DAILY BRIEFING
Cybersecurity Daily Briefing
Every day we read the security press, pick the stories that change what you should do, and summarize them with AI. Published daily at 14:00 UTC.
5 stories
New CrowdStrike 'FalconFlank' zero-day grants SYSTEM privileges
Today's briefing covers an unpatched CrowdStrike LPE exploit, an exploited Chrome zero-day, widespread WordPress plugin attacks, Exchange Online email delays, and urgent updates for Plex.
Read the full briefing
Today's stories
New CrowdStrike 'FalconFlank' zero-day grants SYSTEM privileges
Over 440,000 Exploit Attempts Target Super Forms and Elementor Pro RCE Flaws
- What to do
- Update Super Forms to version 6.3.314 or later and Elementor Pro to version 4.2.2 or later immediately.
Google warns of new Chrome zero-day flaw exploited in attacks
- What to do
- Update Google Chrome browsers immediately to the latest patched release.
Plex Urges Immediate Updates After Patching Multiple Undisclosed Security Flaws
Exchange Online outage causes email delays, 'Server busy' errors
Archive
- Your Employee’s Password Appeared in an Infostealer Log. Now What?5 stories
- SonicWall SMA 1000 Zero-Days, Virtualizor BGP Hijack, and StreamRat Trojan5 stories
- Iranian RATs targeting macOS, 22,000 unpatched Exchange servers, and METR API key breach5 stories
- Rhysida Attacks Berlin Administration as Aurora Ransomware Operators Abuse Cursor AI5 stories
- TerminalFix Uses Fake Cloudflare CAPTCHAs to Deploy Reverse-Tunnel Backdoor5 stories
- McKesson Data Breach, Berlin Ransomware Extortion, and PaperCut Patch Bypass5 stories
- Over 8,300 Gitea servers vulnerable to code execution attacks5 stories
- Australia arrests alleged TeamPCP hackers behind supply-chain attacks5 stories
- Ubiquiti patches three max severity security vulnerabilities5 stories
- Microsoft PowerToys adds Alt+Tab-style switching for an app's windows5 stories
- Microsoft: August updates break printing, PDF export in WPF apps5 stories
- TikTok $400M FTC Settlement, Android Auto Supply-Chain Malware, npm RedC2 Backdoor5 stories
- Named Pipes Under Attack: Securing Windows Interprocess Communication5 stories
- Microsoft rolls out Classic Outlook theme for New Outlook users5 stories
- Citrix urges admins to patch new NetScaler flaws as soon as possible5 stories
- SilkParasite Espionage, 14,500+ Dahua Devices Hacked, and StopAndProtect Campaign5 stories
- AI "Mind Viruses" Can Spread Between Agents Through Persistent Prompt Files5 stories
- ⚡ Weekly Recap: VMware Exploits, Windows 0-Day, MCP Attacks, Browser Hijacks and More5 stories
- New Evooo1Bot Linux botnet turns routers into traffic relay nodes5 stories