Cyber Daily News

Cyber Daily News for April 23, 2026 Cyber Daily News is also available via podcast! https://feeds.transistor.fm/cyber-daily-news Stories mentioned in today's briefing: - U.S. CISA adds a flaw in Microsoft Defender to its Known Exploited Vulnerabilities catalog https://securityaffairs.com/191164/hacking/u-s-cisa-adds-a-flaw-in-microsoft-defender-to-its-known-exploited-vulnerabilities-catalog.html - Microsoft out-of-band updates fixed critical ASP.NET Core privilege escalation flaw https://securityaffairs.com/191130/security/microsoft-out-of-band-updates-fixed-critical-asp-net-core-privilege-escalation-flaw.html - Apple Patches iOS Flaw Allowing Recovery of Deleted Chats https://www.securityweek.com/apple-patches-ios-flaw-allowing-recovery-of-deleted-chats/ - AI Can Autonomously Hack Cloud Systems With Minimal Oversight: Researchers https://www.securityweek.com/ai-can-autonomously-hack-cloud-systems-with-minimal-oversight-researchers/ - Hacker Active Well Beyond Context...

Cyber Daily News for April 22, 2026 Cyber Daily News is also available via podcast! https://feeds.transistor.fm/cyber-daily-news Stories mentioned in today's briefing: - North Korea's Lazarus APT stole $290M from Kelp DAO https://securityaffairs.com/191092/digital-id/north-koreas-lazarus-apt-stole-290m-from-kelp-dao.html - Oracle Patches 450 Vulnerabilities With April 2026 CPU https://www.securityweek.com/oracle-patches-450-vulnerabilities-with-april-2026-cpu/ - Venezuela energy sector targeted by highly destructive Lotus wiper https://securityaffairs.com/191106/malware/venezuela-energy-sector-targeted-by-highly-destructive-lotus-wiper.html - Ransomware negotiator caught secretly assisting BlackCat extortion scheme https://securityaffairs.com/191100/security/ransomware-negotiator-caught-secretly-assisting-blackcat-extortion-scheme.html - North Korean Hackers Use AppleScript, ClickFix in Fresh macOS Attacks https://www.securityweek.com...

Cyber Daily News for April 21, 2026 Cyber Daily News is also available via podcast! https://feeds.transistor.fm/cyber-daily-news Stories mentioned in today's briefing: - North Korean Blamed for $290m KelpDAO Crypto Heist https://www.infosecurity-magazine.com/news/north-korean-blamed-290m-kelpdao/ - U.S. CISA adds Cisco Catalyst, Kentico Xperience, PaperCut NG/MF, Synacor ZCS, Quest KACE SMA, and JetBrains TeamCity flaws to its Known Exploited Vulnerabilities catalog https://securityaffairs.com/191080/hacking/u-s-cisa-adds-cisco-catalyst-kentico-xperience-papercut-ng-mf-synacor-zcs-quest-kace-sma-and-jetbrains-teamcity-flaws-to-its-known-exploited-vulnerabilities-catalog.html - The US NSA is using Anthropic's Claude Mythos despite supply chain risk https://securityaffairs.com/191087/ai/the-us-nsa-is-using-anthropics-claude-mythos-despite-supply-chain-risk.html - ZionSiphon Malware Targets Water Infrastructure Systems https://www...

Cyber Daily News for April 20, 2026 Cyber Daily News is also available via podcast! https://feeds.transistor.fm/cyber-daily-news Stories mentioned in today's briefing: - Next.js Creator Vercel Hacked https://www.securityweek.com/next-js-creator-vercel-hacked/ - AI Model Claude Opus turns bugs into exploits for just $2,283 https://securityaffairs.com/191018/ai/ai-model-claude-opus-turns-bugs-into-exploits-for-just-2283.html - Cisco Patches Critical ISE Vulnerabilities Allowing Remote Code Execution Attacks https://thecyberexpress.com/cisco-ise-vulnerabilities-enable-rce/ - Senate Extends Surveillance Powers Until April 30 After Chaotic Votes in House https://www.securityweek.com/senate-extends-surveillance-powers-until-april-30-after-chaotic-votes-in-house/ - Cyber attacks fuel surge in cargo theft across logistics industry https://securityaffairs.com/191008/security/cyber-attacks-fuel-surge-in-cargo-theft-across-logistics-industry...

Cyber Daily News for April 19, 2026 Cyber Daily News is also available via podcast! https://feeds.transistor.fm/cyber-daily-news Stories mentioned in today's briefing: - Microsoft Defender under attack as three zero-days, two of them still unpatched, enable elevated access https://securityaffairs.com/190961/hacking/microsoft-defender-under-attack-as-three-zero-days-two-of-them-still-unpatched-enable-elevated-access.html - Operation PowerOFF: 53 DDoS domains seized and 3 Million criminal accounts uncovered https://securityaffairs.com/190932/cyber-crime/operation-poweroff-53-ddos-domains-seized-and-3-million-criminal-accounts-uncovered.html - Hidden VMs: how hackers leverage QEMU to stealthily steal data and spread malware https://securityaffairs.com/190982/security/hidden-vms-how-hackers-leverage-qemu-to-stealthily-steal-data-and-spread-malware.html - Commercial AI Models Show Rapid Gains in Vulnerability Research https://www.infosecurity-magazine.com/news/ai-models-rapid-gains/ ...

Cyber Daily News for April 18, 2026 Cyber Daily News is also available via podcast! https://feeds.transistor.fm/cyber-daily-news Stories mentioned in today's briefing: - Microsoft Defender under attack as three zero-days, two of them still unpatched, enable elevated access https://securityaffairs.com/190961/hacking/microsoft-defender-under-attack-as-three-zero-days-two-of-them-still-unpatched-enable-elevated-access.html - Commercial AI Models Show Rapid Gains in Vulnerability Research https://www.infosecurity-magazine.com/news/ai-models-rapid-gains/ - Nexcorium Mirai variant exploits TBK DVR flaw to launch DDoS attacks https://securityaffairs.com/190974/malware/nexcorium-mirai-variant-exploits-tbk-dvr-flaw-to-launch-ddos-attacks.html - Operation PowerOFF: 53 DDoS domains seized and 3 Million criminal accounts uncovered https://securityaffairs.com/190932/cyber-crime/operation-poweroff-53-ddos-domains-seized-and-3-million-criminal-accounts-uncovered.html - Kyrgyzstan-based...

Cyber Daily News for April 17, 2026 Cyber Daily News is also available via podcast! https://feeds.transistor.fm/cyber-daily-news Stories mentioned in today's briefing: - Russian GRU Cyber Campaign Targets Western Logistics Firms Supporting Ukraine https://thecyberexpress.com/russian-gru-cyber-campaign-targets-logistics/ - Two North Korean IT Worker Scheme Facilitators Jailed in the US https://www.securityweek.com/two-north-korean-it-worker-scheme-facilitators-jailed-in-the-us/ - NIST Drops NVD Enrichment for Pre-March 2026 Vulnerabilities https://www.infosecurity-magazine.com/news/nvd-enrichment-premarch-2026/ - ZionSiphon Malware Targets ICS in Water Facilities https://www.securityweek.com/zionsiphon-malware-targets-ics-in-water-facilities/ - Cisco Fixed Four Critical Flaws in Identity Services and Webex https://securityaffairs.com/190909/security/cisco-fixed-four-critical-flaws-in-identity-services-and-webex.html ...

Cyber Daily News for April 16, 2026 Cyber Daily News is also available via podcast! https://feeds.transistor.fm/cyber-daily-news Stories mentioned in today's briefing: - Systemic Flaw in MCP Protocol Could Expose 150 Million Downloads https://www.infosecurity-magazine.com/news/systemic-flaw-mcp-expose-150/ - Critical Nginx-ui MCP Flaw Actively Exploited in the Wild https://www.infosecurity-magazine.com/news/nginx-ui-mcp-flaw-actively/ - Claude Code, Gemini CLI, GitHub Copilot Agents Vulnerable to Prompt Injection via Comments https://www.securityweek.com/claude-code-gemini-cli-github-copilot-agents-vulnerable-to-prompt-injection-via-comments/ - 'I'm Just Scared': Teen Hacker Jailed After Massive U.S. School Data Breach https://thecyberexpress.com/hacker-matthew-lane-powerschool-data-breach/ - 100 Chrome Extensions Steal User Data, Create Backdoor ...

Cyber Daily News for April 15, 2026 Cyber Daily News is also available via podcast! https://feeds.transistor.fm/cyber-daily-news Stories mentioned in today's briefing: - Microsoft Patches Exploited SharePoint Zero-Day and 160+ Other Vulnerabilities https://www.securityweek.com/microsoft-patches-exploited-sharepoint-zero-day-and-160-other-vulnerabilities/ - $10 Domain Could Have Handed Hackers 25k Endpoints, Including in OT and Gov Networks https://www.securityweek.com/10-domain-could-have-handed-hackers-25k-endpoints-including-in-ot-and-gov-networks/ - Fortinet Patches Critical FortiSandbox Vulnerabilities https://www.securityweek.com/fortinet-patches-critical-fortisandbox-vulnerabilities/ - Personal Data of 1 Million Gym Members Compromised in Basic-Fit Security Incident https://securityaffairs.com/190815/data-breach/personal-data-of-1-million-gym-members-compromised-in-basic-fit-security-incident.html - PHP Composer Flaws Enable Remote Command Execution via Perforce VCS https...

Cyber Daily News for April 14, 2026 Cyber Daily News is also available via podcast! https://feeds.transistor.fm/cyber-daily-news Stories mentioned in today's briefing: - OpenAI Impacted by North Korea-Linked Axios Supply Chain Hack https://www.securityweek.com/openai-impacted-by-north-korea-linked-axios-supply-chain-hack/ - Organizations Warned of Exploited Windows, Adobe Acrobat Vulnerabilities https://www.securityweek.com/organizations-warned-of-exploited-windows-adobe-acrobat-vulnerabilities/ - Triad Nexus Evades Sanctions to Fuel Cybercrime https://www.securityweek.com/triad-nexus-evades-sanctions-to-fuel-cybercrime/ - Massive Cyberattack Hits Europe's Largest Fitness Chain, Member Data Exposed https://thecyberexpress.com/basic-fit-data-breach-exposes-member-data/ - Booking.com Says Hackers Accessed User Information https://www.securityweek.com/booking-com-says-hackers-accessed-user-information/ - Mailbox Rule Abuse Emerges as Stealthy...

Cyber Daily News for April 13, 2026 Cyber Daily News is also available via podcast! https://feeds.transistor.fm/cyber-daily-news Stories mentioned in today's briefing: - OpenAI Responds to Axios npm Supply Chain Attack, Rotates macOS Certificates https://thecyberexpress.com/axios-npm-supply-chain-attack-escalating/ - Adobe Patches Actively Exploited Acrobat Reader Flaw CVE-2026-34621 https://thecyberexpress.com/acrobat-reader-flaw-adobe-cve-2026-34621/ - CPUID Hacked to Serve Trojanized CPU-Z and HWMonitor Downloads https://www.securityweek.com/cpuid-hacked-to-serve-trojanized-cpu-z-and-hwmonitor-downloads/ - Rockstar Cyberattack Confirmed; ShinyHunters Claims Breach, Issues Extortion Threat https://thecyberexpress.com/rockstar-cyberattack-gta-5/ - Citizen Lab: Webloc Tracked 500M Devices for Global Law Enforcement https://securityaffairs.com/190715/intelligence/citizen-lab-webloc-tracked-500m-devices-for-global-law-enforcement...

Cyber Daily News for April 12, 2026 Cyber Daily News is also available via podcast! https://feeds.transistor.fm/cyber-daily-news Stories mentioned in today's briefing: - Adobe Patches Reader Zero-Day Exploited for Months https://www.securityweek.com/adobe-patches-reader-zero-day-exploited-for-months/ - Censys finds 5,219 devices exposed to attacks by Iranian APTs, majority in U.S. https://securityaffairs.com/190646/ics-scada/censys-finds-5219-devices-exposed-to-attacks-by-iranian-apts-majority-in-u-s.html - Ransomware attack on ChipSoft knocks EHR services offline across hospitals in the Netherlands and Belgium https://securityaffairs.com/190615/cyber-crime/ransomware-attack-on-chipsoft-knocks-ehr-services-offline-across-hospitals-in-the-netherlands-and-belgium.html - EngageLab SDK flaw opens door to private data on 50M Android devices https://securityaffairs.com/190586/hacking/engagelab-sdk-flaw-opens-door-to-private-data-on-50m-android-devices.html ...

Cyber Daily News for April 11, 2026 Cyber Daily News is also available via podcast! https://feeds.transistor.fm/cyber-daily-news Stories mentioned in today's briefing: - CVE-2026-39987: Marimo RCE Exploited in Hours After Disclosure https://securityaffairs.com/190623/hacking/cve-2026-39987-marimo-rce-exploited-in-hours-after-disclosure.html - Ransomware Attack on ChipSoft Knocks EHR Services Offline Across Dutch and Belgian Hospitals https://securityaffairs.com/190615/cyber-crime/ransomware-attack-on-chipsoft-knocks-ehr-services-offline-across-hospitals-in-the-netherlands-and-belgium.html - Iran-Linked Hackers Targeting ICS and SCADA Systems in Critical Infrastructure https://www.securityweek.com/industry-reactions-to-iran-hacking-ics-in-critical-infrastructure-feedback-friday/ - APT28 DNS Hijacking Campaign Exploiting Vulnerable Routers https://thecyberexpress.com/weekly-roundup-cybersecurity-global-threats/ - Juniper Networks Patches Dozens of Junos OS Vulnerabilities Including Critical...

Cyber Daily News for April 10, 2026 Cyber Daily News is also available via podcast! https://feeds.transistor.fm/cyber-daily-news Stories mentioned in today's briefing: - Malicious PDF reveals active Adobe Reader zero-day in the wild https://securityaffairs.com/190558/hacking/malicious-pdf-reveals-active-adobe-reader-zero-day-in-the-wild.html - Chrome 147 Patches 60 Vulnerabilities, Including Two Critical Flaws Worth $86,000 https://www.securityweek.com/chrome-147-patches-60-vulnerabilities-including-two-critical-flaws-worth-86000/ - EngageLab SDK flaw opens door to private data on 50M Android devices https://securityaffairs.com/190586/hacking/engagelab-sdk-flaw-opens-door-to-private-data-on-50m-android-devices.html - Microsoft Recall Flaw Exposes Decrypted User Data, Researchers Find https://thecyberexpress.com/totalrecall-windows-recall-security-gap/ - Bitcoin Depot Reports $3.6m Crypto Theft After System Breach ...

Cyber Daily News for April 9, 2026 Cyber Daily News is also available via podcast! https://feeds.transistor.fm/cyber-daily-news Stories mentioned in today's briefing: - Alleged Breach of China's National Supercomputing Center — 10+ PB of Military Data Stolen https://securityaffairs.com/190536/hacking/the-alleged-breach-of-chinas-national-supercomputing-center-can-have-serious-geopolitical-consequences.html - Adobe Reader Zero-Day Exploited for Months: Researcher https://www.securityweek.com/adobe-reader-zero-day-exploited-for-months-researcher/ - Russia-linked APT28 Deploys PRISMEX Malware Against Ukraine and Allied Infrastructure https://securityaffairs.com/190510/apt/russia-linked-apt28-uses-prismex-to-infiltrate-ukraine-and-allied-infrastructure-with-advanced-tactics.html - CISA Adds Critical Ivanti EPMM Flaw to Known Exploited Vulnerabilities Catalog https://securityaffairs.com/190519/security/u-s-cisa-adds-a-flaw-in-ivanti-epmm-to-its-known-exploited-vulnerabilities-catalog-2.html - Signature Healthcare Cyberattack Diverts Ambulances, Cancels Chemotherapy https://th...

Cyber Daily News for April 8, 2026 Cyber Daily News is also available via podcast! https://feeds.transistor.fm/cyber-daily-news Stories mentioned in today's briefing: - US Thwarts DNS Hijacking Network Controlled by Russian APT28 Hackers https://www.infosecurity-magazine.com/news/us-thwarts-dns-hijacking-network/ - Iran-Linked Hackers Disrupt US Critical Infrastructure via PLC Attacks https://www.securityweek.com/iran-linked-hackers-disrupt-us-critical-infrastructure-via-plc-attacks/ - Gov. Tim Walz Deploys National Guard After Winona Cyberattack Disrupts Services https://thecyberexpress.com/winona-county-cyberattack-update/ - Critical Flowise RCE Vulnerability Actively Exploited, Thousands of Systems at Risk https://thecyberexpress.com/flowise-rce-vulnerability-cve-2025-59528/ - Fast-moving Storm-1175 uses new exploits to breach networks and drop Medusa ...

Cyber Daily News for April 7, 2026 Cyber Daily News is also available via podcast! https://feeds.transistor.fm/cyber-daily-news Stories mentioned in today's briefing: - Fortinet Releases Emergency Patch After FortiClient EMS Zero-Day Exploited in the Wild https://www.infosecurity-magazine.com/news/fortinet-emergency-patch-ems-bug/ - Researchers Publish Unpatched Windows Zero-Day BlueHammer https://securityaffairs.com/190400/breaking-news/experts-published-unpatched-windows-zero-day-bluehammer.html - Attackers Exploit RCE Flaw as 14,000 F5 BIG-IP APM Instances Remain Exposed https://securityaffairs.com/190384/security/attackers-exploit-rce-flaw-as-14000-f5-big-ip-apm-instances-remain-exposed.html - Storm-1175 Exploits Flaws in High-Velocity Medusa Attacks https://www.infosecurity-magazine.com/news/storm1175-medusa-attacks/ - German Police Unmask REvil Ransomware Leader https://www.securityweek...

Cyber Daily News for April 6, 2026 Cyber Daily News is also available via podcast! https://feeds.transistor.fm/cyber-daily-news Stories mentioned in today's briefing: - Fortinet Rushes Emergency Patches for Actively Exploited Zero-Day (CVE-2026-35616) https://securityaffairs.com/190392/hacking/cve-2026-35616-fortinet-fixes-actively-exploited-high-severity-flaw.html - North Korea Drains $285M from Drift Protocol in 12 Minutes After 6-Month Infiltration https://thecyberexpress.com/drift-protocol-draining-285m-in-12-mins/ - European Commission Hit by 91GB Data Leak via Compromised Trivy Security Tool https://thecyberexpress.com/european-commission-cloud-breach/ - North Korea-Linked Actors Compromise Axios NPM Package in Supply Chain Attack https://securityaffairs.com/190379/malware/security-affairs-malware-newsletter-round-91.html - Cyberattack Disrupts Massachusetts...

Cyber Daily News for April 5, 2026 Cyber Daily News is also available via podcast! https://feeds.transistor.fm/cyber-daily-news Stories mentioned in today's briefing: - North Korea-Linked Hackers Drain $285M from Drift in Sophisticated Attack https://securityaffairs.com/190330/hacking/north-korea-linked-hackers-drain-285m-from-drift-in-sophisticated-attack.html - European Commission Breach Exposed Data of 30 EU Entities https://securityaffairs.com/190333/security/european-commission-breach-exposed-data-of-30-eu-entities-cert-eu-says.html - CISA Adds TrueConf Client Flaw CVE-2026-3502 to Known Exploited Vulnerabilities Catalog https://securityaffairs.com/190341/security/u-s-cisa-adds-a-flaw-in-trueconf-client-to-its-known-exploited-vulnerabilities-catalog.html - Qilin Ransomware Group Claims Hack of German Political Party Die Linke https://securityaffairs.com/190348/cyber-crime/qilin-ransomware-group-claims-the-hack-of-german-political-party-die-linke.html - Hasbro Hit by Cyberattack, Investigates...

Cyber Daily News for April 4, 2026 Cyber Daily News is also available via podcast! https://feeds.transistor.fm/cyber-daily-news Stories mentioned in today's briefing: - European Commission Breach Exposes 300GB of Data from 30 EU Entities https://www.securityweek.com/european-commission-confirms-data-breach-linked-to-trivy-supply-chain-attack/ - North Korea-Linked Hackers Drain $285M from Drift Protocol https://securityaffairs.com/190330/hacking/north-korea-linked-hackers-drain-285m-from-drift-in-sophisticated-attack.html - TrueConf Zero-Day Exploited in Asian Government Attacks https://www.securityweek.com/trueconf-zero-day-exploited-in-asian-government-attacks/ - Critical ShareFile Flaws Lead to Unauthenticated RCE https://www.securityweek.com/critical-sharefile-flaws-lead-to-unauthenticated-rce/ - CrystalX RAT: New MaaS Malware Combines Spyware, Stealer, and Remote Access https://securityaffairs.com/190310/cyber-crime/crystalx-rat-new-maas-malware-combines-spyware-stealer-and-remote-access.html ...