Skip to content
November 8, 2026
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube

Daily CyberSecurity

Zero-hour alerts. Unmatched analysis.

Primary Menu
  • Home
  • CVE Data
    • CVE Watchtower
    • Top Exploited CVEs
    • CVE Stats by Vendor
    • Q2 2026 Report
    • CVE Alerts
    • CVE Alert Settings
    • Pricing
  • Cyber Criminals
  • Data Leak
  • Free Tools
    • CVSS 3.1 Calculator
    • Certificate Viewer
    • DNS Lookup
    • Encoder & Hash Generator
    • IP / Subnet Calculator
    • Whois Lookup
  • Linux
  • Malware
  • Vulnerability
  • Submit Press Release
Light/Dark Button
ChatGPT Scheduled Tasks Transform AI into an Active Agent ChatGPT Scheduled Tasks feature transforming AI into an active agent
  • Technology

ChatGPT Scheduled Tasks Transform AI into an Active Agent

Do Son June 18, 2026 0

OpenAI introduces ChatGPT Scheduled Tasks, transforming the AI into a proactive agent capable of automated monitoring and routine management.

Microsoft China AI Business Thrives on OpenAI Sales Microsoft China AI business growth via OpenAI and ByteDance partnership
  • Technology

Microsoft China AI Business Thrives on OpenAI Sales

Do Son June 18, 2026 0

Microsoft's China AI business is thriving, with ByteDance spending $1 billion annually on OpenAI models via Azure despite US export bans.

Moxa Patches NPort Flaws: Root RCE and Format String Bugs (CVE-2026-10829) Moxa NPort vulnerability CVE-2026-10829 stack buffer overflow in serial device server
  • Vulnerability Report

Moxa Patches NPort Flaws: Root RCE and Format String Bugs (CVE-2026-10829)

Do Son June 18, 2026 0

A Moxa NPort vulnerability (CVE-2026-10829) lets authenticated attackers gain root via RCE on serial device servers. Patch v1.5.1 now.

AsyncRAT AI Lures Target Users Hunting AI Skills cy
  • Malware

AsyncRAT AI Lures Target Users Hunting AI Skills

Do Son June 18, 2026 0

FortiGuard Labs uncovered AsyncRAT AI lures using fake AI guides and an AutoHotkey loader to inject a stealthy .NET RAT into memory.

Apple Intelligence Developer Tools Revealed at WWDC 2026 Apple Intelligence developer tools showcase at WWDC 2026
  • Technology

Apple Intelligence Developer Tools Revealed at WWDC 2026

Do Son June 18, 2026 0

Discover the new Apple Intelligence developer tools from WWDC 2026. Explore how Xcode 27, App Intents, and MLX frameworks empower next-gen AI applications.

WhatsApp Tests View Once Text Messages WhatsApp testing View Once text messages feature on smartphone screen
  • Technology

WhatsApp Tests View Once Text Messages

Do Son June 18, 2026 0

WhatsApp is testing View Once text messages to enhance privacy. Discover how this new feature blocks screenshots and protects your sensitive information.

OpenAI Joins Rust Foundation with $600K Donation OpenAI joins Rust Foundation to support open-source infrastructure
  • Technology

OpenAI Joins Rust Foundation with $600K Donation

Do Son June 18, 2026 0

OpenAI joins the Rust Foundation as a Platinum Member, donating $600,000 to bolster open-source infrastructure and support ecosystem maintainers.

Apple Price Increase Looms Amid AI Memory Crisis Apple price increase due to AI memory component shortages
  • Technology

Apple Price Increase Looms Amid AI Memory Crisis

Do Son June 18, 2026 0

An unavoidable Apple price increase is coming soon. Discover why the AI boom and soaring memory costs will make the iPhone 18 and new Macs more expensive.

Khmer Shadow Espionage Campaign Targets Cambodian Government Trojanized streaming site causing Packagist themes iOS spyware infections
  • Malware

Khmer Shadow Espionage Campaign Targets Cambodian Government

Do Son June 18, 2026 0

Acronis reveals Khmer Shadow, a new espionage campaign using NIGHTFORGE loader and DLL sideloading to target Cambodian government entities with Havoc Demon.

FortiBleed: 30,791 Fortinet Firewalls Compromised in Global Credential Heist FortiBleed campaign map of 30,791 compromised Fortinet firewalls and VPN credential leak
  • Cybercriminals

FortiBleed: 30,791 Fortinet Firewalls Compromised in Global Credential Heist

Do Son June 18, 2026 0

The FortiBleed campaign exposed working logins for 30,791 Fortinet firewalls across 194 countries. This Fortinet credential leak hits every sector.

AI Drives 2026 Vulnerability Forecast to 66K CVEs, But Risk Stays Flat 2026 vulnerability forecast chart showing AI vulnerability discovery driving CVE growth
  • Vulnerability Report

AI Drives 2026 Vulnerability Forecast to 66K CVEs, But Risk Stays Flat

Do Son June 18, 2026 0

FIRST's 2026 vulnerability forecast warns AI vulnerability discovery could push CVEs to 66K, yet just 6.5% are truly actionable. Here's why.

China Influence Operations Target US AI Debate, OpenAI Warns China influence operations using banned ChatGPT accounts in OpenAI's June 2026 threat report targeting the US AI policy debate
  • Cybercriminals

China Influence Operations Target US AI Debate, OpenAI Warns

Do Son June 18, 2026 0

OpenAI's June 2026 threat report exposes China influence operations that used banned ChatGPT accounts to target US AI and tariff debates.

i18next Prototype Pollution Flaw (CVSS 9.1) Threatens 1M+ Weekly Downloads i18next prototype pollution flaw CVE-2026-48713 in i18next-fs-backend
  • Vulnerability Report

i18next Prototype Pollution Flaw (CVSS 9.1) Threatens 1M+ Weekly Downloads

Do Son June 18, 2026 0

CVE-2026-48713 exposes i18next prototype pollution in i18next-fs-backend, a CVSS 9.1 flaw threatening 1M+ weekly downloads. Update to 2.6.6 now.

Zyxel Patches Stack-Based Buffer Overflow in GS1900 Switches (CVE-2026-7273) Zyxel GS1900 vulnerability stack-based buffer overflow CVE-2026-7273 switch
  • Vulnerability Report

Zyxel Patches Stack-Based Buffer Overflow in GS1900 Switches (CVE-2026-7273)

Do Son June 18, 2026 0

Zyxel patched CVE-2026-7273, a stack-based buffer overflow in GS1900 switches. The Zyxel GS1900 vulnerability lets LAN attackers run OS commands.

Splunk AI Toolkit Vulnerabilities: Critical RCE & Data Risks Splunk AI Toolkit vulnerabilities including OS Command Injection CVE-2026-20266
  • Vulnerability Report

Splunk AI Toolkit Vulnerabilities: Critical RCE & Data Risks

Do Son June 17, 2026 0

New Splunk AI Toolkit vulnerabilities, including severe OS command injection (CVE-2026-20266), expose systems to attacks. Patch your instances immediately.

Active Gravity SMTP Vulnerability Exploited in the Wild Gravity SMTP Vulnerability CVE-2026-4020 exploit statistics
  • Vulnerability Report

Active Gravity SMTP Vulnerability Exploited in the Wild

Do Son June 17, 2026 0

Attackers are actively exploiting a critical Gravity SMTP vulnerability (CVE-2026-4020) causing sensitive information exposure. Update your plugin now.

Cisco ISE Vulnerabilities: Critical RCE and Info Disclosure Flaws Cisco ISE vulnerabilities diagram showing CVE-2026-20181 remote code execution and CVE-2026-20190 information disclosure.
  • Vulnerability Report

Cisco ISE Vulnerabilities: Critical RCE and Info Disclosure Flaws

Do Son June 17, 2026 0

Critical Cisco ISE vulnerabilities expose networks to Remote Code Execution (CVE-2026-20181) and data theft (CVE-2026-20190). Patch affected systems now.

Critical Apache Shiro LDAP Injection Flaw Uncovered Apache Shiro LDAP Injection showing the DefaultLdapRealm vulnerability flow and CVE-2026-49268 exploit path.
  • Vulnerability Report

Critical Apache Shiro LDAP Injection Flaw Uncovered

Do Son June 17, 2026 0

A critical Apache Shiro LDAP Injection vulnerability in DefaultLdapRealm, CVE-2026-49268, allows authentication bypass. Update your framework immediately.

SpyCloud Report Finds Phishing Attacks Surge as Employee Data Is Exposed at 86% of Fortune 100 Companies spycloud-phishing_report-flat_lay_1_1781535484R2j3cq4MNC
  • Press Release

SpyCloud Report Finds Phishing Attacks Surge as Employee Data Is Exposed at 86% of Fortune 100 Companies

cybernewswire June 17, 2026 0
Austin, TX, USA, 17th June 2026, CyberNewswire
Read More Read more about SpyCloud Report Finds Phishing Attacks Surge as Employee Data Is Exposed at 86% of Fortune 100 Companies
Heimdal Survey: Executives Four Times More Confident About AI Risk Than the Teams Managing It PR_Communicat_-_AI_Risk_Management_Report_1781617772Ho43XezgAG
  • Press Release

Heimdal Survey: Executives Four Times More Confident About AI Risk Than the Teams Managing It

cybernewswire June 17, 2026 0
London, United Kingdom, 17th June 2026, CyberNewswire
Read More Read more about Heimdal Survey: Executives Four Times More Confident About AI Risk Than the Teams Managing It
GoFlateLoader: The Bloated Golang Malware Smuggling Infostealers Past Scanners GoFlateLoader malware Golang loader, infostealer delivery, PE overlay evasion
  • Malware

GoFlateLoader: The Bloated Golang Malware Smuggling Infostealers Past Scanners

Do Son June 17, 2026 0

GoFlateLoader malware, a Golang loader, uses a giant PE overlay to evade scanners and deliver infostealers like Lumma, Vidar, and StealC.

Microsoft Copilot Cowork: Agentic AI System Launch Microsoft Copilot Cowork agentic AI system dashboard and features
  • Technology

Microsoft Copilot Cowork: Agentic AI System Launch

Do Son June 17, 2026 0

Microsoft officially launched Copilot Cowork, a revolutionary agentic AI system for enterprise tasks. Discover its features, pricing, and capabilities.

❮ Prev Page
Next Page ❯

Search

CVE ALERTS
📈

EPSS Spike Alerts
Catch risk spikes before they make headlines.

🎯

Custom EPSS/CVSS
Set score thresholds to effectively filter noise.

🛡️

Exploit Intel
Real-world exploit signals beyond the KEV catalog.

🐙

GitHub Issues
Auto-create alert tickets without duplication.

📬

Weekly Digest
Clean summaries, eliminating email spam.

🏷️

Watchlist Groups
Tag vulnerabilities by team (Infra/AppSec/SOC).

🔀

Smart Routing
Route chat channels based on severity levels.

🚨

RBP Tracker
Early warning detection and tracking system.

Subscribe – $7/mo or try free for 14 days →

🚨 Active Exploits in the Wild

  • CVE-2026-123158CVSS 8.1
    sshd in OpenSSH before 10.6p2 on Linux, when musl libc is used without PAM, lacks a workaround for...
    Admin intel📅 Updated: Nov 6, 2026
  • CVE-2026-19868CVSS 7.5
    An authentication enforcement vulnerability in SonicOS SSLVPN service may allow a user with valid credentials for an alternate...
    CISA KEV📅 Added to KEV: Nov 6, 2026
  • CVE-2026-120422CVSS 8.9
    Sogou Input Method for Windows contains a vulnerability in the configuration retrieval mechanism of its SGTool.exe component. The...
    Admin intel📅 Updated: Nov 5, 2026
  • CVE-2026-102895CVSS 9.8
    GPUStack is an open-source GPU cluster manager for AI model serving and GPU instance provisioning. Prior to 2.2.0,...
    Watchtower Verified📅 Updated: Nov 5, 2026
  • CVE-2026-115732CVSS 9.0
    Incorrect authorization in the certificate-name matching of trapperkeeper-authorization, as used by Puppet Server, in the affected products, allows...
    Admin intel📅 Updated: Nov 4, 2026
  • CVE-2026-98432CVSS 9.8
    In the Linux kernel, the following vulnerability has been resolved: ipv4: free inet_opt and ireq_opt after an RCU...
    Admin intel📅 Updated: Nov 4, 2026
  • CVE-2026-107441CVSS 8.8
    An out-of-bounds write vulnerability in the CGI program of Zyxel GS1900-24E firmware versions through 2.90(AAHK.2)C0 could allow an...
    Admin intel📅 Updated: Nov 4, 2026
  • CVE-2019-25779CVSS 7.5
    The Diarise theme for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.5.9....
    Watchtower Verified📅 Updated: Nov 4, 2026
Powered by CVE Watchtower

Critical Vulnerabilities

  • CVE-2026-18535CVSS 9.6
    IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 are vulnerable to a Regular Expression Denial of...
    📅 Updated: Nov 8, 2026
  • CVE-2026-17409CVSS 9.4
    IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote attacker to execute unauthorized...
    📅 Updated: Nov 8, 2026
  • CVE-2026-123614CVSS 9.3
    imgproxy from 4.0.0 before 4.0.16 contains an integer overflow in the ICO loader that allows remote attackers to...
    📅 Updated: Nov 8, 2026
  • CVE-2026-123550CVSS 9.3
    OpenAM before 16.1.4 contains an authentication bypass vulnerability in its SAML v2.0 service provider that accepts unsigned assertions...
    📅 Updated: Nov 8, 2026
  • CVE-2026-123551CVSS 10.0
    OpenAM from 14.0.0 before 16.1.4 contains an information disclosure vulnerability that allows unauthenticated attackers to read live session...
    📅 Updated: Nov 8, 2026
  • CVE-2026-123549CVSS 9.3
    OpenAM before 16.1.4 fails to enforce the Valid Creation Attributes list during self-registration, allowing anonymous attackers to set...
    📅 Updated: Nov 8, 2026
  • CVE-2025-57085CVSS 9.8
    Tenda W30E V16.01.0.19 (5037) was discovered to contain a stack overflow in the v17 parameter in the UploadCfg...
    📅 Updated: Nov 8, 2026
  • CVE-2025-59359CVSS 9.8
    The cleanTcs mutation in Chaos Controller Manager is vulnerable to OS command injection. In conjunction with CVE-2025-59358, this...
    📅 Updated: Nov 8, 2026
Powered by CVE Watchtower

Daily CyberSecurity

  • About SecurityOnline.info
  • Advertise with us
  • Announcement
  • Contact
  • Contributor Register
  • Login
  • Disclaimer
  • DCMA
  • Privacy Policy
  • About SecurityOnline.info
  • Advertise on SecurityOnline.info
  • Contact Us

When you purchase through links on our site, we may earn an affiliate commission. Here’s how it works

  • CVE Watchtower
  • CVE Statistics by Vendor 2026
  • Q3 2026 Report
  • Top Exploited CVEs
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube
© 2017 - 2026 Daily CyberSecurity. All Rights Reserved.