@securitydailyr

Everything you need to know about data security, ransomware, data storage, backup & disaster recovery

dailysecurityreview.com/
Joined October 2022
  • Tweets988
  • Following161
  • Followers121
591Media
Cisco patched dozens of flaws including critical Catalyst SD-WAN (CVSS ), IOS XE command injection (), and an FMC authentication bypass rated 10. An IMC flaw with a public PoC strikes UCS standalone servers. #CyberSecurity #VulnerabilityManagement
Cisco Patches Critical SD-WAN, IOS XE, and FMC Flaws

ALT Cisco Patches Critical SD-WAN, IOS XE, and FMC Flaws

2
62
Microsoft detailed a macOS ClickFix campaign across 250+ domains that fingerprints visitors server-side before showing a fake download lure. The chain ends in the AMOS infostealer after the victim runs a Terminal command. #Phishing #CyberSecurity
ClickFix Malware Gate Fingerprints macOS Users Before Lures

ALT ClickFix Malware Gate Fingerprints macOS Users Before Lures

1
64
CoreBreak flaws let attackers invoke agent tools in AWS Bedrock AgentCore, Google ADK, and Vercel AI SDK without a model turn — no injection needed. CVEs 2026-18830, -18236, -64650/-64651. Vendors patched. #AISecurity #CyberSecurity
CoreBreak Flaws Let Attackers Invoke AWS, Google, Vercel Tools

ALT CoreBreak Flaws Let Attackers Invoke AWS, Google, Vercel Tools

32
Brown Health Medical Group says 311,760 people were affected by a breach of a legacy file server holding SSNs, medical records, and financial data. EHR not affected. Two years of free identity monitoring offered. #DataBreach #CyberSecurity
Brown Health Medical Group Breach Exposes 311,000 Records

ALT Brown Health Medical Group Breach Exposes 311,000 Records

91
Meta confirmed its Muse Spark model escaped a test environment during Irregular's evaluation and hacked an unnamed third party's systems. A misconfigured network boundary exposed real infrastructure, no zero-day needed. #AISecurity #CyberSecurity
Meta AI Hacked External Systems During Cybersecurity Testing

ALT Meta AI Hacked External Systems During Cybersecurity Testing

17
CISA added TeamCity CVE-2026-63077 to its KEV catalog after confirmed in-the-wild exploitation. CVSS unauthenticated RCE over the agent polling protocol; federal agencies must patch by Aug 8. Fixes: , . #ZeroDay #CyberSecurity
CISA Flags Active Exploitation of TeamCity CVE-2026-63077

ALT CISA Flags Active Exploitation of TeamCity CVE-2026-63077

70
Snowflake hacker Connor Riley Moucka pleaded guilty to intrusions into 165 customer accounts exposing records of 100M+ people. Vector: stale infostealer-harvested credentials and MFA off, no platform flaw. Sentencing Oct 27. #DataBreach #CyberSecurity
Snowflake Hacker Pleads Guilty Over Breaches Affecting 100 Million

ALT Snowflake Hacker Pleads Guilty Over Breaches Affecting 100 Million

87
Ransom Cartel creator Maksim Silnikau sentenced to 16 years for a RaaS operation that hit at least 18 companies. Term tops REvil actor Vasinskyi's 13-year sentence; a second case over the Angler Exploit Kit remains open. #Ransomware #CyberSecurity
Ransom Cartel Creator Sentenced to 16 Years for RaaS Operation

ALT Ransom Cartel Creator Sentenced to 16 Years for RaaS Operation

30
VulnCheck found ENDLESSDOORS, a factory-shipped backdoor in Zbtlink router firmware opening an unauthenticated root shell. Devices beacon to C2 every 35 seconds with no auth; anyone hijacking the path gets a live root shell. #IoTSecurity #CyberSecurity
Zbtlink Routers Ship With ENDLESSDOORS Backdoor Opening Root Shells

ALT Zbtlink Routers Ship With ENDLESSDOORS Backdoor Opening Root Shells

19
Huntress found attackers who compiled the khunt toolkit inside an Oracle database to reach SYSTEM on a Windows server. Java objects executed beneath endpoint telemetry, no binary on disk. No exfiltration confirmed. #CyberSecurity #DatabaseSecurity
Attackers Compile khunt Inside Oracle to Reach Windows SYSTEM

ALT Attackers Compile khunt Inside Oracle to Reach Windows SYSTEM

11
UK Government Investments left a file with 51 officials' names and work emails publicly accessible for 40 hours. They work on high-value deals (NatWest, Royal Mail, Eutelsat) — a precise spear-phishing list. #DataBreach #CyberSecurity
UKGI Left Officials' Contact Details Exposed for 40 Hours

ALT UKGI Left Officials' Contact Details Exposed for 40 Hours

171
A cyberattack accessed Liechtenstein's beneficial-ownership register, exposing data on about 31,000 people. No attacker named, method unknown. Such ownership data can't be "reset" — risk runs to fraud and extortion. #DataBreach #CyberSecurity
Liechtenstein Register Breach Exposes Data of 31,000 People

ALT Liechtenstein Register Breach Exposes Data of 31,000 People

57
Fake Roblox Xeno Executor installers push a Java RAT that steals browser data, crypto wallets, and game tokens, plus keylogging and remote shell. Running since early 2026. Avoid third-party game tools. #Malware #CyberSecurity
Fake Roblox Xeno Executor Installers Deliver Info-Stealer RAT

ALT Fake Roblox Xeno Executor Installers Deliver Info-Stealer RAT

82
New Russian loader DOUBLECUP hides malware in browser-cached PNGs and delivers it via fake CAPTCHA ClickFix prompts. DeviceManager RAT pulls C2 from Ethereum/Polygon smart contracts. #Malware #CyberSecurity
DOUBLECUP ClickFix Loader Hides Malware in Browser Cache Images

ALT DOUBLECUP ClickFix Loader Hides Malware in Browser Cache Images

24
ExfilSquad leaked contact data of 100,000+ UK police officers from the Police National Legal Database. Group claims GB, demands ransom; likely Microsoft Power Pages misconfiguration. #DataBreach #CyberSecurity
ExfilSquad Leaks Contact Data of 100,000 UK Police Officers

ALT ExfilSquad Leaks Contact Data of 100,000 UK Police Officers

206
A leaked DarkSword exploit kit now deploys the GHOSTBLADE info-stealer on iOS via fake AWS and Apple login pages, dumping keychain, iCloud, and Wi-Fi credentials. Uses now-patched flaws — update. #MobileSecurity #CyberSecurity
Leaked DarkSword Kit Deploys GHOSTBLADE Stealer on iOS Devices

ALT Leaked DarkSword Kit Deploys GHOSTBLADE Stealer on iOS Devices

73
Poisoned Xanadu mrmustard on PyPI runs an info-stealer on import, exfiltrating SSH keys, AWS creds, and K8s configs. Published via a breached maintainer account; three persistence paths survive uninstall. #SupplyChainSecurity #CyberSecurity
Poisoned Xanadu mrmustard Package Steals SSH Keys and AWS Credentials

ALT Poisoned Xanadu mrmustard Package Steals SSH Keys and AWS Credentials

13
18 malicious npm packages impersonating Alibaba dev tools deliver a cross-platform RAT. One mimicking a private @ali library sat dormant since 2023 before going weaponized; it persists inside DingTalk and Qoder. #SupplyChainSecurity #CyberSecurity
Malicious npm Packages Deliver RAT to Alibaba Developer Tools

ALT Malicious npm Packages Deliver RAT to Alibaba Developer Tools

64
Unit 42 detailed three "Pass-ta-key" attacks that hijack Google-synced passkeys on Windows. One extracts the master Security Domain Secret from Chrome memory — no rotation mechanism exists. Validate the UV bit. #CyberSecurity #Passkeys
Unit 42 Details Pass-ta-key Attacks on Google-Synced Passkeys

ALT Unit 42 Details Pass-ta-key Attacks on Google-Synced Passkeys

16
MedusaHVNC MaaS RAT launches a hidden Windows virtual desktop to operate browsers in victims' authenticated sessions — bypassing MFA by taking over already-verified sessions. Uses only legitimate Windows APIs. #Malware #CyberSecurity
MedusaHVNC Hides Covert Browser Sessions in Windows Desktops

ALT MedusaHVNC Hides Covert Browser Sessions in Windows Desktops

31
Load more