An ASUS vulnerability (CVE-2026-19397) lets a nearby attacker take over a host, while an Armoury Crate flaw leaks NTLM hashes. Update now.

Related Posts:

• September 2026 SAP Security Patch Day Fixes Critical Flaws
• Public PoC Disclosed for ZcopyReaper Linux Vulnerability (CVE-2026-43502)
• SonicWall SMA 1000 Vulnerabilities Exploited in Wild (PoC)

The post ASUS Patches Control Center Express and Armoury Crate Flaws appeared first on Daily CyberSecurity.

Pegasus spyware infected a Serbian activist through a zero-click iMessage exploit, part of Serbia's largest spyware wave. Update iOS now.

Related Posts:

• Node.js Malware Attacks Target Tech and Finance Sectors
• Python NodeStealer Adds Keylogging and Screen Capture Spyware
• Packagist Themes iOS Spyware Steals Crypto Wallet Seeds

The post Pegasus Spyware Hits Serbian Student Activist via Zero-Click iMessage appeared first on Daily CyberSecurity.

An ASUS Control Center vulnerability, CVE-2026-75754 (CVSS 10), gives unauthenticated attackers a root shell. Update to v3.1.0.9 now.

Related Posts:

• CVE-2026-86218 (CVSS 10): N-central Pre-Auth RCE Exploited in the Wild
• MikroTrick PoC: RouterOS Admin Rights Exploited In Wild
• AI Agent Coordination: The Unprecedented OpenAI Breakout

The post CVE-2026-75754 (CVSS 10): ASUS Control Center Root RCE appeared first on Daily CyberSecurity.

A Virtualizor supply-chain attack used a 33-hour BGP hijack to deliver malicious updates, planting root backdoors on VPS hosts. Back up your data now.

Related Posts:

• HOOKEDGE Malware: BlueDelta Hits EU Diplomatic Targets
• Dark Caracal Deploys New GoCaracal Malware Framework
• Cambodia Malware Campaign Uses PNG Files to Deliver SparkRAT

The post Virtualizor Supply-Chain Attack: BGP Hijack Plants Backdoors appeared first on Daily CyberSecurity.

A Microsoft Defender false alarm wrongly warns that antivirus is turned off after the latest update. Defender still works, and a fix is coming.

Related Posts:

• Windows 11 Relieves OneDrive Nags
• Windows 11 KB5120998 Bugs Emerge
• Windows 11 26H2 Enters Release Preview Channel

The post Microsoft Defender False Alarm: “Antivirus Is Turned Off” appeared first on Daily CyberSecurity.

SilkParasite APT ran China-nexus cyberespionage across Central Asia, using 7 custom RATs, DLL sideloading, and AI-assisted malware.

Related Posts:

• FBI Seizes QScan and QTRouter Platforms Run by China State Hackers
• Operation CameraSwarm: 14,500 Dahua Cameras Compromised Across Ukraine and Russia
• Core Werewolf Deploys New CoreRAT Malware Against Russian Targets

The post SilkParasite APT Hits Central Asian Governments With 7 RATs appeared first on Daily CyberSecurity.

Seqrite links Operation QUICSILVER to a China-nexus actor deploying the QUICAgent Go backdoor against Myanmar government targets via a VHD lure.

Related Posts:

• Cisco Talos Exposes UAT-10147 Agentic AI Attacks
• Operation ASTERIX: Crypto Scam Used AI and Fake Wallets
• arrayref Rust Crate Hijacked in Supply Chain Attack With DPRK Infrastructure Overlap

The post Operation QUICSILVER Targets Myanmar Government With Go Backdoor appeared first on Daily CyberSecurity.

Google is giving eligible US college students a free year of Google AI Pro, worth $19.99 a month, including 5TB storage and 4x Gemini usage limits.

Related Posts:

• Telegram Applies for .gram Domain to Give Every User Their Own TLD
• GitHub Outage Postmortem: Retry Storm and Copilot Auth Overload Explained
• OpenAI Astra Security Model: Pausing Development for Safety

The post Google Offers US College Students a Free Year of Google AI Pro appeared first on Daily CyberSecurity.

Microsoft released a patch for the Microsoft Defender scan failure issue. Learn how a flawed update stopped threat services and how to fix this severe error.

Related Posts:

• Microsoft Removes Windows 11 Drag Tray
• Microsoft Removes WMIC from Default Windows 11 Installs
• Windows 11 WinRE Gains Automatic Wi-Fi Reconnection for Cloud Rebuild

The post Microsoft Defender Scan Failure: A Flawed Update appeared first on Daily CyberSecurity.

CVE-2026-71479, a CVSS 9.1 integer overflow in New API billing, is exploited in the wild to self-credit balances. Update to rc.18 now.

Related Posts:

• CVE-2026-71290: Apache HttpClient Flaw Lets Attackers Intercept and Modify Traffic (CVSS 9.1)
• PoC Discloses for CVE-2026-64849: watchTowr Sees Attacks on MLflow SSRF
• CVE-2026-75045: Unauthenticated Attacker Could Download YouTrack Database Backups

The post CVE-2026-71479: New API Integer Overflow Exploited in the Wild appeared first on Daily CyberSecurity.

Apple has issued mercenary spyware attack warnings to users across 110+ countries, urging immediate security action and device hardening.

Related Posts:

• Gunra Ransomware Hits Critical Infrastructure, CISA Warns
• ChainDrop npm Worm Hits 400+ Packages via Blockchain C2
• Fake Zoom Installer Drops Overlord RAT on macOS

The post Apple Sends Mercenary Spyware Alerts to Users in 110+ Countries appeared first on Daily CyberSecurity.

Lazarus exploited a Windows zero-day (CVE-2026-68820) in Operation Dream Job to hit defense firms with fake job offers and a new backdoor.

Related Posts:

• UNC6671 Vishing Extortion Rebrands Across 5 Brands
• Greatness PhaaS Platform Steals Microsoft 365 Tokens Past MFA
• SMOKE#SCREEN Campaign Abuses ScreenConnect RMM for Stealthy Remote Access

The post Lazarus Exploits Windows Zero-Day in Operation Dream Job Attacks appeared first on Daily CyberSecurity.

Cisco disclosed seven ClamAV vulnerabilities that let a remote attacker crash scanning via crafted files. Details are public. Patch now.

Related Posts:

• CVE-2026-27912: PoC Released for SYSTEM Privilege Flaw
• CVE-2026-58231 (CVSS 10.0) and Code Injection RCE Flaws Top SAP August 2026 Patch Day
• Windows PnP Attack Chain Turns a USB Plug Into SYSTEM: Details and PoC Now Public

The post Multiple ClamAV Flaws Let Remote Attackers Cause DoS appeared first on Daily CyberSecurity.