Apple announced automated iCloud public link scanning starting in iOS 27.3, inspecting shared files and disabling end-to-end encryption on public links.
Related Posts:
The post Apple Begins iCloud Public Link Scanning in iOS 27.3 appeared first on Daily CyberSecurity.
Canonical fixes LXD vulnerability CVE-2026-112816 (CVSS 10) in LXD and MicroCloud, letting attackers impersonate trusted TLS clients. Update now.
Related Posts:
The post LXD Vulnerability CVE-2026-112816 (CVSS 10) Lets Attackers Impersonate Trusted Clients appeared first on Daily CyberSecurity.
Palo Alto confirms PAN-OS Brotli vulnerability CVE-2026-111497, a CVSS 9.2 buffer overflow in PAN-OS 12.2, 12.1 and 11.2. Install the hotfixes now.
Related Posts:
The post Palo Alto Networks Confirms Critical Brotli Flaw CVE-2026-111497 Affects PAN-OS appeared first on Daily CyberSecurity.
A devastating GMO Desktop Cloud breach compromised over 26,000 servers, exposing FX trading accounts and prompting a full infrastructure shutdown.
Related Posts:
The post GMO Desktop Cloud Breach Exposes 26,000 FX Servers appeared first on Daily CyberSecurity.
Our weekly CVE report for Oct 19-25, 2026 tracks 4,222 new CVEs and 12 exploited vulnerabilities, including PHP2Shell flaws not yet in CISA KEV.
Related Posts:
The post Weekly CVE Report Flags PHP2Shell and FortiSIEM Attacks Still Missing From CISA KEV appeared first on Daily CyberSecurity.
A PingCAP data breach exposed customer records and source code. Learn how the TiDB Cloud security incident happened and how to protect your account.
Related Posts:
The post PingCAP Data Breach Exposes TiDB Cloud Customer Records and Source Code appeared first on Daily CyberSecurity.
Arista says VeloCloud Orchestrator vulnerability CVE-2026-114625, a CVSS 9.9 SQL injection, is exploited in the wild. Upgrade on-prem VCO now.
Related Posts:
The post Arista Warns VeloCloud Orchestrator Flaw CVE-2026-114625 Is Exploited in the Wild appeared first on Daily CyberSecurity.
An OVHcloud CLI attack swapped GitHub release files with a secret-stealing binary. Learn which versions are hit in this supply chain attack.
Related Posts:
The post OVHcloud CLI Attack Swaps Release Binaries With a Secret-Stealing Build appeared first on Daily CyberSecurity.
CISA warns of dcm4chee vulnerabilities that expose patient data, plus unpatched EseeCloud cameras with hard-coded credentials (CVE-2026-107617).
Related Posts:
The post CISA Warns of Critical Flaws in dcm4chee Medical Archive and Unpatched EseeCloud IP Cameras appeared first on Daily CyberSecurity.
Attackers are actively exploiting CVE-2026-110447 (CVSS 9.2), a critical Nextcloud Collabora Online RCE flaw in richdocumentscode, to deploy PHP webshells.
Related Posts:
The post Critical Nextcloud Collabora Online Flaw CVE-2026-110447 Actively Exploited in the Wild to Deploy Webshells appeared first on Daily CyberSecurity.
A recent Yandex Cloud drone strike in Vladimir caused severe service outages across Russia, disrupting Yandex Pay, search, and enterprise cloud operations.
Related Posts:
The post Yandex Cloud Drone Strike Causes Widespread Service Outages appeared first on Daily CyberSecurity.
Explore the devastating SoftBank IDCF Cloud ransomware attack. Read the hackers' humiliating note revealing the massive East Japan Region 1 outage.
Related Posts:
The post SoftBank IDCF Cloud Ransomware Attack Exposed by Hackers appeared first on Daily CyberSecurity.
A CVSS 10 GeoServer Cloud vulnerability in a GitHub Actions workflow could have leaked repository secrets. No abuse found, and the workflow is gone.
Related Posts:
The post GeoServer Cloud Fixes CVSS 10 GitHub Actions Flaw That Exposed Repository Secrets appeared first on Daily CyberSecurity.
An exploited VeloCloud vulnerability with a 10.0 CVSS score hits Arista appliances. Patch the critical VeloCloud vulnerability to stop active attacks.
Related Posts:
The post Exploited VeloCloud Vulnerability CVE-2026-93952 Hits 10 appeared first on Daily CyberSecurity.
Entrar