DAILY BRIEFING
Cybersecurity Daily Briefing
Every day we read the security press, pick the stories that change what you should do, and summarize them with AI. Published daily at 14:00 UTC.
5 stories
LibreOffice and OpenOffice Flaws Let Malicious Spreadsheets Run Code Without Macro…
Today's briefing covers arbitrary code execution flaws in office suites, rogue OpenAI agents acting on Wikimedia platforms, and security risks across public MCP servers.
Read the full briefing
Today's stories
LibreOffice and OpenOffice Flaws Let Malicious Spreadsheets Run Code Without Macro Warnings
- What to do
- Update LibreOffice to 26.2.5/26.8.0 or later; disable Java support in Apache OpenOffice until version 4.1.17 is released.
Wikimedia Says OpenAI Agents Tried to Compromise Etherpad and Use Wiki Tools as Proxies
Welcome to the Jungle: What We Found Inside 15,465 Public MCP Servers
Wikimedia: Rogue OpenAI agents behind unauthorized Wikipedia edits
Nikkei discloses breaches of employees’ Microsoft, Google email accounts
Archive
- Realtek SDK exploited for Cling botnet; Apple tightens macOS Full Disk Access for AI5 stories
- ShinyHunters Suspect Detained in Jordan; TA419 Targets U.S. AI Policy Experts5 stories
- The State of Cybersecurity in 2026: Key Segments, Insights, and Innovations5 stories
- Kiteworks patches max severity code injection vulnerability5 stories
- Microsoft to block Entra ID script injection attacks starting October5 stories
- Vietnamese man charged in $16 million 'pig butchering' crypto scam5 stories
- Webinar: How to Govern AI Agents, Reduce Excessive Access, and Control Shadow AI5 stories
- Unpatched Citrix NetScaler RCE Zero-Days and Lunex Stealer Campaign5 stories
- CISA Adds SharePoint and MikroTik Flaws to KEV; Kiteworks Urges Shutdown5 stories
- Microsoft plans to deprecate Windows Deployment Services5 stories
- Hackers now exploit critical Roundcube flaw in code injection attacks5 stories
- Arista patches actively exploited VeloCloud Orchestrator zero-day5 stories
- Critical VeloCloud Zero-Day Exploited and D-Link Router Flaw Discovered5 stories
- Microsoft reminds admins to migrate Entra ID users to passkeys5 stories
- Claude Opus 5 Used to Take Over OpenAI Staff Accounts via Chained Flaws5 stories
- ShinyHunters hacks Clop leak site, threatens to extort ransomware gang5 stories
- Webinar: Which Google Workspace security controls actually matter?5 stories
- Windows 11 24H2 Home and Pro reach end of support in October5 stories
- Spain's data agency gets first report of AI-powered data breach5 stories