🛡️ Kasspar Cyber Daily

Fake Web3 Accelerator Uses npm Packages to Spread Malware and Hijack AI Agent Traffic · Drupal patches critical RCE flaws, warns exploits may emerge soon · Hackers exploit SiteGuard WAF flaw to run commands as admins

Critical BlockStrap flaw lets hackers run code on Magento servers · Drupal patches critical RCE flaws, warns exploits may emerge soon · BeyondTrust Remote Support Zero-Day Continues Trend of Exploited Edge Bugs

China-Linked Hackers Exploited BeyondTrust Zero-Day to Take Over Remote Support Servers · BeyondTrust patches zero-day exploited in attacks since August · Critical BlockStrap flaw lets hackers run code on Magento servers

China-Linked Hackers Exploited BeyondTrust Zero-Day to Take Over Remote Support Servers · BeyondTrust patches zero-day exploited in attacks since August · Hackers exploit Collabora RCE flaw to backdoor Nextcloud servers

Cisco patches new Secure Email Gateway zero-day exploited in attacks · Langflow's Critical Authenticated RCE Flaw Targeted in 1,423 Honeypot Exploit Attempts · CISA Urges Immediate Ivanti Connect Secure Updates as Honeypots Log 105 Exploit Attempts

Ivanti warns of Connect Secure zero-day exploited in attacks · Microsoft October 2026 Patch Tuesday fixes 1,411 flaws, 3 zero-days · Ghostscript flaw lets hackers hijack servers via PDF uploads

Critical SonicWall SMA 1000 Flaw Targeted in 135 Exploitation Attempts After Patch · Attackers Exploit CVSS 10.0 Bricksforge WordPress Flaw Enabling Unauthenticated RCE · Maximum-Severity SSRF Flaw in SonicWall SMA Devices Under Attack

Critical SonicWall SMA 1000 Flaw Targeted in 135 Exploitation Attempts After Patch · Attackers Exploit CVSS 10.0 Bricksforge WordPress Flaw Enabling Unauthenticated RCE · GitLab warns of max severity code execution vulnerability

Unpatched AhsayCBS flaws exploited to deploy webshells, mine crypto · Max severity SonicWall SMA1000 flaw now exploited in attacks · Flax Typhoon Exploits Five Flaws as CISA Sets October 11 Deadline for Federal Agencies

Unpatched AhsayCBS flaws exploited to deploy webshells, mine crypto · Citrix Patches Critical NetScaler Flaw That Could Enable RCE in SAML Deployments · Max severity SonicWall SMA1000 flaw now exploited in attacks

Citrix Patches Critical NetScaler Flaw That Could Enable RCE in SAML Deployments · Hackers get $1,262,000 for 98 zero-days at Pwn2Own Ireland · FBI disrupts Chinese hacking tools used to breach critical infrastructure

Hackers exploit critical Atlassian flaw after public PoC release · ASOS links data breach to social engineering attack, credential theft · Unpatched Critical LMCache Flaw Lets Unauthenticated Attackers Run Code Remotely

Atlassian warns of critical file-access flaw in Jira, Confluence · Atlassian Data Center Flaw Draws Exploitation Attempts Within Two Hours of Public Details · Rejetto HFS servers now actively scanned for critical RCE flaw

Citrix patches NetScaler SAML zero-day exploited in attacks · Attackers Target Rejetto HFS Flaw That Enables Admin Session Forgery and RCE · Realtek Jungle SDK Exploit Attempts Deliver Cling Botnet With STUN-Based C2

Citrix patches NetScaler SAML zero-day exploited in attacks · Attackers Target Rejetto HFS Flaw That Enables Admin Session Forgery and RCE · Realtek Jungle SDK Exploit Attempts Deliver Cling Botnet With STUN-Based C2

Frontline Education breach exposes school district employee data · Dell CSM Flaws Enable Unauthenticated Admin Access and Root on Kubernetes Nodes · Warlock Exploits SharePoint Flaws to Disable Security Tools and Deploy Ransomware

Fortinet warns of critical FortiMail flaw exploited in zero-day attacks · Critical FortiMail Zero-Day Flaw Exploited in Attacks Allows Unauthenticated Arbitrary File Writes · Frontline Education breach exposes school district employee data

Fortinet warns of critical FortiMail flaw exploited in zero-day attacks · Critical FortiMail Zero-Day Flaw Exploited in Attacks Allows Unauthenticated Arbitrary File Writes · DIVD says Zammad zero-days enabled AI-driven network breach

DIVD says Zammad zero-days enabled AI-driven network breach · Cisco Warns of Attackers Exploiting Critical Authentication Bypass in SD-WAN Manager · Citrix NetScaler CVE-2026-88772 Exploit Details Show Pre-Auth Path to Shellcode Execution

Citrix NetScaler CVE-2026-88772 Exploit Details Show Pre-Auth Path to Shellcode Execution · Apple Zero-Day Vulnerability Weaponized in Targeted Attacks · Bitget hacked via zero-day in third-party security products

Apple patches CoreGraphics zero-day flaw exploited in attacks · Citrix confirms two NetScaler RCE zero-days exploited in attacks · Kiteworks patches critical flaw, brings customer systems online