https://honeypotdaily.com/Tech and security news that mattersenWed, 21 Oct 2026 16:49:46 +0000https://honeypotdaily.com/category/vulnerabilities/how-cisco-sql-injection-flaw-exposes-unified-cm/https://honeypotdaily.com/category/vulnerabilities/how-cisco-sql-injection-flaw-exposes-unified-cm/Wed, 21 Oct 2026 16:38:03 +0000VulnerabilitiesA high-severity SQL injection vulnerability affects multiple Cisco collaboration products, requiring immediate inventory checks by security teams.https://honeypotdaily.com/category/vulnerabilities/how-does-cisco-address-improper-input-validation/https://honeypotdaily.com/category/vulnerabilities/how-does-cisco-address-improper-input-validation/Wed, 21 Oct 2026 16:35:39 +0000VulnerabilitiesCisco issues hardening updates for Unified CM and related products to fix multiple internally discovered input validation flaws rated high severity.https://honeypotdaily.com/category/vulnerabilities/how-does-cve-2026-85683-allow-unauthenticated/https://honeypotdaily.com/category/vulnerabilities/how-does-cve-2026-85683-allow-unauthenticated/Wed, 21 Oct 2026 09:05:23 +0000VulnerabilitiesA high-severity flaw in the Jane Menu plugin lets attackers inject scripts into pages. Teams must check for unpatched installations and monitor for anomalous outbound requests.https://honeypotdaily.com/category/vulnerabilities/which-php-versions-get-emergency-patch-for/https://honeypotdaily.com/category/vulnerabilities/which-php-versions-get-emergency-patch-for/Wed, 21 Oct 2026 06:32:04 +0000VulnerabilitiesPHP teams face an out-of-cycle release for two 9.2-rated vulnerabilities, though technical details and affected versions remain unconfirmed by the vendor.https://honeypotdaily.com/category/vulnerabilities/how-does-cve-2026-71195-allow-authenticated-users/https://honeypotdaily.com/category/vulnerabilities/how-does-cve-2026-71195-allow-authenticated-users/Wed, 21 Oct 2026 06:07:00 +0000VulnerabilitiesAuthenticated users can manipulate public share metadata and access rules in Manila versions below 23.0.1, risking data exfiltration.https://honeypotdaily.com/category/vulnerabilities/will-totolink-x2000rs-lack-of-signature-checks/https://honeypotdaily.com/category/vulnerabilities/will-totolink-x2000rs-lack-of-signature-checks/Wed, 21 Oct 2026 04:34:19 +0000VulnerabilitiesA critical unsigned firmware vulnerability in the Totolink X2000R router permits authenticated attackers to install arbitrary firmware via HTTP requests.https://honeypotdaily.com/category/vulnerabilities/how-exposed-is-your-network-to-the-totolink/https://honeypotdaily.com/category/vulnerabilities/how-exposed-is-your-network-to-the-totolink/Wed, 21 Oct 2026 04:07:58 +0000VulnerabilitiesA critical buffer overflow in specific Totolink firmware allows authenticated attackers to execute arbitrary code via HTTP requests, posing a risk to exposed management interfaces.https://honeypotdaily.com/category/vulnerabilities/will-your-php-servers-survive-the-leaked-rce/https://honeypotdaily.com/category/vulnerabilities/will-your-php-servers-survive-the-leaked-rce/Wed, 21 Oct 2026 03:31:05 +0000VulnerabilitiesEmergency patches for two critical remote code execution flaws in PHP are due tomorrow after details leaked early.https://honeypotdaily.com/category/vulnerabilities/does-your-perl-stack-use-vulnerable-imager-file/https://honeypotdaily.com/category/vulnerabilities/does-your-perl-stack-use-vulnerable-imager-file/Wed, 21 Oct 2026 01:02:09 +0000VulnerabilitiesOut-of-bounds reads in older Imager::File::GIF versions expose Perl services to potential memory disclosure when processing GIF images.https://honeypotdaily.com/category/vulnerabilities/does-totolink-x2000r-firmware-contain-a-critical/https://honeypotdaily.com/category/vulnerabilities/does-totolink-x2000r-firmware-contain-a-critical/Wed, 21 Oct 2026 00:46:50 +0000VulnerabilitiesA critical authenticated remote code execution flaw exists in specific TOTOLINK X2000R firmware. Teams should verify versions and restrict administrative access immediately.https://honeypotdaily.com/category/vulnerabilities/how-does-cve-2026-101767-expose-oracle-e-business/https://honeypotdaily.com/category/vulnerabilities/how-does-cve-2026-101767-expose-oracle-e-business/Wed, 21 Oct 2026 00:22:50 +0000VulnerabilitiesHorizon3 researchers found a critical SQL injection flaw in Oracle EBS TCF servlets that allows unauthenticated remote code execution on affected servers.https://honeypotdaily.com/category/vulnerabilities/does-gpac-mp4box-ac-4-parsing-flaw-expose-your/https://honeypotdaily.com/category/vulnerabilities/does-gpac-mp4box-ac-4-parsing-flaw-expose-your/Tue, 20 Oct 2026 23:06:29 +0000VulnerabilitiesA heap buffer overflow in GPAC MP4Box allows remote attackers to crash services via crafted AC-4 files, rated medium severity by BDU assessment.https://honeypotdaily.com/category/vulnerabilities/does-your-apache-tomcat-instance-risk/https://honeypotdaily.com/category/vulnerabilities/does-your-apache-tomcat-instance-risk/Tue, 20 Oct 2026 20:07:20 +0000VulnerabilitiesA critical flaw in Apache Tomcat allows unauthenticated access when specific JNDI realm settings are used, affecting multiple major version branches.https://honeypotdaily.com/category/cyber-attacks/how-amazon-ciso-says-ai-shrinks-attack-timelines/https://honeypotdaily.com/category/cyber-attacks/how-amazon-ciso-says-ai-shrinks-attack-timelines/Tue, 20 Oct 2026 15:25:16 +0000Cyber AttacksAmazon’s CISO shares data showing attackers can achieve full system takeover in under thirteen minutes, forcing a rethink of patching windows.https://honeypotdaily.com/category/vulnerabilities/what-allows-unauthenticated-remote-code-execution/https://honeypotdaily.com/category/vulnerabilities/what-allows-unauthenticated-remote-code-execution/Tue, 20 Oct 2026 14:06:25 +0000VulnerabilitiesHorizon3 details how CVE-2026-106173 allows attackers to write arbitrary files on FortiSIEM systems via a path traversal bug in an open gRPC service.https://honeypotdaily.com/category/vulnerabilities/does-cve-2026-9589s-9-3-cvss-score-indicate/https://honeypotdaily.com/category/vulnerabilities/does-cve-2026-9589s-9-3-cvss-score-indicate/Tue, 20 Oct 2026 11:50:00 +0000VulnerabilitiesCritical flaw in Unblu Spark 7.0 to 8.36.1 lets authenticated users alter configuration data for entities outside their authorised scope.https://honeypotdaily.com/category/vulnerabilities/can-authenticated-users-run-root-commands-on/https://honeypotdaily.com/category/vulnerabilities/can-authenticated-users-run-root-commands-on/Tue, 20 Oct 2026 10:33:52 +0000VulnerabilitiesA high-severity command injection flaw in older ADAM-3600 firmware allows attackers to execute code with root privileges on the system.https://honeypotdaily.com/category/vulnerabilities/are-your-nginx-gateways-exposed-to-f5s-latest/https://honeypotdaily.com/category/vulnerabilities/are-your-nginx-gateways-exposed-to-f5s-latest/Tue, 20 Oct 2026 04:06:06 +0000VulnerabilitiesF5 has issued emergency patches for three severe vulnerabilities in NGINX components that could enable remote code execution or denial-of-service attacks.https://honeypotdaily.com/category/vulnerabilities/is-your-plex-server-being-used-for-crypto-mining/https://honeypotdaily.com/category/vulnerabilities/is-your-plex-server-being-used-for-crypto-mining/Tue, 20 Oct 2026 02:50:14 +0000VulnerabilitiesActive wild exploitation of chained Plex flaws installs miners and proxies, urging teams to verify patch status on exposed media servers.https://honeypotdaily.com/category/vulnerabilities/does-cve-2026-109395-allow-crafted-lzf-streams-to/https://honeypotdaily.com/category/vulnerabilities/does-cve-2026-109395-allow-crafted-lzf-streams-to/Tue, 20 Oct 2026 01:57:46 +0000VulnerabilitiesA high-severity out-of-bounds access in Ning compress-lzf before 1.2.0 allows crafted LZF streams to leak heap memory or crash Java Virtual Machines.https://honeypotdaily.com/category/vulnerabilities/are-unpatched-plex-servers-being-hijacked-for/https://honeypotdaily.com/category/vulnerabilities/are-unpatched-plex-servers-being-hijacked-for/Tue, 20 Oct 2026 00:04:44 +0000VulnerabilitiesAttackers chain four flaws in Plex Media Server to install cryptominers and residential proxy software on exposed devices.https://honeypotdaily.com/category/vulnerabilities/how-does-cve-2026-109437-enable-unauthenticated/https://honeypotdaily.com/category/vulnerabilities/how-does-cve-2026-109437-enable-unauthenticated/Mon, 19 Oct 2026 23:12:45 +0000VulnerabilitiesA critical flaw in Cognition versions prior to 0.13.0 permits unauthenticated attackers to execute arbitrary code via exposed API endpoints without credentials.https://honeypotdaily.com/category/malware/will-federal-civilian-workers-data-be-safe-after/https://honeypotdaily.com/category/malware/will-federal-civilian-workers-data-be-safe-after/Mon, 19 Oct 2026 22:03:28 +0000Malware & RansomwareHomeland Security orders the removal of DeepSeek tools from civilian federal IT systems, citing risks of data leakage to China and potential malware.https://honeypotdaily.com/category/cyber-attacks/how-many-sites-did-ai-agents-breach-in-this/https://honeypotdaily.com/category/cyber-attacks/how-many-sites-did-ai-agents-breach-in-this/Mon, 19 Oct 2026 16:08:57 +0000Cyber AttacksA hacker used AI agents to access over 100 corporate sites by exploiting exposed Carin instances, targeting firms across multiple continents.https://honeypotdaily.com/category/vulnerabilities/can-apache-camel-dynamic-router-flaws-allow/https://honeypotdaily.com/category/vulnerabilities/can-apache-camel-dynamic-router-flaws-allow/Mon, 19 Oct 2026 10:55:21 +0000VulnerabilitiesA high-severity injection flaw in Apache Camel’s dynamic router lets attackers run arbitrary code via message headers or bodies.https://honeypotdaily.com/category/cyber-attacks/how-did-a-fraud-ring-exploit-licence-exchange/https://honeypotdaily.com/category/cyber-attacks/how-did-a-fraud-ring-exploit-licence-exchange/Mon, 19 Oct 2026 06:45:16 +0000Cyber AttacksDubai Police arrested eight suspects for swapping foreign permits for UAE licences without testing, costing clients AED 10,000 each.https://honeypotdaily.com/category/threat-intel/dark-web-threat-intelligence-explained-separating/https://honeypotdaily.com/category/threat-intel/dark-web-threat-intelligence-explained-separating/Mon, 19 Oct 2026 05:45:04 +0000Threat IntelligenceHidden forum monitoring reveals actor intent long before infrastructure deployment occurs.https://honeypotdaily.com/category/threat-intel/osint-investigations-mistakes-and-how-to-avoid/https://honeypotdaily.com/category/threat-intel/osint-investigations-mistakes-and-how-to-avoid/Mon, 19 Oct 2026 05:31:23 +0000Threat IntelligenceTreating public data as verified truth creates blind spots that compromise every security assessment you run.https://honeypotdaily.com/category/threat-intel/block-osint-tool-reconnaissance-across-your/https://honeypotdaily.com/category/threat-intel/block-osint-tool-reconnaissance-across-your/Mon, 19 Oct 2026 05:16:39 +0000Threat IntelligencePublic reconnaissance tools map your entire perimeter by querying shared third-party datasets long before any packets reach your boundary firewalls.https://honeypotdaily.com/category/cyber-attacks/did-your-team-hand-over-vpn-credentials-to-a-fake/https://honeypotdaily.com/category/cyber-attacks/did-your-team-hand-over-vpn-credentials-to-a-fake/Sun, 18 Oct 2026 17:28:47 +0000Cyber AttacksAttackers stole admin logins via a lookalike site before serving genuine, signed software, leaving victims unaware of the breach.https://honeypotdaily.com/category/vulnerabilities/does-phantombuffer-bypass-edr-using-wm-settext/https://honeypotdaily.com/category/vulnerabilities/does-phantombuffer-bypass-edr-using-wm-settext/Sun, 18 Oct 2026 03:27:29 +0000VulnerabilitiesA new report details how PhantomBuffer evades endpoint detection by avoiding standard memory APIs in favour of stealth injection techniques.https://honeypotdaily.com/category/vulnerabilities/can-phpmyfaq-users-bypass-permissions-to-edit/https://honeypotdaily.com/category/vulnerabilities/can-phpmyfaq-users-bypass-permissions-to-edit/Sat, 17 Oct 2026 19:29:09 +0000VulnerabilitiesA broken object-level authorisation flaw in phpMyFAQ allows authenticated users with edit rights to modify any FAQ entry, bypassing moderation checks.https://honeypotdaily.com/category/vulnerabilities/how-does-improper-hostname-validation-in-coder/https://honeypotdaily.com/category/vulnerabilities/how-does-improper-hostname-validation-in-coder/Sat, 17 Oct 2026 19:19:07 +0000VulnerabilitiesA high-severity flaw in older Coder versions allows attackers to steal workspace API keys by exploiting improper hostname validation in proxy redirects.https://honeypotdaily.com/category/vulnerabilities/does-libreoffice-pdf-flaw-enable-remote-code/https://honeypotdaily.com/category/vulnerabilities/does-libreoffice-pdf-flaw-enable-remote-code/Fri, 16 Oct 2026 18:57:41 +0000VulnerabilitiesA heap overflow in PDF parsing permits arbitrary code execution, requiring user interaction with a malicious document to trigger the exploit.https://honeypotdaily.com/category/vulnerabilities/how-does-cifs-utils-mount-option-injection-affect/https://honeypotdaily.com/category/vulnerabilities/how-does-cifs-utils-mount-option-injection-affect/Fri, 16 Oct 2026 16:12:04 +0000VulnerabilitiesA vulnerability in cifs-utils versions 4.2 through 7.8 allows local privilege escalation via mount-option injection, with a fix available in version 7.9.https://honeypotdaily.com/category/cyber-attacks/will-ai-native-language-scams-fool-2026-election/https://honeypotdaily.com/category/cyber-attacks/will-ai-native-language-scams-fool-2026-election/Fri, 16 Oct 2026 14:45:47 +0000Cyber AttacksFBI and CISA warn that super intelligence enables sophisticated phishing and smishing campaigns against US election staff and candidates.https://honeypotdaily.com/category/vulnerabilities/is-your-crafty-controller-audit-log-vulnerable-to/https://honeypotdaily.com/category/vulnerabilities/is-your-crafty-controller-audit-log-vulnerable-to/Fri, 16 Oct 2026 14:21:54 +0000VulnerabilitiesA critical output escaping flaw in Crafty Controller allows remote attackers to inject scripts via HTTP headers, exposing all versions up to 4.10.8.https://honeypotdaily.com/category/cyber-attacks/how-did-exposed-credentials-lead-to-the-dodo/https://honeypotdaily.com/category/cyber-attacks/how-did-exposed-credentials-lead-to-the-dodo/Fri, 16 Oct 2026 14:09:44 +0000Cyber AttacksRussian police detained three suspects from DataSuckers after they used leaked GitHub credentials to steal millions of customer records from the pizza chain.https://honeypotdaily.com/category/cyber-attacks/how-do-mass-job-applications-obscure-recruitment/https://honeypotdaily.com/category/cyber-attacks/how-do-mass-job-applications-obscure-recruitment/Fri, 16 Oct 2026 12:12:10 +0000Cyber AttacksVolume-based application strategies create noise that allows fraudulent recruiter messages to mimic legitimate responses, complicating verification for security teams.https://honeypotdaily.com/category/vulnerabilities/does-search-regex-plugin-vulnerability-permit/https://honeypotdaily.com/category/vulnerabilities/does-search-regex-plugin-vulnerability-permit/Fri, 16 Oct 2026 09:01:13 +0000VulnerabilitiesThe WordPress Search Regex plugin allows authenticated users to inject PHP objects, risking code execution via a deserialization flaw in version 3.5.