Cyber Daily News

Cyber Daily News for May 13, 2026 Cyber Daily News is also available via podcast! https://feeds.transistor.fm/cyber-daily-news Stories mentioned in today's briefing: - Microsoft Patches Critical Zero-Click Outlook Vulnerability Threatening Enterprises https://www.securityweek.com/microsoft-patches-critical-zero-click-outlook-vulnerability-threatening-enterprises/ - Microsoft Patches 137 Vulnerabilities in May Patch Tuesday https://www.securityweek.com/microsoft-patches-137-vulnerabilities/ - Critical Fortinet vulnerabilities fixed in FortiSandbox and FortiAuthenticator https://securityaffairs.com/192047/security/critical-fortinet-vulnerabilities-fixed-in-fortisandbox-and-fortiauthenticator.html - Mini Shai-Hulud Hits TanStack npm Packages https://www.infosecurity-magazine.com/news/mini-shai-hulud-tanstack-npm/ - Hundreds of Malicious Packages Force RubyGems to Suspend Registrations https://www.securityweek.com/hundreds-of-malicious-packages-force-rubygems-to-suspend-registrations/ - Hackers accessed BWH Hotels reservation...

Cyber Daily News for May 12, 2026 Cyber Daily News is also available via podcast! https://feeds.transistor.fm/cyber-daily-news Stories mentioned in today's briefing: - Google Detects First AI-Generated Zero-Day Exploit https://www.securityweek.com/google-detects-first-ai-generated-zero-day-exploit/ - TanStack, Mistral AI, UiPath Hit in Fresh Supply Chain Attack https://www.securityweek.com/tanstack-mistral-ai-uipath-hit-in-fresh-supply-chain-attack/ - WannaCry, the ransomware attack that changed the history of cybersecurity https://securityaffairs.com/192015/malware/wannacry-the-ransomware-attack-that-changed-the-history-of-cybersecurity.html - Rushed Patches Follow Broken Embargo on New Linux Kernel Vulnerabilities https://www.infosecurity-magazine.com/news/dirty-frag-linux-kernel/ - Identity security firm SailPoint discloses GitHub repository breach https://securityaffairs.com/191997/data-breach/identity-security-firm-sailpoint-discloses-github-repository-breach.html ...

Cyber Daily News for May 11, 2026 Cyber Daily News is also available via podcast! https://feeds.transistor.fm/cyber-daily-news Stories mentioned in today's briefing: - ShinyHunters Escalates Canvas Extortion with School by School Ransom Campaign https://www.infosecurity-magazine.com/news/shinyhunters-escalates-canvas/ - New 'Dirty Frag' Linux Vulnerability Possibly Exploited in Attacks https://www.securityweek.com/new-dirty-frag-linux-vulnerability-possibly-exploited-in-attacks/ - Checkmarx Jenkins AST Plugin Compromised in Supply Chain Attack https://www.securityweek.com/checkmarx-jenkins-ast-plugin-compromised-in-supply-chain-attack/ - Zara Data Breach Impacts Nearly 200,000 Customers https://www.infosecurity-magazine.com/news/zara-data-breach-impacts-200000/ - Official JDownloader site served malware to Windows and Linux users between May 6 and May 7 https://securityaffairs...

Cyber Daily News for May 10, 2026 Cyber Daily News is also available via podcast! https://feeds.transistor.fm/cyber-daily-news Stories mentioned in today's briefing: - Dirty Frag: A new Linux privilege escalation vulnerability is already in the wild https://securityaffairs.com/191847/hacking/dirty-frag-a-new-linux-privilege-escalation-vulnerability-is-already-in-the-wild.html - Cyberattacks on Poland's Water Plants: A Blueprint for Hybrid Warfare https://securityaffairs.com/191868/security/cyberattacks-on-polands-water-plants-a-blueprint-for-hybrid-warfare.html - RansomHouse says it breached Trellix and exposes internal systems https://securityaffairs.com/191879/cyber-crime/ransomhouse-says-it-breached-trellix-and-exposes-internal-systems.html - Quasar Linux RAT (QLNX): A Fileless Linux Implant Built for Stealth and Persistence https://securityaffairs.com/191898/malware/quasar-linux-rat-qlnx-a-fileless-linux-implant-built-for-stealth-and-persistence.html - Braintrust security incident...

Cyber Daily News for May 9, 2026 Cyber Daily News is also available via podcast! https://feeds.transistor.fm/cyber-daily-news Stories mentioned in today's briefing: - RansomHouse says it breached Trellix and exposes internal systems https://securityaffairs.com/191879/cyber-crime/ransomhouse-says-it-breached-trellix-and-exposes-internal-systems.html - Cyberattacks on Poland's Water Plants: A Blueprint for Hybrid Warfare https://securityaffairs.com/191868/security/cyberattacks-on-polands-water-plants-a-blueprint-for-hybrid-warfare.html - Braintrust security incident raises concerns over AI supply chain risks https://securityaffairs.com/191888/data-breach/braintrust-security-incident-raises-concerns-over-ai-supply-chain-risks.html - Zara Data Breach: 197,000 Customers Exposed in Third-Party Security Incident https://securityaffairs.com/191859/cyber-crime/zara-data-breach-197000-customers-exposed-in-third-party-security-incident.html - In Other News: Train Hacker Arrested, PamDOORa Linux Backdoor...

Cyber Daily News for May 8, 2026 Cyber Daily News is also available via podcast! https://feeds.transistor.fm/cyber-daily-news Stories mentioned in today's briefing: - Palo Alto Zero-Day Exploited in Campaign Bearing Hallmarks of Chinese State Hacking https://www.securityweek.com/palo-alto-zero-day-exploited-in-campaign-bearing-hallmarks-of-chinese-state-hacking/ - Dirty Frag Linux Vulnerability Exposes Major Distributions to Root Access Attacks https://thecyberexpress.com/dirty-frag-linux-lpe-cve-2026-31431/ - OpenAI and Anthropic LLMs Used in Critical Infrastructure Cyber-Attack, Warns Dragos https://www.infosecurity-magazine.com/news/llm-critical-infrastructure/ - Ivanti Patches EPMM Zero-Day Exploited in Targeted Attacks https://www.securityweek.com/ivanti-patches-epmm-zero-day-exploited-in-targeted-attacks/ - Cyberattack Hits Canvas System Used by Thousands of Schools...

Cyber Daily News for May 7, 2026 Cyber Daily News is also available via podcast! https://feeds.transistor.fm/cyber-daily-news Stories mentioned in today's briefing: - Daemon Tools Developer Confirms Software Was Trojanized https://www.infosecurity-magazine.com/news/daemon-tools-confirms-software/ - U.S. CISA adds a flaw in Palo Alto Networks PAN-OS to its Known Exploited Vulnerabilities catalog https://securityaffairs.com/191780/security/u-s-cisa-adds-a-flaw-in-palo-alto-networks-pan-os-to-its-known-exploited-vulnerabilities-catalog.html - Global Instructure Breach Hits Queensland Schools Through QLearn Platform https://thecyberexpress.com/qlearn-cybersecurity-incident-hits-schools/ - Claude AI Guided Hackers Toward OT Assets During Water Utility Intrusion https://www.securityweek.com/claude-ai-guided-hackers-toward-ot-assets-during-water-utility-intrusion/ - Taiwan High-Speed Rail Emergency Braking Hack https...

Cyber Daily News for May 6, 2026 Cyber Daily News is also available via podcast! https://feeds.transistor.fm/cyber-daily-news Stories mentioned in today's briefing: - Palo Alto Networks PAN-OS flaw exploited for remote code execution https://securityaffairs.com/191748/security/palo-alto-networks-pan-os-flaw-exploited-for-remote-code-execution.html - Malicious PyTorch Lightning update hits AI supply chain security https://securityaffairs.com/191732/ai/malicious-pytorch-lightning-update-hits-ai-supply-chain-security.html - Vimeo confirms breach via third-party vendor impacts 119K users https://securityaffairs.com/191715/data-breach/vimeo-confirms-breach-via-third-party-vendor-impacts-119k-users.html - Microsoft Warns of Sophisticated Phishing Campaign Targeting US Organizations https://www.securityweek.com/microsoft-warns-of-sophisticated-phishing-campaign-targeting-us-organizations/ - New Infostealer Dubbed 'Pheno' Hijacks Windows' Phone Link App to Steal...

Cyber Daily News for May 5, 2026 Cyber Daily News is also available via podcast! https://feeds.transistor.fm/cyber-daily-news Stories mentioned in today's briefing: - Microsoft warns of global campaign stealing auth tokens from 35K users https://securityaffairs.com/191695/security/microsoft-warns-of-global-campaign-stealing-auth-tokens-from-35k-users.html - MOVEit automation flaws could enable full system compromise https://securityaffairs.com/191681/security/moveit-automation-flaws-could-enable-full-system-compromise.html - Hackers target governments and MSPs via critical cPanel flaw CVE-2026-41940 https://securityaffairs.com/191666/breaking-news/hackers-target-governments-and-msps-via-critical-cpanel-flaw-cve-2026-41940.html - Trellix Source Code Repository Breached https://www.securityweek.com/trellix-source-code-repository-breached/ - DigiCert Revokes Certificates After Support Portal Hack https://www.securityweek.com/digicert-revokes-certificates-after-support-portal-hack/ ...

Cyber Daily News for May 4, 2026 Cyber Daily News is also available via podcast! https://feeds.transistor.fm/cyber-daily-news Stories mentioned in today's briefing: - AI speeds flaw discovery, forcing rapid updates, UK NCSC warns https://securityaffairs.com/191657/security/ai-speeds-flaw-discovery-forcing-rapid-updates-uk-ncsc-warns.html - Over 40,000 Servers Compromised in Ongoing cPanel Exploitation https://www.securityweek.com/over-40000-servers-compromised-in-ongoing-cpanel-exploitation/ - Salt Typhoon breach IBM subsidiary in Italy: a warning for Europe's digital defenses https://securityaffairs.com/191638/apt/salt-typhoon-breach-ibm-subsidiary-in-italy-a-warning-for-europes-digital-defenses.html - Bluekit phishing kit enables automated phishing with 40+ templates and AI tools https://securityaffairs.com/191646/cyber-crime/bluekit-phishing-kit-enables-automated-phishing-with-40-templates-and-ai-tools.html - Exploitation of 'Copy Fail' Linux Vulnerability...

Cyber Daily News for May 3, 2026 Cyber Daily News is also available via podcast! https://feeds.transistor.fm/cyber-daily-news Stories mentioned in today's briefing: - Trellix discloses the breach of a code repository https://securityaffairs.com/191584/data-breach/trellix-discloses-the-breach-of-a-code-repository.html - Google Revamps Bug Bounty Programs: Android Rewards Rise, Chrome Payouts Drop in the Age of AI https://securityaffairs.com/191600/security/google-revamps-bug-bounty-programs-android-rewards-rise-chrome-payouts-drop-in-the-age-of-ai.html - Two US cybersecurity experts sentenced in ransomware case, third awaits July ruling https://securityaffairs.com/191591/cyber-crime/two-us-cybersecurity-experts-sentenced-in-ransomware-case-third-awaits-july-ruling.html

Cyber Daily News for May 2, 2026 Cyber Daily News is also available via podcast! https://feeds.transistor.fm/cyber-daily-news Stories mentioned in today's briefing: - New Deep#Door RAT uses stealth and persistence to target Windows https://securityaffairs.com/191567/malware/new-deepdoor-rat-uses-stealth-and-persistence-to-target-windows.html - Scattered Spider Hacker Arrested https://www.securityweek.com/in-other-news-scattered-spider-hacker-arrested-soc-effectiveness-metrics-nsa-tool-vulnerability/ - Carding service Jerry's Store leak exposes 345,000 stolen payment cards https://securityaffairs.com/191536/cyber-crime/carding-service-jerrys-store-leak-exposes-345000-stolen-payment-cards.html - Digital attacks drive a new wave of cargo theft, FBI says https://securityaffairs.com/191556/cyber-crime/digital-attacks-drive-a-new-wave-of-cargo-theft-fbi-says.html - New Bluekit Phishing Kit Features AI Assistant https://www.securityweek.com/new-bluekit-phishing-kit-features-ai-assistant/ ...

Cyber Daily News for May 1, 2026 Cyber Daily News is also available via podcast! https://feeds.transistor.fm/cyber-daily-news Stories mentioned in today's briefing: - Copy Fail: New Linux bug enables Root via page-cache corruption https://securityaffairs.com/191519/hacking/copy-fail-new-linux-bug-enables-root-via-page-cache-corruption.html - Nine-Year-Old Zero-Day Flaw in Linux Kernel Discovered by AI-Equipped Security Researcher https://www.infosecurity-magazine.com/news/zero-day-2017-linux-kernel/ - SonicWall patches three SonicOS flaws in Gen 6, 7 and 8 firewalls https://securityaffairs.com/191527/security/sonicwall-patches-three-sonicos-flaws-in-gen-6-7-and-8-firewalls-patch-them-now.html - 1,800 Hit in Mini Shai-Hulud Attack on SAP, Lightning, Intercom https://www.securityweek.com/1800-hit-in-mini-shai-hulud-attack-on-sap-lightning-intercom/ - Anthropic launches Claude Security to counter...

Cyber Daily News for April 30, 2026 Cyber Daily News is also available via podcast! https://feeds.transistor.fm/cyber-daily-news Stories mentioned in today's briefing: - 'Copy Fail' Logic Flaw in Linux Kernel Enables System Takeover https://www.securityweek.com/copy-fail-logic-flaw-in-linux-kernel-enables-system-takeover/ - CVE-2026-41940: Critical cPanel Authentication Bypass Exposes Hosting Systems https://thecyberexpress.com/cpanel-cve-2026-41940-auth-bypass/ - CVE-2026-42208: LiteLLM bug exploited 36 hours after its disclosure https://securityaffairs.com/191483/hacking/cve-2026-42208-litellm-bug-exploited-36-hours-after-its-disclosure.html - Cursor Extension Flaw Exposes Developer API Keys https://www.infosecurity-magazine.com/news/cursor-extension-flaw-exposes-api/ - Researchers Track 2.9 Billion Compromised Credentials https://www.infosecurity-magazine.com/news/29-billion-compromised-credentials/ ...

Cyber Daily News for April 29, 2026 Cyber Daily News is also available via podcast! https://feeds.transistor.fm/cyber-daily-news Stories mentioned in today's briefing: - Critical GitHub Vulnerability Exposed Millions of Repositories https://www.securityweek.com/critical-github-vulnerability-exposed-millions-of-repositories/ - AI Agent Deleted Production Database in 9 Secs; Then Confessed Every Rule It Broke https://thecyberexpress.com/ai-agent-deleted-production-database-in-9-secs/ - Vimeo Confirms User and Customer Data Breach https://www.securityweek.com/vimeo-confirms-user-and-customer-data-breach/ - Medtronic Confirms Data Breach After ShinyHunters Claims https://www.infosecurity-magazine.com/news/medtronic-data-breach-shinyhunters/ - U.S. CISA adds Microsoft Windows Shell and ConnectWise ScreenConnect flaws to its Known Exploited Vulnerabilities catalog ...

Cyber Daily News for April 28, 2026 Cyber Daily News is also available via podcast! https://feeds.transistor.fm/cyber-daily-news Stories mentioned in today's briefing: - Medtronic Hack Confirmed After ShinyHunters Threatens Data Leak https://www.securityweek.com/medtronic-hack-confirmed-after-shinyhunters-threatens-data-leak/ - OpenSSH Flaw Allowing Full Root Shell Access Lurked for 15 Years https://www.securityweek.com/openssh-flaw-allowing-full-root-shell-access-lurked-for-15-years/ - Incomplete Windows Patch Opens Door to Zero-Click Attacks https://www.securityweek.com/incomplete-windows-patch-opens-door-to-zero-click-attacks/ - North Korean Hackers Target Crypto Firms with ClickFix and AI-Made Zoom Lures https://www.infosecurity-magazine.com/news/bluenoroff-dprk-hackers-target/ - Germany Suspects Russia Is Behind Signal Phishing That Targeted Top Officials https...

Cyber Daily News for April 27, 2026 Cyber Daily News is also available via podcast! https://feeds.transistor.fm/cyber-daily-news Stories mentioned in today's briefing: - Critical bug in CrowdStrike LogScale let attackers access files https://securityaffairs.com/191343/hacking/critical-bug-in-crowdstrike-logscale-let-attackers-access-files.html - Firefox bug CVE-2026-6770 enabled cross-site tracking and Tor fingerprinting https://securityaffairs.com/191374/security/firefox-bug-cve-2026-6770-enabled-cross-site-tracking-and-tor-fingerprinting.html - Easily Exploitable 'Pack2TheRoot' Linux Vulnerability Leads to Root Access https://www.securityweek.com/easily-exploitable-pack2theroot-linux-vulnerability-leads-to-root-access/ - U.S. utility giant Itron discloses a security breach https://securityaffairs.com/191360/data-breach/u-s-utility-giant-itron-discloses-a-security-breach.html - Researchers Identify Fast16 Sabotage Malware That Pre-Dates Stuxnet ...

Cyber Daily News for April 26, 2026 Cyber Daily News is also available via podcast! https://feeds.transistor.fm/cyber-daily-news Stories mentioned in today's briefing: - U.S. CISA adds SimpleHelp, Samsung, and D-Link flaws to its Known Exploited Vulnerabilities catalog https://securityaffairs.com/191281/security/u-s-cisa-adds-simplehelp-samsung-and-d-link-flaws-to-its-known-exploited-vulnerabilities-catalog.html - Checkmarx supply chain attack impacts Bitwarden npm distribution path https://securityaffairs.com/191215/uncategorized/checkmarx-supply-chain-attack-impacts-bitwarden-npm-distribution-path.html - Over 400,000 sites at risk as hackers exploit Breeze Cache plugin flaw (CVE-2026-3844) https://securityaffairs.com/191267/uncategorized/over-400000-sites-at-risk-as-hackers-exploit-breeze-cache-plugin-flaw-cve-2026-3844.html - CISA reports persistent FIRESTARTER backdoor on Cisco ASA device in federal network https://securityaffairs.com/191241/hacking...

Cyber Daily News for April 25, 2026 Cyber Daily News is also available via podcast! https://feeds.transistor.fm/cyber-daily-news Stories mentioned in today's briefing: - UK Biobank Data Breach: Health Data of 500,000 Listed for Sale in China https://www.infosecurity-magazine.com/news/uk-biobank-data-beach-health-data/ - CISA reports persistent FIRESTARTER backdoor on Cisco ASA device in federal network https://securityaffairs.com/191241/hacking/cisa-reports-persistent-firestarter-backdoor-on-cisco-asa-device-in-federal-network.html - 12-year-old Pack2TheRoot bug lets Linux users gain root privileges https://securityaffairs.com/191231/security/12-year-old-pack2theroot-bug-lets-linux-users-gain-root-privileges.html - Signal phishing campaign targets Germany's Bundestag President Julia Klöckner https://securityaffairs.com/191224/intelligence/signal-phishing-campaign-targets-germanys-bundestag-president-julia-klockner.html - China-Linked APT GopherWhisper A...

Cyber Daily News for April 24, 2026 Cyber Daily News is also available via podcast! https://feeds.transistor.fm/cyber-daily-news Stories mentioned in today's briefing: - Bitwarden NPM Package Hit in Supply Chain Attack https://www.securityweek.com/bitwarden-npm-package-hit-in-supply-chain-attack/ - China-linked threat actors use consumer device botnets to evade detection, warn UK and partners https://securityaffairs.com/191202/security/china-linked-threat-actors-use-consumer-device-botnets-to-evade-detection-warn-uk-and-partners.html - UK Biobank Leak Prompts Urgent Review of Data Protection in Biomedical Research https://thecyberexpress.com/uk-biobank-data-breach-healthcare/ - Apple Fixes iOS Notification Bug Exposing Deleted Messages https://www.infosecurity-magazine.com/news/apple-ios-notification-bug-deleted/ - Vulnerabilities Patched in CrowdStrike, Tenable Products https://www.securityweek...