A uutils coreutils vulnerability (CVSS 9.9) let translation files inject code; details and a proof-of-concept are now public. Upgrade to uucore 0.12.0.

Related Posts:

• QNAP Warns NAS Users as Exploited Plex2Shell Vulnerabilities Hit Plex Media Server
• WP Duplicate Vulnerability CVE-2026-123751 Exploited in the Wild, No Patch Available
• PoC Published for Hugging Face Datasets RCE CVE-2026-57845 (CVSS 8.8) in Library With 38 Million Monthly Downloads

The post uutils Coreutils Vulnerability Details and Proof-of-Concept Published for Translation-File Code Injection appeared first on Daily CyberSecurity.

Sonatype uncovers the PolinRider loader in 12 releases across 10 hijacked packages. See how the npm PolinRider loader uses Ethereum to fetch malware.

Related Posts:

• Trojanized Inno Setup Installers Deliver Proxyware and Compute Hijackers
• LuaJIT XLoader Infostealer Spreads via Fake Orders
• BITTER PapRAT Malware Targets South Asian Organizations

The post PolinRider Loader Hits 10 Hijacked npm Packages Using Ethereum Dead-Drop Resolver appeared first on Daily CyberSecurity.

cPGuard supply chain attack: an update channel compromise pushed a backdoor in versions 5.88.12-5.88.19. Update to 5.88.25 and rotate credentials.

Related Posts:

• Ubuntu Kernel Fixes for CVE-2026-98432 (CVSS 9.8) Land in Proposed Pocket
• TeamViewer Client Vulnerability Enables Remote Code Execution
• 7 Unpatched phpMyAdmin Vulnerabilities Exposed

The post cPGuard Supply Chain Attack Pushes Backdoor Through Update Channel appeared first on Daily CyberSecurity.

Pluto Research exposes Hugging Face malware. This Hugging Face malware campaign drops cryptominers and backdoors on self-hosted AI servers.

Related Posts:

• PSK Agent RAT Hits Magento Stores Through StyleSmuggler Exploitation
• Google Disrupts Videostrong XCPE Botnet on Android TV
• NIK C2 Framework Integrates OpenAI API to Analyze Stolen Data in Live Attacks

The post Hugging Face Malware Campaign Infects AI GPU Servers appeared first on Daily CyberSecurity.

Trezor issued an alert after discovering a Trezor hardware wallet implant with a 4G module sold by compromised Southeast Asian reseller CryptoBilis.

Related Posts:

• ChatGPT Violence Restrictions Tighten with Teen Safeguards
• AI Training Preference Standard Added to Robots.txt
• Google Project Suncatcher Achieves Orbital AI Inference

The post Trezor Hardware Wallet Implant Found in Reseller Units appeared first on Daily CyberSecurity.

Cursor removed a malicious Claude Code extension backdoor. Learn how the Cursor Claude Code extension backdoor planted SSH keys on up to 5,000 developer PCs.

Related Posts:

• INJ3CTOR3 FreePBX Malware Steals 17 Configuration Files for Off-Box Toll Fraud
• CyberDakait Deploys Seven Android Trojan Families Against 17,960 Indian Banking Devices
• Qilin Ransomware Targets VMware ESXi Servers and Healthcare Networks After Claiming 900 Victims in 2026

The post Malicious Claude Code Extension Injects SSH Backdoor in Cursor Marketplace appeared first on Daily CyberSecurity.

A Polymarket supply chain attack compromised a third-party analytics script to deploy a crypto wallet drainer, prompting an immediate trading halt.

Related Posts:

• Binance Hack Investigation Traces Historic $6.3B Breach
• Binance Hot Wallet Breach Prompts Multibillion-Dollar Inquiry
• NetamLoader Hides in Windows Update Folder in Suspected Supply Chain Attack on Asian Government

The post Polymarket Supply Chain Attack Drains Trader Wallets appeared first on Daily CyberSecurity.

NetamLoader, a new XAML-based .NET loader, points to a supply chain attack on a custom Windows build used by government entities in Asia.

Related Posts:

• Binance Hack Investigation Traces Historic $6.3B Breach
• Polymarket Supply Chain Attack Drains Trader Wallets
• Binance Hot Wallet Breach Prompts Multibillion-Dollar Inquiry

The post NetamLoader Hides in Windows Update Folder in Suspected Supply Chain Attack on Asian Government appeared first on Daily CyberSecurity.

Sansec uncovers a Convertr supply chain attack. See how a Plausible Convertr supply chain attack planted a Magecart card and CPF skimmer on stores.

Related Posts:

• Attackers Abuse Claude Sharing Features and Google Ads to Deliver AMOS and Windows RAT
• SiriusQT RAT Combines Hidden Desktop Control With Credential and Wallet Theft
• Fake Chocolatey and Massgrave Sites Deliver Python Armorsteal Malware via SEO Poisoning

The post Brazilian Magecart Group Hits Convertr Ecommerce Platform in Plausible Analytics Supply Chain Attack appeared first on Daily CyberSecurity.

Railway security incident: attackers may have decrypted Railway environment variables. Builds are paused. Rotate API keys and credentials now.

Related Posts:

• Zeabur Shutdown Follows Repeated Data Breaches
• Sourcenext Data Breach Exposes 22.5M User Records
• OpenCode Security Breach Exposes 1.4% of Console Users

The post Railway Security Incident Exposes Customer Environment Variables and Pauses All Deployments appeared first on Daily CyberSecurity.

Hackers abused a SkyKick API secret in a ConnectWise Cloud Backup breach, accessing 300+ Microsoft 365 tenants and planting rogue app credentials.

Related Posts:

• Lazarus Operation FlashHole Abuses CrossWeb EX and GitHub to Spy on South Korean Firms
• Ahold Delhaize Cyberattack Knocks Brand Websites and Apps Offline in US and Europe
• UNC7017 Executes AOMEI Supply Chain Attack Using Five-Minute Server Tampering

The post Attackers Abuse ConnectWise Cloud Backup Credential to Breach Over 300 Microsoft 365 Tenants appeared first on Daily CyberSecurity.

An OVHcloud CLI attack swapped GitHub release files with a secret-stealing binary. Learn which versions are hit in this supply chain attack.

Related Posts:

• Qilin, Inc and Settra Ransomware Gangs Exploit PAN-OS Flaw CVE-2026-0257 for VPN Access
• AdFection Spyware Attack Targets Al Jazeera Devices
• GhostBat RAT Uses Transparent Overlay to Steal PINs From 60 Indian Financial Apps

The post OVHcloud CLI Attack Swaps Release Binaries With a Secret-Stealing Build appeared first on Daily CyberSecurity.

Google and Mandiant uncovered the AOMEI supply chain attack UNC7017 campaign using 5-minute server tampering to drop CROSSROAD and SHINYROAD malware.

Related Posts:

• UAT-6275 Threat Actor Targets CIS Governments Using WinRAR Exploit
• Microsoft and Proofpoint Disrupt CoGUI Phishing Kit, YAM Store, and Iron Man
• Meta, Tech Firms and Police Hit West Africa Scam Centers in Joint Operation That Led to 28 Arrests

The post UNC7017 Executes AOMEI Supply Chain Attack Using Five-Minute Server Tampering appeared first on Daily CyberSecurity.

Our weekly CVE report for Oct 12-18, 2026 tracks 5,499 new flaws and 12 exploited vulnerabilities, with CISA KEV trailing by up to 8 days.

Related Posts:

• Six Exploited Flaws Missing From CISA KEV Lead This Weekly CVE Report
• Weekly CVE Report Tracks 2,652 New Flaws and Seven Exploited Vulnerabilities (Sept. 28 - Oct. 4, 2026)
• Weekly CVE Report: 2,825 New Flaws and 9 Exploited Bugs (Sept 21-27, 2026)

The post This Weekly CVE Report Finds CISA KEV Trailing Daily Cybersecurity by Up to 8 Days appeared first on Daily CyberSecurity.

Update Rank Math SEO PRO to 3.0.124 now. CVE-2026-111862 is a critical supply-chain compromise actively exploited in the wild via embedded malware.

Related Posts:

• Roundcube 1.6.20 and 1.7.5 Fix 20 Security Flaws, Including IMAP Command Injection
• PwnEscape Linux Kernel Flaw CVE-2026-99999 Lets VM Guests Escape to the Host
• CISA Warns of Critical Flaws in dcm4chee Medical Archive and Unpatched EseeCloud IP Cameras

The post Rank Math SEO PRO Supply-Chain Compromise Exploited in the Wild via Version 3.0.123 appeared first on Daily CyberSecurity.

A devastating Ledger supply chain attack has reached Europe. Hackers are embedding malicious LTE modules into hardware wallets to steal cryptocurrency.

Related Posts:

• Malicious npm Packages From Fake Web3 Accelerator Apex Deliver Stealers and Hijack AI Coding Agents
• AI Agent Attack Turns One Exposed Endpoint Into a Full Server Takeover in Under 24 Hours
• Warden Stealer Rust Infostealer Targets AI Coding Agent Tokens and Browser Data

The post Ledger Supply Chain Attack Hits Europe via Tampered Wallets appeared first on Daily CyberSecurity.

A fake Web3 accelerator used malicious npm packages to drop stealers on macOS and Windows and reroute AI coding agent traffic to its servers.

Related Posts:

• Ledger Supply Chain Attack Hits Europe via Tampered Wallets
• AI Agent Attack Turns One Exposed Endpoint Into a Full Server Takeover in Under 24 Hours
• Warden Stealer Rust Infostealer Targets AI Coding Agent Tokens and Browser Data

The post Malicious npm Packages From Fake Web3 Accelerator Apex Deliver Stealers and Hijack AI Coding Agents appeared first on Daily CyberSecurity.

Suspected TraderTraitor hackers used a trojanized Terraform provider to drop FLATROOF and ROOFDECK malware on macOS, Linux, and Windows.

Related Posts:

• UAT-11985 Uses AI-Written Lures and an AitM Phishing Kit Against Taiwan Researchers
• The Devastating Ledger Security Breach
• The Reality of Ransomware Recovery Services

The post Suspected TraderTraitor Hackers Use Trojanized Terraform Provider to Deliver FLATROOF and ROOFDECK appeared first on Daily CyberSecurity.

Socket links GlassWorm VS Code themes to malicious VS Code extensions with 8,000+ installs, including a Coca-Cola theme. See how to check yours.

Related Posts:

• Moroccan Intelligence Deploys Vast Surveillance Panopticon
• DragonForce Backdoor Adds MQTT Fallback to Microsoft Teams TURN Command Channel
• New 2CLoader Malware Delivers Vidar and Remus Infostealers While Dodging Sandboxes

The post Socket Links Popular VS Code Color Themes to the GlassWorm Supply Chain Campaign appeared first on Daily CyberSecurity.

Microsoft details NeedyMantis malware, a modular backdoor that uses DLL sideloading to keep long-term access in telecom, academic, and government networks.

Related Posts:

• UAT-11587 Targets Asian Governments With Antino Backdoor
• PaperCut Zero-Day Attack Hides AdaptixC2 Implant Inside Fake Microsoft Copilot
• New MacSync macOS Infostealer Targets Crypto Wallets

The post Microsoft Details NeedyMantis Malware Used for Long-Term Access in Targeted Intrusions appeared first on Daily CyberSecurity.