Cyber Daily News

Cyber Daily News for September 13th, 2026 Cyber Daily News is also available via podcast! https://feeds.transistor.fm/cyber-daily-news Stories mentioned in today's briefing: - Anthropic: AI Misuse Is Entering a New Phase: From Cybercrime to Surveillance, Propaganda and Weapons https://securityaffairs.com/198905/ai/anthropic-ai-misuse-is-entering-a-new-phase-from-cybercrime-to-surveillance-propaganda-and-weapons.html - Revolut Exposed KYC Data After Fraudulent Government Email Passed Security Checks https://securityaffairs.com/198922/data-breach/revolut-exposed-kyc-data-after-fraudulent-government-email-passed-security-checks.html - BlueMoon Exploit Kit Chains Recent Chrome, Windows Zero-Days https://www.securityweek.com/bluemoon-exploit-kit-chains-recent-chrome-windows-zero-days/ - Conti Hacker Who Built Malware and Attacked Victims Gets Four-Year Sentence https://securityaffairs.com/198931/cyber-crime/conti-hacker-who-built-malware-and-attacked-victims-gets-four-year-sentence.html

Cyber Daily News for September 12th, 2026 Cyber Daily News is also available via podcast! https://feeds.transistor.fm/cyber-daily-news Stories mentioned in today's briefing: - Hackers Favor US Eastern Business Hours in M365 Phishing Campaign https://www.infosecurity-magazine.com/news/hackers-us-business-hours-m365/ - The AI Supply Chain Has a Security Problem, and Much of It Is Sitting on the Open Internet https://securityaffairs.com/198898/ai/the-ai-supply-chain-has-a-security-problem-and-much-of-it-is-sitting-on-the-open-internet.html - GitLab Vulnerability Exploited One Day After Disclosure https://www.securityweek.com/gitlab-vulnerability-exploited-one-day-after-disclosure/ - Trezor Says 347,000 Users Received Phishing Emails After Brevo Hack https://www.securityweek.com/trezor-says-347000-users-received-phishing-emails-after-brevo-hack/ - Check Point Patches Critical VPN Vulnerabilities https://www.securityweek.com/check-point-patches-critical-vpn-vulnerabilities/

Cyber Daily News for September 11th, 2026 Cyber Daily News is also available via podcast! https://feeds.transistor.fm/cyber-daily-news Stories mentioned in today's briefing: - Most Organizations Skip Permissions Reviews Before Deploying AI Tools https://www.infosecurity-magazine.com/news/organizations-skip-permissions-ai/ - MantaxOtax Android Malware Combines Ransomware With Spyware https://www.infosecurity-magazine.com/news/mantaxotax-android-malware/ - FBI Publishes First-Ever Cyber Strategy, With Focus on Disrupting Threat Actors https://www.infosecurity-magazine.com/news/fbi-cyber-strategy-disrupting/ - UK Council Attack Linked to Mass Exploitation of SonicWall Flaw https://securityaffairs.com/198864/hacking/uk-council-attack-linked-to-mass-exploitation-of-sonicwall-flaw.html - Anthropic Says Russian Hackers Used Claude AI to Automate Malware Evasion https://www.securityweek.com/anthropic-says-russian-hackers-used-claude-ai-to-automate-malware-evasion/

Cyber Daily News for September 10th, 2026 Cyber Daily News is also available via podcast! https://feeds.transistor.fm/cyber-daily-news Stories mentioned in today's briefing: - Four Nation-State Actors Used the Same Chrome Zero-Day Exploit Kit Within 12 Days https://securityaffairs.com/198783/apt/four-nation-state-actors-used-the-same-chrome-zero-day-exploit-kit-within-12-days.html - New ‘ShieldCrash’ Zero-Day Exploit Targets Microsoft Defender https://www.securityweek.com/new-shieldcrash-zero-day-exploit-targets-microsoft-defender/ - U.S. CISA adds Microsoft Windows, N-able N-central, and Adobe flaws to its Known Exploited Vulnerabilities catalog https://securityaffairs.com/198802/hacking/u-s-cisa-adds-microsoft-windows-n-able-n-central-and-adobe-flaws-to-its-known-exploited-vulnerabilities-catalog.html - US Agencies Warn Chinese AI Firms Are Extracting Advanced AI Models https://securityaffairs.com/198770/security/us-agencies-warn-chinese-ai-firms-are-extracting-advanced-ai-models.html - NHIs Now the Number One Corporate Entry Point for Hackers https://www.infosecurity-magazine.com/news/nhis-number-one-corporate-entry/

Cyber Daily News for September 9th, 2026 Cyber Daily News is also available via podcast! https://feeds.transistor.fm/cyber-daily-news Stories mentioned in today's briefing: - Microsoft’s Biggest Patch Tuesday: 974 CVEs, 2 Zero-Days and 20 Wormable Bugs https://securityaffairs.com/198705/security/microsofts-biggest-patch-tuesday-974-cves-2-zero-days-and-20-wormable-bugs.html - Adobe Patches Over 170 Vulnerabilities, Including Commerce Zero-Day https://www.securityweek.com/adobe-patches-over-170-vulnerabilities-including-commerce-zero-day/ - Chrome 153 Patches Seventh Zero-Day of 2026 https://www.securityweek.com/chrome-153-patches-seventh-zero-day-of-2026/ - PoisonedRefresh: A Fileless Linux Rootkit That Injects PHP Web Shells Into F5 BIG-IP APM Server Memory https://securityaffairs.com/198746/malware/poisonedrefresh-a-fileless-linux-rootkit-that-injects-php-web-shells-into-f5-big-ip-apm-server-memory.html - WeChat Worm Can Hijack Accounts Without Victims Answering Calls https://securityaffairs.com/198688/hacking/wechat-worm-can-hijack-accounts-without-victims-answering-calls.html

Cyber Daily News for September 8th, 2026 Cyber Daily News is also available via podcast! https://feeds.transistor.fm/cyber-daily-news Stories mentioned in today's briefing: - Rhysida Publishes Berlin Government Data After €2m Extortion Demand Refused https://www.infosecurity-magazine.com/news/rhysida-berlin-data-extortion/ - North Korea-linked Hackers Hide a Backdoor Inside HAProxy https://securityaffairs.com/198656/apt/north-korea-linked-hackers-hide-a-backdoor-inside-haproxy.html - IT Help Desk Impersonation Lets Hackers Bypass MFA https://securityaffairs.com/198634/cyber-crime/it-help-desk-impersonation-lets-hackers-bypass-mfa.html - Condé Nast Data of 32.8 Million Users Offered for Sale After WIRED Leak https://securityaffairs.com/198628/data-breach/conde-nast-data-of-32-8-million-users-offered-for-sale-after-wired-leak.html - StyleSmuggler: The Magento Zero-Day Behind New Store Attacks https://securityaffairs.com/198603/uncategorized/stylesmuggler-the-magento-zero-day-behind-new-store-attacks.html

Cyber Daily News for September 7th, 2026 Cyber Daily News is also available via podcast! https://feeds.transistor.fm/cyber-daily-news Stories mentioned in today's briefing: - Berlin Ransomware Leak Exposes State Secrets https://securityaffairs.com/198545/cyber-crime/berlin-ransomware-leak-exposes-state-secrets.html - Your MikroTik Router May Already Be Compromised: Look for SSH User “-2” https://securityaffairs.com/198538/security/your-mikrotik-router-may-already-be-compromised-look-for-ssh-user-2.html - Why AI Agent Sandboxes Are Failing Security Tests https://securityaffairs.com/198563/ai/why-ai-agent-sandboxes-are-failing-security-tests.html - Mathspace Breach Impacts More Than 1 Million Users in Australia, NZ https://thecyberexpress.com/mathspace-data-breach/ - G7, CISA Urge Urgent Shift to Post-Quantum Cryptography https://thecyberexpress.com/post-quantum-cryptography/

Cyber Daily News for September 6th, 2026 Cyber Daily News is also available via podcast! https://feeds.transistor.fm/cyber-daily-news Stories mentioned in today's briefing: - Crooks Behind Manchester Airports Group Hack Leaked Data of 8.8 Million People https://securityaffairs.com/198447/data-breach/crooks-behind-manchester-airports-group-hack-leaked-data-of-8-8-million-people.html - PaperCut Flaws Exploited in Attacks on U.S. and European Schools https://securityaffairs.com/198476/hacking/papercut-flaws-exploited-in-attacks-on-u-s-and-european-schools.html - PostgreSQL Hit by 12-Year-Old Vulnerability Allowing Server Takeover https://securityaffairs.com/198433/security/postgresql-hit-by-12-year-old-vulnerability-allowing-server-takeover.html - Broadcom Patches Critical VMware Workstation and Fusion VM-Escape Vulnerabilities https://securityaffairs.com/198465/security/broadcom-patches-critical-vmware-workstation-and-fusion-vm-escape-vulnerabilities.html - Elementor Pro WordPress Plugin Vulnerability Exploited to Hack Sites https://www.securityweek.com/elementor-pro-wordpress-plugin-vulnerability-exploited-to-hack-sites/

Cyber Daily News for September 5th, 2026 Cyber Daily News is also available via podcast! https://feeds.transistor.fm/cyber-daily-news Stories mentioned in today's briefing: - Crooks Behind Manchester Airports Group Hack Leaked Data of 8.8 Million People https://securityaffairs.com/198447/data-breach/crooks-behind-manchester-airports-group-hack-leaked-data-of-8-8-million-people.html - PostgreSQL Hit by 12-Year-Old Vulnerability Allowing Server Takeover https://securityaffairs.com/198433/security/postgresql-hit-by-12-year-old-vulnerability-allowing-server-takeover.html - Chinese Hackers Use AI Agents in Multi-Country Cyber Campaign https://securityaffairs.com/198417/ai/chinese-hackers-use-ai-agents-in-multi-country-cyber-campaign.html - HPE Patches Critical RCE Vulnerabilities in AOS-CX https://www.securityweek.com/hpe-patches-critical-rce-vulnerabilities-in-aos-cx/ - Sangoma Switchvox Vulnerabilities Exploited in the Wild https://www.securityweek.com/sangoma-switchvox-vulnerabilities-exploited-in-the-wild/

Cyber Daily News for September 4th, 2026 Cyber Daily News is also available via podcast! https://feeds.transistor.fm/cyber-daily-news Stories mentioned in today's briefing: - Manchester Airports Group Data on 8.8 Million People Leaked After Ransom Refusal https://www.securityweek.com/manchester-airports-group-data-on-8-8-million-people-leaked-after-ransom-refusal/ - Dark Web Service Nexus Sells 153M+ Driver’s Licenses https://securityaffairs.com/198388/security/dark-web-service-nexus-sells-153m-drivers-licenses.html - Google fixes the sixth actively exploited Chrome zero-day of 2026 https://securityaffairs.com/198405/security/google-fixes-the-sixth-actively-exploited-chrome-zero-day-of-2026.html - Cisco Fixed Critical RCE in Nexus 9000 Series Switches https://securityaffairs.com/198366/security/cisco-fixed-critical-rce-in-nexus-9000-series-switches.html - Pegasus and NoviSpy Used Against Serbian Protesters https://securityaffairs.com/198377/intelligence/pegasus-and-novispy-used-against-serbian-protesters.html

Cyber Daily News for September 3rd, 2026 Cyber Daily News is also available via podcast! https://feeds.transistor.fm/cyber-daily-news Stories mentioned in today's briefing: - 2,000 Leaked Documents Reveal How Russia Turns Engineering Students Into GRU Cyber Operators https://securityaffairs.com/198332/intelligence/2000-leaked-documents-reveal-how-russia-turns-engineering-students-into-gru-cyber-operators.html - OpenAI Astra Brings Autonomous Zero-Day Exploitation to AI https://securityaffairs.com/198317/ai/openai-astra-brings-autonomous-zero-day-exploitation-to-ai.html - SonicWall Patches Two New Actively Exploited Zero-Days in SMA 1000 VPNs https://securityaffairs.com/198303/security/sonicwall-patches-two-new-actively-exploited-zero-days-in-sma-1000-vpns.html - $536 and 8 Hours: AI Learns to Attack a Different PLC https://securityaffairs.com/198296/hacking/536-and-8-hours-ai-learns-to-attack-a-different-plc.html - Exploit Published for Fresh Cleo Harmony Vulnerability https://www.securityweek.com/exploit-published-for-fresh-cleo-harmony-vulnerability/

Cyber Daily News for September 2nd, 2026 Cyber Daily News is also available via podcast! https://feeds.transistor.fm/cyber-daily-news Stories mentioned in today's briefing: - Attackers Access Aesto Health AWS Infrastructure, Exposing 9.5 Million Records https://securityaffairs.com/198250/data-breach/attackers-access-aesto-health-aws-infrastructure-exposing-9-5-million-records.html - Hackers Target Langflow in CVE-2026-0768 Attacks https://securityaffairs.com/198270/hacking/hackers-target-langflow-in-cve-2026-0768-attacks.html - Chaotic Eclipse Releases GenDigital Avast Antivirus ZeroDay PrettyPrague https://securityaffairs.com/198243/hacking/chaotic-eclipse-releases-gendigital-avast-antivirus-zeroday-prettyprague.html - SonicWall Warns of Two SMA1000 Zero-Days Exploited in Attacks https://www.securityweek.com/sonicwall-warns-of-two-sma1000-zero-days-exploited-in-attacks/ - North Korea-linked IT Workers Are Getting Hired Inside Western Companies https://securityaffairs.com/198227/apt/north-korea-linked-it-workers-are-getting-hired-inside-western-companies.html

Cyber Daily News for September 1st, 2026 Cyber Daily News is also available via podcast! https://feeds.transistor.fm/cyber-daily-news Stories mentioned in today's briefing: - Critical JFrog Artifactory Vulnerability Reportedly Exploited in the Wild https://www.securityweek.com/critical-jfrog-artifactory-vulnerability-reportedly-exploited-in-the-wild/ - McKesson Confirms Data Breach as Attacker Deadline Looms https://www.securityweek.com/mckesson-confirms-data-breach-as-attacker-deadline-looms/ - PaperCut Exploitation Escalates to Active Intrusions https://www.securityweek.com/papercut-exploitation-escalates-to-active-intrusions/ - China-linked Fire Ant Hides Inside Trusted Infrastructure https://securityaffairs.com/198183/apt/china-linked-fire-ant-hides-inside-trusted-infrastructure.html - ValleyRAT: When Legitimate Software Becomes a Malware Delivery Tool https://securityaffairs.com/198191/security/valleyrat-when-legitimate-software-becomes-a-malware-delivery-tool.html

Cyber Daily News for August 31st, 2026 Cyber Daily News is also available via podcast! https://feeds.transistor.fm/cyber-daily-news Stories mentioned in today's briefing: - Critical GiveWP Flaw Lets Attackers Run Commands on WordPress Servers https://securityaffairs.com/198156/security/critical-givewp-flaw-lets-attackers-run-commands-on-wordpress-servers.html - Extortion Group FulcrumSec Claims 86GB Manchester Airports Group Data Theft https://securityaffairs.com/198143/cyber-crime/extortion-group-fulcrumsec-claims-86gb-manchester-airports-group-data-theft.html - Hackers Are Probing PaperCut Servers, and 47% Still Have No Patch https://securityaffairs.com/198107/uncategorized/hackers-are-probing-papercut-servers-and-47-still-have-no-patch.html - More Details Emerge on Exploited PaperCut Vulnerabilities https://www.securityweek.com/more-details-emerge-on-exploited-papercut-vulnerabilities/ - Judge Says Pentagon’s Measures Against Anthropic Were ‘Illegal and Baseless’ https://www.securityweek.com/judge-says-pentagons-measures-against-anthropic-were-illegal-and-baseless/

Cyber Daily News for August 30th, 2026 Cyber Daily News is also available via podcast! https://feeds.transistor.fm/cyber-daily-news Stories mentioned in today's briefing: - Window to Tackle Surge in AI-Enabled Cyber Attacks Narrowing, Tech Giants Warn https://www.infosecurity-magazine.com/news/window-ai-attacks-narrowing-tech/ - Threat Actors Abuse Cursor Agent AI to Assist Ransomware Operations https://www.infosecurity-magazine.com/news/abuse-cursor-agent-ransomware/ - Chinese Hacker Group QTFY Uses Custom-Built Platforms to Target US Infrastructure, FBI Warns https://www.infosecurity-magazine.com/news/chinese-qtfy-us-infrastructure-fbi/ - Rhysida Ransomware Group Targets Berlin Government Ahead of Vote https://securityaffairs.com/198064/cyber-crime/rhysida-ransomware-group-targets-berlin-government-ahead-of-vote.html - Philippine Nuclear and Naval Targets Hit by Suspected Chinese Operator https://securityaffairs.com/198041/intelligence/philippine-nuclear-and-naval-targets-hit-by-suspected-chinese-operator.html

Cyber Daily News for August 29th, 2026 Cyber Daily News is also available via podcast! https://feeds.transistor.fm/cyber-daily-news Stories mentioned in today's briefing: - Fake Voicemail SVG Attachments Fuel Large-Scale Phishing Campaign https://www.infosecurity-magazine.com/news/fake-voicemail-svg-files-bypass/ - Philippine Nuclear and Naval Targets Hit by Suspected Chinese Operator https://securityaffairs.com/198041/intelligence/philippine-nuclear-and-naval-targets-hit-by-suspected-chinese-operator.html - Trump Targets Foreign Technology in New U.S. Power Grid Security Order https://securityaffairs.com/198025/security/trump-targets-foreign-technology-in-new-u-s-power-grid-security-order.html - Love Electric Breach: 877,000 Driver Records Offered for $600 https://securityaffairs.com/198033/data-breach/love-electric-breach-877000-driver-records-offered-for-600.html - Russian APT BlueDelta Uses HOOKEDGE to Target Defense and Diplomatic Organizations https://securityaffairs.com/197996/apt/russian-apt-bluedelta-uses-hookedge-to-target-defense-and-diplomatic-organizations.html

Cyber Daily News for August 28th, 2026 Cyber Daily News is also available via podcast! https://feeds.transistor.fm/cyber-daily-news Stories mentioned in today's briefing: - PaperCut Zero-Day Under Active Attack: Emergency Patch Released https://securityaffairs.com/197980/uncategorized/papercut-zero-day-under-active-attack-emergency-patch-released.html - Threat Actors Abuse Cursor Agent AI to Assist Ransomware Operations https://www.infosecurity-magazine.com/news/abuse-cursor-agent-ransomware/ - Manchester Airports Group Hit by Cyber Incident https://www.infosecurity-magazine.com/news/manchester-airports-data-breach/ - U.S. CISA adds Red Hat, Linux Kernel, Ajax.NET Professional, Microsoft SQL Server, and Citrix NetScaler flaws to its Known Exploited Vulnerabilities catalog https://securityaffairs.com/197975/hacking/u-s-cisa-adds-red-hat-linux-kernel-ajax-net-professional-microsoft-sql-server-and-citrix-netscaler-flaws-to-its-known-exploited-vulnerabilities-catalog.html - Dark Caracal Deploys New Go Malware With Ethereum-Based C2 Fallback https://securityaffairs.com/197948/apt/dark-caracal-deploys-new-go-malware-with-ethereum-based-c2-fallback.html

Cyber Daily News for August 27th, 2026 Cyber Daily News is also available via podcast! https://feeds.transistor.fm/cyber-daily-news Stories mentioned in today's briefing: - CISA Red Team Fully Compromised Two Critical Infrastructure Orgs https://securityaffairs.com/197901/hacking/cisa-red-team-fully-compromised-two-critical-infrastructure-orgs.html - CISA Warns Water Utilities: Find Your Exposed PLCs Before Attackers Do https://securityaffairs.com/197891/ics-scada/cisa-warns-water-utilities-find-your-exposed-plcs-before-attackers-do.html - FBI Seizes China-Linked Hacking Platforms QScan and QTRouter Used Against Critical Infrastructure https://securityaffairs.com/197873/apt/fbi-seizes-china-linked-hacking-platforms-qscan-and-qtrouter-used-against-critical-infrastructure.html - OpenAI banned Russian ChatGPT accounts backing covert influence operation https://securityaffairs.com/197878/intelligence/openai-banned-russian-chatgpt-accounts-backing-covert-influence-operation.html - Average Cyber Insurance Losses Increase Despite Fewer Claims https://www.infosecurity-magazine.com/news/cyber-insurance-losses-increase/

Cyber Daily News for August 26, 2026 Cyber Daily News is also available via podcast! https://feeds.transistor.fm/cyber-daily-news Stories mentioned in today's briefing: - Two CVSS 9.8 Auth Bypasses in miniOrange SAML WordPress Plugin Were Exploited Before Any Database Even Listed the Paid Editions as Vulnerable https://securityaffairs.com/197815/security/two-cvss-9-8-auth-bypasses-in-miniorange-saml-wordpress-plugin-were-exploited-before-any-database-even-listed-the-paid-editions-as-vulnerable.html - U.S. CISA adds Gitea flaw to its Known Exploited Vulnerabilities catalog https://securityaffairs.com/197854/security/u-s-cisa-adds-gitea-flaw-to-its-known-exploited-vulnerabilities-catalog.html - Chrome 152 Patches Over 300 Vulnerabilities https://www.securityweek.com/chrome-152-patches-over-300-vulnerabilities/ - When the Algorithm Fires You: Uber Faces €825M Fine https://securityaffairs.com/197823/laws-and-regulations/when-the-algorithm-fires-you-uber-faces-e825m-fine.html - 88 ID Verification Breaches Show the Cost of Collecting Identity Data https://securityaffairs.com/197855/reports/88-id-verification-breaches-show-the-cost-of-collecting-identity-data.html - Operation Jackal: 58 Arrests Expose the Money Laundering Machine Behind Global Scams https://securityaffairs.com/197843/cyber-crime/operation-jackal-58-arrests-expose-the-money-laundering-machine-behind-global-scams.html - Norway ’s Digital Government Infrastructure Hit by a new DDoS Attack https://securityaffairs.com/197826/cyber-warfare-2/norway-s-digital-government-infrastructure-hit-by-a-new-ddos-attack.html - WhatsApp Adds Stronger Security as Passkeys Hit 1 Billion https://securityaffairs.com/197837/security/whatsapp-adds-stronger-security-as-passkeys-hit-1-billion.html

Cyber Daily News for August 25th, 2026 Cyber Daily News is also available via podcast! https://feeds.transistor.fm/cyber-daily-news Stories mentioned in today's briefing: - US Sanctions Mabna Institute Hackers for Iranian Cyber-Attacks https://www.infosecurity-magazine.com/news/us-sanctions-mabna-institute/ - Fake Codex Download Uses Google Sites to Deliver macOS Malware https://www.infosecurity-magazine.com/news/fake-codex-download-google-sites/ - Doubloon Dredger Abuses Notion to Harvest Authentication Tokens https://www.infosecurity-magazine.com/news/doubloon-dredger-notion/ - U.S. CISA adds maximum-severity Oracle flaw to its Known Exploited Vulnerabilities catalog https://securityaffairs.com/197801/security/u-s-cisa-adds-maximum-severity-oracle-flaw-to-its-known-exploited-vulnerabilities-catalog.html - CISA Warns of Exploited Oracle WebLogic Vulnerability https://www.securityweek.com/cisa-warns-of-exploited-oracle-weblogic-vulnerability/