2026-02-04 Daily Vulns
NEW: CVE vendor-product description metric Referenceurl title GithubURL CVE-2019-25232 NetPCLinker - NetPCLin...
ictsec.pl
DockerDash Exposes AI Supply Chain Weakness In Docker's Ask Gordon
DockerDash Exposes AI Supply Chain Weakness 🚨 A critical security flaw affecting Docker’s Ask Gordon AI assistant has been disclosed by cybersecurity researchers, revealing how unverified metadata...
When Hacktivists Target Water Utilities - Inside a Russian-Aligned OT Attack
Overview Russian-aligned hacktivist groups are increasingly targeting industrial control systems and OT environments—and sometimes it’s shockingly easy. Daniel dos Santos, VP of Research at Foresc...
Wave of Citrix NetScaler Scans Utilize Thousands of Residential Proxies
Wave of Citrix NetScaler Scans 🚀 A coordinated reconnaissance campaign targeting Citrix NetScaler infrastructure over the past week has utilized tens of thousands of residential proxies to discove...
Vulnerability Alert Mitsubishi Electric FREQSHIP-mini for Windows
🚨 Vulnerability Alert: Mitsubishi Electric FREQSHIP-mini for Windows A malicious code execution vulnerability exists in Mitsubishi’s small-capacity UPS shutdown software, FREQSHIP-mini for Windows...
Step Finance Reports $40M Crypto Theft Due to Compromised Devices
Step Finance Suffers Major Breach 🚨 Step Finance has announced a staggering loss of $40 million in digital assets following a breach that compromised the devices of its executive team. The inciden...
Multiple Vulnerabilities Found in ELECOM Wireless LAN Products
Multiple Vulnerabilities in ELECOM Wireless LAN Products 🚨 Wireless LAN products provided by ELECOM CO.,LTD. contain multiple vulnerabilities that could potentially compromise user security. Here’...
Critical Vulnerability in Synectix LAN 232 TRIO Exposed
Critical Vulnerability in Synectix LAN 232 TRIO Exposed 🚨 A significant vulnerability has been identified in the Synectix LAN 232 TRIO 3-Port serial to Ethernet adapter. Successful exploitation co...
AT&T Breach Data Resurfaces with New Risks for Customers
AT&T Breach Data Resurfaces with New Risks for Customers 🚨 A newly shared dataset tied to AT&T reveals alarming risks for customers. This dataset, privately circulated since February 2, 20...
Researchers Find 341 Malicious ClawHub Skills Stealing Data from OpenClaw Users
A security audit of 2,857 skills on ClawHub has found 341 malicious skills across multiple campaigns, according to new findings from Koi Security, exposing users to new supply chain risks. ClawHub ...
Notepad++ Hijacked by State-Sponsored Hackers
According to the analysis provided by the security experts, the attack involved infrastructure-level compromise that allowed malicious actors to intercept and redirect update traffic destined for n...
Mutagen Astronomy From Discovery to CISA Recognition—A Seven-Year Journey
Mutagen Astronomy: From Discovery to CISA Recognition—A Seven-Year Journey On January 26, 2026, the Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2018-14634 to its Known Exploi...
Mutagen Astronomy - From Discovery to CISA Recognition—A Seven-Year Journey
On January 26, 2026, the Cybersecurity and Infrastructure Security Agency (CISA) added CVE-2018-14634 to its Known Exploited Vulnerabilities (KEV) catalog. The same vulnerability was discovered by ...
Multiple vulnerabilities in Cybozu Garoon
Multiple vulnerabilities have been identified in Cybozu Garoon, detailed in JVN#35265756 and published on 2026/02/02. Cybozu Garoon provided by Cybozu, Inc. contains these multiple vulnerabilities....
Multiple Vulnerabilities Found in Cybozu Garoon
Multiple Vulnerabilities in Cybozu Garoon 🚨 Multiple vulnerabilities have been identified in Cybozu Garoon, detailed in JVN#35265756 and published on February 2, 2026. The affected products includ...
D-Link DIR-825 Rev.B 2.10 - Stack Buffer Overflow (DoS)
A stack-based buffer overflow vulnerability, identified as CVE-2025-10666, exists in the apply.cgi endpoint of the D-Link DIR-825 Rev.B router (firmware <= 2.10). This vulnerability, explicitly ...
Android RAT Uses Hugging Face to Host Malware
A new Android remote access trojan (RAT) uses the popular AI platform Hugging Face to host and distribute malicious payloads, Bitdefender has revealed. The dropper contacts an encrypted endpoint h...
341 Malicious ClawHub Skills Discovered Stealing User Data
Researchers Uncover Malicious Skills on ClawHub 🚨 A recent security audit of 2,857 skills on ClawHub has revealed 341 malicious skills across various campaigns, according to findings from Koi Secu...
New Apple Privacy Feature Limits Location Tracking on iPhones, iPads
Apple is introducing a new privacy feature that lets users limit the precision of location data shared with cellular networks on some iPhone and iPad models. The “Limit Precise Location” setting wi...
Moltbook AI Vulnerability Exposes Email Addresses, Login Tokens, and API Keys
A critical vulnerability in Moltbook, the nascent AI agent social network launched in late January 2026 by Octane AI’s Matt Schlicht, exposes email addresses, login tokens, and API keys for its reg...