Daily Cybersecurity
Threat Intelligence

Active Exploitation Attempts Target WSO2 API Manager JWT Bypass With Forged Admin Tokens

Active exploitation attempts are targeting a critical JWT bypass vulnerability in WSO2 API Manager that could allow attackers to forge authentication tokens and access protected API endpoints without valid credentials. The flaw allows unauthenticated attackers to bypass API Manager security controls and access sensitive API resources.

CrowdStrike Accelerates Real-Time Data Classification with On-Device AI

Cyber Op Targets South Korean Media & Automotive Sectors

A likely North Korean advanced persistent threat (APT) group used a previously undocumented Linux espionage toolkit to compromise load balancers, gain access to communications, and further exploit networks.

September Patch Tuesday haul includes 973 CVEs

Microsoft's September 2026 Patch Tuesday haul includes 718 fixes for Windows along with numerous other product updates, representing a massive remediation effort despite security researchers noting it was actually a slow month relative to recent trends.

AWS STS simplifies session token size limits and adds session token size monitoring

AWS Security Token Service (AWS STS) has simplified session token size limits, giving you more room for your session policies and session tags. STS has replaced the packed policy size and the overall session token size limits with a single token size limit of 4,096 bytes.

Acronis warns of actively exploited flaw in its cPanel backup plugin

Acronis disclosed a high-severity Linux local privilege escalation vulnerability in its backup plugin for cPanel, WebHost Manager (WHM), and Plesk that may be exploited in the wild.