@Daily_CyberSec

Stay ahead with Daily CyberSecurity. We deliver rapid zero-hour alerts and expert analysis on critical vulnerabilities, CVEs, and emerging cyber threats.

 Vnorovy, Česká republika
securityonline.info
Joined January 2011
  • Tweets88.3K
  • Following396
  • Followers13K
4KMedia
CVE Alerts turns CVE, KEV, & EPSS data into real-time alerts via email, Slack, Teams, and GitHub Issues. Start your 14-day free trial. #CVEAlerts #Cybersecurity #VulnerabilityManagement #CISAKEV #EPSS #ThreatIntel #InfoSec #PatchManagement #ExploitIntel securityonline.info/daily-cy…

Daily CyberSecurity Launches CVE Alerts, an Automated Vulnerability Intelligence Service for IT and...

Daily CyberSecurity, the team behind the CVE-Watchtower vulnerability tracking platform on securityonline.info, today announced the general availability of CVE Alerts, a subscription service that …

securityonline.info
1
1,097
Operation Serengeti III, an INTERPOL-led Africa cybercrime crackdown, led to 1,462 arrests and more than USD 105 million recovered. #OperationSerengeti #INTERPOL #Cybercrime #Africa #Fortinet #BEC #OnlineFraud #Cybersecurity securityonline.info/operatio…

Operation Serengeti III Leads to 1,462 Arrests and USD 105 Million Recovered Across Africa

At a glance Actor Cybercrime networks operating across Africa Activity Cyber-enabled fraud, ransomware, BEC, online scams, and digital extortion Targets 65,929 identified victims, per INTERPOL Sca…

securityonline.info
90
A cPanel PHP update fixes PHP2Shell flaws CVE-2026-109618 and CVE-2026-109619, while WP Toolkit 6.11.5 patches CVE-2026-107663. #cPanel #PHP2Shell #WPToolkit #CVE2026109618 #CVE2026109619 #CVE2026107663 #WebHosting #CyberSecurity securityonline.info/cpanel-p…

cPanel Patches PHP2Shell Flaws and WP Toolkit Bug Affecting Shared Hosting Servers

TL;DR cPanel has issued two security updates covering three CVEs. A cPanel PHP update fixes the critical PHP2Shell flaws, CVE-2026-109618 and CVE-2026-109619, across EasyApache4 builds. Separately…

securityonline.info
1
308
QNAP PHP2Shell vulnerabilities CVE-2026-109618 and CVE-2026-109619 affect QTS, QuTS hero and apps. No patch yet, so take NAS devices offline. #QNAP #PHP2Shell #QTS #CVE2026109618 #CVE2026109619 #NAS #RCE #CyberSecurity securityonline.info/qnap-php…

QNAP Warns PHP2Shell Flaws Hit QTS and QuTS hero, Urges Users to Take NAS Offline

TL;DR QNAP says the QNAP PHP2Shell vulnerabilities affect QTS, QuTS hero, QuTScloud and several QNAP apps. The two flaws, CVE-2026-109618 and CVE-2026-109619, let unauthenticated attackers run cod…

securityonline.info
318
The EU's Booking.com DSA investigation targets fake listings, Booking.com phishing scams and hidden ads. Fines could hit 6% of global turnover. #BookingCom #DSA #DigitalServicesAct #Phishing #TravelScams #EUCommission securityonline.info/booking-…
240
Two critical Portainer vulnerabilities enable a bind mount bypass and Docker host takeover by standard users. Upgrade to Portainer 2.45.2 now. #Portainer #Docker #ContainerSecurity #CVE202644849 #CVE202644850 #PrivilegeEscalation #DevSecOps #CyberSecurity securityonline.info/portaine…

Portainer Fixes Two Critical Flaws Letting Standard Users Take Over Docker Hosts

TL;DR Portainer has fixed two critical Portainer vulnerabilities, each rated CVSS 9.4, that let standard users mount host files into containers. One extends a bind mount bypass that survived two e…

securityonline.info
1
1
285
A disruptive Jerome School District cyberattack compromised HVAC and door locks, forcing school closures and highlighting smart infrastructure risks. #Cybersecurity #Ransomware #JeromeIdaho #SmartBuildings #EdTech meterpreter.org/jerome-schoo…

Jerome School District Cyberattack Closes Campuses

Threat actors no longer need to encrypt classroom computers to disrupt academic instruction. In Idaho, cybercriminals seized control of connected security cameras, electronic door locks, and heati…

meterpreter.org
266
Kaspersky uncovered the BlackX UEFI bootkit APT41 campaign bypassing Secure Boot via Baton Drop to spy on Central Asian diplomatic agencies. #BlackXUEFIBootkit #APT41 #BlackLotus #Kaspersky #CyberEspionage #SecureBoot #Cybersecurity securityonline.info/blackx-u…

APT41 Deploys BlackX UEFI Bootkit Against Central Asian Diplomatic Agencies

TL;DR Security researchers uncovered a new firmware threat called the BlackX UEFI bootkit targeting diplomatic missions across Central Asia in early 2026. Built as a close copy of the infamous Bla…

securityonline.info
232
The GrapheneOS Duress PIN case shows DHS cited terrorism suspicions while agents told the owner they sought abuse material. #GrapheneOS #DuressPIN #DHS #CBP #BorderSearch #DigitalPrivacy #Pixel #404Media meterpreter.org/grapheneos-d…

GrapheneOS Duress PIN Case Reveals DHS Search Motive

A Privacy Feature Meets a Federal Charge An ordinary privacy feature has led to a threat of five years in prison. New court documents also point to a different reason for the search than the one o…

meterpreter.org
223
APT28 used the Hookedge backdoor, SSH tunnels, and a new loader to spy on a naval shipbuilder and defense firms in two NATO countries. #APT28 #FancyBear #Hookedge #NATO #CyberEspionage #Russia #Symantec #Cybersecurity securityonline.info/apt28-ho…

APT28 Uses Hookedge Backdoor to Spy on Naval Shipbuilder and Defense Firms in Two NATO Countries

At a glance Actor Swallowtail (APT28, Fancy Bear, Forest Blizzard), linked by the US government to Russia’s GRU Activity Cyber espionage using the Hookedge backdoor, credential theft, and SS…

securityonline.info
1
306
Fortinet security updates for FortiOS, FortiManager and FortiAnalyzer fix critical AI-found flaws. Advisories follow November 10. Patch now. #Fortinet #FortiOS #FortiManager #FortiAnalyzer #FortiGate #PatchNow #AISecurity #CyberSecurity securityonline.info/fortinet…

Fortinet Urges Fast Upgrades as AI-Found Flaws Hit FortiOS, FortiManager and FortiAnalyzer

TL;DR Fortinet is shipping Fortinet security updates for FortiOS, FortiManager and FortiAnalyzer on October 22, 2026. FortiMail and FortiAuthenticator fixes arrived a day earlier. The fixes cover …

securityonline.info
3
3
903
A PAN-OS GlobalProtect vulnerability, CVE-2026-0257, lets Qilin and Inc ransomware bypass VPN login and reach internal networks. #PANOS #GlobalProtect #CVE20260257 #Qilin #IncRansomware #PaloAltoNetworks #Unit42 #Ransomware meterpreter.org/pan-os-globa…

PAN-OS Flaw Fuels Qilin and Inc Ransomware Attacks

A Firewall Bug Becomes a Ransomware Tool A flaw in Palo Alto Networks enterprise firewalls has become a full-fledged ransomware tool. It lets attackers enter protected networks without a password.…

meterpreter.org
1
2
356
The Claude Duet AI agent debuts as a research preview on Opus 5.5, with a private VM and a planned $20 Claude Pro price. #ClaudeDuet #Anthropic #Claude #AIAgents #OpenAIDots #MetaMuse #Opus55 #PersonalAI securityonline.info/claude-d…

Claude Duet AI Agent Takes On OpenAI Dots and Muse

The Proactive Agent Race Gets a Third Runner Generative AI is moving beyond chatbots that answer one question at a time. The new goal is the proactive personal agent. It watches your schedule, wri…

securityonline.info
226
The Plex2Shell exploit chain lets attackers run code on Plex servers with no login. About 30% of 323,583 servers stay exposed. #Plex #Plex2Shell #PlexMediaServer #RCE #Vulnerability #Censys #Cryptomining #PatchNow meterpreter.org/plex2shell-e…

Plex2Shell Exploit Chain Hits Plex Media Servers

A Home Media Server Turns Into a Botnet Node An ordinary home media server can become a tool for cryptocurrency mining and for hidden relaying of other people’s traffic. Researchers found a …

meterpreter.org
1
1
318
A new StopRansomware advisory warns SafePay ransomware has hit 600+ victims via VPN logins and edge flaws. See its tactics and key defenses. #SafePay #Ransomware #StopRansomware #CISA #FBI #VPN #CriticalInfrastructure #Cybersecurity securityonline.info/safepay-…

SafePay Ransomware Hits 600 Victims as FBI, CISA and Allies Issue Joint Warning

At a glance Malware family SafePay ransomware (encrypted files end in .SafePay) Threat actor SafePay ransomware group; no individuals named Targets At least 600 victims across critical infrastruct…

securityonline.info
252
A China-linked operator ran an AI-driven hacking campaign from one server, hitting ministries in Vietnam, Taiwan, Indonesia, and India. #AIAgents #AIHacking #China #Vietnam #Taiwan #Cairn #ThreatIntel #Cybersecurity securityonline.info/ai-drive…

China-Linked Operator Used AI Agents to Breach 48 Government and Corporate Targets Across Asia

At a glance Actor Unnamed China-linked, Chinese-speaking operator; suspected to be one person or a very small group Activity AI agent-driven intrusions, credential theft, and webshell deployment T…

securityonline.info
1
363
The Zeabur platform shutdown is set for December 2026 after an attacker read 3.21 million environment variables and 321,800 accounts. #Zeabur #DataBreach #CloudSecurity #GCP #AWS #APIKeys #DevOps #PlatformShutdown securityonline.info/zeabur-p…
290
Google Maps brings Gemini in Apple CarPlay, introducing conversational AI navigation, complex trip planning, and hands-free traffic reporting. #GoogleMaps #AppleCarPlay #GeminiAI #ConnectedCar #TechNews securityonline.info/gemini-a…

Gemini in Apple CarPlay Arrives on Google Maps

Drivers who prefer Google Maps on Apple CarPlay often encounter voice assistance compromises. Historically, motorists had to toggle between Siri and rigid voice inputs. However, Google is resolvin…

securityonline.info
283
Details and a PoC are public for CVE-2026-113380, a Signal call vulnerability in RingRTC that keeps calls live after hang-up. Update now. #Signal #RingRTC #CVE2026113380 #Privacy #PoC #MobileSecurity #Eavesdropping #CyberSecurity securityonline.info/signal-c…
1
2
434
Cisco fixes 13 Snort 3 vulnerabilities, including CVE-2026-20043 and denial of service flaws affecting FTD, Meraki MX and IOS XE. #Snort3 #Cisco #CVE202620043 #CVE202620291 #CVE202676524 #DenialOfService #FirewallSecurity #CyberSecurity securityonline.info/cisco-sn…

Cisco Fixes 13 Snort 3 Vulnerabilities, Including CVSS 9.0 Out-of-Bounds Write

TL;DR On October 21, 2026, Cisco published seven advisories that fix 13 Snort 3 vulnerabilities across its firewall and security products. The worst, CVE-2026-20043, is a CVSS 9.0 out-of-bounds wr…

securityonline.info
1
338
Railway security incident: attackers may have decrypted Railway environment variables. Builds are paused. Rotate API keys and credentials now. #Railway #SecurityIncident #EnvironmentVariables #APIKeys #CloudSecurity #DevOps #SupplyChainAttack securityonline.info/railway-…

Railway Security Incident Exposes Customer Environment Variables and Pauses All Deployments

On October 21, Railway detected anomalous activity in systems that store customer environment variables. In its disclosure of the Railway security incident, the cloud platform warned that an unaut…

securityonline.info
271
Load more