Skip to content
October 29, 2026
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube

Daily CyberSecurity

Zero-hour alerts. Unmatched analysis.

Primary Menu
  • Home
  • CVE Data
    • CVE Watchtower
    • Top Exploited CVEs
    • CVE Stats by Vendor
    • Q2 2026 Report
    • CVE Alerts
    • CVE Alert Settings
    • Pricing
  • Cyber Criminals
  • Data Leak
  • Free Tools
    • CVSS 3.1 Calculator
    • Certificate Viewer
    • DNS Lookup
    • Encoder & Hash Generator
    • IP / Subnet Calculator
    • Whois Lookup
  • Linux
  • Malware
  • Vulnerability
  • Submit Press Release
  • Weekly Recap
Light/Dark Button
Windows 11 Update Triggers Xbox Live Error 0x87DD0005 Xbox Live error 0x87DD0005 sign-in failure workaround on Windows 11
  • Windows

Windows 11 Update Triggers Xbox Live Error 0x87DD0005

Do Son October 20, 2026 0

Windows 11 update KB5127648 triggers Xbox Live error 0x87DD0005 in casual games. Learn how to fix the sign-in failure with a simple service restart.

AdFection Spyware Attack Targets Al Jazeera Devices AdFection spyware attack diagram showing a malicious ad bid delivering Candiru code to an Al Jazeera device, linked to Discover-Tech
  • Malware

AdFection Spyware Attack Targets Al Jazeera Devices

Do Son October 20, 2026 0

Citizen Lab exposes the AdFection spyware attack, a zero-click ad-bidding exploit that targeted at least 45 Al Jazeera devices.

Google DMA Compliance Under EU Review After Fine Google DMA compliance review by the European Commission, following the EU Google fine over search ranking and Play Store fees
  • Technology

Google DMA Compliance Under EU Review After Fine

Do Son October 20, 2026 0

The EU is weighing Google DMA compliance after July fines of 890 million euros over search ranking and Google Play fees.

ChatGPT Chrome Extension Now Reads Your Open Tabs ChatGPT Chrome extension sidebar comparing several open browser tabs, with ChatGPT Work agents filling in a web form
  • Technology

ChatGPT Chrome Extension Now Reads Your Open Tabs

Do Son October 20, 2026 0

The ChatGPT Chrome extension now reads multiple open tabs and runs ChatGPT Work agents to compare, fill forms, and draft emails.

OpenCode Security Breach Exposes 1.4% of Console Users OpenCode security breach exposing stored third-party API keys in OpenCode Console, linked to an AI distillation attack
  • Data Leak

OpenCode Security Breach Exposes 1.4% of Console Users

Do Son October 20, 2026 0

The OpenCode security breach may have exposed stored third-party API keys for 1.4% of Console users. Revoke and rotate keys now.

Apple Bans Nudify Apps in Strict App Store Overhaul Apple bans nudify apps under updated App Store deepfake guidelines
  • Technology

Apple Bans Nudify Apps in Strict App Store Overhaul

Do Son October 20, 2026 0

Apple bans nudify apps and nonconsensual deepfakes under strict new App Store guidelines requiring developers to proactively block illicit content.

Ubuntu 26.10 Release Brings Rust Core and GNOME 51 Ubuntu 26.10 release desktop interface showcasing GNOME 51 and Rust coreutils
  • Linux

Ubuntu 26.10 Release Brings Rust Core and GNOME 51

Do Son October 20, 2026 0

The Ubuntu 26.10 release delivers GNOME 51, Rust-powered uutils core tools, local Myna voice AI, and expanded TPM hardware encryption.

Secure Boot Certificate Expiration: Windows PCA 2011 Retires Windows Secure Boot certificate expiration and UEFI CA 2023 transition diagram
  • Windows

Secure Boot Certificate Expiration: Windows PCA 2011 Retires

Do Son October 20, 2026 0

Following the Secure Boot certificate expiration, Windows PCs transition to UEFI CA 2023 while booting normally. Learn how to verify your device.

Windows 11 Memory Optimization Boosts Speed by 20% Windows 11 memory optimization diagram showing RAM allocation and performance update improvements
  • Windows

Windows 11 Memory Optimization Boosts Speed by 20%

Do Son October 20, 2026 0

New Windows 11 memory optimization keeps 2GB more data in RAM, unloads background widgets, and boosts overall system responsiveness by up to 20 percent.

OpenAI Humanoid Robot Confirmed by Sam Altman OpenAI humanoid robot concept reaching for a mug, reflecting Sam Altman robot plans and the challenge of building its AI brain
  • Technology

OpenAI Humanoid Robot Confirmed by Sam Altman

Do Son October 20, 2026 0

Sam Altman confirms an OpenAI humanoid robot is coming, with a demo due in 2027. The real hurdle is building the robot's brain.

Technical Details and PoC Exploit Published for Critical Drupal Field UI RCE (CVE-2026-108097) Drupal RCE vulnerability CVE-2026-108097 in Field UI with public PoC research
  • Vulnerability Report

Technical Details and PoC Exploit Published for Critical Drupal Field UI RCE (CVE-2026-108097)

Do Son October 20, 2026 0

Details and PoC code are public for the Drupal RCE vulnerability CVE-2026-108097 in Field UI. Update to 11.4.10, 11.3.19 or 10.6.19 now.

Full Details and PoC Exploit Released for 37-Year-Old OpenBSD Kernel Bug That Grants Root OpenBSD kernel vulnerability local privilege escalation PoC exploit published by Calif
  • Vulnerability Report

Full Details and PoC Exploit Released for 37-Year-Old OpenBSD Kernel Bug That Grants Root

Do Son October 20, 2026 0

Calif released details and PoC code for an OpenBSD kernel vulnerability enabling local privilege escalation to root. Apply errata 018 and 026.

Redis RESTORE Flaw CVE-2026-25243 Now Exploited in the Wild, Honeypots Show Redis RESTORE vulnerability CVE-2026-25243 exploited in the wild against Redis servers
  • Vulnerability Report

Redis RESTORE Flaw CVE-2026-25243 Now Exploited in the Wild, Honeypots Show

Do Son October 20, 2026 0

The Redis RESTORE vulnerability CVE-2026-25243 is exploited in the wild, Defused honeypots show. Upgrade to Redis 8.6.3 or block RESTORE.

UpdraftPlus Data Breach Leads to UpdraftCentral Backdoor Attacks on WordPress Sites UpdraftPlus data breach - stolen keys used in UpdraftCentral backdoor attacks on WordPress sites
  • Data Leak

UpdraftPlus Data Breach Leads to UpdraftCentral Backdoor Attacks on WordPress Sites

Do Son October 20, 2026 0

UpdraftPlus data breach exposed customer data and keys now used in an UpdraftCentral backdoor campaign. Update to 1.26.12 and check your sites.

Siemens Confirms Software Center Flaw CVE-2026-110936 Exploited in the Wild in ClickFix Attacks Siemens Software Center vulnerability CVE-2026-110936 exploited in the wild via DLL sideloading
  • Vulnerability Report

Siemens Confirms Software Center Flaw CVE-2026-110936 Exploited in the Wild in ClickFix Attacks

Do Son October 20, 2026 0

Siemens Software Center vulnerability CVE-2026-110936 is exploited in the wild by ClickFix attackers via DLL sideloading. Update to 4.0.9.8.

Critical Laravel TokenGuard Flaw (CVSS 9.2) Lets Attackers Log In as Any User Laravel authentication bypass flaw in TokenGuard enables account takeover
  • Vulnerability Report

Critical Laravel TokenGuard Flaw (CVSS 9.2) Lets Attackers Log In as Any User

Do Son October 19, 2026 0

A critical Laravel authentication bypass (CVSS 9.2) in TokenGuard enables account takeover without a token. Upgrade to 13.29.0 or 12.68.0.

Bright Security Introduces STAR Fuzzer, Agentic Fuzzing That Writes Its Own Harnesses and Proves Every Finding star-fuzzer-title-C-red-v3_1792073362oU7IpWmrdD
  • Press Release

Bright Security Introduces STAR Fuzzer, Agentic Fuzzing That Writes Its Own Harnesses and Proves Every Finding

cybernewswire October 19, 2026 0
San Rafael, United States, 19th October 2026, CyberNewswire
Read More Read more about Bright Security Introduces STAR Fuzzer, Agentic Fuzzing That Writes Its Own Harnesses and Proves Every Finding
Roundcube 1.6.20 and 1.7.5 Fix 20 Security Flaws, Including IMAP Command Injection Roundcube security update fixes IMAP command injection and header injection flaws
  • Vulnerability Report

Roundcube 1.6.20 and 1.7.5 Fix 20 Security Flaws, Including IMAP Command Injection

Do Son October 19, 2026 0

A Roundcube security update fixes 20 flaws, including IMAP command injection and header injection. Upgrade to 1.6.20 or 1.7.5 now.

UNC7017 Executes AOMEI Supply Chain Attack Using Five-Minute Server Tampering Diagram of the AOMEI supply chain attack and AOMEI supply chain attack UNC7017 update workflow #AOMEISupplyChainAttack #UNC7017
  • Cybercriminals

UNC7017 Executes AOMEI Supply Chain Attack Using Five-Minute Server Tampering

Do Son October 19, 2026 0

Google and Mandiant uncovered the AOMEI supply chain attack UNC7017 campaign using 5-minute server tampering to drop CROSSROAD and SHINYROAD malware.

Exchange Server Instability Tied to October Windows Updates Exchange Server instability caused by October 2026 Windows updates and Endpoint Mapper limit
  • Technology

Exchange Server Instability Tied to October Windows Updates

Do Son October 19, 2026 0

Microsoft links Exchange Server instability to October 2026 Windows updates. See the OWA and mail queue symptoms, plus the registry fix.

PwnEscape Linux Kernel Flaw CVE-2026-99999 Lets VM Guests Escape to the Host Linux kernel VM escape flaw PwnEscape CVE-2026-99999 allows guest-to-host escape
  • Vulnerability Report

PwnEscape Linux Kernel Flaw CVE-2026-99999 Lets VM Guests Escape to the Host

Do Son October 19, 2026 0

PwnEscape (CVE-2026-99999) is a critical Linux kernel VM escape that let a guest run code as root on the host in lab tests. Update your kernel now.

CISA Warns of Critical Flaws in dcm4chee Medical Archive and Unpatched EseeCloud IP Cameras dcm4chee vulnerabilities and EseeCloud hard-coded credentials flaw in CISA advisories
  • Vulnerability Report

CISA Warns of Critical Flaws in dcm4chee Medical Archive and Unpatched EseeCloud IP Cameras

Do Son October 19, 2026 0

CISA warns of dcm4chee vulnerabilities that expose patient data, plus unpatched EseeCloud cameras with hard-coded credentials (CVE-2026-107617).

❮ Prev Page
Next Page ❯

Search

Translation

CVE ALERTS
📈

EPSS Spike Alerts
Catch risk spikes before they make headlines.

🎯

Custom EPSS/CVSS
Set score thresholds to effectively filter noise.

🛡️

Exploit Intel
Real-world exploit signals beyond the KEV catalog.

🐙

GitHub Issues
Auto-create alert tickets without duplication.

📬

Weekly Digest
Clean summaries, eliminating email spam.

🏷️

Watchlist Groups
Tag vulnerabilities by team (Infra/AppSec/SOC).

🔀

Smart Routing
Route chat channels based on severity levels.

🚨

RBP Tracker
Early warning detection and tracking system.

Subscribe – $7/mo or try free for 14 days →

🚨 Active Exploits in the Wild

  • CVE-2026-118539
    This module enables you to sell goods and services to customers through an included shopping cart and checkout...
    Admin intel📅 Updated: Oct 29, 2026
  • CVE-2022-31034CVSS 8.3
    Impact All versions of Argo CD starting with v0.11.0 are vulnerable to a variety of attacks when an...
    Watchtower Verified📅 Updated: Oct 29, 2026
  • CVE-2026-112353CVSS 6.2
    GFI KerioConnect (Kerio Connect) before 10.0.8 Patch 2 contains a stored cross-site scripting vulnerability in the Webmail component...
    Watchtower Verified📅 Updated: Oct 29, 2026
  • CVE-2026-116779CVSS 9.8
    Summary `sofia_presence_handle_sip_i_message()` splits the To user of an inbound SIP MESSAGE on `+` and treats the left half...
    Admin intel📅 Updated: Oct 29, 2026
  • CVE-2026-97229CVSS 10.0
    GitLab has remediated an issue that, under certain conditions, could have allowed an unauthenticated user to execute arbitrary...
    Admin intel📅 Updated: Oct 29, 2026
  • CVE-2026-76418CVSS 8.6
    A vulnerability in the Remote Access SSL VPN service of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software...
    Admin intel📅 Updated: Oct 29, 2026
  • CVE-2026-116690CVSS 7.5
    MLflow is an open source AI engineering platform for agents, large language models, and machine learning models. From...
    Admin intel📅 Updated: Oct 28, 2026
  • CVE-2026-101767CVSS 9.8
    Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: Core). Supported versions that are...
    Admin intel📅 Updated: Oct 28, 2026
Powered by CVE Watchtower

Critical Vulnerabilities

  • CVE-2026-62018CVSS 9.8
    Unauthenticated PHP Object Injection in Gunslinger
    📅 Updated: Oct 29, 2026
  • CVE-2026-62131CVSS 9.8
    Unauthenticated PHP Object Injection in Zoho Flow
    📅 Updated: Oct 29, 2026
  • CVE-2026-62017CVSS 9.8
    Unauthenticated PHP Object Injection in Good Homes
    📅 Updated: Oct 29, 2026
  • CVE-2026-62016CVSS 9.8
    Unauthenticated PHP Object Injection in Gamic
    📅 Updated: Oct 29, 2026
  • CVE-2026-62015CVSS 9.8
    Unauthenticated PHP Object Injection in Gamezone
    📅 Updated: Oct 29, 2026
  • CVE-2026-62014CVSS 9.8
    Unauthenticated PHP Object Injection in EmojiNation
    📅 Updated: Oct 29, 2026
  • CVE-2026-62013CVSS 9.8
    Unauthenticated PHP Object Injection in Edge Decor
    📅 Updated: Oct 29, 2026
  • CVE-2026-62012CVSS 9.8
    Unauthenticated PHP Object Injection in Coinpress
    📅 Updated: Oct 29, 2026
Powered by CVE Watchtower

Daily CyberSecurity

  • About SecurityOnline.info
  • Advertise with us
  • Announcement
  • Contact
  • Contributor Register
  • Login
  • Disclaimer
  • DCMA
  • Privacy Policy
  • About SecurityOnline.info
  • Advertise on SecurityOnline.info
  • Contact Us

When you purchase through links on our site, we may earn an affiliate commission. Here’s how it works

  • CVE Watchtower
  • CVE Statistics by Vendor 2026
  • Q3 2026 Report
  • Top Exploited CVEs
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube
© 2017 - 2026 Daily CyberSecurity. All Rights Reserved.