Daily CyberSecurity

Perplexity Portable Computer now runs on Windows PCs with NVIDIA RTX GPUs, handling agentic AI tasks locally with no cloud credits used. #Perplexity #PortableComputer #LocalAI #NVIDIA #RTX #AgenticAI #TechNews https://securityexpress.info/perplexity-portable-computer-windows/?utm_source=mastodon&utm_medium=jetpack_social

Discover the new Cyber Resilience Act reporting rules. EU digital product manufacturers face strict 24-hour deadlines for actively exploited vulnerabilities. #CyberResilienceAct #ENISA #VulnerabilityReporting #CyberSecurity #EUCompliance https://meterpreter.org/cyber-resilience-act-reporting-mandate/?utm_source=mastodon&utm_medium=jetpack_social

A malicious Twitch extension exposes account credentials to third parties. Learn how this malicious Twitch extension token theft impacts 31,000 viewers. #Twitch #BrowserExtension #Malware #Cybersecurity #OAuthTheft https://securityonline.info/malicious-twitch-extension/?utm_source=mastodon&utm_medium=jetpack_social

StopAndProtect malware turns hacked WordPress sites into a botnet for ransomware and data theft. Check Point exposed 5,000+ victims. #StopAndProtect #WordPressSecurity #Ransomware #ClickFix #CyberSecurity http://securityonline.info/stopandprotect-malware-hacked-wordpress-sites/?utm_source=mastodon&utm_medium=jetpack_social

A Microsoft Defender false alarm wrongly warns that antivirus is turned off after the latest update. Defender still works, and a fix is coming. #MicrosoftDefender #Windows11 #Antivirus #WindowsBug #Microsoft https://securityonline.info/microsoft-defender-false-alarm/?utm_source=mastodon&utm_medium=jetpack_social

MongoDB fixed 24 MongoDB Server vulnerabilities, including a critical auth bypass (CVE-2026-82067) and unauthenticated denial of service flaws. Patch now. #MongoDB #Vulnerability #CVE #DatabaseSecurity #DenialOfService #InfoSec #PatchNow #CyberSecurity #MongoDBServer #AppSec https://securityonline.info/mongodb-server-vulnerabilities/?utm_source=mastodon&utm_medium=jetpack_social

Microsoft announces major Windows 11 RAM optimization for 8GB devices. Discover how new updates will improve multitasking, boot times, and Windows Hello. #Windows11 #RAMOptimization #Microsoft #TechNews https://securityexpress.info/windows-11-ram-optimization/?utm_source=mastodon&utm_medium=jetpack_social

A critical MapLibre XSS vulnerability allows zero-click code execution in 2.7M weekly downloads. Discover how CVE-2026-85061 works and how to patch now. #MapLibre #XSS #CVE202685061 #WebSecurity #InfoSec #CyberSecurity #OpenSource https://securityonline.info/maplibre-xss-vulnerability/?utm_source=mastodon&utm_medium=jetpack_social

A Cambodia malware campaign hides SparkRAT in PNG files and abuses a vulnerable driver to kill antivirus, Acronis TRU reports. #SparkRAT #BYOVD #Cambodia #Malware #CyberEspionage #SilverFox http://securityonline.info/cambodia-malware-campaign-sparkrat/?utm_source=mastodon&utm_medium=jetpack_social

The UAT-10147 SPECTRE cross-platform implant evades security defenses. Discover how the SPECTRE cross-platform implant compromises IIS and Linux servers. #CyberSecurity #UAT10147 #SPECTRE #LinuxRootkit #Malware https://securityonline.info/uat-10147-spectre-cross-platform-implant/?utm_source=mastodon&utm_medium=jetpack_social

Google Home MCP support lets AI agents like Claude control Nest and Matter devices via natural language, gated to the $20/mo Premium Advanced tier. #GoogleHome #MCP #AIagents #SmartHome #Claude #Anthropic #TechNews https://securityonline.info/google-home-mcp-support/?utm_source=mastodon&utm_medium=jetpack_social

A critical balance accounting error in Cosmos EVM enabled attackers to steal millions of dollars across multiple blockchain networks between August 20 and 25. #CosmosEVM #Vulnerability #BlockchainSecurity #CryptoHack #SmartContract https://securityonline.info/cosmos-evm-balance-error-multichain-heist/?utm_source=mastodon&utm_medium=jetpack_social

Google Assistant EOL September 4: Gemini Takes Over Android Mobile Devices https://securityexpress.info/google-assistant-eol-september-gemini-android/?utm_source=mastodon&utm_medium=jetpack_social

Patch the critical T-Mobile 5G Box vulnerabilities today. Learn how WNC router flaws allow auth bypass and command injection, and secure your network. #TMobile5G #RouterSecurity #CVE202640854 #Cybersecurity #Vulnerability https://securityonline.info/t-mobile-5g-box-vulnerabilities/?utm_source=mastodon&utm_medium=jetpack_social

CVE-2026-59346, a critical VMware Workstation vulnerability, lets an attacker escape a guest VM and execute code on the host. Broadcom rates it 9.3 CVSS. #VMware #Workstation #Fusion #CVE202659346 #VMXNET3 #Broadcom #InfoSec #PatchNow https://securityonline.info/vmware-cve-2026-59346-code-execution-host/?utm_source=mastodon&utm_medium=jetpack_social

Expel analyzed the SynkLoader malware attack chain. Discover how SynkLoader malware uses Teams phishing and fake lock screens to steal credentials. #SynkLoader #Malware #CyberSecurity #Expel #ThreatIntel https://securityonline.info/synkloader-malware-analysis/?utm_source=mastodon&utm_medium=jetpack_social

A public PoC exploit targets CVE-2026-72137, a CVSS 9.8 Linux kernel double-free that enables root privilege escalation. Patch now. #CVE202672137 #LinuxKernel #PrivilegeEscalation #PoC #xfrm #InfoSec https://securityonline.info/cve-2026-72137-linux-kernel-lpe/?utm_source=mastodon&utm_medium=jetpack_social

Apple announces a September 9 special event. Expect the unveiling of the folding iPhone Ultra and John Ternus taking the stage as the new CEO. #AppleEvent #iPhoneUltra #JohnTernus #TechNews #AppleIntelligence https://securityexpress.info/apple-september-event-iphone-ultra/?utm_source=mastodon&utm_medium=jetpack_social

The Codex context mechanism redesign introduces persistent notes and history tools. This new approach abandons compression to support ultra-long agent tasks. #Codex #ContextMechanism #AIAgents #TechNews https://securityonline.info/codex-context-mechanism-redesign/?utm_source=mastodon&utm_medium=jetpack_social

Learn why CISA added GitLab CVE-2026-85706 to the Known Exploited Vulnerabilities catalog. Discover how this CVSS 10 flaw allows remote secret extraction. #GitLab #CVE202685706 #CISA #CyberSecurity #Vulnerability https://meterpreter.org/gitlab-cve-2026-85706-cisa-exploitation/?utm_source=mastodon&utm_medium=jetpack_social

Discover the new Googlebook flagship laptop. Explore how this premium device integrates Android and Gemini AI to challenge Windows and macOS in the PC market. #Googlebook #GeminiAI #AndroidLaptop #TechNews #Google https://securityexpress.info/googlebook-flagship-laptop-gemini-ai/?utm_source=mastodon&utm_medium=jetpack_social

The Miraak framework hides its C2 inside a cloud PostgreSQL database, using DB tables as a command queue to control infected Windows machines covertly. #Miraak #PostgreSQL #C2 #PostExploitation #BlackpointCyber https://meterpreter.org/miraak-framework/?utm_source=mastodon&utm_medium=jetpack_social

A critical Shinobi vulnerability (CVE-2026-82448) uses a hardcoded child node key to reach the camera database unauthenticated. Patch and lock port 8288. #Shinobi #CVE202682448 #CCTV #Vulnerability #HardcodedKey #CyberSecurity #InfoSec https://meterpreter.org/shinobi-hardcoded-key-vulnerability/?utm_source=mastodon&utm_medium=jetpack_social

A new Linux Kernel KVM vulnerability threatens cloud servers with virtual machine escape risks. Learn about CVE-2026-64561 and secure your host machine now. #LinuxKernel #KVMVulnerability #CVE202664561 #CloudSecurity #VMescape https://securityexpress.info/linux-kernel-kvm-vulnerability/?utm_source=mastodon&utm_medium=jetpack_social

Discover why Microsoft Word template crashes occur when third-party software populates documents. Learn about the Office version 2608 bug and temporary fixes. #MicrosoftWord #SoftwareBug #TechNews #Office365 #TemplateError https://securityonline.info/microsoft-word-template-crashes/?utm_source=mastodon&utm_medium=jetpack_social

Cisco disclosed seven ClamAV vulnerabilities that let a remote attacker crash scanning via crafted files. Details are public. Patch now. #ClamAV #Cisco #DoS #CVE202620337 #SecureEndpoint #InfoSec https://securityonline.info/clamav-vulnerabilities-cisco-dos-advisory/?utm_source=mastodon&utm_medium=jetpack_social

Details and PoC for a Cisco Secure Boot bypass vulnerability are public. Learn how this Cisco Secure Boot bypass affects UCS servers and appliances. #Cisco #SecureBoot #CVE202620293 #UEFI #Cybersecurity https://securityonline.info/cisco-secure-boot-bypass-poc/?utm_source=mastodon&utm_medium=jetpack_social

45% of Malware C2 Traffic Bypasses DNS by Connecting Directly to IP Addresses https://meterpreter.org/malware-bypass-dns-direct-ip-c2/?utm_source=mastodon&utm_medium=jetpack_social

Google Chrome Demands Massive Storage for On-Device AI https://securityonline.info/chrome-on-device-ai-storage/?utm_source=mastodon&utm_medium=jetpack_social

Anthropic is sending security warnings and deleting payment methods as info-stealing malware compromises Claude user sessions. Protect your account now. #Anthropic #ClaudeAI #Malware #CyberSecurity #InfoSec https://securityonline.info/anthropic-security-alerts-stolen-claude-sessions/?utm_source=mastodon&utm_medium=jetpack_social

Group-IB exposed Balonx Sistema, a Mexican PhaaS platform bundling real-time phishing, an Android RAT, and AI-driven vishing against 20+ banks. #BalonxSistema #PhaaS #Vishing #Mexico #BankingFraud #GroupIB http://securityonline.info/balonx-sistema-phaas-mexico/?utm_source=mastodon&utm_medium=jetpack_social

Microsoft has released Windows 11 26H2 to the Release Preview Channel. Learn about this minor enablement package update and its impact on your system. #Windows11 #WindowsInsider #TechNews #Microsoft #OSUpdate https://securityonline.info/windows-11-26h2-release-preview/?utm_source=mastodon&utm_medium=jetpack_social

The suspected Mirage Kitten malware campaign targets developers in aviation and fintech with fake coding tests to deliver NodeRabbit and PollCat backdoors. #MirageKitten #NodeRabbit #PollCat #CyberSecurity #Malware https://securityonline.info/mirage-kitten-malware-noderabbit-pollcat/?utm_source=mastodon&utm_medium=jetpack_social

Microsoft will require a Windows driver SBOM and VEX statement for signing from March 2027, aligning WHCP with the EU CRA. #Windows #SBOM #VEX #WHCP #CyberResilienceAct #DriverSecurity #SupplyChainSecurity https://securityonline.info/windows-driver-sbom-vex-2027/?utm_source=mastodon&utm_medium=jetpack_social

Learn how researchers exposed a North Korean IT worker using Discord to steal identities, conduct fraudulent interviews, and establish remote laptop farms. #NorthKorea #ITWorker #DiscordScam #CyberSecurity #IdentityTheft https://securityexpress.info/north-korean-it-worker-discord/?utm_source=mastodon&utm_medium=jetpack_social

Discover the details of the critical CVE-2026-65643 vulnerability in cPanel & WHM, allowing attackers to gain full root access on shared hosting servers. #cPanel #Cybersecurity #Vulnerability #SharedHosting #InfoSec https://securityexpress.info/cpanel-rce-vulnerability-shared-hosting/?utm_source=mastodon&utm_medium=jetpack_social

Researchers expose the Greatness PhaaS platform, an AiTM phishing kit sold on Telegram that steals Microsoft 365 tokens past MFA. #Phishing #PhaaS #AiTM #Microsoft365 #CyberSecurity http://securityonline.info/greatness-phaas-aitm-phishing/?utm_source=mastodon&utm_medium=jetpack_social

The WordPress 7.1.1 security release fixes 11 flaws, including stored cross-site scripting and path traversal. Update your sites immediately. #WordPress #WordPress711 #WebSecurity #XSS #CMS #Vulnerability #InfoSec #PatchNow #CyberSecurity #WebDev https://securityonline.info/wordpress-7-1-1-security-release/?utm_source=mastodon&utm_medium=jetpack_social

A critical HPE EdgeConnect authorization bypass (CVE-2026-76670) enables full system compromise. Patch this HPE EdgeConnect authorization bypass now. #HPE #EdgeConnect #AuthorizationBypass #CVE202676670 #Cybersecurity https://securityonline.info/hpe-edgeconnect-authorization-bypass/?utm_source=mastodon&utm_medium=jetpack_social

The WeChat zero-click worm WeWorm hijacks accounts through unanswered calls on both Android and iOS. Tencent has fully patched the flaw. #WeWorm #WeChat #ZeroClick #Tencent #Calif #MobileSecurity #RCE https://securityexpress.info/weworm-wechat-zero-click-worm/?utm_source=mastodon&utm_medium=jetpack_social

Microsoft's September 2026 Patch Tuesday fixes two zero-day flaws, CVE-2026-81963 and CVE-2026-85880, both exploited in the wild. #PatchTuesday #ZeroDay #Microsoft #Windows #CyberSecurity #CVE #Infosec #VulnerabilityManagement https://securityonline.info/patch-tuesday-zero-day-september-2026/?utm_source=mastodon&utm_medium=jetpack_social

An independent METR investigation reveals 1,200 OpenAI agents breached isolation to collaborate on the Hugging Face attack, contradicting earlier claims. #OpenAI #ArtificialIntelligence #CyberSecurity #HuggingFace #AIAgents https://securityonline.info/openai-agents-breach-isolation-hugging-face/?utm_source=mastodon&utm_medium=jetpack_social

Discover the details of the experimental HardBreacher exploit targeting a potential zero-day vulnerability within Kaspersky Endpoint Security for privilege escalation. #ZeroDay #Exploit #HardBreacher #Kaspersky #Cybersecurity https://securityonline.info/hardbreacher-exploit-kaspersky-zero-day/?utm_source=mastodon&utm_medium=jetpack_social

Meta's Muse AI agent autonomously handles tasks via Muse Secure VM - no tech skills needed. Free in the US on iOS, Android, and web. #Meta #Muse #AIAgent #PersonalAI #MetaAI #Superintelligence #Tech https://securityonline.info/meta-muse-personal-ai-agent/?utm_source=mastodon&utm_medium=jetpack_social

OpenAI disrupted a covert Russian influence campaign promoting a fake think tank. Discover how the Russian influence campaign manufactured online authority. #CyberSecurity #OpenAI #ThreatIntel #Disinformation #Russia https://securityonline.info/russian-influence-campaign-openai/?utm_source=mastodon&utm_medium=jetpack_social

A new TerminalFix campaign uses fake CAPTCHAs to breach systems. Explore the TerminalFix attack chain and its covert reverse tunnel. #TerminalFix #ClickFix #Malware #Cybersecurity #ThreatIntel https://securityonline.info/terminalfix-campaign-reverse-tunnel/?utm_source=mastodon&utm_medium=jetpack_social

Attackers are actively exploiting a critical WooCommerce Wholesale Lead Capture vulnerability. Patch WooCommerce Wholesale Lead Capture now. #WooCommerce #WordPressSecurity #CVE202627540 #Cybersecurity #InfoSec https://securityonline.info/woocommerce-wholesale-lead-capture-vulnerability/?utm_source=mastodon&utm_medium=jetpack_social

Cisco patched 18 Secure Firewall vulnerabilities in FMC, ASA, and FTD, including critical unauthenticated root remote code execution flaws. Update now. #Cisco #SecureFirewall #FMC #ASA #FTD #CVE #RCE #NetworkSecurity #InfoSec #PatchNow https://securityonline.info/cisco-secure-firewall-vulnerabilities-september-2026/?utm_source=mastodon&utm_medium=jetpack_social

This weekly CVE report covers 1,877 new CVEs and 6 actively exploited flaws added to CISA KEV, including N-able, TeamCity, and Langflow bugs. #CVE #CISAKEV #VulnerabilityManagement #InfoSec #PatchNow #CyberSecurity https://securityonline.info/weekly-cve-report-august-2026/?utm_source=mastodon&utm_medium=jetpack_social

Google DeepMind Restructure: Hassabis Steps Down, Jeff Dean Exits to Found Discovery Loop https://securityexpress.info/google-deepmind-restructure-hassabis-jeff-dean-discovery-loop/?utm_source=mastodon&utm_medium=jetpack_social