Skip to content
November 2, 2026
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube

Daily CyberSecurity

Zero-hour alerts. Unmatched analysis.

Primary Menu
  • Home
  • CVE Data
    • CVE Watchtower
    • Top Exploited CVEs
    • CVE Stats by Vendor
    • Q2 2026 Report
    • CVE Alerts
    • CVE Alert Settings
    • Pricing
  • Cyber Criminals
  • Data Leak
  • Free Tools
    • CVSS 3.1 Calculator
    • Certificate Viewer
    • DNS Lookup
    • Encoder & Hash Generator
    • IP / Subnet Calculator
    • Whois Lookup
  • Linux
  • Malware
  • Vulnerability
  • Submit Press Release
  • Weekly Recap
Light/Dark Button

Weekly Recap

Weekly CVE report Oct 26-Nov 1 2026 exploited vulnerabilities including Oracle EBS, YOOtheme and Cisco ASA compared with CISA KEV
  • Weekly Recap

Weekly CVE Report Finds Oracle EBS, YOOtheme and FreeSWITCH Attacks Missing From CISA KEV

Do Son November 2, 2026 0
Weekly CVE report Oct 19-25 2026 exploited vulnerabilities including PHP2Shell and FortiSIEM compared with CISA KEV
  • Weekly Recap

Weekly CVE Report Flags PHP2Shell and FortiSIEM Attacks Still Missing From CISA KEV

Do Son October 26, 2026 0
Weekly CVE report Oct 12-18 2026 exploited vulnerabilities compared with CISA KEV
  • Weekly Recap

This Weekly CVE Report Finds CISA KEV Trailing Daily Cybersecurity by Up to 8 Days

Do Son October 19, 2026 0
Weekly CVE report Oct 5-11 2026 exploited vulnerabilities not yet on CISA KEV
  • Weekly Recap

Six Exploited Flaws Missing From CISA KEV Lead This Weekly CVE Report

Do Son October 12, 2026 0
Weekly CVE report on exploited vulnerabilities from Daily Cybersecurity and CISA KEV, September 28 to October 4, 2026
  • Weekly Recap

Weekly CVE Report Tracks 2,652 New Flaws and Seven Exploited Vulnerabilities (Sept. 28 – Oct. 4, 2026)

Do Son October 5, 2026 0

Tech News

ChatGPT violence restrictions interface illustrating AI moderation safeguards and ChatGPT teen safety protections
  • Technology

ChatGPT Violence Restrictions Tighten with Teen Safeguards

Do Son November 2, 2026 0
AI training preference standard robots.txt diagram illustrating web scraping rules and AI crawler directives
  • Technology

AI Training Preference Standard Added to Robots.txt

Do Son November 2, 2026 0
Google Project Suncatcher satellite diagram illustrating orbital AI TPU inference and laser links
  • Technology

Google Project Suncatcher Achieves Orbital AI Inference

Do Son November 2, 2026 0
ChatGPT Codex usage limits diagram showing shared token quota and subscription allocation settings
  • Technology

ChatGPT Codex Usage Limits Merged Across Plans

Do Son November 2, 2026 0

Vulnerability

Barracuda vulnerabilities diagram showing how attackers chain CVE-2026-116606 and CVE-2026-111560 to gain Barracuda root access
  • Vulnerability Report

Barracuda Patches Critical Authorization Bypass and Command Injection Flaws

Do Son November 2, 2026 0
MediaTek vulnerabilities diagram illustrating critical MediaTek vulnerabilities patched in chipsets
  • Vulnerability Report

Critical MediaTek Vulnerabilities Patched in Chipsets

Do Son November 2, 2026 0
Linux kernel vulnerability diagram showing Linux kernel vulnerability PoC exploit for CVE-2026-31419
  • Vulnerability Report

Public PoC Exploit Disclosed for Linux Kernel Bonding Vulnerability

Do Son November 2, 2026 0
FreePBX vulnerabilities diagram showing critical FreePBX vulnerabilities patched in User Manager
  • Vulnerability Report

Critical FreePBX Vulnerabilities Patched in User Manager

Do Son November 2, 2026 0

Cyber Security

Supermarket Freezer Hack Hits Stores Across Europe Supermarket freezer hack diagram showing industrial cooling controllers and retail refrigeration temperature spikes
  • Cybercriminals

Supermarket Freezer Hack Hits Stores Across Europe

Do Son November 2, 2026 0
North Korean Threat Actors Accelerate Cyber Operations With Artificial Intelligence North Korean threat actors and AI-enabled North Korean threat actors attack workflow diagram
  • Cybercriminals

North Korean Threat Actors Accelerate Cyber Operations With Artificial Intelligence

Do Son November 2, 2026 0
Binance Hack Investigation Traces Historic $6.3B Breach Binance hack investigation diagram illustrating multi-chain token outflows and DevOps laptop compromise
  • Cybercriminals

Binance Hack Investigation Traces Historic $6.3B Breach

Do Son October 30, 2026 0
Polymarket Supply Chain Attack Drains Trader Wallets Polymarket supply chain attack diagram illustrating DebugBear script compromise and crypto wallet drainer activity
  • Cybercriminals

Polymarket Supply Chain Attack Drains Trader Wallets

Do Son October 30, 2026 0

Malware Alert

Google Disrupts Videostrong XCPE Botnet on Android TV XCPE botnet and Videostrong XCPE botnet architecture diagram
  • Malware

Google Disrupts Videostrong XCPE Botnet on Android TV

Do Son November 2, 2026 0
NIK C2 Framework Integrates OpenAI API to Analyze Stolen Data in Live Attacks NIK C2 framework and Windows NIK C2 framework attack architecture diagram
  • Malware

NIK C2 Framework Integrates OpenAI API to Analyze Stolen Data in Live Attacks

Do Son November 2, 2026 0
Rust Doorway Botnet Exploits Routers, Cameras, and Servers Doorway botnet and Rust Doorway botnet architecture diagram
  • Malware

Rust Doorway Botnet Exploits Routers, Cameras, and Servers

Do Son November 2, 2026 0
Synology NAS Ransomware Targets Unpatched Devices Mastra supply chain attack delivering an npm infostealer through the typosquatted easy-day-js dependency during npm install
  • Malware

Synology NAS Ransomware Targets Unpatched Devices

Do Son November 2, 2026 0

Data Leak

Amadeus Airline Data Breach Hits Major Global Carriers Amadeus airline data breach diagram illustrating airline passenger data leak and compromised travel records
  • Data Leak

Amadeus Airline Data Breach Hits Major Global Carriers

Do Son November 2, 2026 0
Gitee Exposed Credentials Found Across Millions of Repositories Gitee exposed credentials analysis diagram illustrating exposed API secrets across public repositories
  • Data Leak

Gitee Exposed Credentials Found Across Millions of Repositories

Do Son October 30, 2026 0
OffiDocs Chrome Extensions With 2.3 Million Installs Caught Harvesting Browsing URLs OffiDocs Chrome extensions - spying Chrome extensions hex-encode and send full browsing URLs to remote servers
  • Data Leak

OffiDocs Chrome Extensions With 2.3 Million Installs Caught Harvesting Browsing URLs

Do Son October 27, 2026 0
Keystone Wallet Data Breach Exposes Customer Orders Keystone wallet data breach diagram showing Shopify API order leak and physical wrench attack risks
  • Data Leak

Keystone Wallet Data Breach Exposes Customer Orders

Do Son October 26, 2026 0
PHP2Shell: List of Affected Products PHP2Shell affected products list including PAN-OS, QNAP, Cisco and Citrix with fix status
  • Vulnerability Report

PHP2Shell: List of Affected Products

Do Son October 26, 2026 0

PHP2Shell affected products list: vendor patch status for CVE-2026-109618 and CVE-2026-109619 across PAN-OS, QNAP, Cisco, Citrix, F5 and more.

Stealthy Fileless Attacks Exploit Windows Tools to Evade Traditional Security Defenses sebastian-willius-GKCpRs0rcNY-unsplash (1)
  • Technique

Stealthy Fileless Attacks Exploit Windows Tools to Evade Traditional Security Defenses

Do Son November 2, 2026 0
Traditional antivirus software looks for suspicious files, but not every attack leaves one behind. In a fileless...
Read More Read more about Stealthy Fileless Attacks Exploit Windows Tools to Evade Traditional Security Defenses
Guardz Brings Palo Alto Networks Prisma Browser Protection to Small Businesses Guardz_1793620684bh13MmUP85
  • Press Release

Guardz Brings Palo Alto Networks Prisma Browser Protection to Small Businesses

cybernewswire November 2, 2026 0
Miami, United States, 2nd November 2026, CyberNewswire
Read More Read more about Guardz Brings Palo Alto Networks Prisma Browser Protection to Small Businesses
Claude Ultra Subscription Debuts with No 5-Hour Limit Claude Ultra subscription dashboard illustrating plan tiers and API credit allocations
  • Technology

Claude Ultra Subscription Debuts with No 5-Hour Limit

Do Son November 2, 2026 0

Anthropic unveiled the Claude Ultra subscription tier, removing 5-hour rate limits for verified accounts and bundling $200 in monthly API credits.

Vibe Manufacturing AI Turns Prompts into Physical Hardware Vibe manufacturing AI workflow diagram illustrating text to CAD prompt conversion and automated hardware fabrication
  • Technology

Vibe Manufacturing AI Turns Prompts into Physical Hardware

Do Son November 2, 2026 0

The rise of vibe manufacturing AI allows makers to transform conversational prompts into physical hardware, custom sheet metal, and printed circuit boards.

Apache Wicket Fixes 19 Vulnerabilities in 8.20.0, 9.25.0 and 10.12.0 Apache Wicket vulnerabilities security update fixing CVE-2026-84170 upload denial of service and XSS flaws
  • Vulnerability Report

Apache Wicket Fixes 19 Vulnerabilities in 8.20.0, 9.25.0 and 10.12.0

Do Son November 2, 2026 0

Apache Wicket vulnerabilities: a security update fixes 19 flaws, including CVE-2026-84170 upload DoS and XSS bugs. Upgrade to 8.20.0, 9.25.0 or 10.12.0.

Weekly CVE Report Finds Oracle EBS, YOOtheme and FreeSWITCH Attacks Missing From CISA KEV Weekly CVE report Oct 26-Nov 1 2026 exploited vulnerabilities including Oracle EBS, YOOtheme and Cisco ASA compared with CISA KEV
  • Weekly Recap

Weekly CVE Report Finds Oracle EBS, YOOtheme and FreeSWITCH Attacks Missing From CISA KEV

Do Son November 2, 2026 0

Our weekly CVE report for Oct 26-Nov 1, 2026 tracks 3,734 new CVEs and 15 exploited vulnerabilities, including Oracle EBS flaws not in CISA KEV.

Brotli Vulnerability Affected Products: Vendor Patch Status List Brotli vulnerability affected products and vendor patch status list for CVE-2026-111497
  • Vulnerability Report

Brotli Vulnerability Affected Products: Vendor Patch Status List

Do Son November 2, 2026 0

Brotli vulnerability CVE-2026-111497 affected products list: fixes for Node.js, .NET, Envoy, PAN-OS and distros, plus VMware and others still unpatched.

15 Critical pgAdmin 4 Vulnerabilities Fixed in Version 9.19 pgAdmin 4 vulnerabilities diagram showing critical pgAdmin 4 vulnerabilities fixed in version 9.19 including CVE-2026-116241
  • Vulnerability Report

15 Critical pgAdmin 4 Vulnerabilities Fixed in Version 9.19

Do Son November 2, 2026 0

The PostgreSQL project resolved 15 critical pgAdmin 4 vulnerabilities in version 9.19, fixing command injection flaw CVE-2026-116241 and credential leaks.

Dell Patches 44 PowerStore Vulnerabilities, Seven Rated CVSS 9.8 Dell PowerStore vulnerabilities in SDNAS fixed by DSA-2026-479, including critical CVE-2026-116443
  • Vulnerability Report

Dell Patches 44 PowerStore Vulnerabilities, Seven Rated CVSS 9.8

Do Son November 2, 2026 0

Dell fixes 44 PowerStore vulnerabilities, including seven CVSS 9.8 SDNAS flaws such as CVE-2026-116443. Upgrade to PowerStoreT OS 5.1.0.0-2798105.

LXD Vulnerability CVE-2026-112816 (CVSS 10) Lets Attackers Impersonate Trusted Clients LXD vulnerability CVE-2026-112816 in Canonical LXD and MicroCloud, CVSS 10 TLS authentication bypass
  • Vulnerability Report

LXD Vulnerability CVE-2026-112816 (CVSS 10) Lets Attackers Impersonate Trusted Clients

Do Son November 2, 2026 0

Canonical fixes LXD vulnerability CVE-2026-112816 (CVSS 10) in LXD and MicroCloud, letting attackers impersonate trusted TLS clients. Update now.

BeyondTrust Remote Support Flaw CVE-2026-102764 Exploited in the Wild as Full Details and Metasploit Exploit Go Public BeyondTrust Remote Support vulnerability CVE-2026-102764 exploited in the wild, Metasploit module and details public
  • Vulnerability Report

BeyondTrust Remote Support Flaw CVE-2026-102764 Exploited in the Wild as Full Details and Metasploit Exploit Go Public

Do Son November 2, 2026 0

Exploited BeyondTrust Remote Support vulnerability CVE-2026-102764 now has full details and a public Metasploit module. Apply BT26-05-RS now.

6 Creative Testing Platforms for Teams Shipping New Ads Weekly tech-pass
  • Technique

6 Creative Testing Platforms for Teams Shipping New Ads Weekly

Do Son November 1, 2026 0
Teams shipping new ads every week need creative testing platforms that can launch variations quickly, measure results...
Read More Read more about 6 Creative Testing Platforms for Teams Shipping New Ads Weekly
Trezor Hardware Wallet Implant Found in Reseller Units Trezor hardware wallet implant diagram showing rogue cellular PCB and seed phrase interception
  • Technology

Trezor Hardware Wallet Implant Found in Reseller Units

Do Son November 1, 2026 0

Trezor issued an alert after discovering a Trezor hardware wallet implant with a 4G module sold by compromised Southeast Asian reseller CryptoBilis.

Android SMS of Death Bug Triggers Remote Reboots Android SMS of Death vulnerability diagram illustrating WAP Push crash loop and telephony service failure
  • Vulnerability Report

Android SMS of Death Bug Triggers Remote Reboots

Do Son November 1, 2026 0

The Android SMS of Death flaw crashes telephony services via malformed WAP Push messages, triggering persistent bootloops without user interaction.

Microsoft 365 Storage Changes Reduce Family Cloud Quotas Microsoft 365 storage changes comparison chart illustrating OneDrive Family shared quota adjustments
  • Technology

Microsoft 365 Storage Changes Reduce Family Cloud Quotas

Do Son November 1, 2026 0

New Microsoft 365 storage changes replace the 6TB individual allocation with a shared 2TB pool for Family plans without lowering subscription prices.

Claude CarPlay Update Adds Hands-Free AI Voice Claude CarPlay update interface showing hands-free voice mode and split-screen multitasking on vehicle dashboard
  • Technology

Claude CarPlay Update Adds Hands-Free AI Voice

Do Son October 31, 2026 0

The new Claude CarPlay update introduces hands-free voice interaction for drivers, split-screen multitasking, and multi-account switching.

JetBrains Patches Critical Flaws in IDEs and Background Services After Certificate Breach JetBrains IDE vulnerabilities diagram showing JetBrains security update for CVE-2026-118697 and CVE-2026-118696
  • Vulnerability Report

JetBrains Patches Critical Flaws in IDEs and Background Services After Certificate Breach

Do Son October 31, 2026 0

Install the latest JetBrains security update to fix critical JetBrains IDE vulnerabilities CVE-2026-118697 and CVE-2026-118696 affecting trusted certificates.

How an AI Gaming Companion Works: From a Player’s Question to a Plan to an Order tech-keyboard
  • Technique

How an AI Gaming Companion Works: From a Player’s Question to a Plan to an Order

Do Son October 31, 2026 0
Players rarely open a game service with a product in mind. They open it with a question:...
Read More Read more about How an AI Gaming Companion Works: From a Player’s Question to a Plan to an Order
CERT/CC Warns of Xerj Authentication Bypass Flaw CVE-2026-97406 Xerj authentication bypass diagram illustrating CVE-2026-97406 token issuance flaw
  • Vulnerability Report

CERT/CC Warns of Xerj Authentication Bypass Flaw CVE-2026-97406

Do Son October 31, 2026 0

CERT/CC warns of a critical Xerj authentication bypass tracked as CVE-2026-97406 that lets attackers mint persistent tokens without passkeys.

Reddit Mandatory Login Tests Expand to Curb AI Scraping Reddit mandatory login prompt illustrating Reddit login requirement and platform data protections
  • Technology

Reddit Mandatory Login Tests Expand to Curb AI Scraping

Do Son October 31, 2026 0

Reddit is testing a Reddit mandatory login policy to thwart unauthorized AI scrapers and counteract declining organic search traffic.

Bitcoin Core DoS Vulnerability Crashes Remote Nodes Bitcoin Core DoS vulnerability diagram illustrating TCP out-of-memory bug and socket exhaustion
  • Vulnerability Report

Bitcoin Core DoS Vulnerability Crashes Remote Nodes

Do Son October 30, 2026 0

A Bitcoin Core DoS vulnerability allows remote peers to trigger out-of-memory crashes on Windows, macOS, and BSD nodes via TCP socket handling errors.

Rust Zip Vulnerability Enables File Overwrite Attacks Rust zip vulnerability diagram illustrating ZIP header discrepancy and file overwrite exploit
  • Vulnerability Report

Rust Zip Vulnerability Enables File Overwrite Attacks

Do Son October 30, 2026 0

A critical Rust zip vulnerability CVE-2026-115905 allows attackers to bypass security gateways and overwrite server files using ZIP header discrepancies.

Next Page ❯

Search

CVE ALERTS
📈

EPSS Spike Alerts
Catch risk spikes before they make headlines.

🎯

Custom EPSS/CVSS
Set score thresholds to effectively filter noise.

🛡️

Exploit Intel
Real-world exploit signals beyond the KEV catalog.

🐙

GitHub Issues
Auto-create alert tickets without duplication.

📬

Weekly Digest
Clean summaries, eliminating email spam.

🏷️

Watchlist Groups
Tag vulnerabilities by team (Infra/AppSec/SOC).

🔀

Smart Routing
Route chat channels based on severity levels.

🚨

RBP Tracker
Early warning detection and tracking system.

Subscribe – $7/mo or try free for 14 days →

🚨 Active Exploits in the Wild

  • CVE-2026-58115CVSS 10.0
    A vulnerability has been identified in SIMATIC IoT2050 Advanced (6ES7647-0BA00-1YA2) (All versions < V4.3.4.1 running Industrial OS with...
    Admin intel📅 Updated: Nov 2, 2026
  • CVE-2026-20051CVSS 7.4
    A vulnerability with the Ethernet VPN (EVPN) Layer 2 ingress packet processing of Cisco Nexus 3600 Platform Switches...
    Watchtower Verified📅 Updated: Nov 1, 2026
  • CVE-2026-20118CVSS 6.8
    A vulnerability in the handling of an Egress Packet Network Interface (EPNI) Aligner interrupt in Cisco IOS XR...
    Watchtower Verified📅 Updated: Nov 1, 2026
  • CVE-2010-20125CVSS 8.7
    DedeCMS before 5.7 contains a file inclusion vulnerability in plus/carbuyaction.php that allows remote unauthenticated attackers to control the...
    Watchtower Verified📅 Updated: Oct 30, 2026
  • CVE-2015-20130CVSS 5.1
    Netsweeper before 4.0.11 and 4.1.0 before 4.1.5 contains a reflected cross-site scripting vulnerability in webadmin/reporter/view_server_log.php that allows remote...
    Watchtower Verified📅 Updated: Oct 30, 2026
  • CVE-2026-111357CVSS 7.0
    Ivanti Connect Secure 22.8R2.4 mishandles the manner in which the dsinvoked broker trusts DSCache configuration data, leading to...
    CISA KEV📅 Added to KEV: Oct 30, 2026
  • CVE-2026-118527CVSS 4.3
    Use of predictable filenames in Ivanti Connect Secure before versions 25.1.1.3 and 22.8R2.6 allows a remote authenticated attacker...
    CISA KEV📅 Added to KEV: Oct 30, 2026
  • CVE-2026-118539
    This module enables you to sell goods and services to customers through an included shopping cart and checkout...
    Admin intel📅 Updated: Oct 29, 2026
Powered by CVE Watchtower

Critical Vulnerabilities

  • CVE-2026-58115CVSS 10.0
    A vulnerability has been identified in SIMATIC IoT2050 Advanced (6ES7647-0BA00-1YA2) (All versions < V4.3.4.1 running Industrial OS with...
    Admin intel📅 Updated: Nov 2, 2026
  • CVE-2026-77876CVSS 9.3
    Control Web Panel (CWP) before webpanel_version 1.16 contains an OS command injection vulnerability in the protected_directory user panel...
    📅 Updated: Nov 2, 2026
  • CVE-2026-79873CVSS 9.3
    Authentication bypass vulnerabilities in the PAPI protocol of AOS-10 could allow an unauthenticated adjacent attacker to circumvent existing...
    📅 Updated: Nov 2, 2026
  • CVE-2026-79874CVSS 9.3
    An authentication bypass in the API of AOS-10 allows an unauthenticated adjacent attacker to circumvent existing authentication controls....
    📅 Updated: Nov 2, 2026
  • CVE-2026-79872CVSS 9.4
    A buffer overflow vulnerability exists in the underlying operating system of AOS that could lead to unauthenticated remote...
    📅 Updated: Nov 2, 2026
  • CVE-2026-55981CVSS 9.6
    A firmware verification vulnerability in Creative Sound Blaster Katana could allow an attacker to modify a legitimate firmware...
    📅 Updated: Nov 2, 2026
  • CVE-2026-118235CVSS 9.8
    The SimpleForm – Form Maker to Chat Apps with Quiz, Poll and Multi Lead Notifications plugin for WordPress...
    📅 Updated: Nov 2, 2026
  • CVE-2026-116512CVSS 9.8
    The Project Manager – AI Powered Project Management, Task Management, Kanban Board & Time Tracker plugin for WordPress...
    📅 Updated: Nov 2, 2026
Powered by CVE Watchtower

Daily CyberSecurity

  • About SecurityOnline.info
  • Advertise with us
  • Announcement
  • Contact
  • Contributor Register
  • Login
  • Disclaimer
  • DCMA
  • Privacy Policy
  • About SecurityOnline.info
  • Advertise on SecurityOnline.info
  • Contact Us

When you purchase through links on our site, we may earn an affiliate commission. Here’s how it works

  • CVE Watchtower
  • CVE Statistics by Vendor 2026
  • Q3 2026 Report
  • Top Exploited CVEs
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube
© 2017 - 2026 Daily CyberSecurity. All Rights Reserved.