StyleSmuggler exploitation of CVE-2026-75650 drops the PSK Agent RAT and a PHP webshell on Magento stores. See how to detect and respond.

Related Posts:

• Hugging Face Malware Campaign Infects AI GPU Servers
• Google Disrupts Videostrong XCPE Botnet on Android TV
• NIK C2 Framework Integrates OpenAI API to Analyze Stolen Data in Live Attacks

The post PSK Agent RAT Hits Magento Stores Through StyleSmuggler Exploitation appeared first on Daily CyberSecurity.

An exposed server reveals AI-assisted exploitation behind a PaperCut RCE campaign, a second XML-RPC attack path, and 45 live network pivots.

Related Posts:

• SafePay Ransomware Hits 600 Victims as FBI, CISA and Allies Issue Joint Warning
• LiteLLM 1.107.0 Compromised to Steal Cloud, AI Tool and Developer Credentials
• 333 Tor Exit Nodes Hijacked by Ebury Malware for SSH Attacks

The post Exposed Attacker Server Reveals AI Agent Toolkit and a Second PaperCut RCE Path appeared first on Daily CyberSecurity.

Two Citrix NetScaler zero-day RCE flaws are under active exploitation. Citrix confirmed CVE-2026-88771 and CVE-2026-88772 and shipped patches. Update now.

Related Posts:

• Linux Container Escape Flaw Details and PoC Disclosed
• CVE-2026-43786: macOS CoreServices Vulnerability PoC Disclosed
• Critical ViewSonic vCast Vulnerabilities Enable Device Takeover

The post Citrix NetScaler Zero-Day RCE Flaws Exploited, Patches Released appeared first on Daily CyberSecurity.

New Kapibala WordPress exploitation attacks steal records. GreyNoise warns that Kapibala WordPress exploitation hits governments.

Related Posts:

• Operation RapidRust APT36 Campaign Targets Governments
• NightEagle APT GhostContainer Attacks Target Russia
• Google Undercover Analyst Infiltrates Hacking Gang

The post Kapibala WordPress Exploitation Attacks Hit Governments appeared first on Daily CyberSecurity.