Security news, decoded.

What happened, who is affected, and what to do next. Every story is linked to CVEs and enriched with product, exploitation, and patch context.

RSS

Latest signal Daily CyberSecurity (securityonline.info) Patch released Windows patch-tuesday Microsoft Office

Microsoft Patch Tuesday Fixes Address Critical Zero-Day Flaws

Open at Daily CyberSecurity (securityonline.info)

8.8 CVE-2025-55234 8.4 CVE-2026-45461 8.4 CVE-2026-45474 KEV CVE-2024-43572 7.8 CVE-2026-45586 + 3 more

Earlier39 stories

Jun 10

Daily CyberSecurity (securityonline.info) Patch Ivanti Endpoint Manager Mobile (EPMM) rce4 min read

High-Severity Vulnerabilities Addressed in Endpoint Manager Mobile

9.8 CVE-2024-50330 9.6 CVE-2026-8043 KEV CVE-2025-0282 7.2 CVE-2026-10727 KEV CVE-2026-6973 + 1 more

Jun 10

Daily CyberSecurity (securityonline.info) PoC rclone rce3 min read

Critical Rclone Command Execution Bug Threatens Cloud Environments

9.8 CVE-2026-49980

Jun 10

Daily CyberSecurity (securityonline.info) Patch Veeam Backup & Replication rce3 min read

Critical Veeam Backup Vulnerability Exposed

9.9 CVE-2024-42448 7.1 CVE-2024-42449 — CVE-2026-44963

Jun 10

Daily CyberSecurity (securityonline.info) Patch FortiSandbox rce3 min read

Critical FortiSandbox Flaw Requires Immediate Patching

KEV CVE-2026-25089 9.6 CVE-2023-45590

Jun 10

Daily CyberSecurity (securityonline.info) Patch TinyMCE web-app4 min read

Critical TinyMCE Cross Site Scripting Flaws Threaten Millions of Applications

8.7 CVE-2026-47759 8.7 CVE-2026-47760 8.7 CVE-2026-47761 8.7 CVE-2026-47762 6.1 CVE-2023-48219 + 1 more

Jun 10

watchTowr Labs Advisory Ivanti Sentry rce15 min read

More Evidence That Words Don't Mean What We Thought They Meant (Ivanti Sentry Pre-Auth OS Command Injection CVE-2026-10520)

KEV CVE-2026-10520 9.9 CVE-2026-10523

Jun 10

Daily CyberSecurity (securityonline.info) Advisory MBS Universal Gateway auth-bypass4 min read

MBS Universal Gateway Flaws Threaten Building Automation Networks

MBS GmbH disclosed multiple critical security issues in its MBS Universal Gateway devices affecting firmware version V6005 and earlier, including unauthenticated access via a default credential weakness tracked as CVE-2026-35075 (CVSS 9.8) and remotely exploitable stack buffer overflow problems tracked as CVE-2026-35085, CVE-2026-35084, and CVE-2026-35083. The flaws could allow attackers to obtain full root control and, in some cases, read sensitive logs, placing smart building perimeter networks at risk. Administrators should update affected gateways to V6007 immediately to reduce the likelihood of compromise.

9.8 CVE-2026-35075 8.8 CVE-2026-35083 8.8 CVE-2026-35084 8.8 CVE-2026-35085

Jun 9

Krebs on Security Roundup Windows Nightmare Eclipse6 min read

A Record-Breaking Patch Tuesday for June 2026

7.8 CVE-2026-45586 7.5 CVE-2026-49160 6.8 CVE-2026-50507

Jun 9

Dark Reading Roundup Windows rce7 min read

Blame AI: Patch Tuesday Hits Record 206 CVEs

9.8 CVE-2026-44815 9.8 CVE-2026-47291 8.1 CVE-2026-42987 7.8 CVE-2026-44803 7.8 CVE-2026-44812 + 3 more

Jun 9

Cisco Talos Roundup Windows rce13 min read

Microsoft Patch Tuesday for June 2026 — Snort rules and prominent vulnerabilities

10.0 CVE-2026-48567 9.8 CVE-2026-26142 9.8 CVE-2026-44815 9.8 CVE-2026-45657 9.8 CVE-2026-47291 + 43 more

Jun 9

Rapid7 Blog Roundup Windows Nightmare Eclipse55 min read

Rapid7

9.8 CVE-2026-10879 9.8 CVE-2026-26142 9.8 CVE-2026-44815 9.8 CVE-2026-45657 9.8 CVE-2026-47291 + 213 more

Jun 9

Ars Technica (Security) PoC Windows Collaborative Translation Framework (CTFMON) Nightmare Eclipse2 min read

Locked in heated rivalry with researcher, Microsoft fixes 0-day they disclosed

7.8 CVE-2026-45586 7.0 CVE-2020-17103

Jun 9

Qualys Security Blog Roundup Microsoft Windows patch-tuesday13 min read

Microsoft and Adobe Patch Tuesday, June 2026 Security Update Review

9.8 CVE-2026-26142 9.8 CVE-2026-44815 9.8 CVE-2026-45657 9.8 CVE-2026-47291 9.1 CVE-2025-10263 + 39 more

Jun 9

BleepingComputer Patch SAP NetWeaver patch-tuesday3 min read

SAP fixes critical flaws in NetWeaver and Commerce Cloud

9.9 CVE-2026-44748 9.8 CVE-2026-27671 9.1 CVE-2026-22732 9.1 CVE-2026-29145 9.0 CVE-2026-40128 + 1 more

Jun 9

SecurityWeek Patch Microsoft Windows Chaotic Eclipse3 min read

Microsoft Patches 200 Vulnerabilities

7.8 CVE-2026-45586 7.5 CVE-2026-49160 6.8 CVE-2026-50507

Jun 9

BleepingComputer Exploited Windows Collaborative Translation Framework (CTFMON) Nightmare Eclipse39 min read

Microsoft June 2026 Patch Tuesday fixes 6 zero-days, 200 flaws

9.8 CVE-2026-26142 9.8 CVE-2026-44815 9.8 CVE-2026-45657 9.8 CVE-2026-47291 9.8 CVE-2026-47643 + 198 more

Jun 9

BleepingComputer Patch Windows Collaborative Translation Framework (CTFMON) patch-tuesday36 min read

Microsoft June 2026 Patch Tuesday fixes 3 zero-day, 200 flaws

9.8 CVE-2026-26142 9.8 CVE-2026-44815 9.8 CVE-2026-45657 9.8 CVE-2026-47291 9.8 CVE-2026-47643 + 195 more

Jun 9

SANS Internet Storm Center Exploited Microsoft Windows patch-tuesday22 min read

Microsoft June 2026 Patch Tuesday - SANS Internet Storm Center

10.0 CVE-2026-48567 9.8 CVE-2026-26142 9.8 CVE-2026-44815 9.8 CVE-2026-45657 9.8 CVE-2026-47291 + 199 more

Jun 9

SecurityWeek Patch OpenSSL patch-tuesday3 min read

OpenSSL Patches High-Severity Vulnerability Found With AI

8.8 CVE-2026-45447

Jun 9

The Hacker News Patch Veeam Backup & Replication rce2 min read

Veeam Backup & Replication RCE Flaw Lets Domain Users Run Remote Code

— CVE-2026-44963

Jun 9

Dark Reading Exploited WinRAR Shadow-Earth-0667 min read

Russian Attackers Weaponize WinRAR Flaw Against Ukrainian Orgs

KEV CVE-2025-8088 KEV CVE-2023-38831

Jun 9

Ars Technica (Security) PoC Linux kernel privilege-escalation2 min read

High-severity vulnerability in Linux caused by a single errant character

7.8 CVE-2026-23111 5.5 CVE-2026-53111

Jun 9

BleepingComputer Patch Veeam Backup & Replication rce3 min read

New Veeam vulnerability exposes backup servers to RCE attacks

KEV CVE-2024-40711 — CVE-2026-44963

Jun 9

Daily CyberSecurity (securityonline.info)4 min read

Spring Framework Security Vulnerabilities Addressed in Critical Maintenance Updates

7.5 CVE-2026-41842 7.4 CVE-2026-41720 5.9 CVE-2026-41840 5.9 CVE-2026-41841 4.2 CVE-2026-41839

Jun 9

The Hacker News Exploited WinRAR Earth Dahu5 min read

WinRAR Flaw Exploited by Russia-Aligned Groups to Deploy Stealers in Ukraine

KEV CVE-2025-8088

Jun 9

SecurityWeek Patch SAP NetWeaver auth-bypass2 min read

SAP Patches Critical NetWeaver, Commerce Vulnerabilities

9.9 CVE-2026-44748 9.8 CVE-2026-27671 9.1 CVE-2026-22732 9.0 CVE-2026-40128

Jun 9

The Hacker News PoC open-weight LLM ai-ml9 min read

Researchers Build Self-Replicating AI Worm That Operates Entirely on Local, Open-Weight Models

KEV CVE-2026-39987 8.8 CVE-2026-43284 KEV CVE-2026-31431 7.8 CVE-2026-43500

Jun 9

The Hacker News Exploited Google Chrome zero-day2 min read

Chrome V8 Zero-Day CVE-2026-11645 Exploited in the Wild - Patch Now

KEV CVE-2026-11645 KEV CVE-2026-2441 KEV CVE-2026-3909 KEV CVE-2026-3910 KEV CVE-2026-5281

Jun 9

SecurityWeek Exploited Check Point VPN Qilin ransomware2 min read

Check Point VPN Zero-Day Exploited in Qilin Ransomware Attacks

KEV CVE-2026-50751 7.4 CVE-2026-50752

Jun 9

BleepingComputer Exploited Check Point Remote Access VPN Qilin ransomware3 min read

CISA gives feds 3 days to patch Check Point VPN bug exploited as zero-day

KEV CVE-2026-50751 KEV CVE-2024-24919

Jun 9

BleepingComputer Exploited Google Chrome rce3 min read

Google patches new Chrome zero-day flaw exploited in the wild

KEV CVE-2024-0519 KEV CVE-2026-11645 KEV CVE-2026-2441 KEV CVE-2026-3909 KEV CVE-2026-3910 + 1 more

Jun 9

Daily CyberSecurity (securityonline.info) Patch SAP patch-tuesday4 min read

SAP Security Patch Day: Critical Security Vulnerabilities Remediated

10.0 CVE-2025-42944 9.9 CVE-2026-44748 9.8 CVE-2026-27671 9.1 CVE-2026-22732 9.0 CVE-2026-40128

Jun 9

The Hacker News Exploited BerriAI LiteLLM ai-ml4 min read

LiteLLM Flaw CVE-2026-42271 Exploited in the Wild, Chains to Unauthenticated RCE

KEV CVE-2026-42208 KEV CVE-2026-42271 6.5 CVE-2026-48710

Jun 9

SecurityWeek Exploited Google Chrome rce2 min read

Google Patches 5th Chrome Zero-Day Exploited in 2026

KEV CVE-2026-11645 KEV CVE-2026-2441 KEV CVE-2026-3909 KEV CVE-2026-3910 KEV CVE-2026-5281

Jun 9

Daily CyberSecurity (securityonline.info) Patch Progress Kemp LoadMaster rce3 min read

Critical Kemp LoadMaster Flaws Expose Network Appliances to RCE

9.6 CVE-2026-8037 6.8 CVE-2026-33691

Jun 9

Daily CyberSecurity (securityonline.info) Patch Apache HTTP Server rce4 min read

Emergency Patch Release Secures Apache HTTP Server Deployments Against Remote Attacks

9.8 CVE-2026-44631 9.0 CVE-2022-36760 7.5 CVE-2026-34355 7.5 CVE-2026-34356

Jun 9

Daily CyberSecurity (securityonline.info) Patch TP-Link Archer MR600 (v5) rce4 min read

TP-Link Patches Critical Archer MR600 Command Injection Flaw

9.8 CVE-2025-6542 8.8 CVE-2026-0629 8.0 CVE-2025-15568 7.2 CVE-2026-5509 — CVE-2025-14756 + 2 more

Jun 9

Daily CyberSecurity (securityonline.info) Patch ABB T-MAC Plus (Terminal Management System) web-app3 min read

ABB Patches Critical T-MAC Plus Terminal System Flaws

9.9 CVE-2025-14771 8.8 CVE-2025-14772 7.4 CVE-2025-14774

Jun 9

Daily CyberSecurity (securityonline.info) Research Jupyter Enterprise Gateway cloud4 min read

Jupyter Gateway Vulnerabilities: Severe CVSS 10 Exploits Uncovered

9.8 CVE-2026-44180 9.6 CVE-2025-32428 — CVE-2026-44181 — CVE-2026-44182