 | New EDRChoker Tool Uses Policy-Based Quality of Service to Block EDR Processes | 2026-06-07 | True | cybersecurityNews.com | |
| Critical Cordova Vulnerability Threatens iOS App Data Boundaries | 2026-06-07 | True | securityonline.info | |
| C0XMO botnet spreads via DD-WRT router flaw, kills rival malware | 2026-06-07 | True | Bleeping Computer | |
| Silent Ransom Group targets law firms with fake IT support calls | 2026-06-07 | True | Bleeping Computer | |
| Hacked, leaked, and held for ransom: the worst breaches of 2026 so far | 2026-06-07 | True | TechCrunch Security News | |
| NetSuite Sent the Invoice. Oracle Signed It. The Payment Token Was the Weapon. | 2026-06-07 | True | IRONSCALES | |
| Week in review: Cisco SD-WAN 0-day exploited, Patch Tuesday forecast | 2026-06-07 | True | Help Net Security | |
| Massive PyPI Supply Chain Attack Staged via Malware Startup Hooks | 2026-06-07 | True | securityonline.info | |
| Instagram Fixes Password Reset Flaw That Exposes User Emails and Phone Numbers | 2026-06-07 | True | cybersecurityNews.com | |
| Miasma worm hits Microsoft GitHub; SolarWinds actively exploited; Chrome 429 patches | 2026-06-07 | True | defend.network – Daily Threat Briefings | |
| Inside modern GPS attacks. | 2026-06-07 | True | The CyberWire | |
| DarkSword: The iPhone Exploit That Forced Apple to Rewrite Its Own Security Playbook | 2026-06-07 | True | Security Boulevard | |
| Cryptographic Compliance: 1Password Resolves Hardware Token Configuration Disparity | 2026-06-07 | True | securityonline.info | |
| CISA Warns of Linux Kernel Improper Authentication Vulnerability Exploited in Attacks | 2026-06-07 | True | cybersecurityNews.com | |
| U.S. CISA adds SolarWinds Serv-U flaw to its Known Exploited Vulnerabilities catalog | 2026-06-06 | True | Security Affairs | |
| New Pink Extortion Group Targets Microsoft 365 Cloud Data Via Vishing Scams | 2026-06-06 | True | HackRead | |
| Report: Anthropic Deploys Engineers to Support NSA Use of Mythos | 2026-06-06 | True | Security Affairs | |
| Critical Everest Forms Pro flaw exploited to take over WordPress sites | 2026-06-06 | True | Bleeping Computer | |
| Free Apps on Samsung and LG Smart TVs Secretly Turning Your Devices Into AI Proxies | 2026-06-06 | True | cybersecurityNews.com | |
| China-Linked Espionage Cluster Deploys Custom ASPX/ASHX Shells on IIS | 2026-06-06 | True | GBHackers | |
| Four Domains, One Email: The DocuSign Homoglyph That Rode a CDR Allow-List | 2026-06-06 | True | IRONSCALES | |
| CVE-2026-11452 | GL.iNet GL-MT3000 up to 4.4.5 SET_USER_PWD /cgi-bin/glc FUN_0042e200 Password command injection | 2026-06-06 | True | VulDB Recent Entries | |
| CVE-2026-11451 | GL.iNet GL-MT3000 4.4.5 FTP Protocol /cgi-bin/glc snprintf media_dir command injection | 2026-06-06 | True | VulDB Recent Entries | |
| CVE-2026-11449 | GL.iNet GL-MT3000 4.4.5 LuCI JSON-RPC Interface /cgi-bin/luci/rpc rpc_sys command injection | 2026-06-06 | True | VulDB Recent Entries | |
| Crypto-Funded Chinese Peptide Labs Are Booming | 2026-06-06 | True | WIRED Security | |
| Critical UniFi OS Auth Bypass Flaws Lead to Unauthenticated Root RCE | 2026-06-06 | True | GBHackers | |
| CVE-2026-10725 | CRUX Protocol::HTTP/2 up to 1.12 on Perl headers_decode HTTP/2 Bomb data amplification | 2026-06-06 | True | VulDB Recent Entries | |
| CISA Alerts on Actively Exploited SolarWinds Serv-U Denial-of-Service Flaw | 2026-06-06 | True | GBHackers | |
| Malspam Campaign Abuses DoubleClick to Deploy Stealthy .NET Loader | 2026-06-06 | True | GBHackers | |
| UNC3753 Targets US Law Firms with Vishing, RMM Tools, and Physical Break-Ins | 2026-06-06 | True | GBHackers | |
| UNC3753 Targets US Law Firms with Vishing and RMM Tools | 2026-06-06 | True | Cyber Press | |
| Free Apps Are Quietly Turning Smart TVs Into Web-Scraping Proxies for AI | 2026-06-06 | True | The Hacker News | |
| Malspam Campaign Uses DoubleClick Redirects to Deliver .NET Loader | 2026-06-06 | True | Cyber Press | |
| CISA Adds Actively Exploited SolarWinds Serv-U DoS Flaw to KEV Catalog | 2026-06-06 | True | The Hacker News | |
| Claude Opus Found a Four-Year-Old Hole in Zcash’s Privacy Layer. Nobody Knows If Someone Already Used It. | 2026-06-06 | True | Security Affairs | |
| CISA Warns of Exploited SolarWinds Serv-U Vulnerability | 2026-06-06 | True | Cyber Press | |
| AI Agent Uncovers 21 Zero-Days in FFmpeg; Chrome Patches Record 429 Bugs | 2026-06-06 | True | The Hacker News | |
| Oxford Uni student data pwned yet again - this time via career platform breach | 2026-06-06 | True | The Register (Security) | |
| Critical UniFi OS Flaws Enable Auth Bypass and Command Execution | 2026-06-06 | True | Cyber Press | |
| CISA Warns of SolarWinds Serv-U Vulnerability Exploited in Attacks | 2026-06-06 | True | cybersecurityNews.com | |
| CVE-2026-9719 | LatePoint Plugin up to 5.6.0 on WordPress Appointment change_status cross-site request forgery | 2026-06-06 | True | VulDB Recent Entries | |
| CVE-2026-8900 | spyrosvl Simple SEO Slideshow Plugin up to 1.2.8 on WordPress Shortcode cross site scripting (fdff-4525-9272) | 2026-06-06 | True | VulDB Recent Entries | |
| CVE-2026-8893 | payaddons Express Payment for Stripe Plugin up to 1.28.0 on WordPress Shortcode register_shortcode Type cross site scripting | 2026-06-06 | True | VulDB Recent Entries | |
| CVE-2026-8438 | davidanderson All-In-One Security Plugin up to 5.4.7 on WordPress AIOS Dashboard get_rest_route REQUEST_URI cross site scripting | 2026-06-06 | True | VulDB Recent Entries | |
| CVE-2026-9280 | spacetime Ad Inserter Plugin up to 2.8.15 on WordPress Iframe Mode cross site scripting | 2026-06-06 | True | VulDB Recent Entries | |
| CVE-2026-8991 | glenwpcoder Drag and Drop Multiple File Upload for Contact Form 7 Plugin Setting cross site scripting | 2026-06-06 | True | VulDB Recent Entries | |
| CVE-2026-7796 | wpdevteam EmbedPress Plugin up to 4.5.3 on WordPress cross site scripting | 2026-06-06 | True | VulDB Recent Entries | |
| CVE-2026-6242 | TP-Link Tapo C520WS v2 ONVIF Subscribe Service format string | 2026-06-06 | True | VulDB Recent Entries | |
| CVE-2026-6240 | TP-Link Tapo C520WS v2 ONVIF DeleteUsers Service stack-based overflow | 2026-06-06 | True | VulDB Recent Entries | |
| CVE-2026-6239 | TP-Link Tapo C520WS v2 ONVIF CreateUsers Service stack-based overflow | 2026-06-06 | True | VulDB Recent Entries | |
