List cybersec
CVE-2024-40766: The Patch Fixed the Bug. Nobody Fixed the Configuration., (Tue, Jun 23rd)
{ "priority": "MEDIUM", "cve": "CVE-2024-40766", "target": "N/A", "threat_actor": "N/A", "patch_ready": false, "insight": "A patch was released for CVE-2024-40766 but configuration issues ..
3:10 am, June 23, 2026 Cybersecurity
ISC Stormcast For Tuesday, June 23rd, 2026 https://isc.sans.edu/podcastdetail/9982, (Tue, Jun 23rd)
(c) SANS Internet Storm Center. https://isc.sans.edu Creative Commons Attribution-Noncommercial 3.0 United States License.
2:10 am, June 23, 2026 Cybersecurity
WhatsApp phishing attack uses fake business docs to hack PCs
{ "priority": "HIGH", "cve": "N/A", "target": "WhatsApp", "threat_actor": "N/A", "patch_ready": false, "insight": "Malware campaign targets WhatsApp users with deceptive messages pushing V..
11:10 pm, June 22, 2026 Cybersecurity
JaredFromSubway MEV bot hacked in $15 million crypto theft
{ "priority": "HIGH", "cve": "N/A", "target": "JaredFromSubway MEV bot", "threat_actor": "N/A", "patch_ready": false, "insight": "An attacker manipulated the opportunity-detection logic of..
10:10 pm, June 22, 2026 Cybersecurity
FFmpeg fixes PixelSmash flaw in widely used video decoder
{ "priority": "HIGH", "cve": "N/A", "target": "FFmpeg", "threat_actor": "N/A", "patch_ready": true, "insight": "FFmpeg fixes PixelSmash flaw in widely used video decoder, preventing remote..
9:10 pm, June 22, 2026 Cybersecurity
FortiBleed campaign used custom FortiGate sniffer to steal credentials
{ "priority": "HIGH", "cve": "N/A", "target": "Fortinet FortiGate", "threat_actor": "N/A", "patch_ready": false, "insight": "FortiBleed campaign uses custom FortiGate sniffers to steal cre..
8:10 pm, June 22, 2026 Cybersecurity
ShapedPlugin WordPress Pro Plugins Backdoored in Supply Chain Attack
{ "priority": "CRITICAL", "cve": "N/A", "target": "ShapedPlugin WordPress Pro Plugins", "threat_actor": "Unknown threat actors", "patch_ready": false, "insight": "Multiple WordPress plugin..
7:10 pm, June 22, 2026 Cybersecurity
Microsoft fixes AutoGen Studio flaw that enabled code execution
A vulnerability chain dubbed AutoJack in Microsoft's AutoGen Studio interface for prototyping AI agents could let attackers manipulate an agent into executing arbitrary commands on its host system sim..
6:10 pm, June 22, 2026 Cybersecurity
Microsoft says Windows 11 26H2 is coming soon, details upgrade process
{ "priority": "INFO", "cve": "N/A", "target": "Windows 11", "threat_actor": "N/A", "patch_ready": false, "insight": "Microsoft announces upcoming Windows 11 version 26H2 with a simple upgr..
6:10 pm, June 22, 2026 Cybersecurity
Researchers Detail DifyTap Flaws in Dify That Could Expose AI Chats Across Tenants
Cybersecurity researchers have disclosed details of four vulnerabilities in Dify, an open-source agentic workflow platform with more than 146,000 GitHub stars, that could allow attackers to stealthily..
5:10 pm, June 22, 2026 Cybersecurity
A Glimpse into the “Search Your Target” Market for Stolen Credentials
{ "priority": "INFO", "cve": "N/A", "target": "N/A", "threat_actor": "N/A", "patch_ready": false, "insight": "An emerging underground market allows attackers to search stolen credential da..
3:10 pm, June 22, 2026 Cybersecurity
Webshells Remain Popular, (Mon, Jun 22nd)
{ "priority": "INFO", "cve": "N/A", "target": "N/A", "threat_actor": "N/A", "patch_ready": false, "insight": "Webshells remain a popular tool among threat actors, with a new player emergin..
3:10 pm, June 22, 2026 Cybersecurity
29-Year-Old Squid Proxy Bug 'Squidbleed' Can Leak Cleartext HTTP Requests
{ "priority": "HIGH", "cve": "N/A", "target": "Squid", "threat_actor": "N/A", "patch_ready": false, "insight": "A 29-year-old heap over-read bug in Squid web proxy, named Squidbleed, can l..
3:10 pm, June 22, 2026 Cybersecurity
Google Sets Sept. 30 Deadline for Android Developer Verification in Four Countries
{ "priority": "INFO", "cve": "N/A", "target": "Android", "threat_actor": "N/A", "patch_ready": false, "insight": "Google sets a deadline for Android developer verification in Brazil, Indon..
2:10 pm, June 22, 2026 Cybersecurity
New OXLOADER Loader Uses Malicious Google Ads to Deliver CastleStealer
{ "priority": "HIGH", "cve": "N/A", "target": "Google Ads users", "threat_actor": "Russian-speaking financially motivated group", "patch_ready": false, "insight": "New OXLOADER malware loa..
2:10 pm, June 22, 2026 Cybersecurity
⚡ Weekly Recap: Browser Bugs, EDR Killers, TV Botnet, OpenBSD Flaw, Android Trojan, and More
{ "priority": "INFO", "cve": "N/A", "target": "N/A", "threat_actor": "N/A", "patch_ready": false, "insight": "Weekly recap of various threat actors and vulnerabilities, including browser b..
1:10 pm, June 22, 2026 Cybersecurity
Stop Your Legacy Infrastructure from Hijacking Your AI Agents
{"priority":"INFO","cve":"N/A","target":"N/A","threat_actor":"N/A","patch_ready":false,"insight":"The article discusses a blind spot in security programs where attackers use legacy infrastructure to h..
1:10 pm, June 22, 2026 Cybersecurity
Canada’s Spy Agency Used First-of-Its-Kind Warrant to Clean Botnet-Infected Devices
{"priority":"INFO","cve":"N/A","target":"N/A","threat_actor":"N/A","patch_ready":false,"insight":"Canada's spy agency used a first-of-its-kind warrant to clean botnet-infected devices, neutralizing tw..
10:10 am, June 22, 2026 Cybersecurity
AryStinger Malware Infects 4,300 Legacy Routers to Build Reconnaissance Proxy Network
{"priority":"HIGH","cve":"N/A","target":"Legacy Routers","threat_actor":"AryStinger","patch_ready":false,"insight":"AryStinger malware infects 4,300 legacy routers to build a reconnaissance proxy netw..
8:10 am, June 22, 2026 Cybersecurity
INTERPOL Warns Phishing, Ransomware, and AI Scams Are Rising Across Asia-Pacific
{ "priority": "HIGH", "cve": "N/A", "target": "N/A", "threat_actor": "N/A", "patch_ready": false, "insight": "INTERPOL reports a dramatic increase in cybercrime across Asia-Pacific, with p..
7:10 am, June 22, 2026 Cybersecurity
ISC Stormcast For Monday, June 22nd, 2026 https://isc.sans.edu/podcastdetail/9980, (Mon, Jun 22nd)
{ "priority": "INFO", "cve": "N/A", "target": "N/A", "threat_actor": "N/A", "patch_ready": false, "insight": "A summary of an article on how to earn a billion dollars." }
2:10 am, June 22, 2026 Cybersecurity
AryStinger botnet infected thousands of D-Link routers worldwide
{"priority": "HIGH", "cve": "N/A", "target": "D-Link routers", "threat_actor": "AryStinger", "patch_ready": false, "insight": "AryStinger botnet infects thousands of outdated D-Link routers to create ..
3:10 pm, June 21, 2026 Cybersecurity
New Prinz Eugen ransomware prioritizes recent files for encryption
{"priority":"HIGH","cve":"N/A","target":"Prinz Eugen ransomware","threat_actor":"N/A","patch_ready":false,"insight":"New Prinz Eugen ransomware prioritizes recent files for encryption and leaves no ra..
4:10 pm, June 20, 2026 Cybersecurity
Microsoft links Mastra AI supply chain attack to North Korean hackers
{ "priority": "HIGH", "cve": "N/A", "target": "Mastra AI", "threat_actor": "Sapphire Sleet (BlueNoroff)", "patch_ready": false, "insight": "North Korean hackers linked to Mastra AI supply ..
3:10 pm, June 20, 2026 Cybersecurity
Hackers Exploit Gravity SMTP WordPress Plugin Bug to Expose API Keys
{"priority":"HIGH","cve":"CVE-2026-4020","target":"Gravity SMTP WordPress Plugin","threat_actor":"Hackers","patch_ready":true,"insight":"Hackers are exploiting a patched security flaw in Gravity SMTP,..
11:10 am, June 20, 2026 Cybersecurity
Klue OAuth breach victim list grows as Icarus hackers claim attack
Market intelligence platform Klue has publicly confirmed a recent security incident that allowed threat actors to steal OAuth tokens used to connect to customers' Salesforce environments, as the new "..
11:10 pm, June 19, 2026 Cybersecurity
Hackers exploit info disclosure bug in Gravity SMTP WordPress plugin
{ "priority": "HIGH", "cve": "N/A", "target": "Gravity SMTP WordPress plugin", "threat_actor": "N/A", "patch_ready": false, "insight": "Hackers are exploiting an unauthenticated informatio..
9:10 pm, June 19, 2026 Cybersecurity
The Gentlemen RaaS Uses GentleKiller EDR Framework Targeting 400 Security Processes
{ "priority": "HIGH", "cve": "N/A", "target": "EDR systems", "threat_actor": "The Gentlemen", "patch_ready": false, "insight": "The Gentlemen RaaS uses GentleKiller EDR framework to target..
7:10 pm, June 19, 2026 Cybersecurity
Unpatchable 'usbliter8' Exploit Breaks Apple A12 and A13 SecureROM Boot Chain
{"priority": "CRITICAL", "cve": "N/A", "target": "Apple A12 and A13 chips", "threat_actor": "Paradigm Shift", "patch_ready": false, "insight": "An unpatchable exploit called 'usbliter8' breaks Apple A..
7:10 pm, June 19, 2026 Cybersecurity
AutoJack Attack Lets One Web Page Hijack AI Agent for Host Code Execution
Microsoft researchers have detailed an exploit chain, named AutoJack, that turns an AI browsing agent into a delivery vehicle for remote code execution. Steer the agent to load an attacker's web pag..
5:10 pm, June 19, 2026 Cybersecurity
Texas govt data breach exposes over 3 million driver’s licenses
{ "priority": "HIGH", "cve": "N/A", "target": "Texas Parks and Wildlife Department (TPWD) license system", "threat_actor": "N/A", "patch_ready": false, "insight": "A data breach at TPWD's ..
5:10 pm, June 19, 2026 Cybersecurity
Operation Endgame Disrupts SocGholish Servers, Cleans 14,971 WordPress Sites
{ "priority": "HIGH", "cve": "N/A", "target": "WordPress", "threat_actor": "SocGholish", "patch_ready": true, "insight": "Dutch law enforcement disrupted SocGholish servers and cleaned 14,..
4:10 pm, June 19, 2026 Cybersecurity
CISA Warns Fortinet Customers as FortiBleed Hits 86,644 FortiGate Devices
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Thursday urged Fortinet customers with FortiGate appliances to take steps to secure against ongoing malicious activity aimed at thou..
3:10 pm, June 19, 2026 Cybersecurity
Every AI Agent Is an Identity. Most Organizations Don't Treat Them That Way
{ "priority": "MEDIUM", "cve": "N/A", "target": "AI Agents", "threat_actor": "N/A", "patch_ready": false, "insight": "AI agents are becoming a new identity and governance challenge as they..
2:10 pm, June 19, 2026 Cybersecurity
From Assistive to Agentic: The AI Shift That's Redefining Threat Management
{"priority": "INFO", "cve": "N/A", "target": "N/A", "threat_actor": "N/A", "patch_ready": false, "insight": "An article about how to earn a billion dollars"}
1:10 pm, June 19, 2026 Cybersecurity
Webinar: How attackers bypass MFA and how defenders can respond
Modern phishing attacks, including Device Code phishing, can undermine MFA protections and grant attackers access to corporate accounts without stealing passwords. This webinar explores how behavioral..
1:10 pm, June 19, 2026 Cybersecurity
Forget Data Leakage: Shadow AI's Real Threat Is Access Control
{ "priority": "INFO", "cve": "N/A", "target": "N/A", "threat_actor": "N/A", "patch_ready": false, "insight": "The main concern with Shadow AI has shifted from data leakage to an access con..
12:10 pm, June 19, 2026 Cybersecurity
Microsoft: June 2026 Windows updates break Recycle Bin prompts
{ "priority": "LOW", "cve": "N/A", "target": "Windows", "threat_actor": "N/A", "patch_ready": false, "insight": "Microsoft confirmed a Windows bug causing incorrect filenames in Recycle Bi..
12:10 pm, June 19, 2026 Cybersecurity
CISA: Splunk Enterprise flaw actively exploited, patch by Sunday
{ "priority": "CRITICAL", "cve": "N/A", "target": "Splunk Enterprise", "threat_actor": "N/A", "patch_ready": true, "insight": "CISA urges U.S. federal agencies to patch a critical Splunk E..
11:10 am, June 19, 2026 Cybersecurity
Salesforce Disables Klue App Integration After OAuth Token Abuse Exposes Customer Data
{ "priority": "HIGH", "cve": "N/A", "target": "Salesforce", "threat_actor": "N/A", "patch_ready": false, "insight": "Salesforce disabled Klue app integration due to OAuth token abuse expos..
10:10 am, June 19, 2026 Cybersecurity
NY man charged after harassing college student with AI-generated nudes
{ "priority": "LOW", "cve": "N/A", "target": "N/A", "threat_actor": "N/A", "patch_ready": false, "insight": "A New York man was charged with cyberstalking for allegedly using AI-generated ..
9:10 am, June 19, 2026 Cybersecurity
eBanking Phishing Delivered Through IPv4-Mapped IPv6 Address, (Fri, Jun 19th)
{ "priority": "INFO", "cve": "N/A", "target": "Belgian bank", "threat_actor": "N/A", "patch_ready": false, "insight": "Detected phishing email targeting a major Belgian bank via IPv4-mappe..
8:10 am, June 19, 2026 Cybersecurity
Apple Patches Beats Studio Buds Flaw Letting Nearby Attackers Spy via Microphone
{ "priority": "HIGH", "cve": "CVE-2025-20701", "target": "Beats Studio Buds", "threat_actor": "N/A", "patch_ready": true, "insight": "Apple patched a high-severity vulnerability in Beats S..
7:10 am, June 19, 2026 Cybersecurity
CISA warns Fortinet users to secure devices after FortiBleed leak
{ "priority": "CRITICAL", "cve": "N/A", "target": "Fortinet", "threat_actor": "N/A", "patch_ready": false, "insight": "CISA warns Fortinet users to secure devices after FortiBleed leak exp..
7:10 am, June 19, 2026 Cybersecurity
Gentlemen ransomware uses multiple EDR killers to disable defenses
The Gentlemen ransomware-as-a-service (RaaS) is actively developing and maintaining a suite of endpoint detection and response (EDR) killers to help affiliates evade detection in attacks. [...]
11:10 pm, June 18, 2026 Cybersecurity
Nintendo confirms data stolen in WebMD subsidiary cyberattack
{ "priority": "INFO", "cve": "N/A", "target": "Nintendo", "threat_actor": "N/A", "patch_ready": false, "insight": "Nintendo confirms data stolen in WebMD subsidiary cyberattack, threat act..
8:10 pm, June 18, 2026 Cybersecurity
F5 Patches Two Critical NGINX Open Source Flaws Enabling Remote Code Execution
{ "priority": "CRITICAL", "cve": "CVE-2026-42530", "target": "NGINX Open Source", "threat_actor": "N/A", "patch_ready": true, "insight": "F5 patches critical NGINX Open Source flaws enabli..
7:10 pm, June 18, 2026 Cybersecurity
‘Popa’ Botnet Linked to Publicly-Traded Israeli Firm
{ "priority": "HIGH", "cve": "N/A", "target": "NetNut", "threat_actor": "Popa", "patch_ready": false, "insight": "The Popa botnet, linked to Alarum Technologies Ltd, has been used for adve..
6:10 pm, June 18, 2026 Cybersecurity
USB worm spreads crypto-stealing malware via Windows shortcut files
{ "priority": "HIGH", "cve": "N/A", "target": "Windows", "threat_actor": "N/A", "patch_ready": false, "insight": "A USB worm is spreading crypto-stealing malware via Windows shortcut files..
5:10 pm, June 18, 2026 Cybersecurity
ThreatsDay Bulletin: Claude Chat Abuse, NastyC2 npm Packages, Device-Code Phishing + 25 More Stories
I don't have access to read_lines information.
4:10 pm, June 18, 2026 Cybersecurity
AI Testing
