Sonatype uncovers the PolinRider loader in 12 releases across 10 hijacked packages. See how the npm PolinRider loader uses Ethereum to fetch malware.

Related Posts:

• Trojanized Inno Setup Installers Deliver Proxyware and Compute Hijackers
• LuaJIT XLoader Infostealer Spreads via Fake Orders
• BITTER PapRAT Malware Targets South Asian Organizations

The post PolinRider Loader Hits 10 Hijacked npm Packages Using Ethereum Dead-Drop Resolver appeared first on Daily CyberSecurity.

Technical details and PoC exploit code for the critical Penpot file takeover flaw are now public. Upgrade to version 2.18.0 now.

Related Posts:

• Attackers Exploit SonicWall SonicOS SSLVPN Flaw CVE-2026-19868 in the Wild
• Veeam Releases Kernel Updates to Fix Critical CVE-2026-98432 Flaw Across Backup Appliances
• JetBrains Patches 61 Flaws Across Hub, Datalore, YouTrack, and IntelliJ IDEA

The post Penpot File Takeover Flaw Details and PoC Exploit Publicly Disclosed appeared first on Daily CyberSecurity.

Attackers exploit the SonicWall SonicOS SSLVPN flaw CVE-2026-19868 in the wild. Update Gen7 and Gen8 firewalls now to patch CVE-2026-107155 and 6 bugs.

Related Posts:

• Penpot File Takeover Flaw Details and PoC Exploit Publicly Disclosed
• Veeam Releases Kernel Updates to Fix Critical CVE-2026-98432 Flaw Across Backup Appliances
• JetBrains Patches 61 Flaws Across Hub, Datalore, YouTrack, and IntelliJ IDEA

The post Attackers Exploit SonicWall SonicOS SSLVPN Flaw CVE-2026-19868 in the Wild appeared first on Daily CyberSecurity.

Update your Veeam Software Appliance and Backup & Replication servers now to fix CVE-2026-98432, a critical 9.8 CVSS Linux kernel flaw.

Related Posts:

• Penpot File Takeover Flaw Details and PoC Exploit Publicly Disclosed
• Attackers Exploit SonicWall SonicOS SSLVPN Flaw CVE-2026-19868 in the Wild
• JetBrains Patches 61 Flaws Across Hub, Datalore, YouTrack, and IntelliJ IDEA

The post Veeam Releases Kernel Updates to Fix Critical CVE-2026-98432 Flaw Across Backup Appliances appeared first on Daily CyberSecurity.

Toronto, Canada, 6th November 2026, CyberNewswire

Related Posts:

• OpenMatter Network Positions Decentralized Computing as an Alternative to Data Centers for AI
• The Sandbox Fights Back: Joe Security Launches Adaptive Detonation
• Cogent Security Makes the Fortune Cyber 60 for a Second Year, With a Plan to Run Cyber Defense Like a Factory

The post Insignary Releases Free Insignary-Chk Tool to Detect PHP2Shell and Node2Shell Exposure appeared first on Daily CyberSecurity.

Install the latest JetBrains security updates now to patch CVE-2026-123294, CVE-2026-123279, and 59 other flaws across Hub, Datalore, and IntelliJ IDEA.

Related Posts:

• Penpot File Takeover Flaw Details and PoC Exploit Publicly Disclosed
• Attackers Exploit SonicWall SonicOS SSLVPN Flaw CVE-2026-19868 in the Wild
• Veeam Releases Kernel Updates to Fix Critical CVE-2026-98432 Flaw Across Backup Appliances

The post JetBrains Patches 61 Flaws Across Hub, Datalore, YouTrack, and IntelliJ IDEA appeared first on Daily CyberSecurity.

Microsoft is developing the Windows 11 27H2 update, focusing on core system stability, new wallpapers, and 64-bit speed via Intel APX register expansion.

Related Posts:

• Windows 11 Cloud Rebuild Delivers Fresh System Recovery
• Windows 11 Android Apps Return via Taskbar Search
• Windows 11 Speed Test Tool Arrives as Native Utility

The post Windows 11 27H2 Update Brings Intel APX Boost appeared first on Daily CyberSecurity.

Microsoft announced major Microsoft 365 Education changes, retiring the free Office 365 A1 plan and 100TB shared storage pools starting in 2028.

Related Posts:

• Vercel DBSC Session Security Thwarts Cookie Theft
• Apple Begins iCloud Public Link Scanning in iOS 27.3
• Discord Rust Desktop Client Ditches Electron for GPUI

The post Microsoft Overhauls Academic Licensing and Storage Quotas appeared first on Daily CyberSecurity.

A severe DreamHost security breach exposed customer FTP credentials and webmail accounts, prompting urgent password rotations and website file audits.

Related Posts:

• DigiCert Data Exposure Reveals Customer Contact Records and Identity Documents
• NVIDIA Brev Security Incident Prompts SSH Key Rotation
• Amadeus Airline Data Breach Hits Major Global Carriers

The post DreamHost Security Breach Exposes FTP and Webmail Data appeared first on Daily CyberSecurity.

Check Point uncovered a ChatGPT Lockdown Mode bypass in HTML previews, enabling zero-click data exfiltration and phishing before OpenAI deployed a patch.

Related Posts:

• Penpot File Takeover Flaw Details and PoC Exploit Publicly Disclosed
• Attackers Exploit SonicWall SonicOS SSLVPN Flaw CVE-2026-19868 in the Wild
• Veeam Releases Kernel Updates to Fix Critical CVE-2026-98432 Flaw Across Backup Appliances

The post ChatGPT Lockdown Mode Bypass Exposes Chat Data appeared first on Daily CyberSecurity.

Vercel introduced Vercel DBSC session security to tie logins to hardware TPM chips, neutralizing infostealer malware and stolen cookie replay attacks.

Related Posts:

• Microsoft Overhauls Academic Licensing and Storage Quotas
• Apple Begins iCloud Public Link Scanning in iOS 27.3
• Discord Rust Desktop Client Ditches Electron for GPUI

The post Vercel DBSC Session Security Thwarts Cookie Theft appeared first on Daily CyberSecurity.

A French blood bank cyberattack targeted EFS plasma refrigeration units, altering temperature thresholds before emergency alarms prevented product loss.

Related Posts:

• APT29 Uses Watering Holes and Plerdy Tracker to Deploy Mobile Exploits
• Suspected MuddyWater SimpleHelp Campaign Targets Israeli Organizations With Tax Lures
• mSecure Security Notification Prompts Password Resets

The post French Blood Bank Cyberattack Hits Plasma Storage appeared first on Daily CyberSecurity.

Microsoft exposes a campaign using trojanized installers. See how Inno Setup trojanized installers silently deploy WorldProxyPool, BOINC, and adware.

Related Posts:

• PolinRider Loader Hits 10 Hijacked npm Packages Using Ethereum Dead-Drop Resolver
• LuaJIT XLoader Infostealer Spreads via Fake Orders
• BITTER PapRAT Malware Targets South Asian Organizations

The post Trojanized Inno Setup Installers Deliver Proxyware and Compute Hijackers appeared first on Daily CyberSecurity.

Apple announced automated iCloud public link scanning starting in iOS 27.3, inspecting shared files and disabling end-to-end encryption on public links.

Related Posts:

• Microsoft Overhauls Academic Licensing and Storage Quotas
• Vercel DBSC Session Security Thwarts Cookie Theft
• Discord Rust Desktop Client Ditches Electron for GPUI

The post Apple Begins iCloud Public Link Scanning in iOS 27.3 appeared first on Daily CyberSecurity.

Discord is rebuilding its Discord Rust desktop client with GPUI, ditching Electron to slash memory consumption and share native code with mobile.

Related Posts:

• Microsoft Overhauls Academic Licensing and Storage Quotas
• Vercel DBSC Session Security Thwarts Cookie Theft
• Apple Begins iCloud Public Link Scanning in iOS 27.3

The post Discord Rust Desktop Client Ditches Electron for GPUI appeared first on Daily CyberSecurity.

Microsoft patched Windows Paint RCE vulnerability CVE-2026-83844 with an 8.1 CVSS score. Update now to block potential remote code execution attacks.

Related Posts:

• Penpot File Takeover Flaw Details and PoC Exploit Publicly Disclosed
• Attackers Exploit SonicWall SonicOS SSLVPN Flaw CVE-2026-19868 in the Wild
• Veeam Releases Kernel Updates to Fix Critical CVE-2026-98432 Flaw Across Backup Appliances

The post Windows Paint RCE CVE-2026-83844 Affects Hundreds of Millions appeared first on Daily CyberSecurity.

OpenAI GPT-6 Cyber advances cybersecurity research by finding software flaws and strictly obeying mission boundaries.

Related Posts:

• Microsoft Overhauls Academic Licensing and Storage Quotas
• Vercel DBSC Session Security Thwarts Cookie Theft
• Apple Begins iCloud Public Link Scanning in iOS 27.3

The post OpenAI GPT-6 Cyber: New Era in Security Research appeared first on Daily CyberSecurity.

Google is testing Chrome tab scrolling in Canary, letting users navigate crowded tabs via mouse wheels, gestures, and dedicated scroll arrows.

Related Posts:

• Microsoft Overhauls Academic Licensing and Storage Quotas
• Vercel DBSC Session Security Thwarts Cookie Theft
• Apple Begins iCloud Public Link Scanning in iOS 27.3

The post Chrome Tab Scrolling Returns to Canary Builds appeared first on Daily CyberSecurity.

A DigiCert data exposure revealed customer records and IDs after an internal business system breach. Learn what was exposed and how it was fixed.

Related Posts:

• DreamHost Security Breach Exposes FTP and Webmail Data
• NVIDIA Brev Security Incident Prompts SSH Key Rotation
• Amadeus Airline Data Breach Hits Major Global Carriers

The post DigiCert Data Exposure Reveals Customer Contact Records and Identity Documents appeared first on Daily CyberSecurity.

CISA warns of critical Subnet Solutions PowerSYSTEM Center flaws CVE-2026-63017 and CVE-2026-63774 that allow authorization bypass and SQL injection.

Related Posts:

• Penpot File Takeover Flaw Details and PoC Exploit Publicly Disclosed
• Attackers Exploit SonicWall SonicOS SSLVPN Flaw CVE-2026-19868 in the Wild
• Veeam Releases Kernel Updates to Fix Critical CVE-2026-98432 Flaw Across Backup Appliances

The post CISA Warns of Critical Flaws in Subnet Solutions PowerSYSTEM Center appeared first on Daily CyberSecurity.