.com/195901/apt/us-agencies-warn-of-laundry-bear-campaign-targeting-unpatched-zimbra-servers.html - Chaos ransomware deploys browser-based msaRAT to evade network detection https://securityaffairs.com/195876/malware/chaos-ransomware-deploys-browser-based-msarat-to-evade-network-detection.html - OpenAI Fixes ChatGPT Agent Flaw That Could Let Attackers Forge an AI Insider https://www.securityweek.com/openai-fixes-chatgpt-agent-flaw-that-could-let-attackers-forge-an-ai-insider/ - Data Breach Confirmed After Australian Energy Giant Origin Is Hacked https://www.securityweek.com/data-breach-confirmed-after-australian-energy-giant-origin-is-hacked/

Cyber Daily News for July 23rd, 2026 Cyber Daily News is also available via podcast! https://feeds.transistor.fm/cyber-daily-news Stories mentioned in today's briefing: - Check Point patches actively exploited SmartConsole authentication bypass flaw https://securityaffairs.com/195848/hacking/check-point-patches-actively-exploited-smartconsole-authentication-bypass-flaw.html - CVE-2026-8933: Ubuntu security flaw breaks Snap sandbox protections https://securityaffairs.com/195833/security/cve-2026-8933-ubuntu-security-flaw-breaks-snap-sandbox-protections.html - Adobe Acrobat Chrome extension bug enabled silent WhatsApp data theft https://securityaffairs.com/195805/hacking/adobe-acrobat-chrome-extension-bug-enabled-silent-whatsapp-data-theft.html - Fourth SharePoint Vulnerability Exploited in Past Month’s Wave of Attacks https://www.securityweek.com/fourth-sharepoint-vulnerability-exploited-in-past-months-wave-of-attacks/ - Vibe-Coded Apps Riddled With Exploitable Security Flaws https://www.securityweek.com/vibe-coded-apps-riddled-with-exploitable-security-flaws/

Cyber Daily News for July 22nd, 2026 Cyber Daily News is also available via podcast! https://feeds.transistor.fm/cyber-daily-news Stories mentioned in today's briefing: - OpenAI AI models exploited zero-days to reach Hugging Face in benchmark test https://securityaffairs.com/195774/ai/openai-ai-models-exploited-zero-days-to-reach-hugging-face-in-benchmark-test.html - Public PoC triggers active exploitation of critical SharePoint RCE vulnerability CVE-2026-50522 https://securityaffairs.com/195760/security/public-poc-triggers-active-exploitation-of-critical-sharepoint-rce-vulnerability-cve-2026-50522.html - Qilin Ransomware Affiliates Abuse CVE-2026-0257 to Gain Unauthorized VPN Access https://securityaffairs.com/195730/cyber-crime/qilin-ransomware-affiliates-abuse-cve-2026-0257-to-gain-unauthorized-vpn-access.html - A New Ransomware Threat Actor Emerges Every Week, Warns Report https://www.infosecurity-magazine.com/news/new-ransomware-weekly/ - Trump Orders Defense Contractors to Map Software, Suppliers Across Critical Supply Chains https://www.securityweek.com/trump-orders-defense-contractors-to-map-software-suppliers-across-critical-supply-chains/

Cyber Daily News for July 21st, 2026 Cyber Daily News is also available via podcast! https://feeds.transistor.fm/cyber-daily-news Stories mentioned in today's briefing: - Attackers Exploit Critical ServiceNow RCE Flaw CVE-2026-6875 https://securityaffairs.com/195723/ai/attackers-exploit-critical-servicenow-rce-flaw-cve-2026-6875.html - Researchers Uncover North Korean 'ClickFake' Campaign Targeting Web3 Pros https://www.infosecurity-magazine.com/news/north-korean-clickfake-campaign/ - JadePuffer Returns With Ransomware Designed to Wipe AI Models https://www.infosecurity-magazine.com/news/jadepuffer-ai-model-ransomware/ - Researchers Build WordPress Exploit Using OpenAI's GPT https://www.infosecurity-magazine.com/news/researchers-wordpress-exploit/ - New HollowGraph Malware Hijacks Microsoft 365 Calendars for Covert C2 Communications https://www.infosecurity-magazine.com/news/hollowgraph-microsoft-calendars/ - Dutch Intelligence Warns Russia Uses Hacked IP Cameras for Military Espionage https://securityaffairs.com/195708/intelligence/dutch-intelligence-warns-russia-uses-hacked-ip-cameras-for-military-espionage.html - Estée Lauder Confirms Cyberattack Affecting Personal Information https://thecyberexpress.com/estee-lauder-data-breach-oracle-ebs/ - Clover Health Investments Discloses Data Breach https://www.securityweek.com/clover-health-investments-discloses-data-breach/

Cyber Daily News for July 20th, 2026 Cyber Daily News is also available via podcast! https://feeds.transistor.fm/cyber-daily-news Stories mentioned in today's briefing: - AI Agents Turned Into Attackers: Hugging Face Breached https://securityaffairs.com/195658/ai/ai-agents-turned-into-attackers-hugging-face-reveals-autonomous-intrusion-campaign.html - Volexity Uncovers SonicWall VPN Zero-Days in Active Exploitation https://securityaffairs.com/195626/hacking/volexity-uncovers-zero-day-campaign-targeting-sonicwall-vpn-appliances.html - Chrome 150 Patch Addresses 6 Critical Memory Safety Vulnerabilities https://www.securityweek.com/chrome-150-update-patches-severe-memory-safety-bugs/ - WP2Shell WordPress Vulnerabilities Exploited in the Wild https://www.securityweek.com/wp2shell-wordpress-vulnerabilities-exploited-in-the-wild/ - CVE-2026-42533 Critical Pre-Auth nginx RCE Flaw Exposed https://thecyberexpress.com/cve-2026-42533-pre-auth-nginx-rce/ - Fairlife Ransomware Attack Suspends U.S. Production https://thecyberexpress.com/fairlife-ransomware-attack/ - Craneware Confirms Data Breach Impacting Employee Records https://thecyberexpress.com/craneware-data-breach/ - Police Chiefs Cite TfL Hack in Push for Cybercrime Risk Orders https://www.infosecurity-magazine.com/news/police-chiefs-tfl-cybercrime-risk/

Cyber Daily News for July 19th, 2026 Cyber Daily News is also available via podcast! https://feeds.transistor.fm/cyber-daily-news Stories mentioned in today's briefing: - Attackers Can Take Over WordPress Sites Using Newly Released wp2shell Exploits https://securityaffairs.com/195597/hacking/attackers-can-take-over-wordpress-sites-using-newly-released-wp2shell-exploits.html - OpenSSL Fixes HollowByte Memory Exhaustion Bug https://securityaffairs.com/195588/hacking/openssl-fixes-hollowbyte-memory-exhaustion-bug.html - Daxin: 13-Year-Old China-Linked Malware Found Still Active on Manufacturer's Network https://securityaffairs.com/195577/malware/daxin-13-year-old-china-linked-malware-found-still-active-on-manufacturers-network.html - U.S. CISA adds Fortinet FortiSandbox and Microsoft SharePoint flaws to its Known Exploited Vulnerabilities catalog https://securityaffairs.com/195569/security/u-s-cisa-adds-fortinet-fortisandbox-and-microsoft-sharepoint-flaws-to-its-known-exploited-vulnerabilities-catalog.html

Cyber Daily News for July 18th, 2026 Cyber Daily News is also available via podcast! https://feeds.transistor.fm/cyber-daily-news Stories mentioned in today's briefing: - Government Agencies Falling Victim to Ransomware Daily, Warns Study https://www.infosecurity-magazine.com/news/government-ransomware-daily/ - 23andMe Faces New Security Mandates in $18m Data Breach Settlement https://www.infosecurity-magazine.com/news/23andme-18m-data-breach-settlement/ - Ernst & Young (EY) Investigates Data Breach Involving Third-Party Support Tickets https://securityaffairs.com/195550/data-breach/ernst-young-ey-investigates-data-breach-involving-third-party-support-tickets.html - Iran Tracks US Military Phones https://www.securityweek.com/in-other-news-iran-tracks-us-military-phones-crashstealer-macos-malware-cvd-blueprint/ - CrashStealer macOS Malware https://www.securityweek.com/in-other-news-iran-tracks-us-military-phones-crashstealer-macos-malware-cvd-blueprint/ - ClickFix Attacks Drive UAC-0145 Cyber Campaigns, CERT-UA Warns https://thecyberexpress.com/clickfix-attacks-fuel-uac-0145-cyber-campaigns/ - US Charges Two Over $43M Chinese Money Laundering Operation https://thecyberexpress.com/chinese-money-laundering/ - TikTok Age Verification Probe https://thecyberexpress.com/cybersecurity-weekly-roundup-tce/

Cyber Daily News for July 17th, 2026 Cyber Daily News is also available via podcast! https://feeds.transistor.fm/cyber-daily-news Stories mentioned in today's briefing: - CISA Mandates Urgent Patch for Actively Exploited Critical Fortinet Vulnerabilities https://www.infosecurity-magazine.com/news/cisa-urgent-patch-fortinet/ - The Gentlemen Overtakes Qilin as Most Prolific Ransomware Threat https://www.infosecurity-magazine.com/news/the-gentlemen-most-prolific/ - Phishing Campaign Hides Lua Loader as TrueType Font File https://www.infosecurity-magazine.com/news/phishing-lua-loader-truetype-font/ - Modular macOS Stealer Uses Kill Loops to Force Password Entry https://www.infosecurity-magazine.com/news/clicklock-macos-stealer-clickfix/ - Single Prompt Enables ChatGPT to Execute Full Cyber-Attack Chain, Researchers Claim https://www.infosecurity-magazine.com/news/chatgpt55-to-execute-full/ - "Selfish Bravado" Behind TfL Cyber-Attack, Judge Says as Pair Jailed https://www.infosecurity-magazine.com/news/selfish-bravado-behind-tfl/ - New Russian Campaign Uses Fake Webex and Zoom Installers to Deploy Starland RAT https://securityaffairs.com/195532/malware/new-russian-campaign-uses-fake-webex-and-zoom-installers-to-deploy-starland-rat.html - Cyberattack Disrupts Operations of Japanese Frozen Food Giant Nichirei https://www.securityweek.com/cyberattack-disrupts-operations-of-japanese-frozen-food-giant-nichirei/

Cyber Daily News for July 16th, 2026 Cyber Daily News is also available via podcast! https://feeds.transistor.fm/cyber-daily-news Stories mentioned in today's briefing: - Claude Code and DeepSeek Powered Chinese Cyber Espionage Campaign https://securityaffairs.com/195474/ai/claude-code-and-deepseek-powered-chinese-cyber-espionage-campaign.html - US Launches Gold Eagle to Coordinate AI-Driven Vulnerability Management https://www.infosecurity-magazine.com/news/us-gold-eagle-ai-vulnerability/ - Chaotic Eclipse Unveils LegacyHive Exploit Affecting Fully Patched Windows Systems https://securityaffairs.com/195418/hacking/chaotic-eclipse-unveils-legacyhive-exploit-affecting-fully-patched-windows-systems.html - AsyncAPI npm Supply Chain Attack: Malware Injected Into Packages With 2 Million Weekly Downloads https://securityaffairs.com/195395/security/asyncapi-npm-supply-chain-attack-malware-injected-into-packages-with-2-million-weekly-downloads.html - Eleven Vulnerable UEFI Shims Enable Secure Boot Bypass https://www.infosecurity-magazine.com/news/uefi-shims-secure-boot-bypass/ - US and allied Governments Recommendations Securing Network Devices Against Russian APT Groups https://securityaffairs.com/195448/apt/us-and-allied-governments-recommendations-securing-network-devices-against-russian-apt-groups.html - Partnered Health Cyberattack Exposes Patient Data Across Australia https://thecyberexpress.com/partnered-health-cyberattack/ - Compromised Logins Surge as the Most Common Entry Point for Ransomware Attacks https://www.infosecurity-magazine.com/news/compromised-logins-ransomware-entry/

Cyber Daily News for July 15th, 2026 Cyber Daily News is also available via podcast! https://feeds.transistor.fm/cyber-daily-news Stories mentioned in today's briefing: - SonicWall Warns of Active Exploitation of Two SMA1000 Zero-Days https://securityaffairs.com/195364/hacking/sonicwall-warns-of-active-exploitation-of-two-sma-1000-zero-days.html - Microsoft Patches Record 622 Vulnerabilities, Including Two Exploited Zero-Days https://thecyberexpress.com/microsoft-patch-tuesday-july-2026-622-flaws/ - Progress Confirms Zero-Day Vulnerability Behind ShareFile Disruption https://www.securityweek.com/progress-confirms-zero-day-vulnerability-behind-sharefile-disruption/ - Adobe Patches Critical ColdFusion Vulnerabilities https://www.securityweek.com/adobe-patches-critical-coldfusion-vulnerabilities/ - VMware Avi Load Balancer Patches 7 Severe Vulnerabilities https://www.securityweek.com/7-severe-vulnerabilities-patched-in-vmware-avi-load-balancer/ - U.S. Sanctions VPN Provider and Cryptor Seller for Ransomware Losses https://securityaffairs.com/195336/security/u-s-treasury-sanctions-vpn-provider-and-cryptor-seller-behind-billions-in-ransomware-losses.html - SAP Patches Critical Vulnerabilities in NetWeaver, Approuter, Commerce Cloud https://www.securityweek.com/sap-patches-critical-vulnerabilities-in-netweaver-approuter-commerce-cloud/ - UK National Risk Register Updated with New Cyber Warnings https://www.infosecurity-magazine.com/news/uk-national-risk-register-cyber/

Cyber Daily News for July 14th, 2026 Cyber Daily News is also available via podcast! https://feeds.transistor.fm/cyber-daily-news Stories mentioned in today's briefing: - US Treasury Sanctions VPN Provider Linked to Ransomware https://thecyberexpress.com/ransomware-sanctions-target-vpn/ - RabbitMQ Vulnerability Exposes OAuth Secrets to Attackers https://thecyberexpress.com/cve-2026-5721-rabbitmq-vulnerability/ - Malware Hits Japan's Largest Taxi Company Nihon Kotsu https://securityaffairs.com/195305/cyber-crime/malware-hits-japans-largest-taxi-company-nihon-kotsu-services-temporarily-suspended.html - CrashStealer: New macOS Infostealer Uses Signed Apps to Evade Gatekeeper https://securityaffairs.com/195278/malware/crashstealer-new-macos-infostealer-uses-signed-apps-to-evade-gatekeeper.html - Novel OAuth Client ID Spoofing Technique Targets Cloud Environments https://www.infosecurity-magazine.com/news/novel-spoofing-technique-targets/ - Five Charged in Russian Coms Fraud Platform Case https://www.infosecurity-magazine.com/news/five-charged-in-russian-coms-fraud/ - EU, UK Attribute Russia Cyberattack to FSB, Announce Sanctions https://thecyberexpress.com/russia-cyberattack-linked-to-fsb/ - EU Targets FSB-Linked Hackers in New Sanctions Over Cyber Sabotage https://securityaffairs.com/195242/intelligence/eu-targets-fsb-linked-hackers-in-new-sanctions-over-cyber-sabotage.html

Cyber Daily News for July 13th, 2026 Cyber Daily News is also available via podcast! https://feeds.transistor.fm/cyber-daily-news Stories mentioned in today's briefing: - Odido Hack Exposes 6.2 Million Customers in Netherlands https://securityaffairs.com/195235/cyber-crime/dutch-nationals-suspected-in-odido-hack-that-exposed-six-million-customers.html - Joomla Zero-Days Added to CISA KEV Catalog https://thecyberexpress.com/cisa-cve-2026-48939-cve-2026-56291/ - Global CMS Exploitation Campaign Targets WordPress and Other Platforms https://securityaffairs.com/195208/security/australia-alerts-organizations-to-ongoing-cms-exploitation-attacks.html - Ryuk Ransomware Member Pleads Guilty in U.S. https://securityaffairs.com/195216/uncategorized/ryuk-ransomware-member-pleads-guilty-over-attacks-on-u-s-organizations.html - South Korea Military Faces Record Cyberattack Volume https://thecyberexpress.com/cyberattacks-on-south-korea-military/ - European Parliament Revives Chat Control 1.0 Law https://thecyberexpress.com/chat-control-1-0-returns-after-euro-parliament/ - Centers Laboratory Data Breach Affects 540,000 Individuals https://www.securityweek.com/centers-laboratory-data-breach-affects-540000-individuals/ - Vishing Key in Odido Telecom Attack https://thecyberexpress.com/odido-cyberattack-update/

Cyber Daily News for July 12, 2026 Cyber Daily News is also available via podcast! https://feeds.transistor.fm/cyber-daily-news Stories mentioned in today's briefing: - Critical U-Boot Bugs Undermine Secure Boot on Millions of Devices https://securityaffairs.com/195150/security/critical-u-boot-bugs-undermine-secure-boot-on-millions-of-devices.html - CISA adds iCagenda and Balbooa Forms flaws to its Known Exploited Vulnerabilities catalog https://securityaffairs.com/195164/security/u-s-cisa-adds-icagenda-and-balbooa-forms-flaws-to-its-known-exploited-vulnerabilities-catalog.html - Former Ransomware Negotiator Sentenced to 70 Months for Secretly Helping BlackCat Gang https://securityaffairs.com/195081/cyber-crime/former-ransomware-negotiator-sentenced-to-70-months-in-prison-for-secretly-helping-blackcat-gang.html - Ghost Accounts Abuse GitHub API in Mass Recon Campaign https://www.securityweek.com/ghost-accounts-abuse-github-api-in-mass-recon-campaign/ - 222 GitHub Repositories Linked to Fake Go Package Malware Operation https://securityaffairs.com/195101/security/222-github-repositories-linked-to-fake-go-package-malware-operation.html - Ransomware Never Stopped: Over 9,000 Confirmed Attacks Since 2018 https://securityaffairs.com/195117/cyber-crime/ransomware-never-stopped-over-9000-confirmed-attacks-since-2018.html

Cyber Daily News for July 11, 2026 Cyber Daily News is also available via podcast! https://feeds.transistor.fm/cyber-daily-news Stories mentioned in today's briefing: - Microsoft Warns New 'GigaWiper' Malware Combines Espionage and Destructive Capabilities https://www.infosecurity-magazine.com/news/new-gigawiper-espionage-destructive/ - New Ransomware Exploits Malicious Driver to Remove Cybersecurity Protections https://www.infosecurity-magazine.com/news/ransomware-removes-cybersecurity/ - Update Now: Critical Zimbra Classic Web Client Flaw Could Expose Mailboxes https://securityaffairs.com/195130/hacking/update-now-critical-zimbra-classic-web-client-flaw-could-expose-mailboxes.html - Anthropic and OpenAI Security Tools Could Fuel Cyber-Attacks, Researchers Warn https://www.infosecurity-magazine.com/news/anthropic-openai-report-exploit/ - CISA Details Incident Response to Exposed AWS GovCloud Keys https://www.infosecurity-magazine.com/news/cisa-incident-response-exposed-aws/ - Ransomware Never Stopped: Over 9,000 Confirmed Attacks Since 2018 https://securityaffairs.com/195117/cyber-crime/ransomware-never-stopped-over-9000-confirmed-attacks-since-2018.html - Third US Security Expert Sentenced to Prison for Helping Ransomware Gang https://www.securityweek.com/third-us-security-expert-sentenced-to-prison-for-helping-ransomware-gang/ - In Other News: DHS Database Hacked, Adobe Boosts Patch Cadence, Canada Disrupts Ransomware Ops https://www.securityweek.com/in-other-news-dhs-database-hacked-adobe-boosts-patch-cadence-canada-disrupts-ransomware-ops/

Cyber Daily News for July 10th, 2026 Cyber Daily News is also available via podcast! https://feeds.transistor.fm/cyber-daily-news Stories mentioned in today's briefing: - GigaWiper Merges Three Malware Families https://www.infosecurity-magazine.com/news/gigawiper-anatomy-of-a-destructive-backdoor/ - GodDamn Ransomware Uses PoisonX https://securityaffairs.com/195042/malware/goddamn-ransomware-uses-poisonx-to-blind-security-software.html - Former Ransomware Negotiator Sentenced https://securityaffairs.com/195081/cyber-crime/former-ransomware-negotiator-sentenced-to-70-months-in-prison-for-secretly-helping-blackcat-gang.html - INTERPOL Operation First Light https://securityaffairs.com/195056/security/interpol-operation-first-light-nets-5811-arrests-and-seizes-293-million.html - AssuranceAmerica Breach https://securityaffairs.com/195027/data-breach/assuranceamerica-breach-exposes-7-million-drivers-licenses-after-employee-account-hack.html - KDDI Zero-Day Breach https://www.securityweek.com/12-million-impacted-by-data-breach-at-japanese-telco-kddi/ - HalluSquatting AI Threat https://www.securityweek.com/hallusquatting-turns-ai-hallucinations-into-botnet-delivery-mechanism/ - Palo Alto Networks Patches 13 Vulnerabilities https://www.securityweek.com/palo-alto-networks-patches-13-vulnerabilities/

Cyber Daily News for July 9th, 2026 Cyber Daily News is also available via podcast! https://feeds.transistor.fm/cyber-daily-news Stories mentioned in today's briefing: - Malicious AI Agents https://www.infosecurity-magazine.com/news/cybercriminals-plant-ai-agents/ - Residential Proxy Scam https://securityaffairs.com/194990/malware/fake-vpn-and-7-zip-apps-turn-victims-into-residential-proxy-nodes.html - Critical Ubiquiti Patch https://securityaffairs.com/194978/security/ubiquiti-patches-critical-unifi-os-flaws-allowing-command-injection-and-privilege-escalation.html - Accenture Data Breach https://www.securityweek.com/accenture-confirms-data-breach-after-hacker-claims-source-code-theft/ - Chrome 150 Security https://www.securityweek.com/chrome-150-update-patches-27-vulnerabilities/ - Tenda Firmware Flaw https://www.securityweek.com/unpatched-backdoor-in-tenda-firmware-grants-admin-access-to-devices/ - CERT Security Warning https://thecyberexpress.com/cve-2026-11405-cert-tenda-firmware-backdoor/

Cyber Daily News for July 8th, 2026 Cyber Daily News is also available via podcast! https://feeds.transistor.fm/cyber-daily-news Stories mentioned in today's briefing: - UK Cyber Shield https://www.infosecurity-magazine.com/news/ncsc-national-cyber-sheild-ai/ - Gitea Critical Flaw https://securityaffairs.com/194902/hacking/critical-gitea-docker-bug-under-active-exploitation-exposes-repositories-and-secrets.html - Mythos AI Scanning https://www.securityweek.com/cisa-reportedly-using-anthropics-mythos-to-scan-government-software-for-flaws/ - Chinese University Attack https://www.infosecurity-magazine.com/news/china-aligned-cluster-roundcube/ - Hacktivist Arrest https://securityaffairs.com/194894/hacktivism/spanish-police-arrest-man-linked-to-carr-z-pentest-and-noname05716.html - Januscape VM Escape https://thecyberexpress.com/cve-2026-53359-januscape/ - University Data Breach https://thecyberexpress.com/mount-royal-university-cyberattack/ - CISA KEV Updates https://securityaffairs.com/194927/hacking/u-s-cisa-adds-adobe-coldfusion-joomlack-page-builder-langflow-and-joomshaper-sp-page-builder-flaws-to-its-known-exploited-vulnerabilities-catalog.html

Cyber Daily News for July 7th, 2026 Cyber Daily News is also available via podcast! https://feeds.transistor.fm/cyber-daily-news Stories mentioned in today's briefing: - Adobe ColdFusion Under Attack https://securityaffairs.com/194837/hacking/adobe-coldfusion-flaw-cve-2026-48282-now-exploited-in-the-wild.html - Januscape Cloud Escape Risk https://securityaffairs.com/194868/security/januscape-16-year-old-linux-kvm-bug-enables-cloud-vm-escape-attacks.html - AI-Generated Malware Attacks https://www.securityweek.com/armored-likho-apt-targeting-government-electric-power-entities/ - AI Agent Manipulation https://www.securityweek.com/prompt-injection-attacks-trick-ai-agents-into-making-crypto-payments/ - Iran-Israel Cyber Conflict https://www.infosecurity-magazine.com/news/new-iran-hacking-group-targets/ - Opera GX Mod Vulnerability https://www.infosecurity-magazine.com/news/opera-gx-flaw-gx-mods-css/ - UK Cyber Resilience Initiative https://www.infosecurity-magazine.com/news/uk-gov-launches-cyber-resilience/ - North Korean Supply Chain Attacks https://www.securityweek.com/north-korean-hackers-target-open-source-developers-in-supply-chain-attacks/

Cyber Daily News for July 6th, 2026 Cyber Daily News is also available via podcast! https://feeds.transistor.fm/cyber-daily-news

Cyber Daily News for July 5th, 2026 Cyber Daily News is also available via podcast! https://feeds.transistor.fm/cyber-daily-news

Cyber Daily News for July 4th, 2026 Cyber Daily News is also available via podcast! https://feeds.transistor.fm/cyber-daily-news Stories mentioned in today's briefing: - AI-Driven Ransomware https://securityaffairs.com/194713/ai/jadepuffer-first-end-to-end-ai-driven-ransomware-operation.html

Cyber Daily News for July 3rd, 2026 Cyber Daily News is also available via podcast! https://feeds.transistor.fm/cyber-daily-news Stories mentioned in today's briefing: - Medtronic Data Breach https://www.securityweek.com/medtronic-data-breach-impacts-3-8-million-people/

Cyber Daily News for July 2nd, 2026 Cyber Daily News is also available via podcast! https://feeds.transistor.fm/cyber-daily-news

Cyber Daily News for July 1st, 2026 Cyber Daily News is also available via podcast! https://feeds.transistor.fm/cyber-daily-news

Cyber Daily News for June 30, 2026 Cyber Daily News is also available via podcast! https://feeds.transistor.fm/cyber-daily-news Stories mentioned in today's briefing: - Attackers Actively Exploit Oracle E-Business Suite Flaw CVE-2026-46817 https://securityaffairs.com/194463/security/attackers-actively-exploit-the-oracle-e-business-suite-flaw-cve-2026-46817.html - Insurance Regulators Group NAIC Hit in Oracle PeopleSoft Hack https://www.securityweek.com/insurance-regulators-group-naic-hit-in-oracle-peoplesoft-hack/ - U.S. Targets Russian Cyber Spies With $10M Bounty Over Messaging App Attacks https://securityaffairs.com/194441/security/u-s-offers-10-million-reward-for-russian-hackers-behind-signal-and-whatsapp-phishing.html - Telegram-Based Millenium RAT Campaign Infects 60,000 Devices https://www.infosecurity-magazine.com/news/millenium-rat-telegram-60000/ - Critical SimpleHelp Vulnerability Exploited for Malware Delivery https://www.securityweek.com/critical-simplehelp-vulnerability-exploited-for-malware-delivery/ - Researchers Demo New Claude Code Attack Using Harmless-Looking Repositories https://www.securityweek.com/new-attack-abuses-claude-code-and-harmless-looking-repositories-to-hijack-developer-machines/ - WhatsApp Usernames Are Coming. You Can Reserve Yours Right Now https://securityaffairs.com/194449/security/whatsapp-usernames-are-coming-you-can-reserve-yours-right-now.html - New Controller Flaws Expose Highway Signs and Billboards to Remote Hacking https://www.securityweek.com/new-controller-flaws-expose-highway-signs-and-billboards-to-remote-hacking/

Cyber Daily News for June 29, 2026 Cyber Daily News is also available via podcast! https://feeds.transistor.fm/cyber-daily-news Stories mentioned in today's briefing: - US Federal Insurance Regulator Confirms Data Breach Via Oracle Flaw https://www.infosecurity-magazine.com/news/us-insurance-regulator-confirms/ - Russian Hackers Accused of Destructive Cyber-Attack on Jaguar Land Rover https://www.infosecurity-magazine.com/news/russian-hackers-destructive-jaguar/ - US Offers $10 Million Bounty for Russian State Hackers as Messaging App Attacks Evolve https://www.securityweek.com/us-offers-10-million-bounty-for-russian-state-hackers-as-messaging-app-attacks-evolve/ - KDDI Data Breach Impacts up to 14.2 Million Email Accounts at Six ISPs https://securityaffairs.com/194387/data-breach/kddi-data-breach-impacts-up-to-14-2-million-email-accounts-at-six-isps.html - OpenAI and Anthropic Limit New AI Models to Trump-Approved Customers During Cybersecurity Review https://www.securityweek.com/openai-and-anthropic-limit-new-ai-models-to-trump-approved-customers-during-cybersecurity-review/ - Operation Endgame Disrupts SocGholish, StealC Malware Networks https://thecyberexpress.com/operation-endgame-seizes-disrupts-malware/ - ATM Jackpotting Gang Members Sentenced for Ploutus Malware Attacks https://thecyberexpress.com/atm-jackpotting-malware-attackers/ - OpenAI Unveils GPT-5.6 Sol as Its Most Advanced Cybersecurity AI https://www.securityweek.com/openai-unveils-gpt-5-6-sol-as-its-most-advanced-cybersecurity-ai/

Cyber Daily News for June 28, 2026 Cyber Daily News is also available via podcast! https://feeds.transistor.fm/cyber-daily-news Stories mentioned in today's briefing: - New FBI Alert: Russian Intelligence Uses Signal Recovery Keys to Access Messages https://securityaffairs.com/194360/intelligence/new-fbi-alert-russian-intelligence-uses-signal-recovery-keys-to-access-messages.html - Hospitality Sector Hit by Phishing Campaign Using Fake Guest Complaint Emails https://securityaffairs.com/194349/uncategorized/hospitality-sector-hit-by-phishing-campaign-using-fake-guest-complaint-emails.html - Chinese Framework Powers 200,000 Scam Sites https://www.securityweek.com/chinese-framework-powers-200000-scam-sites/ - Trust in Automated AI Vulnerability Scanning Collapses to 9%, New Study Finds https://www.infosecurity-magazine.com/news/trust-ai-vulnerability-scanning/ - New CISA Guide Helps Agencies Adopt SASE For Zero Trust https://www.infosecurity-magazine.com/news/cisa-guide-sase-zero-trust/ - Linux Foundation Unveils New Open Source Security Project Akrites https://www.securityweek.com/linux-foundation-unveils-new-open-source-security-project-akrites/ - New Enterprise-Ready MCP Specification Brings New Security Challenges https://www.securityweek.com/new-enterprise-ready-mcp-specification-brings-new-security-challenges/ - CMC Releases Analysis and Guidance for Education Sector After Canvas Data Breach https://www.infosecurity-magazine.com/news/cmc-guidance-education-canvas-breach/

Cyber Daily News for June 27, 2026 Cyber Daily News is also available via podcast! https://feeds.transistor.fm/cyber-daily-news Stories mentioned in today's briefing: - DirtyClone: Fourth Linux Kernel Flaw in Six Weeks Escalates to Root https://securityaffairs.com/194338/uncategorized/dirtyclone-fourth-linux-kernel-flaw-in-six-weeks-escalates-to-root.html - Chinese APT CL-STA-1062 Expands Attacks on Southeast Asian Critical Infrastructure With Custom Malware https://securityaffairs.com/194312/intelligence/chinese-apt-cl-sta-1062-expands-attacks-on-southeast-asian-critical-infrastructure-with-custom-malware.html - Amazon Q Flaw Enabled Cloud Credential Theft via Malicious Repositories https://www.securityweek.com/amazon-q-flaw-enabled-cloud-credential-theft-via-malicious-repositories/ - More Klue Breach Victims Identified as Hackers Get Hacked https://www.securityweek.com/more-klue-breach-victims-identified-as-hackers-get-hacked/ - Five Eyes Issue Urgent AI Threat Warning https://www.securityweek.com/in-other-news-chinese-mythos-like-ai-tata-electronics-breach-snyk-layoffs/ - Russia Used Cellebrite to Hack Activist's Phone https://www.securityweek.com/in-other-news-chinese-mythos-like-ai-tata-electronics-breach-snyk-layoffs/ - Scattered Spider Members Enter Guilty Pleas https://www.securityweek.com/in-other-news-chinese-mythos-like-ai-tata-electronics-breach-snyk-layoffs/ - Nebulock Raises $25 Million for AI-Native Contextual Security https://www.securityweek.com/nebulock-raises-25-million-for-ai-native-contextual-security/

Cyber Daily News for June 26, 2026 Cyber Daily News is also available via podcast! https://feeds.transistor.fm/cyber-daily-news Stories mentioned in today's briefing: - Tata Electronics Confirms Data Breach After 630GB Leak Claim Targets Apple and Tesla https://securityaffairs.com/194237/data-breach/tata-electronics-confirms-data-breach-after-630gb-leak-claim-targets-apple-and-tesla.html - Third-Party Breach at Polymarket Leads to $2.94M Crypto Theft https://securityaffairs.com/194266/security/third-party-breach-at-polymarket-leads-to-2-94m-crypto-theft.html - First-Ever Exploitation of PTC Windchill Vulnerability Discovered in the Wild https://www.securityweek.com/first-ever-exploitation-of-ptc-windchill-vulnerability-discovered-in-the-wild/ - Curl Fixes a 25-Year-Old Bug in Its Largest CVE Release Yet https://securityaffairs.com/194220/security/curl-fixes-a-25-year-old-bug-in-its-largest-cve-release-yet.html - China-Linked Hackers Strike Asian Critical Infrastructure with TinyRCT Backdoor https://www.infosecurity-magazine.com/news/china-hackers-asian-cni-backdoor/ - Russian APT Deploys 'StockStay' Backdoor Against Ukrainian Targets https://www.securityweek.com/russian-apt-deploys-stockstay-backdoor-against-ukrainian-targets/ - Iranian Hacker Arrested Over Alleged $3.4 Billion Cyberattack on USA Infrastructure https://thecyberexpress.com/iranian-hacker-arrested/ - Twenty Million US IP Connections Used by Proxy Services https://www.infosecurity-magazine.com/news/twenty-million-us-ip-connections/

Cyber Daily News for June 25, 2026 Cyber Daily News is also available via podcast! https://feeds.transistor.fm/cyber-daily-news Stories mentioned in today's briefing: - macOS Flaw Lets Standard Users Disable EDR and MDM https://www.infosecurity-magazine.com/news/macos-xpc-flaw-disable-edr-mdm/ - Cisco Catalyst SD-WAN Zero-Day Exploited Months Before Disclosure https://securityaffairs.com/194200/hacking/cisco-catalyst-sd-wan-zero-day-cve-2026-20245-exploited-months-before-disclosure.html - Europol-Led Operation Endgame Takes Down StealC and Amadey Infostealers https://www.infosecurity-magazine.com/news/operation-endgame-stealc-amadey/ - macOS Backdoor Uses Prompt Injection to Evade AI Triage https://www.infosecurity-magazine.com/news/macos-gaslight-rust-backdoor/ - Researchers Trick AI Browsers Into Leaking Credentials https://www.infosecurity-magazine.com/news/bioshocking-ai-browser-prompt/ - Cisco Unified CM Flaw Actively Exploited in the Wild https://securityaffairs.com/194153/uncategorized/cisco-unified-cm-flaw-cve-2026-20230-actively-exploited-in-the-wild.html - Chrome 149 Update Resolves 18 Severe Vulnerabilities https://www.securityweek.com/chrome-149-update-resolves-18-severe-vulnerabilities/ - Major Increase in Ransomware Attacks Targeting Europe https://www.infosecurity-magazine.com/news/increase-ransomware-europe/

Cyber Daily News for June 24, 2026 Cyber Daily News is also available via podcast! https://feeds.transistor.fm/cyber-daily-news Stories mentioned in today's briefing: - Eight-Year-Old Samsung KNOX Kernel Flaw Exposes Millions of Galaxy Devices https://www.securityweek.com/eight-year-old-samsung-knox-flaw-exposed-millions-of-galaxy-devices-to-kernel-attacks/ - One Railway Radio Outage Stopped Trains Across Germany https://securityaffairs.com/194117/security/one-railway-radio-outage-stopped-trains-across-germany-and-nobody-knew-why.html - FortiBleed: The Broker Who Turned 73,000 Firewalls Into a Product Catalog https://securityaffairs.com/194132/cyber-crime/fortibleed-the-broker-who-turned-73000-firewalls-into-a-product-catalog.html - DifyTap: Four Bugs Put over 1 Million AI Apps at Risk https://securityaffairs.com/194081/hacking/difytap-four-bugs-put-over-1-million-ai-apps-at-risk.html - KDDI Data Breach May Have Exposed Up to 14.22 Million Email Accounts https://thecyberexpress.com/kddi-data-breach-14-million-email-leak-2026/ - CISA Adds Ubiquiti UniFi OS and Lantronix EDS5000 Flaws to KEV Catalog https://securityaffairs.com/194142/security/u-s-cisa-adds-ubiquiti-unifi-os-and-lantronix-eds5000-plugin-flaws-to-its-known-exploited-vulnerabilities-catalog.html - Lookalike npm Package Hides a Multi-Stage Windows RAT https://www.infosecurity-magazine.com/news/lookalike-npm-package-postcss/ - OpenAI Expands Daybreak to Help Defenders Patch Flaws https://www.infosecurity-magazine.com/news/openai-daybreak-gpt-5-5-cyber/

Cyber Daily News for June 23, 2026 Cyber Daily News is also available via podcast! https://feeds.transistor.fm/cyber-daily-news Stories mentioned in today's briefing: - Anthropic's Mythos AI reportedly breached nearly all NSA classified systems https://securityaffairs.com/194016/ai/anthropics-mythos-ai-broke-into-almost-all-nsa-classified-systems-in-hours.html - Squidbleed: 29-Year-Old Squid Proxy Bug Leaks User Credentials https://securityaffairs.com/194041/hacking/squidbleed-29-year-old-squid-bug-leaks-user-credentials.html - Russian Initial Access Broker Behind FortiBleed Campaign https://www.securityweek.com/russian-initial-access-broker-behind-fortibleed-campaign/ - Scattered Spider Teens Convicted of TfL Cyber-Attack https://www.infosecurity-magazine.com/news/scattered-spider-teens-convicted/ - Five Eyes Group Issues Urgent Call to Tackle Frontier AI Threats https://www.infosecurity-magazine.com/news/five-eyes-issues-urgent-call/ - ShapedPlugin Supply Chain Attack Backdoors Pro Plugin Updates https://securityaffairs.com/194059/hacking/shapedplugin-supply-chain-attack-backdoors-pro-plugin-updates.html - WhatsApp Malware Campaign Hijacks Trust, Installs Legitimate Admin Tools https://securityaffairs.com/194031/malware/whatsapp-malware-campaign-hijacks-trust-installs-legitimate-admin-tools.html - Trump Signs Executive Order Accelerating Post-Quantum Cryptography Migration https://www.securityweek.com/trump-signs-executive-order-accelerating-post-quantum-cryptography-migration/

Cyber Daily News for June 22, 2026 Cyber Daily News is also available via podcast! https://feeds.transistor.fm/cyber-daily-news Stories mentioned in today's briefing: - Klue Breach Enables Hackers to Compromise Cybersecurity Firms via OAuth Tokens https://www.securityweek.com/more-cybersecurity-firms-disclose-impact-from-klue-hack/ - usbliter8 Brings Unpatchable BootROM Exploit to Apple A12 and A13 Devices https://securityaffairs.com/193965/hacking/usbliter8-brings-unpatchable-bootrom-exploit-to-apple-a12-and-a13-devices.html - FortiBleed: Detailed Breakdown of an Active Russian Credential-Harvesting Operation https://securityaffairs.com/194004/hacking/fortibleed-the-most-detailed-breakdown-yet-of-an-active-russian-credential-harvesting-operation.html - 4,300+ Outdated Routers Hijacked in Stealthy Spy Infrastructure by AryStinger Malware https://securityaffairs.com/193987/security/4300-outdated-routers-hijacked-in-stealthy-spy-infrastructure-by-arystinger-malware.html - Texas Parks & Wildlife Data Breach Affects 3 Million Individuals https://www.securityweek.com/texas-parks-wildlife-data-breach-affects-3-million-individuals/ - What the Latest ShinyHunters Breaches Reveal About Modern Cyberattacks https://www.securityweek.com/what-the-latest-shinyhunters-breaches-reveal-about-modern-cyberattacks/ - OptinMonster Supply Chain Attack Hits 1.2 Million Sites https://sansec.io/research/optinmonster-supply-chain-attack - UK Information Commissioner Resigns After Workplace Investigation https://www.infosecurity-magazine.com/news/information-commissioner-resigns/

Cyber Daily News for June 21, 2026 Cyber Daily News is also available via podcast! https://feeds.transistor.fm/cyber-daily-news Stories mentioned in today's briefing: - Inside GentleKiller: The Gentlemen Hand Affiliates a Ready-Made EDR-Killer Suite https://securityaffairs.com/193941/uncategorized/inside-gentlekiller-the-edr-killer-powering-the-gentlemen.html - CryptoBandits Malware Doubles as a Tor-Abusing Backdoor https://www.securityweek.com/cryptobandits-malware-doubles-as-a-backdoor-abuses-tor/ - New Details on the FortiBleed Credential-Spraying Operation https://securityaffairs.com/193931/hacking/fortibleed-exposes-global-credential-spraying-operation.html - Joomla Content Editor and LiteSpeed cPanel Plugin Flaws Under Active Attack https://thecyberexpress.com/cve-2026-48907-joomla-jce-litespeed-cpanel/ - Operation EndGame Cleans 14,971 WordPress Sites in SocGholish Takedown https://securityaffairs.com/193893/malware/14971-wordpress-sites-cleaned-in-global-socgholish-takedown.html - Novo Nordisk Breach Exposes Clinical Trial and Healthcare Professional Data https://thecyberexpress.com/tce-weekly-roundup-global-threats/ - US DOT Closes Delta Probe Tied to CrowdStrike Outage https://www.securityweek.com/in-other-news-apple-patches-beats-eavesdropping-flaw-dot-closes-delta-crowdstrike-probe-aws-continuum/ - Macron Urges Democracies to Cooperate on AI Regulation, Calls on US to Share Advanced AI https://www.securityweek.com/french-president-urges-us-to-share-cutting-edge-ai-and-democracies-to-cooperate-on-regulation/

Cyber Daily News for June 20, 2026 Cyber Daily News is also available via podcast! https://feeds.transistor.fm/cyber-daily-news Stories mentioned in today's briefing: - FortiBleed Fallout: CISA Warns of Active Exploitation of 74,000 Leaked Fortinet Credentials https://securityaffairs.com/193902/hacking/cisa-warns-of-active-exploitation-following-fortibleed-leak.html - Joomla Content Editor and LiteSpeed cPanel Plugin Flaws Under Active Attack https://thecyberexpress.com/cve-2026-48907-joomla-jce-litespeed-cpanel/ - Novo Nordisk Breach Exposes Clinical Trial and Healthcare Professional Data https://thecyberexpress.com/tce-weekly-roundup-global-threats/ - Velvet Ant Group Maintained Decade-Long Stealth Inside Networks https://www.securityweek.com/in-other-news-apple-patches-beats-eavesdropping-flaw-dot-closes-delta-crowdstrike-probe-aws-continuum/ - Unpatched Google Cloud Config Connector Flaw Enables Account Takeover https://www.securityweek.com/in-other-news-apple-patches-beats-eavesdropping-flaw-dot-closes-delta-crowdstrike-probe-aws-continuum/ - Android TV Botnet 'Popa' Linked to Israeli Firm https://www.securityweek.com/in-other-news-apple-patches-beats-eavesdropping-flaw-dot-closes-delta-crowdstrike-probe-aws-continuum/ - Apple Patches Beats Eavesdropping Flaw https://www.securityweek.com/in-other-news-apple-patches-beats-eavesdropping-flaw-dot-closes-delta-crowdstrike-probe-aws-continuum/ - Macron Urges Democracies to Cooperate on AI Regulation, Calls on US to Share Advanced AI https://www.securityweek.com/french-president-urges-us-to-share-cutting-edge-ai-and-democracies-to-cooperate-on-regulation/

Cyber Daily News for June 19, 2026 Cyber Daily News is also available via podcast! https://feeds.transistor.fm/cyber-daily-news Stories mentioned in today's briefing: - 24 Billion Stolen Credentials Exposed in Massive Data Leak https://securityaffairs.com/193864/security/24-billion-stolen-credentials-exposed-in-massive-data-leak.html - Operation Endgame Hits SocGholish Malware Network, 15,000 Websites Cleaned https://www.securityweek.com/15000-wordpress-websites-cleaned-up-in-socgholish-botnet-takedown/ - CISA Adds Actively-Exploited Splunk Enterprise Flaw to KEV, Patch Deadline Sunday https://securityaffairs.com/193888/security/u-s-cisa-adds-splunk-enterprise-flaw-to-its-known-exploited-vulnerabilities-catalog-and-urges-agencies-to-fix-it-by-sunday.html - New iPhone BootROM Flaw Enables Hardware-Level Compromise https://thecyberexpress.com/iphone-bootrom-vulnerability/ - Peter Thiel's Secret Society Leak Creates a Perfect Target List for Espionage and Blackmail https://securityaffairs.com/193880/intelligence/peter-thiel-secret-society-leak-creates-a-perfect-target-list-for-espionage-influence-operations-and-blackmail.html - Tor-Based Clipper Malware Targets Wallet Seed Phrases https://securityaffairs.com/193860/uncategorized/tor-based-clipper-malware-targets-wallet-seed-phrases.html - Cybersecurity Firms Impacted by Klue Supply Chain Attack https://www.securityweek.com/cybersecurity-firms-impacted-by-klue-supply-chain-attack/ - ICO Cautions Healthcare Worker After Princess of Wales Incident https://www.infosecurity-magazine.com/news/ico-cautions-healthcare-worker/

Cyber Daily News for June 18, 2026 Cyber Daily News is also available via podcast! https://feeds.transistor.fm/cyber-daily-news Stories mentioned in today's briefing: - FortiBleed Exposes Admin Passwords for 75,000 Fortinet Firewalls https://securityaffairs.com/193817/hacking/fortibleed-exposes-admin-passwords-for-75000-fortinet-firewalls.html - Microsoft Confirms RoguePlanet Zero-Day in Defender, Patch Under Development https://securityaffairs.com/193830/security/microsoft-confirms-rogueplanet-zero-day-in-defender-patch-under-development.html - DragonForce Hid Inside Microsoft Teams and Nobody Noticed for Two Months https://securityaffairs.com/193801/security/dragonforce-hid-inside-microsoft-teams-and-nobody-noticed-for-two-months.html - Critical Command Execution Vulnerability Patched in Cisco ISE https://www.securityweek.com/critical-command-execution-vulnerability-patched-in-cisco-ise/ - F5 Patches Critical, High-Severity NGINX Vulnerabilities https://www.securityweek.com/f5-patches-critical-high-severity-nginx-vulnerabilities/ - U.S. CISA adds Widget Factory Joomla Content Editor flaw to its Known Exploited Vulnerabilities catalog https://securityaffairs.com/193775/hacking/u-s-cisa-adds-widget-factory-joomla-content-editor-jce-flaw-to-its-known-exploited-vulnerabilities-catalog.html - North Korean Hiring Fraud Runs on AI and US Laptop Farms https://www.infosecurity-magazine.com/news/north-korea-it-worker-fraud-ai/ - Kodak Admits Data Breach After ShinyHunters Hack Claims https://www.securityweek.com/kodak-admits-data-breach-after-shinyhunters-hack-claims/

Cyber Daily News for June 17, 2026 Cyber Daily News is also available via podcast! https://feeds.transistor.fm/cyber-daily-news Stories mentioned in today's briefing: - Fortinet Warned as Three Critical FortiSandbox Bugs Come Under Attack https://securityaffairs.com/193709/ai/fortinet-warned-as-three-critical-fortisandbox-bugs-come-under-attack.html - FulcrumSec Targets Novo Nordisk, Leaks Clinical and Research Data https://securityaffairs.com/193763/security/fulcrumsec-targets-novo-nordisk-leaks-clinical-and-research-data.html - Microsoft Working on Patch for 'RoguePlanet' Zero-Day https://www.securityweek.com/microsoft-working-on-patch-for-rogueplanet-zero-day/ - EdTech Faces a Cybersecurity Crisis: Data Breaches Surge https://securityaffairs.com/193777/data-breach/edtech-faces-a-cybersecurity-crisis-data-breaches-surge.html - Fifteen JetBrains Marketplace Plugins Found Stealing API Keys https://www.infosecurity-magazine.com/news/fifteen-jetbrains-marketplace/ - Microsoft Teams Relay Servers Abused in DragonForce Ransomware Attack https://www.securityweek.com/microsoft-teams-relay-servers-abused-in-dragonforce-ransomware-attack/ - China-Linked FishMonger Ports SprySOCKS to Windows With Kernel-Level Stealth https://securityaffairs.com/193728/apt/china-linked-fishmonger-ports-sprysocks-to-windows-with-kernel-level-stealth-and-uefi-bootkit-hints.html - Rokarolla Trojan Combines Banking Fraud With Device Surveillance https://www.infosecurity-magazine.com/news/rokarolla-android-banking-trojan/

Cyber Daily News for June 16, 2026 Cyber Daily News is also available via podcast! https://feeds.transistor.fm/cyber-daily-news Stories mentioned in today's briefing: - China-linked UNC6508 spent two years inside medical and military research networks https://securityaffairs.com/193667/apt/china-linked-actor-unc6508-spent-two-years-inside-medical-research-networks.html - Critical 'SearchLeak' flaw in Microsoft 365 Copilot exposed sensitive enterprise data https://thecyberexpress.com/searchleak-vulnerability-microsoft-365-copilot/ - Cisco patches another SD-WAN zero-day exploited in attacks; CISA adds it to KEV https://www.securityweek.com/cisco-patches-another-sd-wan-zero-day-exploited-in-attacks/ - Novo Nordisk confirms data theft including clinical trial information https://securityaffairs.com/193650/security/novo-nordisk-confirms-data-theft-what-attackers-took-and-what-they-didnt.html - Atomic Arch supply chain attack hits 1,500 AUR packages https://www.securityweek.com/atomic-arch-supply-chain-attack-hits-1500-aur-packages/ - Belarus-linked UNC1151 launches Gmail phishing campaign to steal 2FA codes https://thecyberexpress.com/unc1151-gmail-phishing-campaign/ - iRhythm discloses data breach after threat actor claims PHI theft https://thecyberexpress.com/irhythm-data-breach/ - Ransomware shuts down mills of Australia's second-largest sugar producer https://www.securityweek.com/ransomware-attack-shuts-down-mills-of-australias-second-largest-sugar-producer/

Cyber Daily News for June 15, 2026 Cyber Daily News is also available via podcast! https://feeds.transistor.fm/cyber-daily-news Stories mentioned in today's briefing: - FBI, Google Dismantle 'Outsider Enterprise' Phishing Service https://www.securityweek.com/fbi-google-dismantle-outsider-enterprise-phishing-service/ - Supply Chain Attack Hits Popular WordPress Plugins Through Awesome Motive CDN https://securityaffairs.com/193616/malware/supply-chain-attack-hits-popular-wordpress-plugins-through-awesome-motive-cdn.html - Infostealers, AI, and a 90% Affiliate Cut Fuel The Gentlemen Group's Rise https://securityaffairs.com/193622/uncategorized/infostealers-ai-and-a-90-affiliate-cut-fuel-the-gentlemen-groups-rise.html - ShinyHunters Claims Council of Europe Hack https://www.securityweek.com/shinyhunters-claims-council-of-europe-hack/ - Splunk Urges Immediate Patching of Critical Flaw Enabling Arbitrary File Operations https://thecyberexpress.com/cve-2026-20253-critical-splunk-enterprise/ - Cybersecurity Experts Urge US to Lift Ban on Anthropic's Frontier AI Models https://www.infosecurity-magazine.com/news/cyber-experts-urge-us-lift-ban/ - UK Government Finds 400+ Vulnerabilities in AI Hackathons https://www.infosecurity-magazine.com/news/uk-government-400-vulnerabilities/ - Maine Takes Breach Reporting Portal Offline After Fake Entries https://www.securityweek.com/maine-disables-data-breach-portal-due-to-fake-submissions/

Cyber Daily News for June 14, 2026 Cyber Daily News is also available via podcast! https://feeds.transistor.fm/cyber-daily-news Stories mentioned in today's briefing: - Washington Pulled the Plug on Anthropic's Fable 5 and Mythos 5 Models https://securityaffairs.com/193579/ai/washington-pulled-the-plug-on-anthropic-fable-5-and-mythos-5-models.html - Ukrainian Extradited from Ireland Pleads Guilty Over Role in Conti Ransomware Scheme https://securityaffairs.com/193590/uncategorized/ukrainian-extradited-from-ireland-pleads-guilty-over-role-in-conti-ransomware-scheme.html - NPM 12 Will Change Script Execution Behavior to Prevent Supply Chain Attacks https://www.securityweek.com/npm-12-will-change-script-execution-behavior-to-prevent-supply-chain-attacks/

Cyber Daily News for June 13, 2026 Cyber Daily News is also available via podcast! https://feeds.transistor.fm/cyber-daily-news Stories mentioned in today's briefing: - Iran-Linked Handala Breached California Water Service, Leaked 5GB https://securityaffairs.com/193565/uncategorized/iran-linked-handala-breached-a-california-water-utility-it-could-have-done-worse-and-it-knows-that.html - CISA Adds Exploited Oracle PeopleSoft Flaw to KEV Catalog https://securityaffairs.com/193574/security/u-s-cisa-adds-oracle-peoplesoft-enterprise-peopletools-flaw-to-its-known-exploited-vulnerabilities-catalog.html - CISA Adds Max-Severity Ivanti Sentry Flaw to KEV, Urges Patch by June 14 https://securityaffairs.com/193557/security/u-s-cisa-adds-ivanti-sentry-flaw-to-its-known-exploited-vulnerabilities-catalog-and-urges-patching-by-june-14.html - FBI and Europol Take Down AudiA6 Ransomware Crypto-Laundering Platform https://www.infosecurity-magazine.com/news/ransomware-crypto-laundering/ - GitHub to Update npm to Thwart Software Supply Chain Attacks https://www.infosecurity-magazine.com/news/github-update-npm-supply-chain/ - Anthropic Takes Latest AI Models Offline to Comply With Export Controls https://www.securityweek.com/anthropic-says-it-has-taken-its-latest-ai-models-offline-to-comply-with-new-export-controls/ - Google Reportedly Lays Off Security Staff https://www.securityweek.com/in-other-news-google-security-layoffs-audia6-takedown-400-million-coupang-fine/ - Microsoft Issues Incident Response Playbook for AI https://www.securityweek.com/in-other-news-google-security-layoffs-audia6-takedown-400-million-coupang-fine/

Cyber Daily News for June 12, 2026 Cyber Daily News is also available via podcast! https://feeds.transistor.fm/cyber-daily-news Stories mentioned in today's briefing: - CVE-2026-10520 Exploited: Ivanti Sentry Gateways Compromised Shortly After Patch Release https://securityaffairs.com/193530/uncategorized/cve-2026-10520-exploited-ivanti-sentry-gateways-compromised-shortly-after-patch-release.html - Google Confirms Exploitation of Oracle PeopleSoft Zero-Day by ShinyHunters https://www.securityweek.com/google-confirms-exploitation-of-oracle-peoplesoft-zero-day-by-shinyhunters/ - 21,786 Home Cameras, No Password, No Warning https://securityaffairs.com/193536/hacking/21786-home-cameras-no-password-no-warning.html - OnyxC2 Malware-as-a-Service Offers Enterprise-Grade Data Theft https://securityaffairs.com/193523/malware/onyxc2-malware-as-a-service-offers-enterprise-grade-data-theft.html - CISA Directs Federal Agencies to Prioritize Security Patches Based on Risk https://www.securityweek.com/cisa-directs-federal-agencies-to-prioritize-security-patches-based-on-risk/ - Cybercriminals Use Fake AI Guides and Dev Tools to Spread AsyncRAT Malware https://www.infosecurity-magazine.com/news/fake-ai-guides-dev-tools-spread/ - FIFA World Cup 2026 Scams: Fake Websites, Ticket Fraud, and Job Scams Already Active https://thecyberexpress.com/fifa-world-cup-2026-scams/ - 163 Organizations Hit by Thai Gambling SEO Poisoning Campaign https://thecyberexpress.com/thai-gambling-seo-poisoning/

Cyber Daily News for June 11, 2026 Cyber Daily News is also available via podcast! https://feeds.transistor.fm/cyber-daily-news Stories mentioned in today's briefing: - Microsoft Patches Exploited Exchange Server Vulnerability https://www.securityweek.com/microsoft-patches-exploited-exchange-server-vulnerability/ - GreatXML Zero-Day Exploit Bypasses BitLocker https://www.securityweek.com/greatxml-zero-day-exploit-bypasses-bitlocker/ - ServiceNow Flaw Exploited by Threat Actors to Access Customer Instances https://thecyberexpress.com/servicenow-flaw-exploited/ - Fortinet patched a new critical FortiSandbox flaw https://securityaffairs.com/193509/security/fortinet-patched-a-new-critical-fortisandbox-flaw.html - New “Agentjacking” Attacks Could Hijack AI Coding Agents https://www.infosecurity-magazine.com/news/agentjacking-attacks-hijack-ai/ - JDY Botnet Evolves After KV Takedown, Targets Military Networks https://securityaffairs.com/193490/malware/jdy-botnet-evolves-after-kv-takedown-targets-military-networks.html - CISA Sets 72-Hour Patch Window for Federal Systems Facing Highest Cyber Risks https://thecyberexpress.com/cisa-vulnerability-management-directive/ - University of Nottingham Confirms Breach After Hackers Leak Data https://www.securityweek.com/university-of-nottingham-confirms-breach-after-hackers-leak-data/

Cyber Daily News for June 10, 2026 Cyber Daily News is also available via podcast! https://feeds.transistor.fm/cyber-daily-news Stories mentioned in today's briefing: - Microsoft Releases Record-Breaking Patch Tuesday With 208 CVEs https://securityaffairs.com/193417/security/microsoft-releases-record-breaking-patch-tuesday-with-208-cves.html - Chaotic Eclipse Unveils RoguePlanet Exploit Targeting Fully Patched Windows https://securityaffairs.com/193436/security/chaotic-eclipse-unveils-rogueplanet-exploit-targeting-fully-patched-windows.html - Miasma Worm Compromises 73 Microsoft GitHub Repositories https://securityaffairs.com/193367/malware/miasma-worm-compromises-73-microsoft-github-repositories.html - France's Government Messaging App Tchap Got Breached https://securityaffairs.com/193393/security/frances-government-messaging-app-tchap-got-breached.html - "AI Worms": Researchers Demonstrate Autonomous Malware Capable of Adapting to Any Online Device https://securityaffairs.com/193405/malware/ai-worms-researchers-demonstrate-autonomous-malware-capable-of-adapting-to-any-online-device.html - Critical Veeam RCE Flaw Lets Low-Privilege Users Take Over Backup Servers https://securityaffairs.com/193385/uncategorized/critical-veeam-rce-flaw-lets-low-privilege-users-take-over-backup-servers.html - Critical Vulnerabilities Patched in Fortinet, Ivanti Products https://www.securityweek.com/critical-vulnerabilities-patched-in-fortinet-ivanti-products/ - Critical phpBB Flaw Lets Attackers Hijack Any Account with One Request https://www.infosecurity-magazine.com/news/phpbb-authentication-bypass/

Cyber Daily News for June 9, 2026 Cyber Daily News is also available via podcast! https://feeds.transistor.fm/cyber-daily-news Stories mentioned in today's briefing: - Check Point VPN Zero-Day Exploited in Qilin Ransomware Attacks https://www.securityweek.com/check-point-vpn-zero-day-exploited-in-qilin-ransomware-attacks/ - Google Patches 5th Chrome Zero-Day Exploited in 2026 https://www.securityweek.com/google-patches-5th-chrome-zero-day-exploited-in-2026/ - Meta Accuses NSO of Violating WhatsApp Court Injunction https://securityaffairs.com/193333/security/meta-accuses-nso-of-violating-whatsapp-court-injunction.html - U.S. CISA Adds BerriAI LiteLLM Flaw to Known Exploited Vulnerabilities Catalog https://securityaffairs.com/193343/security/u-s-cisa-adds-berriai-litellm-and-check-point-security-gateway-flaws-to-its-known-exploited-vulnerabilities-catalog.html - CVE-2026-23111: Linux nf_tables Flaw Enables Root Exploits https://securityaffairs.com/193352/hacking/cve-2026-23111-linux-nf_tables-flaw-enables-root-exploits.html - Everest Forms Pro WordPress Flaw is Handing Attackers Admin Access https://securityaffairs.com/193325/security/everest-forms-pro-wordpress-flaw-is-handing-attackers-admin-access.html - North Korean Hackers Use Fake Coding Tasks to Steal Crypto https://www.infosecurity-magazine.com/news/north-korean-hackers-developers/ - OpenAI Unveils ChatGPT Account Security Controls https://www.infosecurity-magazine.com/news/chatgpt-lockdown-mode-active/