Watchtowr got RCE via one of the many Citrix Netscaler SAML vulns. https://labs.watchtowr.com/youre-back-in-the-room-citrix-netscaler-pre-auth-rce-cve-2026-8452/

RE: https://infosec.exchange/@watchTowr/117092605469478412

Si vous n’avez pas encore patché la RCE NetScaler du mois de juin :
https://support.citrix.com/support-home/kbsearch/article?articleNumber=CTX696604

ChatGPT dit que c’est probablement le dernier moment de le faire avant qu’il utilise ça comme opportunité pour s’échapper de sa sandbox.

Parce que, bien évidemment, la fine équipe de watchTowr vient de publier le write-up qui transforme le gentil « memory overflow » en RCE pré-auth root.

#CyberVeille #NetScaler

👇
https://labs.watchtowr.com/youre-back-in-the-room-citrix-netscaler-pre-auth-rce-cve-2026-8452/

You’re Back In The Room (Citrix NetScaler Pre-Auth RCE CVE-2026-8452 https://labs.watchtowr.com/youre-back-in-the-room-citrix-netscaler-pre-auth-rce-cve-2026-8452/

CVE-2026-8452: Technical Analysis of the Citrix NetScaler Memory Overflow Vulnerability

https://thecybersecguru.com/news/cve-2026-8452-netscaler-vulnerability/

⚠️ CRITICAL: Global Threat Campaign Hits Critical VMware vCenter Flaw

Active exploitation of CVE-2026-59310 in VMware vCenter Server is ongoing. All organizations running vCenter are at risk of compromise. Patching alone may be insufficient due to suspected persistence mechanisms already deployed by threat actors.

https://threatnoir.com/focus

#infosec #cybersecurity

🤖 AI generated summary

⚠️ CRITICAL: Critical VMware vCenter RCE flaw exploited for reverse SSH access

A critical directory traversal vulnerability (CVE-2026-59310) in VMware vCenter Syslog Server is being actively exploited in the wild to deploy reverse SSH tools for persistence. At least 361 compromised hosts across 47 countries have been identified, with attackers establishing remote access on vi…

https://threatnoir.com/focus

#infosec #cybersecurity

🤖 AI generated summary

「SAP Commerce Cloudの脆弱性が最大レベルの攻撃の標的に。 」： #BLEEPINGCOMPUTER

「脅威インテリジェンス企業Defusedによると、3日前にパッチが適用されたSAP Commerce Cloudの深刻度最高レベルのリモートコード実行の脆弱性が、すでに攻撃の標的となっているという。

Commerce Cloud（旧称SAP Hybris）は、世界的に有名なブランドや大手小売業者が所有するオンラインストアで使用されているクラウドベースのeコマースプラットフォームです。

CVE-2026-58231 として追跡されている この重大な脆弱性は、Commerce Cloudの中核となるデータハブアダプタ拡張機能における不適切な認証の弱点に起因するもので、権限を持たない攻撃者が低複雑度の攻撃で悪用し、任意のコードを実行する可能性があります。 」

https://www.bleepingcomputer.com/news/security/max-severity-sap-commerce-cloud-flaw-now-targeted-in-attacks/

#prattohome

Apple Partners With Alibaba to Launch China-Specific AI Model – DTH

[🖼 DTH-6-150x150]France’s Top Court Strikes Down Proposed Social Media Ban for Minors, Google Launches Gemini 3.7 Flash to Boost AI Performance, and the White House Imposes 100% Tariffs on Drones to Boost Domestic Manufacturing and Security.

MP3

Please SUBSCRIBE HERE for free or
get DTNS shows ad-free.

A special thanks to all our supporters–without you, none of this would be possible.

If you enjoy what you see you can support the show on Patreon, Thank you!

Send email to feedback@dailytechnewsshow.com

Show Notes

Apple Develops AI Model for China With Alibaba

Apple has developed a proprietary large language model for the China market in partnership with Alibaba, signaling a strategic shift to better compete against domestic rivals. This initiative, designed to integrate with Apple Intelligence, aims to navigate local regulatory challenges and restore Apple’s competitive edge in a critical market where the absence of AI features has previously impacted sales.

Read More — Reuters

France’s Highest Court Rejects Social Media Ban for Children Under 15

France’s highest court has declared a proposed ban on social media for children under 15 unconstitutional, ruling that it infringes upon youths’ freedom of speech and communication. This decision, a setback for President Emmanuel Macron, signals potential legal and technical challenges for global efforts to restrict social media access for younger teenagers. Despite this ruling, the French government intends to pursue revised legislation while other nations and the EU continue to explore similar regulatory approaches, highlighting the ongoing tension between protective digital policies and privacy concerns.

Read More — Bloomberg

Google Launches Gemini 3.7 Flash

Google has launched its new Gemini 3.7 Flash AI model, which offers improved performance in coding, debugging, and efficiency for app production while integrating enhanced safety features. Despite this release, the company continues to face pressure due to delays with its more powerful Gemini 3.5 Pro model and competition from rivals like OpenAI and Anthropic, leading to investor questions regarding Google’s AI roadmap and its ability to maintain a leading market position.

Read More — Bloomberg

White House Introduces Tariffs of Up to 100 Percent on Drones

The White House has introduced new tariffs of up to 100 percent on drones and associated components to enhance national security and encourage domestic manufacturing, or “on-shoring.” These measures, which target both heavy-duty and sensitive commercial drones, are expected to increase costs for consumers as vendors pass on the expenses. The policy aims to reduce dependence on Chinese-manufactured models, like those from DJI, though industry experts note the significant challenge of replicating China’s advanced drone supply chains and specialized engineering capabilities within the US.

Read More — Engadget

Flock Implements Stricter Data Retention Policies

Flock is implementing stricter data retention policies and mandating a new “Audit Assistance” tool designed to flag atypical search patterns for administrative review. Despite Flock’s claims of efficacy, privacy experts and critics from the ACLU and EFF argue that the company has provided insufficient technical details about how the tool works and lacks independent auditing evidence to prove it effectively prevents abuse, suggesting that stronger legal constraints on technology use are more critical for ensuring accountability.

Read More — TechCrunch

Heart Aerospace Completes First Flight of All-Electric X1 Prototype

Heart Aerospace has successfully completed the first flight of its all-electric X1 prototype, marking a significant milestone for the company as it eyes regional aviation markets. With interest from airlines like United and Air Canada, Heart aims to follow this success with the ES-30, a hybrid-electric model designed to replace traditional turboprops by 2031 through lower operational costs and enhanced reliability, though the company’s ambitious timeline remains dependent on future advancements in battery density and weight.

Read More — Engadget

Netflix Shutters Two Internal Game Studios

Netflix is shuttering two internal game studios, Night School Studio and Moonloot, as part of an ongoing restructuring of its gaming division. This decision follows a series of previous studio closures and divestments, signaling a consolidation of the company’s internal game development strategy. Moving forward, Netflix’s gaming focus is shifting toward four specific areas: kids, party, narrative, and mainstream titles, with increasing emphasis on cloud gaming and mobile-controller-based experiences.

Read More — Variety

Critical SAP Commerce Cloud Vulnerability Is Being Actively Exploited

A critical remote code execution vulnerability in SAP Commerce Cloud (CVE-2026-58231) is being actively exploited in the wild three days after patch release. Caused by improper authorization in the Data Hub Adapter, the flaw allows unauthenticated attackers to execute arbitrary code on e-commerce platforms. Despite no public proof-of-concept, researchers confirmed active attacks, underlining persistent security threats for SAP.

Read More — BleepingComputer

Uber Expands Robotaxi Strategy With Pony.ai

Uber is expanding its global robotaxi strategy by partnering with Pony.ai to deploy 2,000 self-driving vehicles across Europe and the Middle East, building on their existing pilot service in Zagreb. This collaboration, which includes plans for four additional European cities, is part of Uber’s broader effort to become a leading platform for autonomous commercialization by working with partners like WeRide and Baidu Apollo Go to scale operations in cities like Madrid and Tokyo, while gathering data to accelerate development against competitors like Waymo.

Read More — CNBC

X Tests Tool to Show Post-Limiting Labels

X is testing a tool giving select users visibility into post-limiting labels like spam or NSFW. Aimed at clarifying algorithmic “shadowbanning,” the complex data remains hard to interpret. Concurrently, X expanded open-sourcing its recommendation algorithm while continuing to withhold sensitive advertising and non-timeline data.

Read More — Engadget

Dutch officials are warning that CVE-2026-65400, a macOS vulnerability that allows attackers to execute malicious code, is under active exploitation. (Apple patched the vulnerability recently.) The attacks come when screen sharing is turned on and port 5900 is exposed to the internet. Can anyone tell me how common it is for this port to be exposed? Does it happen automatically when screen sharing is enabled, or are other conditions required?

https://advisories.ncsc.nl/2026/ncsc-2026-0280.html

https://advisories.ncsc.nl/2026/ncsc-2026-0280.html

RE: https://infosec.exchange/@wdormann/117089673520623548

I wrote some detections for CVE-2026-66804 exploitation:

https://github.com/GossiTheDog/ThreatHunting/blob/master/AdvancedHuntingQueries/CVE-2026-66804.kql

Nearly 14,000 Trezor customers had their data stolen via CVE-2026-72898, a critical Metabase zero-day exploited through logistics partner ShipMonk.

#Trezor #DataBreach #Metabase #CVE202672898 #ShipMonk

https://meterpreter.org/trezor-shipmonk-metabase-breach-cve-2026-72898/?utm_source=mastodon&utm_medium=jetpack_social

CVE-2026-15826 (CVSS 9.8) is a User Profile Builder vulnerability letting attackers log in as WordPress admin. Over 40,000 sites affected; update to 3.16.5

#CVE202615826 #WordPress #UserProfileBuilder #InfoSec

https://securityonline.info/user-profile-builder-cve-2026-15826/?utm_source=mastodon&utm_medium=jetpack_social

CVE-2026-15826: CRITICAL flaw in User Profile Builder (≤3.16.4) allows auth bypass via type conversion error. Attackers gain admin (user ID 1) access. Restrict registration or disable plugin. Details: https://radar.offseq.com/threat/cve-2026-15826-cwe-704-incorrect-type-conversion-or-cast-in-cozmoslabs-user-profile-builder-beautiful-03ed293eb36de594 #OffSeq #WordPress #Infosec #CVE

📰 WordPress patches critical RCE flaw (CVE-2026-65640) for author-level users

WordPress 7.0.4 patches a critical RCE flaw (CVE-2026-65640, CVSS 8.8). Authenticated authors could take over sites using a malicious image file on servers with Imagick. Update your WordPress sites immediately! #WordPress #RCE #CyberSecurity

🔗 https://cyber.netsecops.io/articles/critical-rce-flaw-in-wordpress-allows-author-level-users-to-take-over-sites/?utm_source=mastodon&utm_medium=social&utm_campaign=daily

Atacantes aprovechan un bypass crítico en SharePoint tras publicarse un PoC

Se está explotando de forma activa CVE-2026-55040, un fallo crítico en Microsoft SharePoint Server que permite saltarse la autenticación tras la publicación de un PoC. La corrección pasa por aplicar los parches de julio de 2026, reducir exposición si el servicio está en Internet y revisar indicios de suplantación y actividad administrativa anómala.

https://unaaldia.hispasec.com/atacantes-aprovechan-un-bypass-critico-en-sharepoint-tras-publicarse-un-poc/