Daily CyberSecurity

securityonline.infoDaily CyberSecurity Launches CVE Alerts, an Automated Vulnerability Intelligence Service for IT and Security TeamsDaily CyberSecurity, the team behind the CVE-Watchtower vulnerability tracking platform on securityonline.info, today announced the general availability of CVE Alerts, a subscription service that turns raw CVE data into targeted, real-time notifications delivered by email, Slack, Microsoft Teams, and GitHub Issues. With more than 40,000 CVEs published in 2025 alone, security teams can no longer read every advisory that mentions their stack.

CVE Alerts turns CVE, KEV, and EPSS data into real-time alerts via email, Slack, Teams, and GitHub Issues. Start your 14-day free trial. #CVEAlerts #Cybersecurity #VulnerabilityManagement #CISAKEV #EPSS #ThreatIntel #InfoSec #PatchManagement #ExploitIntel #DevSecOps #SecurityOps

meterpreter.orgOnamae Desktop Cloud Breach Triggers Rogue FX TradesJapanese technology giant GMO Internet has confirmed a severe security compromise within its virtual infrastructure. Specifically, the Onamae Desktop Cloud breach allowed cybercriminals to exfiltrate proprietary customer data. Following the intrusion, multiple clients reported unauthorized trading activity across their brokerage and foreign exchange accounts. Consequently, corporate leadership acknowledged critical vulnerabilities and suspended operations across all hosting tiers. Malware Discovery and Infrastructure Shutdown…

19m

The Onamae Desktop Cloud breach triggered unauthorized forex transactions across MetaTrader terminals, prompting GMO Internet to shut down 26,000 servers. #Onamae #DesktopCloud #CyberAttack #ForexTrading #DataBreach

meterpreter.orgInterpol Operation Serengeti III Nets 1,400 Cyber ArrestsA massive cross-border law enforcement initiative has struck a decisive blow against cybercrime syndicates across Africa. Specifically, the operation led to 1,462 arrests and dismantled nearly 11,000 malicious network nodes. Investigators identified almost 66,000 victims who suffered combined financial losses exceeding $385 million. According to the Interpol Operation Serengeti III crackdown announcement, authorities successfully recovered more than $105 million in illicit assets.

Interpol Operation Serengeti III resulted in 1,462 arrests, dismantling 11,000 malicious networks and recovering over $105 million across Africa. #Interpol #OperationSerengetiIII #Cybercrime #InfoSec #CyberSecurity

securityonline.infoDenmark Ends Collabora Pilot in Blow to Open SourceThe Danish Agency for Digital Government has officially suspended its testing of the open-source office suite Collabora. Furthermore, an agency spokesperson confirmed that officials maintain no active plans to revive the project. Consequently, this unexpected retreat marks a symbolic victory for Microsoft across European public administration. While several European nations aspire to achieve digital sovereignty, practical migrations often face severe operational resistance.

Denmark ends Collabora pilot testing across its public sector after formatting errors disrupted case workflows, securing a quiet victory for Microsoft. #Denmark #Collabora #MicrosoftOffice #OpenSource #GovTech

securityonline.infoApple iOS 27.2 Update Fixes 160 Security FlawsApple has officially deployed the stable release of iOS 27.2 to compatible devices. Specifically, the Apple iOS 27.2 update delivers the first major milestone for the current platform cycle. The release introduces contextual memory upgrades for Siri and integrates remote tracking into Find My. Furthermore, engineers resolved over 160 distinct security vulnerabilities across core system frameworks. Because active exploits continue targeting legacy operating system versions, administrators recommend immediate device upgrades.

The Apple iOS 27.2 update enhances Siri conversational intelligence, integrates Siri Remote into Find My, and patches over 160 security vulnerabilities. #Apple #iOS27 #Cybersecurity #SoftwareUpdate #TechNews

securityonline.infoWindows 11 Universal Print Glitch Demands Manual FixMicrosoft recently confirmed an enduring flaw within its cloud printing ecosystem. Specifically, Windows 11 updates have disrupted Universal Print services across upgraded devices since April 2026. This defect continues to hinder systems that migrated from Windows 10. Unfortunately, Microsoft cannot rectify this condition through an automatic cumulative patch. Consequently, users must remove affected printers and reinstall them manually. Post-Upgrade Failures and Printing Errors…

A persistent Windows 11 Universal Print bug breaks printer queues after OS upgrades, displaying error 0x80004005 and requiring queue reinstallation. #Windows11 #UniversalPrint #Microsoft #ITAdmin #TechNews

meterpreter.org.NET Brotli Vulnerability Triggers Out-of-Band PatchMicrosoft has released emergency out-of-band updates across active versions of its flagship development platform. Specifically, developers patched .NET 8, 9, and 10 while shipping the .NET 11 Release Candidate 3 build. These swift updates remediate the severe .NET Brotli vulnerability that threatens server memory integrity. Furthermore, this memory corruption defect stems from a critical flaw within standard Brotli compression decoders. Consequently, software applications processing compressed payloads face immediate exploitation risks unless administrators apply protective fixes.

Microsoft patched the .NET Brotli vulnerability across .NET 8, 9, 10, and 11 RC3 to prevent memory corruption and potential denial of service attacks. #DotNet #Brotli #CVE2026111497 #Cybersecurity #AppSec

meterpreter.orgRuby Regex Vulnerabilities Trigger Critical GitLab RCEThe core maintenance team behind the Ruby programming language has released versions 4.0.9, 3.4.12, and 3.3.13. Specifically, these critical updates resolve severe vulnerabilities within the embedded Onigmo regular expression parsing engine. These underlying memory errors previously exposed GitLab instances to catastrophic remote code execution attacks. In the GitLab security release documentation, researchers revealed that untrusted patterns allowed adversaries to compromise host servers completely.

Upstream Ruby patches critical Ruby regex vulnerabilities in Onigmo after four high-severity GitLab flaws enabled remote code execution. #Ruby #GitLab #Onigmo #Cybersecurity #AppSec

securityonline.infoOffiDocs Chrome Extensions With 2.3 Million Installs Caught Harvesting Browsing URLsBay Area Labs has linked 60 Chrome extensions with 2.3 million installs to a single Estonian company. According to its report, the OffiDocs Chrome extensions include office editors, PDF tools and a free VPN. Furthermore, 37 of them "hex-encode/obfuscate and exfiltrate full URLs" that users visit. A Sprawling Extension Network The extensions sit under four publisher accounts: officeonlinesystems, RedcoolMedia, ApkOnline android online and RunApps.

60 OffiDocs Chrome extensions with 2.3M installs secretly send browsing URLs. See how these spying Chrome extensions work and how to stay safe. #OffiDocs #ChromeExtensions #BrowserSecurity #Privacy #DataHarvesting #ChromeWebStore #FreeVPN

dailytechnow.comElvis Presley Estate Files Anthropic AI Copyright LawsuitElvis Presley Estate Sues Anthropic Over AI Training The custodians of Elvis Presley's illustrious musical repertoire are initiating legal proceedings against Anthropic. They allege this artificial intelligence enterprise utilized Presley's melodies to train AI models without authorization. Authentic Brands Group controls the late artist's musical copyrights and likeness. This licensing organization accuses Anthropic of infringing upon the rights to 274 distinct Presley compositions.

Authentic Brands Group launched an Anthropic AI copyright lawsuit, accusing the company of illegally training the Claude model on Elvis Presley's music. #ElvisPresley #Anthropic #Claude #CopyrightLawsuit #MusicRights

dailytechnow.comOllama Brings Local Text to Speech AI to Mac UsersOllama Brings Local Text to Speech AI to Mac Users Ollama, a prominent open-source platform designed for executing artificial intelligence models locally, announced a significant update on October 24. Specifically, its Mac application now officially supports text-to-speech (TTS) generation. Furthermore, Windows and Linux iterations will follow suit shortly. According to the technology publication 9to5Mac, this development marks Ollama's inaugural integration of voice generation capabilities…

Ollama introduces local text to speech capabilities for Mac users. Discover how the new Phonon models provide offline, privacy-focused voice generation. #Ollama #TextToSpeech #Mac #AppleSilicon #ArtificialIntelligence #LocalAI

securityonline.infoSiriusQT RAT Combines Hidden Desktop Control With Credential and Wallet TheftTL;DR Group-IB researchers analyzed more than 280 samples of the Windows SiriusQT RAT, a commercial malware family sold on dark web forums since April 2026. Offered for $500 by a reseller named GhostKernel and widely shared in cracked builds, the SiriusQT RAT merges Hidden Virtual Network Computing with a credential stealer. Furthermore, the implant uses six persistence techniques and a custom stream cipher to control infected Windows hosts.

Group-IB analyzes over 280 samples of SiriusQT RAT. Discover how the Windows SiriusQT RAT uses HVNC, six persistence methods, and 100+ stealer targets. #SiriusQTRAT #WindowsMalware #HVNC #GroupIB #Infostealer #MalwareAnalysis #Cybersecurity

securityonline.infoFake Chocolatey and Massgrave Sites Deliver Python Armorsteal Malware via SEO PoisoningTL;DR In September 2026, the Zscaler Threat Hunting team uncovered an SEO poisoning campaign that used fake Chocolatey and Microsoft Activation Scripts websites to spread Armorsteal malware. When victims copied and ran the displayed PowerShell installation commands, the script silently deployed a Python 3.11 runtime and three obfuscated Python Armorsteal malware modules. Together, these modules give attackers remote control, keystroke and clipboard surveillance, and broad credential theft across Windows systems.

Zscaler uncovers an SEO poisoning campaign using fake Chocolatey and Massgrave sites to drop Armorsteal malware and Python Armorsteal malware modules. #Armorsteal #SEOPoisoning #PythonMalware #Zscaler #Chocolatey #Infostealer #Cybersecurity

dailytechnow.comTailscale Tailworm Vulnerability Report: Severe Flaws FoundTailscale Tailworm Vulnerability Report Exposes Critical Flaws Routine server access through a supposedly secure network can rapidly devolve into absolute system control, entirely bypassing the need for administrator credentials. In a comprehensive Tailworm report, security researcher Erica Windisch of Cyberdione Labs meticulously detailed 11 security vulnerabilities afflicting Tailscale and headscale. These alarming discoveries include methods for acquiring ultimate root privileges via the integrated Tailscale SSH feature.

Explore the critical Tailscale Tailworm vulnerability report detailing 11 severe security flaws in Tailscale and headscale, including root access exploits. #Tailscale #Tailworm #CyberSecurity #Vulnerability #Headscale #InfoSec

dailytechnow.comiOS 27.2 Update Features: iPhone Duo & Siri AI EnhancementsThe Majestic Arrival of Apple iOS 27.2 Update Features Apple officially launched the highly anticipated iOS 27.2 update today. The technology giant specifically optimized this firmware for flagship devices like the iPhone 18 Pro. Furthermore, Apple introduced a bespoke software version exclusively for its pioneering foldable smartphone, the iPhone Duo. You can explore the comprehensive official iOS 27.2 release notes…

Discover the latest iOS 27.2 update features, bringing advanced Siri AI, iPhone Duo Apple Pencil support, and over 160 security patches to your Apple devices. #iOS27 #iPhoneDuo #Apple #SiriAI #TechUpdate

dailytechnow.comApple Expands Siri AI Language Support in Version 27.2Apple Expands Siri AI to Five New Languages in Version 27.2 Apple officially announced today that software version 27.2 expands the reach of its next-generation assistant. The update introduces support for French, Japanese, Korean, Portuguese, and Spanish. You can read the full details in the official press release published earlier today. A Comprehensively Upgraded Assistant Siri AI represents a massive leap forward for Apple.

Discover the latest Siri AI language support in the 27.2 update. Apple adds French, Japanese, Korean, and Spanish while ensuring strict privacy. #SiriAI #AppleIntelligence #iOS27 #AppleUpdate #Mac

dailytechnow.comiPhone Duo Triumphs in Latest Thermal Performance ShowdowniPhone Duo Triumphs in Latest Thermal Performance Showdown Technology publication Tom's Guide recently published a comprehensive laboratory evaluation. The team put the iPhone Duo and Galaxy Fold 8 through a thermal torture test to determine the ultimate winner. This assessment directly compared the cooling capabilities of these two premium foldable smartphones. Stress Testing the Foldable Giants The reviewers utilized the demanding 3DMark Wild Life Extreme stress test.

Discover the ultimate iPhone Duo thermal test results. Apple's foldable beats the Galaxy Z Fold 8 in sustained performance and advanced vapor cooling. #iPhoneDuo #GalaxyZFold8 #ThermalTest #TechNews #FoldablePhones

dailytechnow.comBrotli Compression Vulnerability Enables Remote Code ExecutionCritical Brotli Compression Vulnerability Threatens Major Platforms A critical vulnerability lurking within Google's Brotli compression algorithm currently plagues several immensely popular web development and cloud infrastructure platforms. Specifically, the terrifying CVE-2026-111497 flaw enables malicious actors to assault servers entirely without authorization. Furthermore, diligent cybersecurity researchers have already successfully demonstrated terrifying remote code execution capabilities. The Extensive Scope of the Threat…

A critical Brotli compression vulnerability affects Node.js, Envoy, and Istio. Learn how this Google algorithm flaw enables remote code execution. #Brotli #NodeJS #CyberSecurity #Vulnerability #Google #TechNews

dailytechnow.comOnamae Desktop Cloud Breach: GMO Internet Confirms AttackThe Onamae Desktop Cloud Breach Sparks Grave Financial Concerns The recent breach of cloud-based desktop environments has culminated in a massive influx of complaints regarding unauthorized financial transactions. The prominent Japanese enterprise, GMO Internet, officially confirmed the infiltration of its Onamae.com Desktop Cloud platform. The company formally acknowledged the illicit exfiltration of user data beyond the service's secure perimeters. Following the catastrophic incursion, several clients reported anomalous activities across their brokerage and foreign exchange accounts.

Discover the impact of the Onamae Desktop Cloud breach. GMO Internet confirms a severe cyberattack causing unauthorized MetaTrader financial transactions. #OnamaeCloud #GMOInternet #CyberSecurity #DataBreach #MetaTrader

securityonline.infoCISA Adds PHP2Shell to KEV as Confirmed RCE Attacks and Suspected DPRK Scanning SurfaceTL;DR On October 26, 2026, CISA added the PHP2Shell flaws, CVE-2026-109618 and CVE-2026-109619, to its Known Exploited Vulnerabilities (CISA KEV) catalog. Federal agencies must patch by October 29. Meanwhile, a researcher confirmed full remote code execution in the wild, and CYFIRMA tied low-volume scanning to a suspected North Korea-linked operator. Why It Matters PHP runs a large share of the web.

CISA adds PHP2Shell flaws CVE-2026-109618 and CVE-2026-109619 to the CISA KEV catalog after confirmed RCE and suspected DPRK-linked scanning. #PHP2Shell #CISAKEV #PHP #CVE2026109618 #CVE2026109619 #Lazarus #ExploitedInTheWild #CyberSecurity

securityonline.infoApple Backports Fix for Exploited CoreGraphics Zero-Day CVE-2026-86950 to Older iPhonesTL;DR On October 26, 2026, Apple released iOS 18.7.11 and iPadOS 18.7.11 to fix CVE-2026-86950, an exploited CoreGraphics zero-day. Apple says the flaw "may have been exploited" against "specific targeted individuals." The update brings the fix to older iPhones and iPads that cannot run newer iOS versions. Why It Matters This CoreGraphics zero-day is already confirmed as exploited. CISA added it to its Known Exploited Vulnerabilities catalog on September 29, 2026.

Apple's iOS 18.7.11 fixes CVE-2026-86950, a CoreGraphics zero-day exploited in the wild, on older iPhones and iPads. Update now. #Apple #iOS #ZeroDay #CVE202686950 #CoreGraphics #ExploitedInTheWild #iPhone #CyberSecurity

securityonline.infoHashiCorp Patches Critical 9.9 CVSS Consul-k8s Authorization Bypass Vulnerability (CVE-2026-110720)TL;DR HashiCorp disclosed a critical consul-k8s vulnerability on October 26, 2026, tracked as CVE-2026-110720 with a 9.9 CVSS v3.1 score. The flaw stems from a cross-namespace authorization bypass in component Access Control List (ACL) binding rules. As a result, attackers can gain elevated Consul privileges. Administrators must upgrade their Kubernetes integrations to fixed releases immediately. Why It Matters Consul-k8s is the official Kubernetes integration for HashiCorp Consul and enables service mesh, service discovery, and API gateway functionality across container clusters.

Patch CVE-2026-110720 now. This 9.9 CVSS consul-k8s vulnerability enables a cross-namespace authorization bypass in ACL binding rules. #HashiCorp #Consul #Kubernetes #CVE2026110720 #CloudSecurity #Cybersecurity #Vulnerability #InfoSec

securityonline.infoOpenMage Fixes 34 Flaws in Magento LTS, Including Critical OAuth CSRFTL;DR On October 26, 2026, the OpenMage project shipped Magento LTS 20.19.0 and 20.18.2 to fix 34 OpenMage vulnerabilities. The most serious is a critical CSRF flaw rated CVSS 9.0. It can hand attackers persistent admin or customer REST API tokens. Why It Matters OpenMage LTS keeps Magento 1 stores alive long after Adobe ended support. The project claims "100 000 online active Magento installation[s]," though that figure is its own estimate.

OpenMage fixes 34 OpenMage vulnerabilities in Magento LTS, including a critical CSRF flaw that hands out API tokens. Upgrade to 20.19.0 or 20.18.2. #OpenMage #Magento #MagentoLTS #CSRF #OAuth #eCommerce #PHP #CyberSecurity

securityonline.infoIntel APX Windows 11 Toggle Unlocks CPU EfficiencyMicrosoft recently unveiled an experimental toggle designed to unleash Intel Advanced Performance Extensions (APX) on Windows 11. Specifically, the feature surfaced within preview builds in the internal development branch. The configuration toggle promises substantial processing performance gains. However, activating this capability currently requires a complete system reboot. Expanding General-Purpose Registers with Intel APX Intel APX introduces a fundamental architectural enhancement to the established x86-64 instruction set.

Microsoft tests an Intel APX Windows 11 performance toggle in preview builds, doubling general-purpose registers for enhanced processor speed. #IntelAPX #Windows11 #CPUTech #Hardware #Microprocessor

meterpreter.orgPublic PoC Exploit Disclosed for Critical Rust zip Crate VulnerabilityTL;DR Maintainers of the zip2 repository have publicly disclosed technical details and working proof-of-concept (PoC) exploit code for a critical Rust zip crate vulnerability. Tracked as CVE-2026-115905 (CVSS v4.0: 10.0), this Zip Cloaking flaw lets attackers bypass security scanners, overwrite arbitrary files, and execute remote code. Developers must upgrade their dependencies to zip version 9.0.5 immediately. Why It Matters The zip crate is the standard archive-handling library for Rust, with hundreds of millions of downloads on crates.io across cloud microservices and backend workers.

Details and PoC exploit code are out for CVE-2026-115905, a critical 10.0 CVSS Rust zip crate vulnerability. Upgrade to version 9.0.5 immediately. #Rust #ZipCrate #CVE2026115905 #PoC #RCE #Cybersecurity #Vulnerability #InfoSec

securityonline.infoPalo Alto Networks Confirms Critical Brotli Flaw CVE-2026-111497 Affects PAN-OSTL;DR Palo Alto Networks confirmed on October 26, 2026, that CVE-2026-111497, a critical Brotli decoder flaw, affects PAN-OS 12.2, 12.1 and 11.2. This PAN-OS Brotli vulnerability also hits the Prisma Cloud Application Security Transporter Client. Hotfixes are listed for each affected branch, while PAN-OS 11.1 and 10.2 are not affected. Why It Matters Brotli is a compression library used across the web.

Palo Alto confirms PAN-OS Brotli vulnerability CVE-2026-111497, a CVSS 9.2 buffer overflow in PAN-OS 12.2, 12.1 and 11.2. Install the hotfixes now. #PaloAltoNetworks #PANOS #Brotli #CVE2026111497 #BufferOverflow #Firewall #PrismaCloud #CyberSecurity

securityonline.infoRapid7 Discloses 17 Zimbra Collaboration Suite Vulnerabilities Breaking Identity BoundariesTL;DR Rapid7 researchers disclosed 17 security flaws in Zimbra Collaboration Suite (ZCS) that break authentication, mailbox isolation, and host privilege boundaries. These vulnerabilities allow attackers to hijack user sessions via cross-site scripting, read arbitrary mailboxes, and escalate local privileges to root. Administrators must apply the latest Zimbra patch releases immediately and audit server configurations. Why It Matters Zimbra Collaboration Suite is an enterprise email and collaboration platform used by thousands of government agencies and businesses worldwide.

Rapid7 disclosed 17 Zimbra Collaboration Suite flaws, including CVE-2026-10632 and CVE-2026-93640, allowing XSS and root privilege escalation. #Zimbra #Rapid7 #EmailSecurity #PrivilegeEscalation #XSS #Cybersecurity #Vulnerability #InfoSec

securityonline.infoMautic 7.2.2 Patches Critical Remote Code Execution and SQL Injection VulnerabilitiesTL;DR The Mautic project released security updates on October 26, 2026, to resolve multiple critical and high-severity Mautic vulnerabilities across its open-source marketing automation platform. The most severe flaw, CVE-2026-115188, carries a critical 9.9 CVSS score and enables remote code execution through unrestricted file uploads. Therefore, system administrators must upgrade their installations to versions 7.2.2, 6.0.10, or 5.2.12 immediately. Why It Matters…

Upgrade to Mautic 7.2.2 to fix critical Mautic vulnerabilities, including 9.9 CVSS RCE flaw CVE-2026-115188, CVE-2026-115189, and SQL injection bugs. #Mautic #RCE #SQLInjection #PHPObjectInjection #OpenSource #Cybersecurity #Vulnerability #InfoSec

securityonline.infoPoC and Full Details Released for macOS autofs Flaws Enabling Root Code Execution and Gatekeeper BypassTL;DR Researcher Mr.Gedik has published a full write-up and proof-of-concept harness for CVE-2026-84568 and CVE-2026-84570, two macOS autofs vulnerabilities. The first lets an attacker who controls a network directory server run code as root on Macs. The second allows a Gatekeeper bypass, and Apple fixed both on September 14, 2026. Why It Matters Many companies bind their Macs to LDAP or Open Directory and let autofs mount network home folders.

PoC and details are public for CVE-2026-84568, a macOS autofs vulnerability enabling root code execution, and a Gatekeeper bypass. Update macOS now. #macOS #Apple #CVE202684568 #CVE202684570 #Gatekeeper #autofs #PoC #CyberSecurity

securityonline.infoApple Blocks eMudhra Certificates Over Weak Key FlawApple has acted swiftly to shield users from compromised Indian certificate authority eMudhra. Specifically, the technology titan deployed automated updates to blacklist eight compromised intermediate certificates. Furthermore, Apple plans to revoke trust in the primary emSign ECC Root CA - G3 anchor. Native applications like Safari and Mail received dynamic protection through silent security configuration pushes. However, standalone command-line utilities still await subsequent operating system updates for comprehensive neutralization.

Apple blocks eMudhra certificates across macOS and iOS after weak intermediate keys compromised trust, with CLI tool bundles slated for future updates. #Apple #eMudhra #Cybersecurity #WebPKI #macOS

securityonline.infoTailscale SSH Vulnerability Enables Root EscalationCybersecurity researcher Erica Windisch recently disclosed critical vulnerabilities affecting Tailscale SSH implementations. Specifically, research published on the Tailworm research portal details severe Unix socket forwarding and permission flaws. An attacker controlling an authorized device can exploit forwarding paths to reach privileged services. Consequently, adversaries can escalate privileges and capture full root access on target nodes. Privilege Escalation Across Authorized Tailnet Nodes…

11h

A severe Tailscale SSH vulnerability allows attackers on authorized nodes to exploit Unix socket forwarding and escalate privileges to root access. #Tailscale #TailscaleSSH #PrivilegeEscalation #Cybersecurity #InfoSec

securityonline.infoAnthropic S-1 IPO Filing Targets Historic $2T ValuationAnthropic has officially submitted its registration documents to the Securities and Exchange Commission. Specifically, the frontier laboratory behind Claude plans to list under ticker ANT on the Nasdaq Global Select Market. Furthermore, Goldman Sachs and Morgan Stanley will serve as joint lead underwriters. This historic public offering will establish Anthropic as the premier publicly traded pure-play artificial intelligence enterprise. Consequently, Wall Street analysts project a record-breaking valuation reaching between 1.8 trillion and 2 trillion dollars.

19h

The Anthropic S-1 IPO filing reveals $16.8B Q3 revenue, $750B in compute commitments, and a historic valuation target on Nasdaq. #Anthropic #ClaudeAI #IPO #ArtificialIntelligence #TechNews

meterpreter.orgNvidia Ampere GPU Unlock Boosts AI Tensor ComputeIndependent developer Zagitta recently unveiled an open-source initiative named GPU Unlock. Specifically, the software unlocks dormant compute potential across select Nvidia Ampere architecture graphics cards. By adjusting hardware speed selectors during early boot, the project doubles tensor instruction issue rates for fused multiply-add operations. Consequently, consumer cards achieve computational throughput rivaling professional workstation silicon. Boot-Time Speed Selection and Kernel Architecture…

22h

The open-source Nvidia Ampere GPU Unlock project boosts Tensor Core instruction issue rates, accelerating BF16 and FP16 compute across RTX 30-series GPUs. #GPUUnlock #Nvidia #Ampere #TensorCore #AIHardware

securityonline.infoGheist Campaign Abuses Stolen GitHub Tokens Across 850 Accounts to Steal SecretsTL;DR Security researchers uncovered the Gheist campaign, a mass-exploitation operation abusing stolen GitHub tokens to extract repository secrets. Since September 15, 2026, the Gheist GitHub campaign has planted over 13,500 rogue branches across more than 850 accounts. While a recent platform safeguard blocked execution in public projects, attackers successfully harvested credentials from private enterprise repositories. What Happened in the Attacks…

Wiz Research uncovered the Gheist campaign, a Gheist GitHub campaign planting 13,500 rogue branches across 850+ accounts to steal private repo secrets. #GheistCampaign #GitHub #WizResearch #CloudSecurity #CI #DevSecOps #Cybersecurity

securityonline.infoApple Presto Return Scanner Targets In-Box FraudApple retail stores are deploying advanced inspection scanners to verify returned merchandise. Specifically, these sophisticated devices scan sealed iPhone packaging and run automated diagnostic scripts without breaking factory seals. This tactical deployment aims to neutralize return fraud orchestrated by criminal syndicates. Consequently, store specialists can confirm device integrity before approving monetary refunds. Combating Deceptive Return Fraud Across Retail Chains Fraudulent returns represent an escalating logistical challenge for Apple retail outlets.

Apple deployed an in-box Apple Presto return scanner across retail stores to combat return fraud by running diagnostics on sealed iPhones. #Apple #iPhone #Presto #RetailTech #FraudPrevention

meterpreter.orgExploit and Full Details Released for 20-Year-Old Linux Kernel teql Flaw CVE-2026-23074TL;DR A full write-up and exploit are now public for CVE-2026-23074, a Linux kernel privilege escalation flaw in the teql traffic-control scheduler. The use-after-free dates back to Linux 2.6.12, the start of the kernel's Git history in 2005. Researchers used it to gain root and escape a container on Google's Container-Optimized OS in the kernelCTF program. Why It Matters The bug survived in the kernel's networking code for about two decades.

Exploit code and details are public for CVE-2026-23074, a Linux kernel privilege escalation flaw in the teql qdisc dating to 2005. Patch now. #Linux #LinuxKernel #CVE202623074 #PrivilegeEscalation #kernelCTF #ContainerEscape #PoC #CyberSecurity

meterpreter.orgRailway Breach Puts Developer Secrets at RiskKeys to the Cloud, Possibly in Stranger Hands Access keys to cloud services may have fallen into the wrong hands. The cause is a compromise of a platform where developers trusted their secrets to rest. After spotting suspicious activity in its own infrastructure, the company warned all users to replace passwords, API keys, and other credentials at once. What Railway Found…

A Railway security breach may have exposed environment variables and API keys. Users should rotate all stored secrets now. #Railway #DataBreach #APIKeys #CloudSecurity #Secrets #EnvironmentVariables #DevSecOps #CredentialTheft

dailytechnow.comSony A7C II Custom Firmware Unlocks FL2 Film ModesDeveloper Unlocks Sony A7C II Features With Custom Firmware Recently, the art of reverse engineering has birthed numerous fascinating projects. For instance, developers successfully ported iOS onto Android smartphones. Similarly, a creator named QAQLeonard engineered custom firmware specifically for the Sony A7C II camera. This remarkable modification seamlessly unlocks the highly coveted FL2 and FL3 film simulation modes. Expanding Creative Possibilities With External LUTs…

Discover the latest Sony A7C II custom firmware that unlocks FL2 film modes, external LUT support, and Fuji colors through an intuitive graphical interface. #SonyA7CII #CustomFirmware #CameraModding #PhotographyTech

meterpreter.orgPopcorn Time Updater Flaw Threatened a Huge BotnetA Forgotten Backdoor on Millions of PCs An abandoned build of Popcorn Time kept a dangerous mechanism on millions of computers for years. Through it, anyone could quietly run code with top system privileges. Researchers at Eye Security took over part of the old update infrastructure. They disabled the updater on more than two million systems before criminals could exploit the find.

A Popcorn Time updater flaw, CVE-2026-30612, exposed millions of PCs to SYSTEM-level code. Eye Security disabled it on 2M+ systems. #PopcornTime #Time4Popcorn #CVE202630612 #EyeSecurity #Botnet #SupplyChain #RCE #Malware

securityonline.infoWindows 11 Speed Test Gets Native Tool IntegrationMicrosoft previously introduced a dedicated network speed option inside the Windows 11 Quick Settings panel. However, early adopters expressed strong frustration with the initial implementation. Clicking the shortcut launched Microsoft Edge and opened a Bing web search rather than evaluating connection latency natively. Consequently, power users criticized the redundant browser redirection as an inconvenient promotional gimmick. Transitioning from Web Search to Native Diagnostics…

Microsoft is testing a native Windows 11 speed test tool in preview builds, replacing web browser redirections with an integrated Ookla utility. #Windows11 #Microsoft #Speedtest #TechNews #WindowsInsider

securityonline.infoCome Back to Firefox Campaign Champions Web PrivacyThe Mozilla Foundation officially initiated a major global promotional initiative. Specifically, the Come Back to Firefox campaign announcement appeals directly to lapsed community members who migrated to rival browsers. The vibrant campaign enlists iconic figures from classic viral internet memes. Consequently, this creative approach blends digital nostalgia with an urgent defense of internet sovereignty and user privacy. Reviving Classic Memes to Reclaim Market Share…

Mozilla launched the Come Back to Firefox campaign, leveraging nostalgic internet memes to promote user privacy and challenge Chrome market dominance. #Firefox #Mozilla #ComeBackToFirefox #BrowserPrivacy #TechNews

meterpreter.orgBrotli CVE-2026-111497 Vulnerability Triggers Remote Code ExecutionA critical flaw within Google's Brotli compression algorithm has sent shockwaves through the software industry. Specifically, the Brotli CVE-2026-111497 vulnerability permits unauthenticated attackers to corrupt server memory remotely. Security researchers have already demonstrated practical remote code execution against modern cloud stacks. Furthermore, the defect affects multiple prominent application runtimes and cloud proxies. Because maintainers embedded the vulnerable library across diverse languages, fixing one platform does not safeguard the others.

The Brotli CVE-2026-111497 vulnerability enables unauthenticated remote code execution across Node.js, Bun, Python, Envoy, and Istio cloud infrastructure. #Brotli #CVE2026111497 #Node2Shell #Cybersecurity #AppSec

dailytechnow.comMicrosoft Teams Adds Deepfake Detection for Virtual MeetingsMicrosoft Teams Introduces Deepfake Detection for Virtual Meetings According to a recent report from Windows Latest, Microsoft Teams will allow organizations to integrate certified third-party tools. These advanced applications will scan video and audio content during meetings to detect deepfakes. Consequently, this security feature will gradually roll out in mid-November across desktop, Mac, and web platforms. How External Detection Works…

Microsoft Teams will soon allow organizations to integrate third-party tools for deepfake detection during meetings. Discover this new security feature. #MicrosoftTeams #DeepfakeDetection #CyberSecurity #TechNews

securityonline.infouCreator Android Spyware Hooks Telegram and WeChat Inside Virtual ContainersAt a Glance Malware Family uCreator Android spyware (branded by the vendor as YingGai and packaged under com.ucreator.*) Threat Actor Confirmed artifacts tied to three Changsha, Hunan companies (Hunan Youchuang, Changsha Sukai, Changsha Zhuoqing) and ~36 GitLab developers; suspected commercial crimeware vendor Target / Victims

Researcher Ovi exposes uCreator Android spyware. The YingGai uCreator Android spyware platform uses VirtualApp and LSPatch to hijack 20 mobile apps. #uCreator #YingGai #AndroidSpyware #MobileSecurity #WeChat #Telegram #Cybersecurity

securityonline.infoExposed Cairn AI Panels Reveal Autonomous Hacking Against Over 1,100 TargetsTL;DR Security researchers discovered more than 20 unsecured control dashboards for the Cairn AI hacking tool left open on the public internet. These exposed Cairn AI panels revealed over 1,100 automated attack projects targeting online retailers and payment systems worldwide. Because the operators failed to password-protect their dashboards, investigators uncovered stolen victim secrets. In addition, they found the attackers' own server credentials.

NorForge uncovered 20+ exposed Cairn AI panels showing how threat actors use the Cairn AI hacking tool to breach e-commerce and payment sites. #CairnAI #NorForge #AIHacking #Cybercrime #EcommerceSecurity #PenetrationTesting #Cybersecurity

meterpreter.orgToronto Crime Stoppers Breach Exposes Anonymous TipsA system designed to guarantee anonymity for crime witnesses has suffered a catastrophic data leak. Specifically, Canadian non-profit Toronto Crime Stoppers suspended operations on October 21 following a major platform compromise. The incident compromised the third-party P3 reporting software operated by vendor Navigate360. Consequently, hackers obtained 176,859 confidential tip submissions, jeopardizing informant identities. Compromised Raw Submissions Threaten Informant Safety Toronto Crime Stoppers utilized the P3 infrastructure continuously since 2018.

The Toronto Crime Stoppers breach compromised over 176,000 anonymous tips after hackers breached the P3 software platform managed by Navigate360. #TorontoCrimeStoppers #DataBreach #Cybersecurity #Privacy #P3Tips

securityonline.infoOpenSSL 4.1.0 Release Introduces Elbrus Support and DTLS 1.3The OpenSSL Project has officially launched its latest feature release. Specifically, the OpenSSL 4.1.0 release announcement marks the arrival of initial support for Russia's Elbrus (e2k) processor architecture. The cryptographic library powers critical data encryption across operating systems, enterprise servers, and secure web applications. Consequently, incorporating this new instruction set establishes a foundation for running core security routines on domestic Russian silicon.

The OpenSSL 4.1.0 release introduces initial Elbrus e2k architecture support, DTLS 1.3 protocol capabilities, and post-quantum performance upgrades. #OpenSSL #Cryptography #Elbrus #DTLS #Cybersecurity

dailytechnow.comGrok Releases First Seven Minutes of AI Generated OdysseyGrok Unveils Its AI Generated Odyssey Three months ago, Elon Musk promised a historically accurate film adaptation of The Odyssey. Now, Grok has unveiled the project's first seven minutes. Furthermore, creators dubbed it the inaugural episode of this ambitious series. Musk had previously publicly criticized Christopher Nolan's cinematic rendition of The Odyssey. He specifically cited Nolan's casting of non-white and transgender actors.

Elon Musk's Grok debuted the first seven minutes of its AI generated Odyssey film. Discover how it compares to Christopher Nolan's cinematic masterpiece. #Grok #AI #Odyssey #ElonMusk #ChristopherNolan

securityonline.infoAmazon ClickFix Campaign Abuses Windows Finger Command to Drop Lumma Stealer and NetSupportAt a glance Malware family Doina loader, a Node.js malware module, suspected Lumma Stealer, and a pirated NetSupport RMM client Threat actor Unknown; no attribution Targets Windows and macOS users searching for "amazon business"; at least three Huntress customers hit Delivery vector Sponsored Google ad leading to a fake Amazon login and a ClickFix fake CAPTCHA Key capabilities

An Amazon ClickFix campaign uses a fake CAPTCHA and the old Windows finger command to drop Lumma Stealer and NetSupport. Stay protected. #ClickFix #Amazon #Malvertising #LummaStealer #NetSupport #LOLBin #Huntress #Cybersecurity

securityonline.infoGMO Desktop Cloud Breach Exposes 26,000 FX ServersJapanese technology conglomerate GMO Internet Group suffered a catastrophic security compromise across its virtual workspace infrastructure. Specifically, the GMO Desktop Cloud breach impacted over 26,000 servers dedicated to foreign exchange trading. Consequently, cybercriminals exfiltrated sensitive client records and initiated unauthorized financial transactions across user accounts. In response, corporate leadership suspended operations immediately to prevent further damage. Severe Active Directory and RDP Misconfigurations…

A devastating GMO Desktop Cloud breach compromised over 26,000 servers, exposing FX trading accounts and prompting a full infrastructure shutdown. #GMOInternet #DesktopCloud #Cyberattack #DataBreach #InfoSec