Cyber Daily News

Episodes

• 
  Cyber Daily News for October 4th, 2026 04.10.2026 2m

  Cyber Daily News for October 4th, 2026 Cyber Daily News is also available via podcast! https://feeds.transistor.fm/cyber-daily-news Stories mentioned in today's briefing: - Critical GitLab AI Gateway flaw patched https://securityaffairs.com/200283/hacking/cve-2026-90970-critical-gitlab-ai-gateway-flaw-fixed.html - Fortra patches critical BoKS vulnerabilities https://www.securityweek.com/fortra-patches-critical-vulnerabilities-in-boks/ - Crypto scammers hijack Microsoft's official X account https://www.securityweek.com/crypto-scammers-hijack-microsofts-official-x-account/ - doxx.net raises $38 million to secure AI agents https://www.securityweek.com/doxx-net-raises-38-million-to-prevent-ai-agent-on-the-internet-misadventures/ - Zero Trust creator says the model holds firm against AI-assisted attacks https://www.securityweek.com/zero-trust-creator-says-model-holds-firm-against-ai-assisted-attacks/
• 
  Cyber Daily News for October 3rd, 2026 03.10.2026 2m

  Cyber Daily News for October 3rd, 2026 Cyber Daily News is also available via podcast! https://feeds.transistor.fm/cyber-daily-news Stories mentioned in today's briefing: - China-linked UAT-11587 uses the Antino backdoor and Microsoft 365 as a C2 channel https://securityaffairs.com/200264/apt/antino-backdoor-uses-your-inbox-as-its-control-panel.html - CISA adds actively exploited Zammad flaws to its Known Exploited Vulnerabilities catalog https://securityaffairs.com/200248/security/u-s-cisa-adds-zammad-gmbh-zammad-flaws-to-its-known-exploited-vulnerabilities-catalog.html - Fake Zoom installer targets macOS users with the CloudSyncD backdoor https://www.securityweek.com/macos-users-targeted-by-fake-zoom-installer-carrying-cloudsyncd-backdoor/ - Alleged Iranian state hacker Amir Barati extradited to the US https://www.securityweek.com/in-rare-move-iranian-hacker-accused-of-working-for-irgc-extradited-to-us/ - Microsoft: attackers use AI to cut post-compromise time to minutes https://www.infosecurity-magazine.com/news/microsoft-ai-attack-time-minutes/
• 
  Cyber Daily News for October 2nd, 2026 02.10.2026 2m

  Cyber Daily News for October 2nd, 2026 Cyber Daily News is also available via podcast! https://feeds.transistor.fm/cyber-daily-news Stories mentioned in today's briefing: - Operation KillSwitch: Police Dismantle KillSec Ransomware Group https://securityaffairs.com/200200/cyber-crime/operation-killswitch-police-dismantle-killsec-ransomware-group.html - Exploited Fortinet FortiMail Zero-Day Calls for Urgent Action https://www.securityweek.com/exploited-fortinet-fortimail-zero-day-calls-for-urgent-action/ - Zimbra Vulnerability Exploited in the Wild Prior to Public Disclosure https://www.securityweek.com/zimbra-vulnerability-exploited-in-the-wild-prior-to-public-disclosure/ - China-Linked Hackers Impersonate AI Experts to Target US Policy Insiders https://www.infosecurity-magazine.com/news/ta419-impersonates-ai-experts-us/ - AI Agents Aimed SQL Injection at US and Canadian Government Sites https://www.securityweek.com/ai-agents-aimed-sql-injection-at-us-and-canadian-government-sites/
• 
  Cyber Daily News for October 1st, 2026 01.10.2026 1m

  Cyber Daily News for October 1st, 2026 Cyber Daily News is also available via podcast! https://feeds.transistor.fm/cyber-daily-news Stories mentioned in today's briefing: - AI agent chains two Zammad zero-days to breach vulnerability-disclosure group DIVD https://securityaffairs.com/200126/hacking/ai-agent-chains-zammad-zero-days-to-take-over-divd-systems-in-seconds.html - Government and finance orgs hit in weeks-long NetScaler zero-day attacks https://www.securityweek.com/government-finance-orgs-targeted-in-weeks-long-netscaler-zero-day-attacks/ - Cisco patches an exploited critical Catalyst SD-WAN Manager flaw, now in CISA's KEV catalog https://www.securityweek.com/cisco-patches-exploited-catalyst-sd-wan-zero-day-vulnerability/ - WatchGuard fixes a critical Fireware OS flaw allowing root-level remote code execution https://securityaffairs.com/200108/security/watchguard-fixes-critical-fireware-os-flaw-allowing-remote-code-execution.html
• 
  Cyber Daily News for September 30th, 2026 30.09.2026 2m

  Cyber Daily News for September 30th, 2026 Cyber Daily News is also available via podcast! https://feeds.transistor.fm/cyber-daily-news Stories mentioned in today's briefing: - Three Million Affected in Pentagon Personnel Agency Data Breach https://securityaffairs.com/200017/uncategorized/three-million-affected-in-pentagon-personnel-agency-data-breach.html - Japanese railway operators Keio Corporation and Tokyo Metro disclose security breaches https://securityaffairs.com/200027/data-breach/japanese-railway-operators-keio-corporation-and-tokyo-metro-disclose-security-breaches.html - WHIPSHOT and SLAPSHOT: the tools behind an active Citrix NetScaler campaign https://securityaffairs.com/200046/security/whipshot-and-slapshot-the-tools-behind-an-active-citrix-netscaler-campaign.html - Amazon Bedrock AgentCore Flaws Could Expose AWS Credentials https://www.infosecurity-magazine.com/news/aws-agentcore-sdk-flaws-ai/ - RatHat's Evolving C2 Panel Points to Malware-as-a-Service Model https://www.infosecurity-magazine.com/news/rathat-c2-panel-malware-as-a/
• 
  Cyber Daily News for September 29th, 2026 29.09.2026 1m

  Cyber Daily News for September 29th, 2026 Cyber Daily News is also available via podcast! https://feeds.transistor.fm/cyber-daily-news Stories mentioned in today's briefing: - Deepfakes Are Becoming a Costly Reality for Businesses, Report Warns https://www.infosecurity-magazine.com/news/deepfakes-costly-reality-for/ - Nearly 400,000 Medicaid Beneficiaries Caught in DC Healthcare Alliance Data Exposure https://securityaffairs.com/199926/data-breach/nearly-400000-medicaid-beneficiaries-caught-in-medicaid-and-dc-healthcare-alliance-data-exposure.html - Apple Patches Meta-Reported Zero-Day Linked to 'Extremely Sophisticated Attack' https://www.securityweek.com/apple-patches-meta-reported-zero-day-linked-to-extremely-sophisticated-attack/ - Prison Sentence for Former US Soldier Who Hacked AT&T and Verizon https://www.securityweek.com/prison-sentence-for-former-us-soldier-who-hacked-att-and-verizon/ - AI Accounts Are Becoming the New Target for Infostealers https://securityaffairs.com/199933/ai/ai-accounts-are-becoming-the-new-target-for-infostealers.html
• 
  Cyber Daily News for September 28th, 2026 28.09.2026 1m

  Cyber Daily News for September 28th, 2026 Cyber Daily News is also available via podcast! https://feeds.transistor.fm/cyber-daily-news Stories mentioned in today's briefing: - Citrix confirms two NetScaler zero-days exploited before patches https://www.infosecurity-magazine.com/news/citrix-patches-critical-zero-days/ - Roundcube SQL injection flaw exploited in the wild https://securityaffairs.com/199882/security/roundcube-sql-injection-cve-2026-48842-is-now-being-exploited-in-the-wild.html - Kiteworks urges server shutdown over Advanced Forms flaw https://www.securityweek.com/kiteworks-urges-server-shutdown-finds-advanced-forms-vulnerability/ - MCP is creating major governance gaps, researchers warn https://www.infosecurity-magazine.com/news/mcp-creating-major-governance-gaps/
• 
  Cyber Daily News for September 27th, 2026 27.09.2026 1m

  Cyber Daily News for September 27th, 2026 Cyber Daily News is also available via podcast! https://feeds.transistor.fm/cyber-daily-news Stories mentioned in today's briefing: - OpenAI Agents Accessed US Government Websites Without Authorization https://securityaffairs.com/199815/ai/openai-agents-accessed-us-government-websites-without-authorization.html - Microsoft SharePoint Flaw Now Exploited in Attacks https://www.securityweek.com/microsoft-sharepoint-flaw-cve-2026-65660-now-exploited-in-attacks/ - New x47.c Windows Botnet Weaponizes xAI Grok https://www.securityweek.com/new-x47-c-windows-botnet-weaponizes-xai-grok-ai-api-draining/ - Exploit.in Database Reveals the Roots of Today's Ransomware Ecosystem https://securityaffairs.com/199800/cyber-crime/exploit-in-database-reveals-the-roots-of-todays-ransomware-ecosystem.html - China and US Agree to Establish AI Safety Channel https://www.securityweek.com/china-and-us-agree-to-establish-ai-safety-channel-and-continue-trade-and-military-talks/
• 
  Cyber Daily News for September 26th, 2026 26.09.2026 1m

  Cyber Daily News for September 26th, 2026 Cyber Daily News is also available via podcast! https://feeds.transistor.fm/cyber-daily-news Stories mentioned in today's briefing: - Bitget says North Korea-linked hackers stole $351.6 million https://securityaffairs.com/199754/cyber-crime/cryptocurrency-exchange-bitget-says-north-korea-linked-hackers-stole-351-6-million.html - ClickFix campaign abuses trusted websites to deploy Psychedelic Stealer https://securityaffairs.com/199731/malware/clickfix-campaign-abuses-trusted-websites-to-deploy-psychedelic-stealer.html - Kosovar owner of Rydox marketplace pleads guilty in US court https://www.securityweek.com/kosovar-owner-of-rydox-marketplace-pleads-guilty-in-us-court/ - CISA election security plan flags patching barriers and voter database attacks https://www.securityweek.com/cisa-election-security-plan-flags-patching-barriers-voter-database-attacks/
• 
  Cyber Daily News for September 25th, 2026 25.09.2026 2m

  Cyber Daily News for September 25th, 2026 Cyber Daily News is also available via podcast! https://feeds.transistor.fm/cyber-daily-news Stories mentioned in today's briefing: - SalesBleed flaws in Salesforce Agentforce enabled zero-click data exfiltration https://www.securityweek.com/salesbleed-flaws-in-salesforce-agentforce-enabled-zero-click-data-exfiltration/ - Roundcube webmail vulnerability under active exploitation https://www.securityweek.com/roundcube-webmail-vulnerability-in-attackers-crosshairs/ - AI helps uncover MikroTrick attack chain in MikroTik RouterOS https://securityaffairs.com/199678/hacking/ai-helps-uncover-mikrotrick-attack-chain-in-mikrotik-routeros.html - AI-powered campaign targets hundreds of online retailers https://www.securityweek.com/ai-powered-campaign-targets-hundreds-of-online-retailers/ - Emerging ransomware gang n0n threatens to destroy backups https://www.infosecurity-magazine.com/news/ransomware-gang-uses-backup/
• 
  Cyber Daily News for September 24th, 2026 24.09.2026 2m

  Cyber Daily News for September 24th, 2026 Cyber Daily News is also available via podcast! https://feeds.transistor.fm/cyber-daily-news Stories mentioned in today's briefing: - Critical WordPress Vulnerability Exploited Immediately After Disclosure https://www.securityweek.com/critical-wordpress-vulnerability-exploited-immediately-after-disclosure/ - CLOSEDQUORUM, the malware that asks four AI models what to do next https://securityaffairs.com/199640/malware/closedquorum-the-malware-that-asks-four-ai-models-what-to-do-next.html - Ransomware Attacks Reach Record High for 2026 https://www.infosecurity-magazine.com/news/ransomware-attacks-reach-record/ - AI-Powered Phishing Platform EvilTokens Disrupted by Microsoft https://www.securityweek.com/ai-powered-phishing-platform-eviltokens-disrupted-by-microsoft/ - ShinyHunters claims FBI breach after alleged PeopleSoft zero-day attack https://securityaffairs.com/199612/cyber-crime/shinyhunters-claims-fbi-breach-after-alleged-peoplesoft-zero-day-attack.html
• 
  Cyber Daily News for September 23rd, 2026 23.09.2026 2m

  Cyber Daily News for September 23rd, 2026 Cyber Daily News is also available via podcast! https://feeds.transistor.fm/cyber-daily-news Stories mentioned in today's briefing: - Fake LastPass on GitHub Led to an Infostealer That Killed 145 Security Tools https://securityaffairs.com/199577/malware/fake-lastpass-on-github-led-to-an-infostealer-that-killed-145-security-tools.html - Check Point Fixes a New Actively Exploited Critical Security Flaw https://securityaffairs.com/199549/security/check-point-fixes-a-new-actively-exploited-critical-security-flaw.html - Critical F5 BIG-IP Vulnerability Exploited as Zero-Day https://www.securityweek.com/critical-f5-big-ip-vulnerability-exploited-as-zero-day/ - Chaotic Eclipse Released BigDiskBuster, A PoC For Windows Defender Update DoS Zero-Day https://securityaffairs.com/199538/hacking/chaotic-eclipse-released-bigdiskbuster-a-poc-for-windows-defender-update-dos-zero-day.html - CVE-2026-87902: how close is your WordPress to remote code execution? https://securityaffairs.com/199564/hacking/cve-2026-87902-how-close-is-your-wordpress-to-remote-code-execution.html
• 
  Cyber Daily News for September 22nd, 2026 22.09.2026 3m

  Cyber Daily News for September 22nd, 2026 Cyber Daily News is also available via podcast! https://feeds.transistor.fm/cyber-daily-news Stories mentioned in today's briefing: - Contagious Interview: 30,000 devices infected by a fake job interview https://securityaffairs.com/199506/uncategorized/contagious-interview-30000-devices-infected-by-a-fake-job-interview.html - Fake LastPass Installers Push Kernel-Level EDR Killer, ‘Rapuncel’ Stealer https://www.securityweek.com/fake-lastpass-installers-push-kernel-level-edr-killer-rapuncel-stealer/ - ShinyHunters Claim Hack of Rival Ransomware Gang Clop https://www.infosecurity-magazine.com/news/shinyhunters-claim-hack-of-clop/ - Foreign Hackers Target Two Colorado Water Utilities https://securityaffairs.com/199480/ics-scada/foreign-hackers-target-two-colorado-water-utilities.html - ChainScript: the RAT that hides its command server inside a blockchain contract https://securityaffairs.com/199471/malware/chainscript-the-rat-that-hides-its-command-server-inside-a-blockchain-contract.html
• 
  Cyber Daily News for September 21st, 2026 21.09.2026 2m

  Cyber Daily News for September 21st, 2026 Cyber Daily News is also available via podcast! https://feeds.transistor.fm/cyber-daily-news Stories mentioned in today's briefing: - The Target Is No Longer the Model. It’s the Agent. https://securityaffairs.com/199454/ai/the-target-is-no-longer-the-model-its-the-agent.html - UK Police Data Faces Long-Standing Microsoft Cloud Security Concerns https://securityaffairs.com/199442/uncategorized/uk-police-data-faces-long-standing-microsoft-cloud-security-concerns.html - U.S. CISA adds Linux Kernel flaws to its Known Exploited Vulnerabilities catalog https://securityaffairs.com/199430/security/u-s-cisa-adds-linux-kernel-flaws-to-its-known-exploited-vulnerabilities-catalog-2.html - AI Hallucinations Nearly Triggered a US-China Military Confrontation https://securityaffairs.com/199415/ai/ai-hallucination-nearly-triggered-a-us-china-military-confrontation.html - SECURITY AFFAIRS MALWARE NEWSLETTER ROUND 115 https://securityaffairs.com/199409/malware/security-affairs-malware-newsletter-round-115.html
• 
  Cyber Daily News for September 20th, 2026 20.09.2026 1m

  Cyber Daily News for September 20th, 2026 Cyber Daily News is also available via podcast! https://feeds.transistor.fm/cyber-daily-news Stories mentioned in today's briefing: - Brevo Supply-Chain Attack Infected Over 100,000 Websites https://securityaffairs.com/199355/hacking/brevo-supply-chain-attack-infected-over-100000-websites.html - Google Gemini also Broke Out of Its Test Environment https://securityaffairs.com/199392/ai/google-gemini-also-broke-out-of-its-test-environment.html - Cisco ISE Vulnerability With CVSS 10.0 Score Under Active Attack https://thecyberexpress.com/cisco-ise-cve-2026-76460/
• 
  Cyber Daily News for September 19th, 2026 19.09.2026 2m

  Cyber Daily News for September 19th, 2026 Cyber Daily News is also available via podcast! https://feeds.transistor.fm/cyber-daily-news Stories mentioned in today's briefing: - Gyazo Data Breach Exposes 23 Million User Records https://securityaffairs.com/199338/data-breach/gyazo-data-breach-exposes-23-million-user-records.html - AI-Built Exploit and Sign-In Flaw Opened Path to Internal OpenAI Code https://www.securityweek.com/ai-built-exploit-and-sign-in-flaw-opened-path-to-internal-openai-code/ - New Settra Ransomware Variant Deployed in Attacks on Retail and Manufacturing https://www.infosecurity-magazine.com/news/settra-ransomware-retail/ - In Other News: Ransomware Developer Sentenced, Plugin4Shell AI Attack, Critical SAP Flaw https://www.securityweek.com/in-other-news-ransomware-developer-sentenced-plugin4shell-ai-attack-critical-sap-flaw/
• 
  Cyber Daily News for September 18th, 2026 18.09.2026 2m

  Cyber Daily News for September 18th, 2026 Cyber Daily News is also available via podcast! https://feeds.transistor.fm/cyber-daily-news Stories mentioned in today's briefing: - Revolut Data Breach: 5 Months, 680 High-Profile Accounts, $3M Ransom https://www.securityweek.com/revolut-data-breach-5-months-680-high-profile-accounts-3m-ransom/ - Critical Orkes Conductor Vulnerability Exploited in Attacks https://www.securityweek.com/critical-orkes-conductor-vulnerability-exploited-in-attacks/ - Cyberattacks on Oil Tankers Put Maritime Critical Infrastructure at Risk https://securityaffairs.com/199280/hacking/cyberattacks-on-oil-tankers-put-maritime-critical-infrastructure-at-risk.html - NightmareStresser Goes Offline in Global DDoS-for-Hire Crackdown https://securityaffairs.com/199251/cyber-crime/nightmarestresser-goes-offline-in-global-ddos-for-hire-crackdown.html - New Chinese-Made ‘RatHat’ Android Malware Leverages AI to Steal Financial Data https://www.infosecurity-magazine.com/news/rathat-android-malware-ai-steal/
• 
  Cyber Daily News for September 17th, 2026 17.09.2026 2m

  Cyber Daily News for September 17th, 2026 Cyber Daily News is also available via podcast! https://feeds.transistor.fm/cyber-daily-news Stories mentioned in today's briefing: - AI Agent Carries Out Multi-Stage Data Theft Attack https://www.infosecurity-magazine.com/news/ai-agent-carries-out-multistage/ - AI Agents Can Retrain Own Models Mid-Task, Leaking Secrets and Erasing Refusals https://www.securityweek.com/ai-agents-can-retrain-own-models-mid-task-leaking-secrets-and-erasing-refusals/ - First Agentic AI Data Breach Reported to Spanish Regulator https://www.securityweek.com/first-agentic-ai-data-breach-reported-to-spanish-regulator/ - Pixel Modem Zero-Day Exploited in Targeted Attacks https://www.securityweek.com/pixel-modem-zero-day-exploited-in-targeted-attacks/ - US, UK, Dutch Agencies Expose Iranian ‘Chosen Brick’ Surveillance Malware https://www.securityweek.com/us-uk-dutch-agencies-expose-iranian-chosen-brick-surveillance-malware/
• 
  Cyber Daily News for September 16th, 2026 16.09.2026 2m

  Cyber Daily News for September 16th, 2026 Cyber Daily News is also available via podcast! https://feeds.transistor.fm/cyber-daily-news Stories mentioned in today's briefing: - Cisco Warns of Ongoing Exploitation of Critical Email Gateway Zero-Day https://securityaffairs.com/199137/hacking/cisco-warns-of-ongoing-exploitation-of-critical-email-gateway-zero-day.html - Texas Utility CenterPoint Energy Confirms Data Breach After Hacker Claims 7.49M Records Stolen https://securityaffairs.com/199170/data-breach/texas-utility-centerpoint-energy-confirms-data-breach-after-hacker-claims-7-49m-records-stolen.html - Shared Hosting at Risk: LiteSpeed Enterprise Bug Can Grant Root from a Single Tenant https://securityaffairs.com/199127/security/shared-hosting-at-risk-litespeed-enterprise-bug-can-grant-root-from-a-single-tenant.html - Oracle Patches 800+ Vulnerabilities in September 2026 Security Update https://www.securityweek.com/oracle-patches-800-vulnerabilities-in-september-2026-security-update/ - Thai Broadband Provider Hacked via Fortinet Vulnerability https://www.securityweek.com/thai-broadband-provider-hacked-via-fortinet-vulnerability/
• 
  Cyber Daily News for September 15th, 2026 15.09.2026 2m

  Cyber Daily News for September 15th, 2026 Cyber Daily News is also available via podcast! https://feeds.transistor.fm/cyber-daily-news Stories mentioned in today's briefing: - Root RCE Zero-Day in Cisco Secure Email Gateway Under Active Exploitation https://www.securityweek.com/root-rce-zero-day-in-cisco-secure-email-gateway-under-active-exploitation/ - Human Attacker Hits Machine-Speed Exploitation of Marimo RCE https://www.infosecurity-magazine.com/news/human-attacker-machine-speed/ - Non-Zero-Day VPN Flaw Left Japan ‘s Government Shared Network Platform Exposed: 246,000 Records at Risk https://securityaffairs.com/199090/security/non-zero-day-vpn-flaw-left-japan-government-shared-network-platform-exposed-246000-records-at-risk.html - Malicious Twitch Extension Exposes 31,000 Users' OAuth Tokens https://www.infosecurity-magazine.com/news/malicious-twitch-extension-oauth/ - Chinese Hackers Exploit Critical Tencent Software Flaw for One-Click Code Execution https://www.securityweek.com/chinese-hackers-exploit-critical-tencent-software-flaw-for-one-click-code-execution/