Researchers discovered malicious Packagist themes iOS spyware infecting unpatched iPhones. This spyware targets crypto wallets and steals device data.

Related Posts:

• Pegasus Spyware Hits Serbian Student Activist via Zero-Click iMessage
• Node.js Malware Attacks Target Tech and Finance Sectors
• Python NodeStealer Adds Keylogging and Screen Capture Spyware

The post Packagist Themes iOS Spyware Steals Crypto Wallet Seeds appeared first on Daily CyberSecurity.

Two critical Next.js vulnerabilities, including CVE-2026-75604 (CVSS 9.0), enable unauthenticated remote code execution. Patch to 15.5.24 or 16.3.3 now.

Related Posts:

• GitLab Updates Fix Arbitrary Command Execution Vulnerability
• FreeBSD Patches Eight Kernel Vulnerabilities
• UniFi CVE-2026-77537 (CVSS 10.0): Command Injection Flaws Hit 22 Ubiquiti Products

The post 45M Weekly Downloads at Risk: Next.js CVE-2026-75604 (CVSS 9.0) Enables Unauthenticated Remote Code Execution appeared first on Daily CyberSecurity.

Apache Struts DoS flaws span CVE-2026-73633, CVE-2026-73634, and CVE-2026-73635, plus two JSON plugin bugs. Upgrade to 7.3.0.

Related Posts:

• CVE-2026-19188: Haiwell HMI Gateway Flaw Lets Attackers Execute Arbitrary OS Commands With Root Privileges (CVSS 10.0)
• Linux AF_PACKET Race (03390aa): PoC Exploit Enables Local Privilege Escalation
• Citrix NetScaler Pre-Auth RCE CVE-2026-8452 Gets Public Exploit Code

The post Apache Struts Patches Five Flaws Including Unauthenticated DoS Bugs appeared first on Daily CyberSecurity.

WordPress 7.0.4 patches CVE-2026-65640, an Author-level remote code execution bug on sites using Imagick and Ghostscript. Update now.

Related Posts:

• Zero-Click File Drop Hits Xiaomi ShareMe: PoC Public
• MariaDB Low-Privilege Remote Code Execution Chain: Full Details and PoC Exploit Code Publicly Disclosed
• GitLab Patch Release Fixes 13 Flaws, Including High-Severity XSS Bugs

The post CVE-2026-65640: WordPress 7.0.4 Fixes Remote Code Execution appeared first on Daily CyberSecurity.