Vercel is rolling out DBSC to make stolen session cookies harder to exploit. Learn how the protection works, its hardware requirements and security limits.

The post Vercel Introduces DBSC: How It Protects Against Cookie Theft appeared first on TechRepublic.

Vercel introduced Vercel DBSC session security to tie logins to hardware TPM chips, neutralizing infostealer malware and stolen cookie replay attacks.

Related Posts:

• Microsoft Winds Down Oracle AI Cloud Lease
• OpenAI Funding Valuation Reaches $1.25 Trillion
• Microsoft Overhauls Academic Licensing and Storage Quotas

The post Vercel DBSC Session Security Thwarts Cookie Theft appeared first on Daily CyberSecurity.

PwnEscape (CVE-2026-99999) is a critical Linux kernel VM escape that let a guest run code as root on the host in lab tests. Update your kernel now.

Related Posts:

• Roundcube 1.6.20 and 1.7.5 Fix 20 Security Flaws, Including IMAP Command Injection
• CISA Warns of Critical Flaws in dcm4chee Medical Archive and Unpatched EseeCloud IP Cameras
• Six Linux Kernel Flaws Disclosed With Public PoC Exploits for Root Access and Container Escape

The post PwnEscape Linux Kernel Flaw CVE-2026-99999 Lets VM Guests Escape to the Host appeared first on Daily CyberSecurity.

The Next.js security update fixes two critical unauthenticated remote code execution flaws, including CVE-2026-96889. Upgrade to 16.4.1 or 15.5.28.

Related Posts:

• Rank Math SEO PRO Supply-Chain Compromise Exploited in the Wild via Version 3.0.123
• Critical BeyondTrust Remote Support Vulnerability Exploited in the Wild by ARMORY CASTLE
• Chrome 155 Update Fixes 10 Security Flaws, Including Critical Prerender Bug

The post Next.js Fixes Two Critical Unauthenticated RCE Flaws in Out-of-Band Update appeared first on Daily CyberSecurity.

Details and PoC exploit code are public for CVE-2026-94545, an unauthenticated Next.js RCE in next/og. Upgrade to Next.js 16.3.6 now.

Related Posts:

• Stirling PDF RCE CVE-2026-85714: Details and PoC Publicly Disclosed
• Dell System Update Flaw CVE-2026-86360 Could Allow Root Code Execution
• Zammad Zero-Day Chain CVE-2026-102489 Exploited in the Wild in AI-Driven DIVD Breach

The post PoC Exploit Released for Next.js RCE Flaw CVE-2026-94545 appeared first on Daily CyberSecurity.

Vercel fixed a critical Next.js RCE vulnerability in image generation. Update to patch this Next.js RCE vulnerability and secure your apps.

Related Posts:

• WordPress Stored XSS Details and PoC Publicly Disclosed
• Critical IBM FTM Vulnerabilities Expose Financial Systems to Attack
• Critical HPE ALE Vulnerabilities Allow Complete Server Takeover

The post Critical Next.js RCE Vulnerability Fixed in Version 16.3.6 appeared first on Daily CyberSecurity.