Francisco Jr @dotjunior

One WhatsApp Message Turns OpenClaw Into a Remote Access Tool for Hackers Source: cybersecuritynews.com/whatsapp-messa… Three high-severity vulnerabilities in OpenClaw, the open-source AI coding assistant with 381,000 GitHub stars, that allow attackers to achieve remote code execution through a single WhatsApp message. The flaws, confirmed exploitable on OpenClaw 2026.6.1, expose a structural weakness in how AI agents handle untrusted input from messaging channels. OpenClaw is a self-hosted AI assistant that connects to WhatsApp, Slack, Discord, Telegram, and Teams, letting users text it coding requests the way they would message a coworker. #cybersecuritynews

RoundCube 0-Click Vulnerability Enables Stored XSS Attack via MIME Type Attachment Source: cybersecuritynews.com/roundcube-0-cl… RoundCube has released version 1.7 to patch six security vulnerabilities, including two critical stored cross-site scripting (XSS) flaws that require zero user interaction to exploit. The most severe issue, tracked as CVE-2026-54432, involves a stored XSS vulnerability triggered by an unescaped attachment MIME type displayed on the attachment-validation warning page. An attacker can craft a malicious MIME type string that, when rendered without proper sanitization, executes arbitrary JavaScript in the victim’s session. #cybersecuritynews

Linux Mint’s Cinnamon 6.8 Desktop Environment Will Fully Support Wayland 9to5linux.com/linux-mints-ci… #Linux #OpenSource

First-Ever 1- Click Android 17 Exploit Allows Attackers to Gain Full Control Over Your Android Phone Source: cybersecuritynews.com/android-17-roo… A full-chain exploit dubbed "IonStack" demonstrates how a single malicious URL click can hand attackers complete control over an Android device. The proof-of-concept, described as the world's first public Android 17 root demo, chains two zero-day vulnerabilities spanning Firefox and the Linux kernel to achieve remote code execution and privilege escalation without further user interaction. The exploit chain works by first compromising the Firefox renderer process through the browser flaw, then pivoting to the underlying Linux kernel (which powers Android) to break out of sandbox restrictions entirely. #cybersecuritynews #android

🛑 A newly found 15-year-old #Linux kernel flaw, GhostLock (CVE-2026-43499), could let any logged-in user gain root on unpatched distributions. A working exploit code is now public, and it escaped containers in tests. Read details here: thehackernews.com/2026/07/15-yea…

🛑 WARNING - Several Tenda firmware builds embed an undocumented auth backdoor in /bin/httpd. CVE-2026-11405 checks sys.rzadmin.password after normal login fails. If the supplied password matches, it creates an admin session. Still unpatched. Read: thehackernews.com/2026/07/certcc…

New security patches 1.5.3 and 1.4.5 are now available. Get the details on the latest fixes and improvements in our release blog: cs.co/9008BDFJlE

⚠️ Apple ‘Hide My Email’ Vulnerability Exposes Users' Real Email Addresses Source: cybersecuritynews.com/apple-hide-my-… Apple’s “Hide My Email” feature is currently affected by an unpatched vulnerability that allows attackers to discover the real email address behind an anonymized alias. Apple’s Hide My Email, part of iCloud+, generates unique relay addresses intended to keep a user’s primary inbox private during sign‑ups and app registrations. A flaw in this mechanism enables almost anyone with limited technical skill to uncover the underlying real email address that should remain hidden. #cybersecuritynews

⚠️ 81M+ Azure CLI login attempts. At least 78 Microsoft accounts compromised. The June 12-26 campaign used old breached passwords and the deprecated ROPC OAuth flow. MFA was enabled in many cases, but Azure CLI sign-ins were still exposed. Details here: thehackernews.com/2026/07/azure-…

Postei no BR-Linux to avisando, e é sobre joguinhossss (e sobre aplicativos tb). WINE 11.12 LANÇADO, PASSA A INCLUIR SEUS PRÓPRIOS COMPONENTES DO FFMPEG O Wine permite rodar no Linux programas feitos para Windows, e sua versão 11.12 já está disponível. br-linux.org/2026/01/wine-1…

🛑 A new #Linux kernel exploit (CVE-2026-46331) gets root without modifying a single file on disk. It poisons the cached copy of /bin/su in memory. The binary on disk stays untouched. File-integrity checks come back clean. The root shell is already open. Details here ↓ thehackernews.com/2026/06/new-li…

🛑 ALERT - A Chrome ad blocker with 10 MILLION+ installs has a dormant risk. Experts say the extension can be remotely configured to run arbitrary JavaScript across websites, without an extension update or store review. Read the full analysis: thehackernews.com/2026/06/chrome…

Wow! RustDesk works on #ReactOS and makes remote connections, from Italy to Spain!!! Courtesy of simonelombardo and @julenuri.

🚨 That WhatsApp file from a trusted contact may not be safe. A new VBS malware campaign is spreading through #WhatsApp Desktop/Web and installing ManageEngine Endpoint Central for remote access on Windows PCs. Read the details: thehackernews.com/2026/06/whatsa…

⚠️ Old routers are being pulled into attacker infrastructure. AryStinger #malware has infected 4,300+ legacy routers and uses them to scan targets, tunnel traffic, and run commands remotely. It is less about DDoS and more about reconnaissance and proxy access. Read the full story: thehackernews.com/2026/06/arysti…

Em meio ao movimento mundial para fugir do VMWare, a cadeia Tesco anunciou que resolveu pagar o preço de migrar com pressa para outras alternativas, e pretende iniciar 2027 já livre do software de virtualização que hoje pertence à Broadcom. br-linux.org/2026/01/gigant…

🏮 Hackers Abuse Steam Workshop Application Wallpapers to Hijack Active Steam Sessions Source: cybersecuritynews.com/steam-workshop… Threat actors have been abusing Valve's Steam Workshop since late 2025, embedding malware inside Wallpaper Engine application wallpapers to hijack active Steam sessions and infect victims with backdoors, infostealers, and crypto miners. Wallpaper Engine is a hugely popular Steam application that lets users set animated, interactive wallpapers on their Windows desktops. With nearly one million reviews and approximately 100,000 daily active users, it presents an enormous attack surface. The app supports several wallpaper types, videos, scenes, web pages, and application wallpapers, and that last category is what attackers zeroed in on. #cybersecuritynews

Tem post novo no BR-Linux⸱org mas não é boa notícia pra comunidade Arch Linux ARCH LINUX: CONTINUA A CAMPANHA DE COMPROMETIMENTO DE PACOTES DO REPOSITÓRIO AUR O domingo chegou com novas ondas de comprometimento de pacotes do AUR.

🚨 A backdoor once thought to target #Linux has now moved to Windows. ESET found two Windows versions of SprySOCKS, linked to a China-nexus espionage group. One version uses kernel drivers to hide files, processes, registry keys, and network connections. Read ➝ thehackernews.com/2026/06/china-…

🛑 Popular #WordPress plugin scripts were tampered with to plant hidden backdoors. The attack hit #JavaScript used by PushEngage, OptinMonster, and TrustPulse. If a logged-in admin loaded the script, attackers could create a rogue admin account and install a hidden web shell. Over 1.2M sites run the three plugins. Read the full article: thehackernews.com/2026/06/popula…