Apple announced automated iCloud public link scanning starting in iOS 27.3, inspecting shared files and disabling end-to-end encryption on public links.

Related Posts:

• Microsoft Overhauls Academic Licensing and Storage Quotas
• Vercel DBSC Session Security Thwarts Cookie Theft
• Discord Rust Desktop Client Ditches Electron for GPUI

The post Apple Begins iCloud Public Link Scanning in iOS 27.3 appeared first on Daily CyberSecurity.

Canonical fixes LXD vulnerability CVE-2026-112816 (CVSS 10) in LXD and MicroCloud, letting attackers impersonate trusted TLS clients. Update now.

Related Posts:

• Critical MediaTek Vulnerabilities Patched in Chipsets
• Public PoC Exploit Disclosed for Linux Kernel Bonding Vulnerability
• Critical FreePBX Vulnerabilities Patched in User Manager

The post LXD Vulnerability CVE-2026-112816 (CVSS 10) Lets Attackers Impersonate Trusted Clients appeared first on Daily CyberSecurity.

Palo Alto confirms PAN-OS Brotli vulnerability CVE-2026-111497, a CVSS 9.2 buffer overflow in PAN-OS 12.2, 12.1 and 11.2. Install the hotfixes now.

Related Posts:

• Apple iOS 27.2 Update Fixes 160 Security Flaws
• CISA Adds PHP2Shell to KEV as Confirmed RCE Attacks and Suspected DPRK Scanning Surface
• Apple Backports Fix for Exploited CoreGraphics Zero-Day CVE-2026-86950 to Older iPhones

The post Palo Alto Networks Confirms Critical Brotli Flaw CVE-2026-111497 Affects PAN-OS appeared first on Daily CyberSecurity.

A devastating GMO Desktop Cloud breach compromised over 26,000 servers, exposing FX trading accounts and prompting a full infrastructure shutdown.

Related Posts:

• Gheist Campaign Abuses Stolen GitHub Tokens Across 850 Accounts to Steal Secrets
• Exposed Cairn AI Panels Reveal Autonomous Hacking Against Over 1,100 Targets
• Suspected Chinese Operator Uses ARTEX AI Framework in Global Hacking Campaign

The post GMO Desktop Cloud Breach Exposes 26,000 FX Servers appeared first on Daily CyberSecurity.

Our weekly CVE report for Oct 19-25, 2026 tracks 4,222 new CVEs and 12 exploited vulnerabilities, including PHP2Shell flaws not yet in CISA KEV.

Related Posts:

• This Weekly CVE Report Finds CISA KEV Trailing Daily Cybersecurity by Up to 8 Days
• Six Exploited Flaws Missing From CISA KEV Lead This Weekly CVE Report
• Weekly CVE Report Tracks 2,652 New Flaws and Seven Exploited Vulnerabilities (Sept. 28 - Oct. 4, 2026)

The post Weekly CVE Report Flags PHP2Shell and FortiSIEM Attacks Still Missing From CISA KEV appeared first on Daily CyberSecurity.

A PingCAP data breach exposed customer records and source code. Learn how the TiDB Cloud security incident happened and how to protect your account.

Related Posts:

• Keystone Wallet Data Breach Exposes Customer Orders
• Smart TV ACR Tracking Study Finds Failed Opt-Outs and 57 Million Exposed Viewing Records
• CAPCOM ID Data Breach Exposes 11.77 Million Records

The post PingCAP Data Breach Exposes TiDB Cloud Customer Records and Source Code appeared first on Daily CyberSecurity.

Arista says VeloCloud Orchestrator vulnerability CVE-2026-114625, a CVSS 9.9 SQL injection, is exploited in the wild. Upgrade on-prem VCO now.

Related Posts:

• PHP Warns of New Session Upload Progress Flaw CVE-2026-115560, Urges Mitigation
• LiteSpeed Cache Flaws Expose 7 Million WordPress Sites to Stored XSS
• Oracle Issues Java Security Alert to Distrust Compromised eMudhra Certificates

The post Arista Warns VeloCloud Orchestrator Flaw CVE-2026-114625 Is Exploited in the Wild appeared first on Daily CyberSecurity.

An OVHcloud CLI attack swapped GitHub release files with a secret-stealing binary. Learn which versions are hit in this supply chain attack.

Related Posts:

• Qilin, Inc and Settra Ransomware Gangs Exploit PAN-OS Flaw CVE-2026-0257 for VPN Access
• AdFection Spyware Attack Targets Al Jazeera Devices
• GhostBat RAT Uses Transparent Overlay to Steal PINs From 60 Indian Financial Apps

The post OVHcloud CLI Attack Swaps Release Binaries With a Secret-Stealing Build appeared first on Daily CyberSecurity.

CISA warns of dcm4chee vulnerabilities that expose patient data, plus unpatched EseeCloud cameras with hard-coded credentials (CVE-2026-107617).

Related Posts:

• Roundcube 1.6.20 and 1.7.5 Fix 20 Security Flaws, Including IMAP Command Injection
• PwnEscape Linux Kernel Flaw CVE-2026-99999 Lets VM Guests Escape to the Host
• Six Linux Kernel Flaws Disclosed With Public PoC Exploits for Root Access and Container Escape

The post CISA Warns of Critical Flaws in dcm4chee Medical Archive and Unpatched EseeCloud IP Cameras appeared first on Daily CyberSecurity.

Attackers are actively exploiting CVE-2026-110447 (CVSS 9.2), a critical Nextcloud Collabora Online RCE flaw in richdocumentscode, to deploy PHP webshells.

Related Posts:

• Public PoC Exploit Disclosed for CVSS 10.0 GitLab Remote Code Execution Flaw CVE-2026-97229 Affecting 25,766 Hosts
• Public PoC Exploit Code and Technical Details Disclosed for CVE-2026-74580 Linux vhost Vulnerability (Vghost)
• CERT/CC Warns of Critical CVE-2026-110005 OS Command Injection in Komodo Periphery Agent

The post Critical Nextcloud Collabora Online Flaw CVE-2026-110447 Actively Exploited in the Wild to Deploy Webshells appeared first on Daily CyberSecurity.

A recent Yandex Cloud drone strike in Vladimir caused severe service outages across Russia, disrupting Yandex Pay, search, and enterprise cloud operations.

Related Posts:

• Anthropic Fortifies Claude AI Against Model Distillation
• Bitwarden App Store License Changes to Commercial Model
• Firefox 158.0 Released: Default JPEG XL Support

The post Yandex Cloud Drone Strike Causes Widespread Service Outages appeared first on Daily CyberSecurity.

Explore the devastating SoftBank IDCF Cloud ransomware attack. Read the hackers' humiliating note revealing the massive East Japan Region 1 outage.

Related Posts:

• The Devastating Ledger Security Breach
• The Reality of Ransomware Recovery Services
• CrowdStrike Links South Korean Bank Breaches to Chinese AI Pentesting Tool ARTEX

The post SoftBank IDCF Cloud Ransomware Attack Exposed by Hackers appeared first on Daily CyberSecurity.

A CVSS 10 GeoServer Cloud vulnerability in a GitHub Actions workflow could have leaked repository secrets. No abuse found, and the workflow is gone.

Related Posts:

• Critical Apache PLC4X Flaw Lets Attackers Hijack OPC UA Connections to PLCs
• TeamViewer Fixes Five High-Severity Flaws in Full Client and Host
• Electron Fixes Five High-Severity Sandbox and Isolation Vulnerabilities

The post GeoServer Cloud Fixes CVSS 10 GitHub Actions Flaw That Exposed Repository Secrets appeared first on Daily CyberSecurity.

An exploited VeloCloud vulnerability with a 10.0 CVSS score hits Arista appliances. Patch the critical VeloCloud vulnerability to stop active attacks.

Related Posts:

• Actively Exploited Veeam Agent Vulnerability PoC Disclosed
• D-Link DIR-822A Vulnerabilities Details and PoC Disclosed
• Pega Platform SAML Authentication Bypass: Critical 9.5 Flaw Patched

The post Exploited VeloCloud Vulnerability CVE-2026-93952 Hits 10 appeared first on Daily CyberSecurity.