Skip to content
November 2, 2026
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube

Daily CyberSecurity

Zero-hour alerts. Unmatched analysis.

Primary Menu
  • Home
  • CVE Data
    • CVE Watchtower
    • Top Exploited CVEs
    • CVE Stats by Vendor
    • Q2 2026 Report
    • CVE Alerts
    • CVE Alert Settings
    • Pricing
  • Cyber Criminals
  • Data Leak
  • Free Tools
    • CVSS 3.1 Calculator
    • Certificate Viewer
    • DNS Lookup
    • Encoder & Hash Generator
    • IP / Subnet Calculator
    • Whois Lookup
  • Linux
  • Malware
  • Vulnerability
  • Submit Press Release
  • Weekly Recap
Light/Dark Button
Operation TaxShadow: Tax Phishing Hides In-Memory Malware Operation TaxShadow, tax phishing malware, in-memory malware, WebSocket C2
  • Malware

Operation TaxShadow: Tax Phishing Hides In-Memory Malware

Do Son June 12, 2026 0

Operation TaxShadow uses fake tax notices to spread in-memory tax phishing malware with WebSocket C2, per CYFIRMA's new report.

Apple Removes the AFP Protocol in macOS 27 Apple AirPort Utility deprecated notice on legacy wireless routers AFP protocol macOS 27, SMB3 protocol, Apple Filing Protocol, file sharing protocol Apple WWDC 2026 announcements
  • Technology

Apple Removes the AFP Protocol in macOS 27

Do Son June 12, 2026 0

Apple removes the AFP protocol in macOS 27 after 40 years and urges users to switch to the modern SMB3 standard for secure, cross-platform file sharing.

iOS 27 AirDrop Speed Jumps 220% in New Tests iOS 27 AirDrop speed, AirDrop transfer speed, AirDrop file transfer, AWDL protocol iPhone 17e rumors iPhone Air 2 Roadmap Apple Launch Cadence Shift iPhone Air sales collapse Apple iPhone Fold iPhone Air, thinnest iPhone camera flaw
  • Technology

iOS 27 AirDrop Speed Jumps 220% in New Tests

Do Son June 12, 2026 0

Developers testing iOS 27 found AirDrop transfer speed up 220%, cutting a 3.5GB file transfer from 2 minutes 11 seconds down to just 41 seconds.

Pixel Reboot Loop Bug Hits Devices After Update Pixel reboot loop bug, Pixel factory reset, Pixel software update issue, Pixel boot loop fix Google Pixel 10a pre-order
  • Technology

Pixel Reboot Loop Bug Hits Devices After Update

Do Son June 12, 2026 0

Google confirms a Pixel reboot loop bug after March, April, and May updates, with no fix yet and support suggesting a factory reset that wipes user data.

Multiple Security Flaws Fixed in Major Framework Release CVE-2024-22257 Spring security vulnerabilities, cross-site scripting, CVE-2026-41003, CVE-2026-40999, CVE-2026-40998
  • Vulnerability Report

Multiple Security Flaws Fixed in Major Framework Release

Do Son June 12, 2026 0

New updates patch critical Spring security vulnerabilities, mitigating cross-site scripting and server-side request forgery risks across multiple versions.

Chrome 149 Patches 28 Flaws, Several Critical UAF Bugs Chrome security update, CVE-2026-12007, CVE-2026-12008, CVE-2026-12010 Chrome Security Update CVE-2026-1504 Chrome WebGPU Overflow, V8 RCE
  • Vulnerability Report

Chrome 149 Patches 28 Flaws, Several Critical UAF Bugs

Do Son June 12, 2026 0

Chrome security update to version 149 patches 28 flaws, including critical CVE-2026-12007, CVE-2026-12008, and CVE-2026-12010 bugs.

Critical 9.9 CVSS Ubiquiti UniFi OS Vulnerabilities Exposed UniFi OS vulnerabilities, Ubiquiti security flaws, CVE-2026-47367, CVE-2026-47369, CVE-2026-47370 Ubiquiti UniFi OS Vulnerabilities UniFi OS Firmware Update 2026 UniFi Play Vulnerability Critical RCE Patch Ubiquiti UniFi Vulnerability CVE-2026-22557
  • Vulnerability Report

Critical 9.9 CVSS Ubiquiti UniFi OS Vulnerabilities Exposed

Do Son June 12, 2026 0

Critical UniFi OS vulnerabilities boast a 9.9 CVSS score. Patch these Ubiquiti security flaws to prevent command injection and secure your network today.

ShinyHunters Strikes with Oracle PeopleSoft Exploit Oracle PeopleSoft exploit, CVE-2026-35273
  • Cybercriminals

ShinyHunters Strikes with Oracle PeopleSoft Exploit

Do Son June 12, 2026 0

ShinyHunters leverages a zero-day Oracle PeopleSoft exploit to compromise higher education systems, exposing sensitive data via the CVE-2026-35273 flaw.

New Patches Fix Broad AMD Security Vulnerabilities AMD security vulnerabilities, hardware security flaws, CVE-2025-54509, CVE-2025-10263 AMD GPU Price Hike GDDR Memory Costs CPU burnout, BIOS issues SQUIP AMD Ryzen AI vulnerability
  • Vulnerability Report

New Patches Fix Broad AMD Security Vulnerabilities

Do Son June 12, 2026 0

Fix critical AMD security vulnerabilities and hardware security flaws now. Learn about CVE-2025-54509 and CVE-2025-10263 updates.

Apache Answer Vulnerabilities and Security Flaws Fixed Apache Answer vulnerabilities, security flaws, CVE-2026-25688, CVE-2026-25700, CVE-2026-25699
  • Vulnerability Report

Apache Answer Vulnerabilities and Security Flaws Fixed

Do Son June 12, 2026 0

Fix critical Apache Answer vulnerabilities and security flaws today. Upgrade your platform to stay safe from unauthorized access and server crashes.

Millions at Risk: 9.8 CVSS Remote Code Execution in HTTP.sys HTTP.sys RCE vulnerability, Windows HTTP stack exploit, CVE-2026-47291 Netlogon RCE vulnerability Exploited in the wild Secure Boot certificate renewal 2026, Windows 11 UEFI update Community-First AI Infrastructure, Microsoft self-funding energy mandate aka.ms/aoh online portal CVE-2025-55681, Windows DWM Elevation Windows Administrator Protection, CVE-2025-60718 Microsoft AI Compute, IREN Infrastructure Microsoft Japan PPA, Renewable Energy Microsoft AI Investment, Cloud Expansion Microsoft Azure, Startup Credits Infinite Workday, AI in Work Microsoft Russia, Bankruptcy AI code generation, Microsoft AI Microsoft Layoffs, Restructuring
  • Vulnerability Report

Millions at Risk: 9.8 CVSS Remote Code Execution in HTTP.sys

Do Son June 12, 2026 0

A critical 9.8 CVSS HTTP.sys RCE vulnerability (CVE-2026-47291) threatens millions of users. Secure your Windows HTTP stack exploit risks now.

New Patches Secure Critical Spring HATEOAS Flaws Spring HATEOAS flaws, CVE-2026-41006, CVE-2026-41007 CVE-2024-22243 Spring CLI Vulnerability CVE-2026-22718
  • Vulnerability Report

New Patches Secure Critical Spring HATEOAS Flaws

Do Son June 12, 2026 0

New patches fix critical Spring HATEOAS flaws including CVE-2026-41006 and CVE-2026-41007 to prevent heap exhaustion and bypasses.

Criminal IP at Infosecurity Europe 2026: Introducing AITEM, the Next Chapter of Attack Surface Management Untitled_design_17810711059KKOaaIKEm
  • Press Release

Criminal IP at Infosecurity Europe 2026: Introducing AITEM, the Next Chapter of Attack Surface Management

cybernewswire June 11, 2026 0
Torrance, United States / California, 11th June 2026, CyberNewswire
Read More Read more about Criminal IP at Infosecurity Europe 2026: Introducing AITEM, the Next Chapter of Attack Surface Management
Top Custom Real Estate CRM Software Development Companies in the US tech-pass
  • Technique

Top Custom Real Estate CRM Software Development Companies in the US

Do Son June 11, 2026 0

Curated shortlist of 7 top custom real estate CRM software development companies in the US market in 2026. Picks for enterprise, mid-market, AI, and CRE.

Automated Remediation: Microsoft Resolves Cumulative Update Rollback Failures Windows 11 version 26H2 support lifecycle and deployment roadmap for enterprise environments Windows 11 update anomaly Windows 11 context menu Windows 11 KB5089549 update error 0x800f0922 Windows 11 taskbar relocation
  • Windows

Automated Remediation: Microsoft Resolves Cumulative Update Rollback Failures

Do Son June 11, 2026 0

Discover how to resolve the Windows 11 update anomaly. Learn how Microsoft updates trigger installation loops and how to fix them using manual DISM tools.

Parallel Diffusion: Google Unveils DiffusionGemma to Revolutionize On-Device Intelligence Google DiffusionGemma open framework
  • Technology

Parallel Diffusion: Google Unveils DiffusionGemma to Revolutionize On-Device Intelligence

Do Son June 11, 2026 0

Discover the new Google DiffusionGemma open framework. Learn how text diffusion bypasses memory limits to accelerate local inference benchmarks.

Multiple Security Flaws Addressed in Core Java Application Subsystems Spring GraphQL security patches, unsafe deserialization flaws, CVE-2026-41699, CVE-2026-41700, CVE-2026-41856 CVE-2023-34050
  • Vulnerability Report

Multiple Security Flaws Addressed in Core Java Application Subsystems

Do Son June 11, 2026 0

Deploy the latest Spring GraphQL security patches to remediate critical unsafe deserialization flaws and cross-site WebSocket hijacking vulnerabilities.

Cryptographic Expiration: Microsoft Office 2019 for Mac Faces Imminent Functionality Restrictions Office 2019 Mac read only Microsoft Office Startup Boost Office 2016 update KB5002700
  • Technology

Cryptographic Expiration: Microsoft Office 2019 for Mac Faces Imminent Functionality Restrictions

Do Son June 11, 2026 0

Discover why your Office 2019 Mac read only state triggers in July 2026. Learn about expired licensing tokens and how to migrate your software.

Untethered Diagnostics: iOS 27 Introduces On-Device Recovery Mode iOS 27 Recovery Mode
  • Technology

Untethered Diagnostics: iOS 27 Introduces On-Device Recovery Mode

Do Son June 11, 2026 0

Discover the new iOS 27 Recovery Mode features. Learn how the built-in tools fix software issues without needing a computer connection.

Fiscal Realignment: OpenAI Contemplates Sweeping Price Reductions to Counter Anthropic OpenAI token price reduction OpenAI Deployment Company DeployCo OpenAI IPO strategy OpenAI Privacy Filter 1.5B OpenAI $122 billion funding OpenAI GitHub alternative OpenAI military agreement 2026 OpenAI Stargate project collapse NVIDIA OpenAI investment stall ChatGPT Go $8 subscription, OpenAI GPT-5.2 Instant ads OpenAI Torch acquisition, Unified Medical Memory OpenAI Head of Preparedness 2025, Sam Altman AI safety lawsuits ChatGPT Advertising Speculation OpenAI Ad Code Denial OpenAI AI Confession Hallucination Mitigation ChatGPT Quality Focus OpenAI Gemini Red Alert ChatGPT Login, AI ecosystem OpenAI Mental Health, AI Well-Being Council ChatGPT Instant Checkout, Agentic Commerce OpenAI cloud computing OpenAI, startup incubator OpenAI chips, NVIDIA competition AI competition, antitrust lawsuit GPT-5, OpenAI Livestream OpenAI Open-Weight, AI Models OpenAI Infrastructure, AI Data Centers ChatGPT Business, Office Productivity OpenAI Open-Weight Model, WindSurf Acquisition OpenAI AI Browser, ChatGPT Integration Mattel AI, OpenAI Partnership OpenAI o3, Price Cut OpenAI's Next-Gen AI: O3-Pro's Enhanced Reasoning PowerOpenAI profit OpenAI Bid OpenAI Social Network ChatGPT Social OpenAI Non-profit OpenAI UAE ChatGPT Plus free
  • Technology

Fiscal Realignment: OpenAI Contemplates Sweeping Price Reductions to Counter Anthropic

Do Son June 11, 2026 0

Discover the proposed OpenAI token price reduction. Learn how the enterprise plans to cut costs to compete with Anthropic ahead of its upcoming IPO.

Sovereign Intervention: EU Mandates Unhindered Third-Party AI Access to WhatsApp API WhatsApp antitrust API probe India SIM-Binding Mandate Messaging App KYC WhatsApp DMA Interoperability BirdyChat Haiket Denmark Social Media Ban CVE-2025-55177 WhatsApp vulnerability, zero-click flaw npm Malware, System Wipe WhatsApp Windows App, WebView2 Downgrade WhatsApp Ban, US House NSO WhatsApp, Pegasus Spyware WhatsApp iPad iPadOS app
  • Technology

Sovereign Intervention: EU Mandates Unhindered Third-Party AI Access to WhatsApp API

Do Son June 11, 2026 0

Discover the latest WhatsApp antitrust API probe. Learn how the European Union forces Meta to reopen its business network to external AI chatbots for free.

PeopleSoft RCE Security Bug: New Oracle Fix PeopleSoft RCE security bug, unauthenticated HTTP exploit, CVE-2026-35273 Oracle security patch updates critical software vulnerabilities
  • Vulnerability Report

PeopleSoft RCE Security Bug: New Oracle Fix

Do Son June 11, 2026 0

A critical PeopleSoft RCE security bug allows an unauthenticated HTTP exploit to execute code. Learn how to patch CVE-2026-35273 immediately.

❮ Prev Page
Next Page ❯

Search

CVE ALERTS
📈

EPSS Spike Alerts
Catch risk spikes before they make headlines.

🎯

Custom EPSS/CVSS
Set score thresholds to effectively filter noise.

🛡️

Exploit Intel
Real-world exploit signals beyond the KEV catalog.

🐙

GitHub Issues
Auto-create alert tickets without duplication.

📬

Weekly Digest
Clean summaries, eliminating email spam.

🏷️

Watchlist Groups
Tag vulnerabilities by team (Infra/AppSec/SOC).

🔀

Smart Routing
Route chat channels based on severity levels.

🚨

RBP Tracker
Early warning detection and tracking system.

Subscribe – $7/mo or try free for 14 days →

🚨 Active Exploits in the Wild

  • CVE-2026-58115CVSS 10.0
    A vulnerability has been identified in SIMATIC IoT2050 Advanced (6ES7647-0BA00-1YA2) (All versions < V4.3.4.1 running Industrial OS with...
    Admin intel📅 Updated: Nov 2, 2026
  • CVE-2026-20051CVSS 7.4
    A vulnerability with the Ethernet VPN (EVPN) Layer 2 ingress packet processing of Cisco Nexus 3600 Platform Switches...
    Watchtower Verified📅 Updated: Nov 1, 2026
  • CVE-2026-20118CVSS 6.8
    A vulnerability in the handling of an Egress Packet Network Interface (EPNI) Aligner interrupt in Cisco IOS XR...
    Watchtower Verified📅 Updated: Nov 1, 2026
  • CVE-2010-20125CVSS 8.7
    DedeCMS before 5.7 contains a file inclusion vulnerability in plus/carbuyaction.php that allows remote unauthenticated attackers to control the...
    Watchtower Verified📅 Updated: Oct 30, 2026
  • CVE-2015-20130CVSS 5.1
    Netsweeper before 4.0.11 and 4.1.0 before 4.1.5 contains a reflected cross-site scripting vulnerability in webadmin/reporter/view_server_log.php that allows remote...
    Watchtower Verified📅 Updated: Oct 30, 2026
  • CVE-2026-111357CVSS 7.0
    Ivanti Connect Secure 22.8R2.4 mishandles the manner in which the dsinvoked broker trusts DSCache configuration data, leading to...
    CISA KEV📅 Added to KEV: Oct 30, 2026
  • CVE-2026-118527CVSS 4.3
    Use of predictable filenames in Ivanti Connect Secure before versions 25.1.1.3 and 22.8R2.6 allows a remote authenticated attacker...
    CISA KEV📅 Added to KEV: Oct 30, 2026
  • CVE-2026-118539
    This module enables you to sell goods and services to customers through an included shopping cart and checkout...
    Admin intel📅 Updated: Oct 29, 2026
Powered by CVE Watchtower

Critical Vulnerabilities

  • CVE-2026-105606CVSS 9.5
    Joomla Extension - joomlaboat.com - Unauthenticated arbitrary file upload in Custom Tables < 3.7.8 - An unauthenticated attacker...
    📅 Updated: Nov 2, 2026
  • CVE-2026-105604CVSS 9.3
    Joomla Extension - dj-extensions.com - Unauthenticated SQL injection in DJ-Classifieds < 3.11.3 - The Joomla extension DJ-Classifieds is...
    📅 Updated: Nov 2, 2026
  • CVE-2026-91299CVSS 10.0
    Vulnerability in the JD Edwards EnterpriseOne Orchestrator product of Oracle JD Edwards (component: E1 IOT Orchestrator Security). Supported...
    📅 Updated: Nov 2, 2026
  • CVE-2026-91305CVSS 9.1
    Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Installation Security). Supported versions that...
    📅 Updated: Nov 2, 2026
  • CVE-2026-119706CVSS 9.3
    InternLM LMDeploy 0.9.0 through 0.18.0 contains an unauthenticated remote code execution vulnerability that allows remote attackers to run...
    📅 Updated: Nov 2, 2026
  • CVE-2026-105603CVSS 9.4
    Joomla Extension - dj-extensions.com - Authenticated arbitrary file upload in DJ-Classifieds < 3.11.3 - The Joomla extension DJ-Classifieds...
    📅 Updated: Nov 2, 2026
  • CVE-2026-89270CVSS 9.1
    The Popup Builder – Create highly converting, mobile friendly marketing popups. plugin for WordPress is vulnerable to authorization...
    📅 Updated: Nov 2, 2026
  • CVE-2026-119096CVSS 9.8
    The Uncanny Toolkit for LearnDash plugin for WordPress is vulnerable to Authentication Bypass in versions up to, and...
    📅 Updated: Nov 2, 2026
Powered by CVE Watchtower

Daily CyberSecurity

  • About SecurityOnline.info
  • Advertise with us
  • Announcement
  • Contact
  • Contributor Register
  • Login
  • Disclaimer
  • DCMA
  • Privacy Policy
  • About SecurityOnline.info
  • Advertise on SecurityOnline.info
  • Contact Us

When you purchase through links on our site, we may earn an affiliate commission. Here’s how it works

  • CVE Watchtower
  • CVE Statistics by Vendor 2026
  • Q3 2026 Report
  • Top Exploited CVEs
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube
© 2017 - 2026 Daily CyberSecurity. All Rights Reserved.