Stay ahead with Daily CyberSecurity. We deliver rapid zero-hour alerts and expert analysis on critical vulnerabilities, CVEs, and emerging cyber threats.
Vnorovy, Česká republika
Joined January 2011
- Tweets88.3K
- Following397
- Followers13K
- Likes1.2K
Pinned Tweet
CVE Alerts turns CVE, KEV, & EPSS data into real-time alerts via email, Slack, Teams, and GitHub Issues. Start your 14-day free trial.
#CVEAlerts #Cybersecurity #VulnerabilityManagement #CISAKEV #EPSS #ThreatIntel #InfoSec #PatchManagement #ExploitIntel
securityonline.info/daily-cy…
DOJ officials announced a Cambodia crypto scam extradition after Zheng Zhao allegedly helped launder $36.9M stolen from 174 US victims via USDT.
#CambodiaCryptoScam #DOJ #Cryptocurrency #MoneyLaundering #SecretService #Cybercrime
securityonline.info/cambodia…
A Skynet LLMjacking agent hijacks exposed AI models to scan, hack servers and mine crypto for 100,000 steps, while victims pay the bill.
#LLMjacking #AISecurity #AIAgents #Cryptojacking #MCP #Symantec #Broadcom #Cybersecurity
securityonline.info/skynet-l…
Palo Alto confirms PAN-OS PHP2Shell flaws CVE-2026-109618 and CVE-2026-109619 affect the firewall management interface. Restrict access and patch.
#PaloAltoNetworks #PANOS #PHP2Shell #CVE2026109618 #CVE2026109619 #Firewall #Panorama #CyberSecurity
securityonline.info/pan-os-p…
The Signal RingRTC vulnerability CVE-2026-113380 could keep a call's microphone live after hang-up. Update to RingRTC 2.72.0.
#Signal #RingRTC #CVE2026113380 #WebRTC #Vulnerability #PrivacyFlaw #Messenger #PatchNow
meterpreter.org/signal-ringr…
PHP warns of CVE-2026-115560, a PHP session vulnerability that follows PHP2Shell. Disable session.upload_progress until the next bugfix release.
#PHP #CVE2026115560 #PHP2Shell #CVE2026109619 #RCE #WebSecurity #PatchManagement #CyberSecurity
securityonline.info/php-sess…
The Switch 2 jailbreak NS2JB runs native code on firmware 23.0.1 through SmileBASIC 4, built with Codex. It is not permanent.
#Switch2 #NS2JB #Jailbreak #Nintendo #Codex #Homebrew #SmileBASIC4 #MarioKartWorld
securityonline.info/switch-2…
A speaker-activated backdoor attack makes speech models alter one person's words and trigger AI agent payments in tests.
#SpeakerActivatedBackdoor #SpeechRecognition #Whisper #AIAgents #Backdoor #VoiceCloning #AISecurity #MachineLearning
meterpreter.org/speaker-acti…
Qualcomm global layoffs will begin in November 2026 as smartphone shipments plunge 20 percent and memory costs strain device manufacturers worldwide.
#Qualcomm #TechLayoffs #Semiconductors #Smartphones #BusinessNews
securityonline.info/qualcomm…
The emSign CA certificate was pulled from certifi. A new Python security release updates pip to block MITM risks. Upgrade pip and uv now.
#Python #emSign #eMudhra #certifi #pip #TLS #PyPI #Cybersecurity
securityonline.info/python-e…
A severe LiteLLM supply chain attack compromised version 1.107.0 on PyPI and Docker, deploying automated info-stealers via malicious pth files.
#LiteLLM #SupplyChainAttack #PyPI #Cybersecurity #InfoSec
meterpreter.org/litellm-supp…
Three LiteSpeed Cache vulnerabilities, including stored XSS flaws CVE-2026-113499 and CVE-2026-113500, affect 7M+ WordPress sites. Update to 7.9.2.
#LiteSpeedCache #WordPress #XSS #CVE2026113499 #CVE2026113500 #CVE2026113501 #WPScan #CyberSecurity
securityonline.info/litespee…
The OpenBSD 8.0 release brings OpenSSH 10.6, kernel mitigations, and immediate day-one errata patches addressing critical IPsec memory corruption.
#OpenBSD #Cybersecurity #OpenSSH #InfoSec #OperatingSystems
securityonline.info/openbsd-…
SOCRadar reveals 7 servers run by INC Ransomware affiliates, exposing an INC Ransomware affiliates AI workbench, Phantom, and 46 encryptors.
#INCRansomware #TheGentlemen #PhantomFramework #SOCRadar #AISecurity #Ransomware #Cybersecurity
securityonline.info/inc-rans…
Threat actors targeted a Ukraine data exchange breach via Log4Shell on Graylog servers, probing millions of records across state infrastructure.
#Log4Shell #Cybersecurity #Graylog #Ukraine #ThreatIntelligence
meterpreter.org/ukraine-data…
Trend Micro ZDI accidentally exposed critical Linux kernel vulnerabilities on LKML, revealing unpatched remote code execution flaws ahead of schedule.
#Linux #Cybersecurity #ZeroDay #LinuxKernel #InfoSec
meterpreter.org/zdi-leaks-li…
A ConnectWise supply chain attack by Storm-0940 used the ARTEX AI platform to target over 2,250 Microsoft 365 environments.
#Storm0940 #ARTEX #ConnectWise #SupplyChainAttack #Microsoft365 #EntraID #AgenticAI #CloudSecurity
meterpreter.org/connectwise-…
The Australian App Store ruling orders Apple to allow sideloading and outside payments by March 1, 2027. Apple will appeal.
#Apple #AppStore #EpicGames #Fortnite #Australia #Sideloading #AntitrustRuling #iOS
securityonline.info/australi…
A CAPCOM ID data breach exposed 11.77 million records, including emails and login activity. No payment data was leaked.
#Capcom #CAPCOMID #DataBreach #Gaming #Phishing #AccountSecurity #CyberSecurity #Japan
securityonline.info/capcom-i…
The Arc browser shutdown arrives December 22, 2026. Export your data now and move to Dia before accounts are deleted.
#ArcBrowser #DiaBrowser #TheBrowserCompany #BrowserShutdown #DataMigration #AIBrowser #macOS #Windows
securityonline.info/arc-brow…
ClearSky exposed the Russian Doppelganger campaign in Israel using 76 fake Walla articles, 66 redirect domains, and AI poisoning ahead of elections.
#DoppelgangerCampaign #ClearSky #Disinformation #Cybersecurity #Israel #Russia #AIPoisoning
securityonline.info/doppelga…
