Technical details and PoC exploit code for the critical Penpot file takeover flaw are now public. Upgrade to version 2.18.0 now.

Related Posts:

• Attackers Exploit SonicWall SonicOS SSLVPN Flaw CVE-2026-19868 in the Wild
• Veeam Releases Kernel Updates to Fix Critical CVE-2026-98432 Flaw Across Backup Appliances
• JetBrains Patches 61 Flaws Across Hub, Datalore, YouTrack, and IntelliJ IDEA

The post Penpot File Takeover Flaw Details and PoC Exploit Publicly Disclosed appeared first on Daily CyberSecurity.

The OpenAI Dot SMS feature enables ChatGPT Pro subscribers to control autonomous AI agents directly through iMessage and RCS texting.

Related Posts:

• Claude CarPlay Update Adds Hands-Free AI Voice
• Reddit Mandatory Login Tests Expand to Curb AI Scraping
• GitHub Code Activity Surges Amid AI Agent Adoption

The post OpenAI Dot SMS Feature Launches for ChatGPT Pro appeared first on Daily CyberSecurity.

Kaspersky uncovered the BlackX UEFI bootkit APT41 campaign bypassing Secure Boot via Baton Drop to spy on Central Asian diplomatic agencies.

Related Posts:

• APT28 Uses Hookedge Backdoor to Spy on Naval Shipbuilder and Defense Firms in Two NATO Countries
• China-Linked Operator Used AI Agents to Breach 48 Government and Corporate Targets Across Asia
• Lazarus Operation FlashHole Abuses CrossWeb EX and GitHub to Spy on South Korean Firms

The post APT41 Deploys BlackX UEFI Bootkit Against Central Asian Diplomatic Agencies appeared first on Daily CyberSecurity.

Following the Secure Boot certificate expiration, Windows PCs transition to UEFI CA 2023 while booting normally. Learn how to verify your device.

Related Posts:

• Windows Server 2025 Gains Quick Machine Recovery
• Windows 11 Accelerated Launch Speeds Up Edge Startup
• Windows 11 Update Triggers Xbox Live Error 0x87DD0005

The post Secure Boot Certificate Expiration: Windows PCA 2011 Retires appeared first on Daily CyberSecurity.

Sam Altman confirms an OpenAI humanoid robot is coming, with a demo due in 2027. The real hurdle is building the robot's brain.

Related Posts:

• TP-Link Moves Router Assembly to the United States
• Google DMA Compliance Under EU Review After Fine
• ChatGPT Chrome Extension Now Reads Your Open Tabs

The post OpenAI Humanoid Robot Confirmed by Sam Altman appeared first on Daily CyberSecurity.

Discover the new Excel Copilot interactive canvas. Microsoft brings natural language reports, skill building, and advanced data cleaning to Microsoft 365.

Related Posts:

• Google Play AI Apps Revolutionize Android Publishing
• Google Gemini 4 Argon Model Officially Launches
• Codex CLI Daemon Autostart Sparks Developer Backlash

The post Excel Copilot AI Gains Interactive Canvas Feature appeared first on Daily CyberSecurity.

PoC and technical details for CVE-2026-103572, an 8.8-severity Visual Studio Copilot RCE and SSMS flaw, are now public. Patch your IDE immediately.

Related Posts:

• Public PoC Exploit Disclosed for CVSS 10.0 GitLab Remote Code Execution Flaw CVE-2026-97229 Affecting 25,766 Hosts
• Critical Nextcloud Collabora Online Flaw CVE-2026-110447 Actively Exploited in the Wild to Deploy Webshells
• Public PoC Exploit Code and Technical Details Disclosed for CVE-2026-74580 Linux vhost Vulnerability (Vghost)

The post Public Proof-of-Concept Disclosed for CVE-2026-103572 Remote Code Execution in Visual Studio Copilot and SSMS appeared first on Daily CyberSecurity.

Discover how Windows Hybrid Intelligence transforms the search menu into an intent-driven AI hub, leveraging MXC sandboxes for unmatched local privacy.

Related Posts:

• Windows 11 26H2 Update Arrives With a Single Restart
• Optimizing Windows 11 by Disabling 8.3 Short File Names
• Windows 11 Enhances Mouse Visibility and Customization

The post Windows Hybrid Intelligence and the New AI Search Menu appeared first on Daily CyberSecurity.

Attackers exploit Citrix NetScaler zero-day CVE-2026-88772 for root access, then hide WHIPSHOT web shells and a SLAPSHOT tunneler. Patch now.

Related Posts:

• China-Aligned TA419 Credential Phishing Hits AI Experts
• Phishing Abuses RMM Tools for Persistent Network Access
• Russia's Star Blizzard Scales Up Phishing With RedFlick to Deliver CosmicPulse Backdoor

The post Attackers Exploit Citrix NetScaler Zero-Day CVE-2026-88772 to Plant Hidden Web Shells appeared first on Daily CyberSecurity.

The America.gov AI chatbot launches with Gemini and Grok, promising simple answers now and tasks like passports next year.

Related Posts:

• OpenAI DevDay 2026: Elevating the AI Subscription Paradigm
• Firefox Redesign Compact Mode Returns With AI Off Switch
• OpenAI Dots AI Assistant Gets Its Own Cloud Computer

The post America.gov AI Chatbot Launches With Gemini and Grok appeared first on Daily CyberSecurity.

Discover the new Microsoft Copilot app. Explore Home, Code, and Autopilot tabs, proactive AI with Microsoft IQ, and dual-track billing for enterprises.

Related Posts:

• OpenAI to Unveil Project 'O' at DevDay
• GitHub Blocks New Outlook and Hotmail Sign-Ups
• KB5002907 Update Causes Unexpected Office Deletions

The post Microsoft Unveils the Next Generation of Copilot appeared first on Daily CyberSecurity.

OpenAI is building a personal AI agent to counter SpaceXAI's Grok Bot and Meta's Muse, hiring the OpenClaw creator to lead its Codex Bot effort.

Related Posts:

• Amazon Blocks Meta Muse AI Assistant
• X Content Farm Lawsuit Targets Engagement Fraud
• DPC Imposes Massive GDPR Penalty on Google

The post OpenAI Races to Counter Grok Bot and Meta’s Muse appeared first on Daily CyberSecurity.

A public PoC exploit, cups2root, chains a CUPS privilege escalation to take lpadmin users to root. No CVE or patch yet. See the mechanism and mitigations.

Related Posts:

• Actively Exploited Veeam Agent Vulnerability PoC Disclosed
• Exploited VeloCloud Vulnerability CVE-2026-93952 Hits 10
• D-Link DIR-822A Vulnerabilities Details and PoC Disclosed

The post cups2root: Public PoC Exploit Escalates lpadmin to Root on CUPS appeared first on Daily CyberSecurity.