Cyber Mornings Daily

PaperCut Zero-Day Exploited, ServiceNow CVSS 10.0 Flaws, OpenAI Agents Hack Hugging Face

PaperCut Unauthenticated RCE Chain, ownCloud Nuclear Data Theft, ServiceNow CVSS 10.0 Flaws

PaperCut Zero-Day Exploited, Next.js RCE Flaws Patched, OpenAI Agents Breach Hugging Face

CISA Adds Six Flaws to KEV, FBI Disrupts QTFY, Red Team Compromises Two Critical Infra Orgs

Gitea RCE in wild, Mirage2FA hits 4500 companies, SLEEPWALKER backdoor with custom bytecode

Oracle WebLogic KEV Flaw, miniOrange WordPress Admin Bypass, Critical Keycloak Password Reset

AI-Powered Server Attacks, Trojan npm Packages Drop RedC2, Android Car Head Unit Malware

GitLab RCE Exploited In Wild, Entra ID CVSS 10 Flaw Hit, Rust Crates Poisoned With Build-Time

Elementor Pro RCE, 14, 500 Dahua Devices Hacked, StopAndProtect WordPress Malware Campaign

Clop Windchill Web Shell, TWINLOOT Microsoft 365 Implant, MLflow SSRF Exploitation

CISA flags actively exploited Ray RCE, critical GitLab GraphQL flaw, Forminator WordPress

Evooo1Bot Linux Botnet, China-Nexus VMware vCenter Exploit, SAP Commerce Cloud CVE Under Active

SharePoint Auth Bypass Exploited, Lazarus Windows Zero-Day Abuse, 737 Malicious Chrome VPN

SharePoint Auth Bypass Exploited Wild, Lazarus Zero-Day Hits Defense Firms, Adobe ColdFusion 10.0

OpenAI Anthropic Google API, Enterprise Defenses Recovered at, Adobe Patches Three CVSS

Hackers Breach Polish Power, New Passkey Attacks Can, Kimsuky Builds Offline AI

Solidity Pro VS Code, OpenAI's Next AI Model, Atlassian Rovo Can Be

Atlassian Rovo Can Be, New CSS Attacks Can, Metabase Zero-Day Exploited in

Metabase Zero-Day Exploited in, N-able Issues N-central Hotfix, Progress Kemp LoadMaster Flaw

Microsoft 365 AitM Phishing, New Interrupt Injection Attack, CISA Flags TeamCity CVE-2026-63077

AWS Google and Vercel, CISA Flags TeamCity CVE-2026-63077, CISA Flags Langflow RCE

Claude Mythos 5 Tried, CISA Flags Langflow RCE, Keyv-Linked npm Worm Poisons

Claude Mythos 5 Tried, CISA Flags Langflow RCE, Keyv-Linked npm Worm Poisons

CISA Adds Exploited N-able, INC Ransomware Emerges as, DOUBLECUP Uses ClickFix and

N-able Says Attackers Take, Hugging Face Diffusers Flaws, Chinese Threat Actor Uses

Coldcard Hardware Wallet Flaw, Hackers Poison Adform Script, Adobe Campaign Classic CVSS

Adobe Campaign Classic CVSS, Hackers Poison Adform Script, Hijacked Hotel Wi Fi

DPRK-Linked DPRK-Linked macOS Malv, ThreatsDay AI-Powered , Azure Cosmos DB Flaw E

Malvertising build-your-own malware, Fastjson exploitation, Certighost AD abuse

Fastjson RCE, Cl0p Windchill attacks, Certighost AD exploit

AD Domain Controller impersonation, Bing SVG RCE on Microsoft servers, Redis zero-days via AI agents

Kratos phishing takedown, Azure DevOps AI hijack, OpenAI sandbox escape

WordPress wp2shell backdoor, ServiceNow AI flaw, Russian IP camera espionage

SonicWall root breach, Hugging Face intrusion, RubyGems backdoor

OpenSSL TLS DoS, Vite supply-chain RAT, fake coding tests hide malware

WordPress RCE, AI service botnet, code-signing cert theft

CISA KEV: SharePoint RCE, ACR Stealer ClickFix, GoSerpent ESP

Windows code exec, SonicWall zero-days, npm botnet malware

Ransomware VPN sanctions, npm DDoS botnet, ShinyHunters Salesforce paths

M365 PhaaS AitM session theft, AI-generated AD recon, Evilginx ops exposed

HTTP/3 crash flaw, passkey vishing abuse, mass WordPress backdoors

BYOVD ransomware, banking ClickFix takeover, ghost phishing

Linux root bug, active KEV exploitation, M365 device-code phishing

Linux root bug, active KEV exploitation, M365 device-code phishing

KVM guest escapes, Roundcube mail pivots, Tenda backdoor

QuimaRAT MaaS, AI skill packing evasion, air-gap pixel leaks

Linux root RCE, embedded filesystem flaws, North Korean npm supply chain attack

LoadMaster RCE, Cursor sandbox escapes, browser ransomware via Chromium

Azure CLI password spray, ClickFix payload pipelines, AI-domain phantom squatting

SimpleHelp active exploitation, Oracle EBS exploited, LoadMaster root RCE