Daily CyberSecurity@Daily_CyberSec

Stay ahead with Daily CyberSecurity. We deliver rapid zero-hour alerts and expert analysis on critical vulnerabilities, CVEs, and emerging cyber threats.

 Vnorovy, Česká republika
securityonline.info
Joined January 2011
3,978 Photos and videos
CVE Alerts turns CVE, KEV, & EPSS data into real-time alerts via email, Slack, Teams, and GitHub Issues. Start your 14-day free trial. #CVEAlerts #Cybersecurity #VulnerabilityManagement #CISAKEV #EPSS #ThreatIntel #InfoSec #PatchManagement #ExploitIntel securityonline.info/daily-cy…

Daily CyberSecurity Launches CVE Alerts, an Automated Vulnerability Intelligence Service for IT and...

Daily CyberSecurity, the team behind the CVE-Watchtower vulnerability tracking platform on securityonline.info, today announced the general availability of CVE Alerts, a subscription service that …

securityonline.info
509
PoC and details released for macOS HFS+ vulnerability CVE-2026-43682, a CVSS 9.8 kernel heap overflow. Update to macOS Tahoe 26.6 now. #macOS #Apple #HFS #CVE202643682 #KernelSecurity #PoC #Vulnerability securityonline.info/macos-hf…

Researcher Publishes Technical Details and PoC Exploit for macOS HFS+ Kernel Flaw CVE-2026-43682

TL;DR Security researcher Peter Malone has published a full technical analysis and proof-of-concept code for CVE-2026-43682, a macOS HFS+ vulnerability rated CVSS 9.8. A malformed disk image can m…

securityonline.info
1
1
109
Discover why Apple is restricting Full Disk Access for macOS AI agents like Meta Muse to protect user privacy and secure the operating system sandbox. #macOSSecurity #AIAgents #ApplePrivacy #FullDiskAccess #TechNews securityonline.info/apple-re…

Apple Restricts Full Disk Access for macOS AI Agents

As highly autonomous AI agents rapidly proliferate across desktop environments, Apple has officially sounded a severe security alarm regarding this escalating trend. In fact, Apple is now confront…

securityonline.info
1
334
Discover the latest iPhone 18 AT&T issue causing cellular failures. Apple confirms that affected iPhone 18 Pro Max devices require hardware replacement. #iPhone18ProMax #AppleSupport #ATT #CellularIssue #TechNews securityonline.info/iphone-1…

iPhone 18 AT&T Issue: Navigating the Cellular Crisis

Apple recently confirmed that a small fraction of iPhone 18 Pro Max users in the United States are encountering cellular connectivity failures while operating on the AT&T network. This causes …

securityonline.info
1
1
557
Citrix NetScaler CVE-2026-88779 is exploited in the wild against NetScaler SAML authentication setups. Upgrade to 14.1-73.41 now. #Citrix #NetScaler #CVE202688779 #SAML #ActivelyExploited #DoS #Vulnerability securityonline.info/citrix-n…

Citrix NetScaler CVE-2026-88779 Exploited in the Wild to Knock SAML Gateways Offline

TL;DR Citrix has assigned Citrix NetScaler CVE-2026-88779 to the SAML issue behind recent appliance reboots. The company confirms attackers are exploiting the memory overflow flaw in the wild. Fix…

securityonline.info
4
23
1,293
Discover how the latest OpenAI AI safety whistleblower, David Robinson, warns of a corporate culture collapse and extreme AI alignment risks. #OpenAI #DavidRobinson #AISafety #Whistleblower #ArtificialIntelligence securityonline.info/openai-a…

OpenAI AI Safety Whistleblower Warns of Culture Collapse

Yet another prominent executive tasked with safeguarding model security has departed from OpenAI. David Robinson, the former Head of Safety Systems who orchestrated the pre-release safety reports …

securityonline.info
1
352
Discover how a single encoded character exploited a critical Cisco zero-day vulnerability in the Catalyst SD-WAN Manager, granting attackers admin access. #Cisco #ZeroDay #Cybersecurity #SDWAN #CVE202676504 meterpreter.org/cisco-zero-d…

Cisco Patches Critical Catalyst SD-WAN Zero-Day Vulnerability

A solitary encoded character within an HTTP request proved sufficient to circumvent the defensive perimeter of a corporate SD-WAN management center. Cisco has disclosed the remediation of a critic…

meterpreter.org
1
2
399
Gemini free tier limits start October 9: free personal accounts get only Flash-Lite, while Flash and Pro move to paid plans. #Gemini #GoogleAI #GeminiFlashLite #GeminiPro #AISubscription #FreeTier #GoogleAIPro #AIModels securityonline.info/gemini-f…

Gemini Free Tier Limits: Flash-Lite Only From Oct 9

Google Narrows Free Access to Gemini Models Google is changing model access in the Gemini app. According to Google’s official documentation, the change starts on October 9, 2026. From that d…

securityonline.info
358
Meta Muse Gadgets is an open-source project that lets makers build Muse AI hardware, with ESP32 firmware, a Linux SDK, and a free dongle. #Meta #MuseGadgets #MuseAI #OpenSource #ESP32 #AIHardware #SmartHome #MuseHomeLink securityonline.info/meta-mus…

Meta Muse Gadgets: Open-Source Hardware for the Muse AI

Meta Invites Makers to Build Muse Hardware Last week at Connect, Meta unveiled the Muse Charm, a Tamagotchi-like AI device. Now the company clearly harbors bigger ambitions for AI agent hardware. …

securityonline.info
1
1
470
Unpatched Apache OpenOffice vulnerability CVE-2026-59265 runs code via crafted files. Apache Directory LDAP API and Traffic Server fixes out. #Apache #OpenOffice #ApacheDirectory #LDAP #TrafficServer #CVE202659265 #CVE2026103877 #Vulnerability securityonline.info/apache-o…

Unpatched Apache OpenOffice Vulnerability Leads New Apache Advisories for LDAP API and Traffic...

TL;DR The Apache Software Foundation disclosed eight CVEs on October 2, 2026, across three projects. The most urgent is an Apache OpenOffice vulnerability, CVE-2026-59265, that runs attacker code …

securityonline.info
1
1
1
454
Microsoft's September 2026 V2 Exchange Server security updates add CVE-2026-96940 for Exchange SE, 2019 and 2016. Install them now. #Microsoft #ExchangeServer #ExchangeSE #CVE202696940 #SecurityUpdate #PatchManagement #ESU securityonline.info/exchange…

Microsoft Reissues September 2026 Exchange Server Security Updates to Add CVE-2026-96940

Microsoft has shipped a V2 release of its September 2026 Exchange Server security updates. The only change from the original release is one added vulnerability, CVE-2026-96940. The Exchange Team s…

securityonline.info
6
1
1
454
AWS fixes Loom for AWS admin takeover CVE-2026-103956 and a SageMaker Unified Studio code execution bug, CVE-2026-104019. Patch now. #AWS #LoomForAWS #SageMaker #CVE2026103956 #CVE2026104019 #AISecurity #CloudSecurity #Vulnerability securityonline.info/loom-for…

AWS Fixes Loom for AWS Admin Takeover and SageMaker Unified Studio Code Execution Flaws

TL;DR AWS published two security bulletins on October 2, 2026, covering four CVEs. Three hit Loom for AWS, an open-source AI agent platform, including an admin takeover bug. The fourth lets a Sage…

securityonline.info
1
459
Digi DAL OS vulnerability CVE-2026-75937 (CVSS 9.4) lets attackers run root commands on Digi Accelerated Linux devices. Patch now. #Digi #DALOS #CVE202675937 #CommandInjection #IoTSecurity #OTSecurity #Vulnerability securityonline.info/digi-dal…

Digi DAL OS Vulnerability Lets Unauthenticated Attackers Run Root Commands

TL;DR Digi International disclosed CVE-2026-75937, a critical Digi DAL OS vulnerability scored 9.4 on CVSS 4.0. One crafted HTTP POST to the web admin interface can run commands as root. Digi has …

securityonline.info
2
1
3
562
Chrome security update: Chrome 154 fixes 11 flaws, including critical WebGL sandbox escape CVE-2026-103628. Update your browser now. #Chrome #GoogleChrome #Chrome154 #CVE2026103628 #CVE2026103631 #BrowserSecurity #Vulnerability securityonline.info/chrome-s…

Chrome Security Update Fixes Critical WebGL Flaw and 10 Other Bugs

TL;DR Google pushed Chrome 154.0.8037.97/.98 to the Stable channel with 11 security fixes. The headline bug, CVE-2026-103628, is a critical WebGL flaw that can lead to code execution outside the s…

securityonline.info
3
436
GitLab AI Gateway vulnerability CVE-2026-90970 (CVSS 9.9) lets Duo Agent Platform users run commands. Upgrade self-hosted gateways now. #GitLab #AIGateway #GitLabDuo #CVE202690970 #RCE #DevSecOps #Vulnerability securityonline.info/gitlab-a…

GitLab Patches Critical AI Gateway Flaw That Lets Duo Users Run Commands

TL;DR GitLab released AI Gateway versions 19.2.4, 19.3.2, and 19.4.1 to fix CVE-2026-90970. The GitLab AI Gateway vulnerability scores 9.9 on CVSS 3.1. It lets a logged-in Duo Agent Platform user …

securityonline.info
2
452
Citrix flags a NetScaler SAML authentication issue as patched NetScaler appliances reboot after CVE-2026-88771 attacks. Check your config. #Citrix #NetScaler #SAML #CVE202688771 #CVE202688772 #ZeroDay #Vulnerability securityonline.info/netscale…

Patched NetScaler Appliances Keep Rebooting as Citrix Flags SAML Authentication Issue

TL;DR Citrix admins report NetScaler appliances rebooting repeatedly even after updating to build 14.1-73.37. Citrix now says it is tracking a new issue tied to NetScaler SAML authentication. A fi…

securityonline.info
2
6
1,045
TP-Link vulnerabilities include Tapo camera vulnerabilities like CVE-2026-102369 (CVSS 8.7) plus router and Deco flaws. Update firmware now. #TPLink #Tapo #CVE2026102369 #CVE2026102294 #CVE202684682 #IoTSecurity #RouterSecurity #Vulnerability securityonline.info/tp-link-…

Seven TP-Link Vulnerabilities Hit Tapo Cameras, Archer and Deco Routers

TL;DR TP-Link published four security advisories on October 1, 2026, covering seven TP-Link vulnerabilities. The worst, CVE-2026-102369, scores 8.7 on CVSS 4.0 and lets a local attacker run comman…

securityonline.info
1
4
452
Moxa MGate vulnerabilities CVE-2026-86325 (CVSS 9.4) and CVE-2026-86326 hit MGate protocol gateway firmware. See affected versions and fixes. #Moxa #MGate #CVE202686325 #CVE202686326 #ICSSecurity #OTSecurity #Vulnerability securityonline.info/moxa-mga…

Moxa MGate Vulnerabilities Put Industrial Protocol Gateways at Risk

TL;DR Moxa disclosed two Moxa MGate vulnerabilities on October 2, 2026. The worse flaw, CVE-2026-86325, scores 9.4 on CVSS 4.0 and lets a read-only user corrupt device memory. The second, CVE-2026…

securityonline.info
443
OpenAI has disrupted a coordinated adversarial model distillation campaign, accusing individuals linked to Moonshot AI of extracting hidden AI reasoning. #OpenAI #MoonshotAI #AdversarialDistillation #Cybersecurity #ArtificialIntelligence securityexpress.info/openai-…

OpenAI Thwarts Adversarial Model Distillation Campaign

The ongoing debate over the ownership of knowledge used to train artificial intelligence has acquired a paradoxical new dimension. OpenAI recently disclosed a coordinated campaign orchestrated to …

securityexpress.info
380
Discover how hackers disguised a ClickFix RAT as a custom ChatGPT bot to trick users into executing malicious commands and launching a remote access trojan. #ClickFix #ChatGPT #Cybersecurity #Malware #Phishing meterpreter.org/clickfix-rat…

ClickFix RAT Disguised as Custom ChatGPT Bot Strikes

The most compelling element of this novel cyberattack resides not upon a disparate phishing domain, but directly within the authentic ChatGPT interface. Huntress unveiled a sophisticated campaign …

meterpreter.org
417
Explore how the OpenAI and Synopsys partnership creates GPT-Synopsys, an AI model designed to revolutionize semiconductor chip design and automation. #OpenAI #Synopsys #GPT #ChipDesign #ArtificialIntelligence securityexpress.info/gpt-syn…

GPT-Synopsys: Revolutionizing Semiconductor Design

Artificial intelligence is on the verge of acquiring direct access to the highly specialized instruments engineers utilize to forge the processors of the future. OpenAI and Synopsys have formally …

securityexpress.info
349
Load more