Skip to content
November 3, 2026
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube

Daily CyberSecurity

Zero-hour alerts. Unmatched analysis.

Primary Menu
  • Home
  • CVE Data
    • CVE Watchtower
    • Top Exploited CVEs
    • CVE Stats by Vendor
    • Q2 2026 Report
    • CVE Alerts
    • CVE Alert Settings
    • Pricing
  • Cyber Criminals
  • Data Leak
  • Free Tools
    • CVSS 3.1 Calculator
    • Certificate Viewer
    • DNS Lookup
    • Encoder & Hash Generator
    • IP / Subnet Calculator
    • Whois Lookup
  • Linux
  • Malware
  • Vulnerability
  • Submit Press Release
  • Weekly Recap
Light/Dark Button
Google Unveils Android 17 and Innovative June Pixel Drop Google Android 17 features and June Pixel Drop multitasking bubbles
  • Android

Google Unveils Android 17 and Innovative June Pixel Drop

Do Son June 17, 2026 0

Discover how the new Android 17 operating system and June Pixel Drop redefine mobile productivity, privacy protection, and Gemini AI creativity.

Chrome Security Update Fixes 33 Flaws, Seven Critical Chrome security update patching a critical use-after-free vulnerability (CVE-2026-12437) in the Google Chrome 149 desktop browser
  • Vulnerability Report

Chrome Security Update Fixes 33 Flaws, Seven Critical

Do Son June 17, 2026 0

A new Chrome security update fixes 33 flaws, including critical use-after-free bugs like CVE-2026-12437. Update Chrome 149 now to stay safe.

Fortra BoKS Vulnerability Opens Door to Remote Command Injection Fortra BoKS vulnerability OS command injection, CVE-2026-9862 Altium Enterprise Server Vulnerability CVE-2026-9129 Path Traversal Patreon OAuth Vulnerability Identity Collision DRC INSIGHT Vulnerability Exam Data Hijacking Horner Automation PLC Industrial Brute Force Honeywell IQ4x Vulnerability CVE-2026-3611 DJI Romo vacuum security flaw Python Cryptography Vulnerability CVE-2026-26007 Open5GS Vulnerability CVE-2026-0622 Vivotek IP7137 Vulnerabilities CVE-2025-66049 Forcepoint DLP Vulnerability CVE-2025-14026 Cellopoint Secure Email Gateway - CVE-2024-9043
  • Vulnerability Report

Fortra BoKS Vulnerability Opens Door to Remote Command Injection

Do Son June 17, 2026 0

A critical Fortra BoKS vulnerability (CVE-2026-9862) enables remote OS command injection via the autoregistration service. Mitigate now.

GitHub Overload: Microsoft Rents Amazon Cloud Capacity Microsoft rents Amazon cloud infrastructure to resolve GitHub server capacity limits
  • Technology

GitHub Overload: Microsoft Rents Amazon Cloud Capacity

Do Son June 17, 2026 0

Discover why explosive AI coding growth forces GitHub to seek help. Microsoft rents Amazon cloud infrastructure to resolve severe Azure server capacity limits.

Critical Yarbo Robot Vulnerability Exposes Global Fleet Yarbo robot vulnerability hard-coded MQTT credentials, CVE-2026-10557, CVE-2026-7368 command injection vulnerabilities InHand router flaws
  • Vulnerability Report

Critical Yarbo Robot Vulnerability Exposes Global Fleet

Do Son June 17, 2026 0

A critical Yarbo robot vulnerability lets attackers extract hard-coded MQTT credentials and command the global fleet via CVE-2026-10557.

SpaceX Acquires Cursor for $60 Billion in AI Tech Buyout SpaceX acquires Cursor to dominate the AI coding tools market
  • Technology

SpaceX Acquires Cursor for $60 Billion in AI Tech Buyout

Do Son June 17, 2026 0

Discover why SpaceX acquires Cursor for $60 billion. Explore how this monumental Anysphere buyout transforms AI programming and elevates Grok models.

Cloud Foundry UAA Vulnerability Enables SAML Authentication Bypass Cloud Foundry UAA vulnerability SAML authentication bypass, CVE-2026-41005 Cloud Foundry key disclosure Elliptic Curve private keys
  • Vulnerability Report

Cloud Foundry UAA Vulnerability Enables SAML Authentication Bypass

Do Son June 17, 2026 0

A Cloud Foundry UAA vulnerability (CVE-2026-41005) enables SAML authentication bypass, letting attackers forge trusted assertions. Upgrade now.

NVIDIA Patches Three High-Severity NeMo Framework Code Injection Flaws NVIDIA NeMo vulnerability CVE-2026-24155, CVE-2026-24252, CVE-2026-24228, code injection NVIDIA DALI vulnerabilities NVIDIA Driver Security Update CVE-2026-24187 Linux
  • Vulnerability Report

NVIDIA Patches Three High-Severity NeMo Framework Code Injection Flaws

Do Son June 17, 2026 0

Three NVIDIA NeMo vulnerabilities (CVE-2026-24155, CVE-2026-24252, CVE-2026-24228) enable code execution. Update NeMo Framework to v2.7.3 now.

MongoDB Server Vulnerability Wave Hits Document Databases MongoDB Server vulnerability use-after-free vulnerability, CVE-2026-11933, CVE-2026-9740, CVE-2026-9750 MongoDB DoS, Pre-Authentication Vulnerability CVE-2024-7553 - MongoDB Server CVE-2025-3083, CVE-2025-3084, and CVE-2025-3085
  • Vulnerability Report

MongoDB Server Vulnerability Wave Hits Document Databases

Do Son June 17, 2026 0

A MongoDB Server vulnerability chain, including a use-after-free flaw (CVE-2026-11933), lets attackers crash servers or leak memory. Patch now.

Customer-Managed Certificate Authorities Move Into the Cloud as Echoworx Extends S/MIME Automation on AWS AISelect_20260617_062341_Docs
  • Technique

Customer-Managed Certificate Authorities Move Into the Cloud as Echoworx Extends S/MIME Automation on AWS

Do Son June 16, 2026 0
Echoworx has added support for automated S/MIME certificate generation using customer-managed Certificate Authorities hosted in AWS Private...
Read More Read more about Customer-Managed Certificate Authorities Move Into the Cloud as Echoworx Extends S/MIME Automation on AWS
ShapedPlugin Supply Chain Attack Exposes WordPress Sites ShapedPlugin Supply Chain Attack CVE-2026-10735, CVE-2026-49777, WordPress Plugin Malware
  • Malware
  • Vulnerability Report

ShapedPlugin Supply Chain Attack Exposes WordPress Sites

Do Son June 16, 2026 0

A ShapedPlugin supply chain attack (CVE-2026-10735) injected malware into WordPress Pro plugins. Discover the impact and how to protect your site today.

Aembit Extends IAM for Agentic AI to Microsoft Copilot Studio aembit-now-secures-microsoft-copilot-studio-agents_1781558980bWDf0TQsQw
  • Press Release

Aembit Extends IAM for Agentic AI to Microsoft Copilot Studio

cybernewswire June 16, 2026 0
Las Vegas, USA / Nevada, 16th June 2026, CyberNewswire
Read More Read more about Aembit Extends IAM for Agentic AI to Microsoft Copilot Studio
AppViewX Launches Agent Identity Security to Govern Agents for the AI and Quantum Era agentidentitysecurity-pr-1_1781531484fFMfttEC6z
  • Press Release

AppViewX Launches Agent Identity Security to Govern Agents for the AI and Quantum Era

cybernewswire June 16, 2026 0
New York, United States of America, 16th June 2026, CyberNewswire
Read More Read more about AppViewX Launches Agent Identity Security to Govern Agents for the AI and Quantum Era
Hackers Capitalize on AI Hype With Sophisticated Attacks AI social engineering lures malvertising campaigns, credential theft, Vidar stealer
  • Cybercriminals

Hackers Capitalize on AI Hype With Sophisticated Attacks

Do Son June 16, 2026 0

Threat actors are using AI social engineering lures to distribute malware and steal credentials. Learn how fake ChatGPT and DeepSeek campaigns work.

Developer laptops are the credential store attackers are picking through in 2026, GitGuardian announces Endpoint Protection endpointprotection_gitguardian_1781249010XdHjg5F7Ei
  • Press Release

Developer laptops are the credential store attackers are picking through in 2026, GitGuardian announces Endpoint Protection

cybernewswire June 16, 2026 0
New York, New York, 16th June 2026, CyberNewswire
Read More Read more about Developer laptops are the credential store attackers are picking through in 2026, GitGuardian announces Endpoint Protection
Claude Fable 5 Ban: Anthropic’s Standstill with US Government Claude Fable 5 ban Anthropic export control, AI jailbreak vulnerability, US government AI policy Anthropic foreign access, AI model jailbreaking, Mythos 5 security
  • Technology

Claude Fable 5 Ban: Anthropic’s Standstill with US Government

Do Son June 16, 2026 0

Discover why the US government enacted a Claude Fable 5 ban. Explore Anthropic's urgent negotiations over AI jailbreak flaws and strict export controls.

Microsoft Teams Workplace Check-in: Privacy Concerns Teams Workplace Check-in Microsoft 365 privacy, employee tracking tools, Teams location sharing Microsoft Teams EU antitrust, Teams Wi-Fi tracking, employee privacy
  • Technology

Microsoft Teams Workplace Check-in: Privacy Concerns

Do Son June 16, 2026 0

Discover how the controversial new Microsoft Teams Workplace Check-in feature tracks employee office attendance through corporate Wi-Fi connections.

UNK_DeadDrop Phishing Campaigns Target Developers UNK_DeadDrop phishing campaigns Contagious Interview, Overlord malware
  • Malware

UNK_DeadDrop Phishing Campaigns Target Developers

Do Son June 16, 2026 0

UNK_DeadDrop phishing campaigns are targeting developers with fake jobs to deliver Overlord malware. Learn how to defend against this North Korean threat.

Telegram Bots Receive Rich HTML and Markdown Formatting Options Telegram Bot Formatting HTML formatting, Markdown update, bot development Telegram Passkey SMS Login Replacement Telegram Zero-Click Vulnerability
  • Technology

Telegram Bots Receive Rich HTML and Markdown Formatting Options

Do Son June 16, 2026 0

Discover the latest Telegram bot formatting options. Learn how to use rich HTML and Markdown to create engaging, sophisticated messages with advanced styles.

Could Apple Build Its Own OpenClaw Competitor? Apple OpenClaw competitor Apple AI agent, Siri agentic capabilities, Apple computer-use agent OpenClaw Lobster
  • Technology

Could Apple Build Its Own OpenClaw Competitor?

Do Son June 16, 2026 0

Bloomberg's Mark Gurman suggests Apple may build an OpenClaw competitor that lets Siri fully operate apps on iPhone, iPad, and Mac.

Fluffy Wolf Phishing Attacks Push PowerLoader Malware Fluffy Wolf phishing attacks PowerLoader malware, CVE-2023-38831, CVE-2022-30190, CVE-2024-21412
  • Malware

Fluffy Wolf Phishing Attacks Push PowerLoader Malware

Do Son June 16, 2026 0

Discover how Fluffy Wolf phishing attacks target Russian organizations with the new PowerLoader malware to deploy PureRAT and Pay2Key ransomware.

curl Project Pauses Vulnerability Reports for “Summer of Bliss” CVE-2023-38545 curl summer of bliss curl vulnerability pause, curl summer of bliss, curl 8.22.0 delay, HackerOne submission pause
  • Technology

curl Project Pauses Vulnerability Reports for “Summer of Bliss”

Do Son June 16, 2026 0

curl will halt vulnerability reports throughout July 2026, dubbing it a "summer of bliss," and will delay its 8.22.0 release by two weeks.

❮ Prev Page
Next Page ❯

Search

CVE ALERTS
📈

EPSS Spike Alerts
Catch risk spikes before they make headlines.

🎯

Custom EPSS/CVSS
Set score thresholds to effectively filter noise.

🛡️

Exploit Intel
Real-world exploit signals beyond the KEV catalog.

🐙

GitHub Issues
Auto-create alert tickets without duplication.

📬

Weekly Digest
Clean summaries, eliminating email spam.

🏷️

Watchlist Groups
Tag vulnerabilities by team (Infra/AppSec/SOC).

🔀

Smart Routing
Route chat channels based on severity levels.

🚨

RBP Tracker
Early warning detection and tracking system.

Subscribe – $7/mo or try free for 14 days →

🚨 Active Exploits in the Wild

  • CVE-2026-81648CVSS 10.0
    The CryptoPayment Gateway WordPress plugin from 1.2.1 to 1.2.2 does not apply an authorization check on one of...
    Admin intel📅 Updated: Nov 3, 2026
  • CVE-2026-58115CVSS 10.0
    A vulnerability has been identified in SIMATIC IoT2050 Advanced (6ES7647-0BA00-1YA2) (All versions < V4.3.4.1 running Industrial OS with...
    Admin intel📅 Updated: Nov 2, 2026
  • CVE-2026-20051CVSS 7.4
    A vulnerability with the Ethernet VPN (EVPN) Layer 2 ingress packet processing of Cisco Nexus 3600 Platform Switches...
    Watchtower Verified📅 Updated: Nov 1, 2026
  • CVE-2026-20118CVSS 6.8
    A vulnerability in the handling of an Egress Packet Network Interface (EPNI) Aligner interrupt in Cisco IOS XR...
    Watchtower Verified📅 Updated: Nov 1, 2026
  • CVE-2010-20125CVSS 8.7
    DedeCMS before 5.7 contains a file inclusion vulnerability in plus/carbuyaction.php that allows remote unauthenticated attackers to control the...
    Watchtower Verified📅 Updated: Oct 30, 2026
  • CVE-2015-20130CVSS 5.1
    Netsweeper before 4.0.11 and 4.1.0 before 4.1.5 contains a reflected cross-site scripting vulnerability in webadmin/reporter/view_server_log.php that allows remote...
    Watchtower Verified📅 Updated: Oct 30, 2026
  • CVE-2026-111357CVSS 7.0
    Ivanti Connect Secure 22.8R2.4 mishandles the manner in which the dsinvoked broker trusts DSCache configuration data, leading to...
    CISA KEV📅 Added to KEV: Oct 30, 2026
  • CVE-2026-118527CVSS 4.3
    Use of predictable filenames in Ivanti Connect Secure before versions 25.1.1.3 and 22.8R2.6 allows a remote authenticated attacker...
    CISA KEV📅 Added to KEV: Oct 30, 2026
Powered by CVE Watchtower

Critical Vulnerabilities

  • CVE-2026-77876CVSS 9.3
    Control Web Panel (CWP) before webpanel_version 1.16 contains an OS command injection vulnerability in the protected_directory user panel...
    📅 Updated: Nov 3, 2026
  • CVE-2026-73696CVSS 9.3
    Control Web Panel (CWP) before webpanel_version 1.12 contains an execution after redirect vulnerability in the user panel authentication...
    📅 Updated: Nov 3, 2026
  • CVE-2026-58256CVSS 9.1
    GRR is a resource management and reservation application. Prior to the advisory-reported fixed version 4.5.0, an administrator can...
    📅 Updated: Nov 3, 2026
  • CVE-2026-115904CVSS 9.6
    Topluyo is a social networking platform. A vulnerability exists in Topluyo Desktop for Linux prior to version 2026.9.2410...
    📅 Updated: Nov 3, 2026
  • CVE-2026-118375CVSS 9.2
    llama.cpp b8841 before b11865 contains an out-of-bounds write vulnerability in the ggml-rpc RDMA transport rdma_recv() function that allows...
    📅 Updated: Nov 3, 2026
  • CVE-2026-54749CVSS 9.4
    Summary Three custom API-Platform controllers under `src/CoreBundle/Controller/Api/` perform privileged mutations but enforce only a global platform role (`ROLE_TEACHER`)...
    📅 Updated: Nov 3, 2026
  • CVE-2026-89292CVSS 9.2
    In Eclipse Mnestix Browser versions 1.6.0 up until but excluding 2.3.0 it was possible for an unauthenticated attacker...
    📅 Updated: Nov 3, 2026
  • CVE-2026-121022CVSS 9.2
    Use of Default Password (CWE-1393) in the web client in AxxonSoft Axxon One before 3.0.0 on Windows and...
    📅 Updated: Nov 3, 2026
Powered by CVE Watchtower

Daily CyberSecurity

  • About SecurityOnline.info
  • Advertise with us
  • Announcement
  • Contact
  • Contributor Register
  • Login
  • Disclaimer
  • DCMA
  • Privacy Policy
  • About SecurityOnline.info
  • Advertise on SecurityOnline.info
  • Contact Us

When you purchase through links on our site, we may earn an affiliate commission. Here’s how it works

  • CVE Watchtower
  • CVE Statistics by Vendor 2026
  • Q3 2026 Report
  • Top Exploited CVEs
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube
© 2017 - 2026 Daily CyberSecurity. All Rights Reserved.