Kerio Connect vulnerability CVE-2026-112353, a stored XSS flaw via SVG attachments, is exploited in the wild to steal mailboxes. Update to 10.0.8p2.

Related Posts:

• Apache Kafka Fixes 12 Vulnerabilities, Including a JWT Bypass That Grants Full Cluster Access
• FreeSWITCH Vulnerability CVE-2026-116779 Exploited in the Wild to Run Commands
• Details and PoC Exploit Released for Jackson-Databind Flaw CVE-2026-110879 (CVSS 9.8)

The post Kerio Connect Vulnerability CVE-2026-112353 Exploited in the Wild to Steal Mailboxes appeared first on Daily CyberSecurity.

Microsoft and Proofpoint executed a CoGUI phishing kit takedown, seizing domains from YAM Store and Iron Man after 1B scam messages hit 75,000 firms.

Related Posts:

• Meta, Tech Firms and Police Hit West Africa Scam Centers in Joint Operation That Led to 28 Arrests
• DOJ Charges Engineer After OpenAI Recording Device Arrest
• DOJ Disrupts DPRK IT Worker Schemes Across More Than 70 US Companies

The post Microsoft and Proofpoint Disrupt CoGUI Phishing Kit, YAM Store, and Iron Man appeared first on Daily CyberSecurity.

Proofpoint exposed China-aligned TA419 credential phishing targeting AI experts. This TA419 credential phishing campaign uses AitM lures to steal logins.

Related Posts:

• Phishing Abuses RMM Tools for Persistent Network Access
• Attackers Exploit Citrix NetScaler Zero-Day CVE-2026-88772 to Plant Hidden Web Shells
• Russia's Star Blizzard Scales Up Phishing With RedFlick to Deliver CosmicPulse Backdoor

The post China-Aligned TA419 Credential Phishing Hits AI Experts appeared first on Daily CyberSecurity.

University job scams are spreading through .edu account takeover. Proofpoint shows how fraudsters phish logins, then send fake jobs and bogus checks.

Related Posts:

• Russia's Star Blizzard Scales Up Phishing With RedFlick to Deliver CosmicPulse Backdoor
• SVG Phishing Attacks Return in August as Symantec Logs 222,000 Detections
• Microsoft Links JADEPUFFER Azure Attack to Agentic Ransomware Actor Storm-3168

The post Nigeria-Based Fraudsters Hijack .edu Accounts to Run University Job Scams appeared first on Daily CyberSecurity.

A new TeamFiltration password spray campaign targeted Chilean firms. Learn how this TeamFiltration password spray compromised dormant cloud accounts.

Related Posts:

• Konni Launches Operation Conflict Compass Against Ukraine
• Kiteworks Mandates Global Precautionary Server Shutdown
• TraderTraitor macOS Backdoors Target IT Service Firms

The post TeamFiltration Password Spray Campaign Hits Chile appeared first on Daily CyberSecurity.