A severe DreamHost security breach exposed customer FTP credentials and webmail accounts, prompting urgent password rotations and website file audits.

Related Posts:

• DigiCert Data Exposure Reveals Customer Contact Records and Identity Documents
• NVIDIA Brev Security Incident Prompts SSH Key Rotation
• Amadeus Airline Data Breach Hits Major Global Carriers

The post DreamHost Security Breach Exposes FTP and Webmail Data appeared first on Daily CyberSecurity.

SnappyMail RCE chain disclosed with a public proof-of-concept exploit. The auth bypass hit dev builds only; avoid master builds from Oct 22-Nov 4.

Related Posts:

• Rails 8.0.5.2 and 8.1.4.1 Fix 21 Security Flaws, Including Critical Active Storage File Write Bug
• Airbyte Vulnerability Exploited in the Wild Lets Attackers Run Code in Connector Builder
• PoC Exploit and Technical Details Published for Puppet Server RCE Flaw CVE-2026-115731 (CVSS 9.4)

The post SnappyMail Remote Code Execution Chain Disclosed With Public PoC Exploit Code appeared first on Daily CyberSecurity.

A Google privacy policy change adds an exception to its Gmail ad pledge via Personal Intelligence. See how to turn it off.

Related Posts:

• iOS 27.1 iPhone Duo Release Targets Foldable Hardware
• OpenAI Cuts Internet Access for Frontier Model Training
• NS2JB Brings a Switch 2 Jailbreak With Codex Help

The post Google Privacy Policy Change Raises Gmail Ad Concerns appeared first on Daily CyberSecurity.

Fortinet security updates for FortiOS, FortiManager and FortiAnalyzer fix critical AI-found flaws. Advisories follow November 10. Patch now.

Related Posts:

• cPanel Patches PHP2Shell Flaws and WP Toolkit Bug Affecting Shared Hosting Servers
• QNAP Warns PHP2Shell Flaws Hit QTS and QuTS hero, Urges Users to Take NAS Offline
• Portainer Fixes Two Critical Flaws Letting Standard Users Take Over Docker Hosts

The post Fortinet Urges Fast Upgrades as AI-Found Flaws Hit FortiOS, FortiManager and FortiAnalyzer appeared first on Daily CyberSecurity.

A Roundcube security update fixes 20 flaws, including IMAP command injection and header injection. Upgrade to 1.6.20 or 1.7.5 now.

Related Posts:

• PwnEscape Linux Kernel Flaw CVE-2026-99999 Lets VM Guests Escape to the Host
• CISA Warns of Critical Flaws in dcm4chee Medical Archive and Unpatched EseeCloud IP Cameras
• Six Linux Kernel Flaws Disclosed With Public PoC Exploits for Root Access and Container Escape

The post Roundcube 1.6.20 and 1.7.5 Fix 20 Security Flaws, Including IMAP Command Injection appeared first on Daily CyberSecurity.

Weekly CVE report for Sept 28 - Oct 4, 2026: 2,652 new CVEs and seven exploited vulnerabilities in Cisco, FortiMail, MediaWiki and Citrix.

Related Posts:

• Weekly CVE Report: 2,825 New Flaws and 9 Exploited Bugs (Sept 21-27, 2026)
• Weekly CVE Report: 4,378 New Flaws and 10 Exploited Bugs
• Daily Cybersecurity Flagged 9 Exploited Flaws Before CISA KEV

The post Weekly CVE Report Tracks 2,652 New Flaws and Seven Exploited Vulnerabilities (Sept. 28 – Oct. 4, 2026) appeared first on Daily CyberSecurity.

Attackers exploit CVE-2026-104286, a 9.8 FortiMail vulnerability allowing unauthenticated file writes. CISA adds it to KEV. Apply the workaround.

Related Posts:

• Stirling PDF RCE CVE-2026-85714: Details and PoC Publicly Disclosed
• Dell System Update Flaw CVE-2026-86360 Could Allow Root Code Execution
• Zammad Zero-Day Chain CVE-2026-102489 Exploited in the Wild in AI-Driven DIVD Breach

The post FortiMail Path Traversal Flaw CVE-2026-104286 Exploited in the Wild appeared first on Daily CyberSecurity.