Skip to content
November 8, 2026
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube

Daily CyberSecurity

Zero-hour alerts. Unmatched analysis.

Primary Menu
  • Home
  • CVE Data
    • CVE Watchtower
    • Top Exploited CVEs
    • CVE Stats by Vendor
    • Q2 2026 Report
    • CVE Alerts
    • CVE Alert Settings
    • Pricing
  • Cyber Criminals
  • Data Leak
  • Free Tools
    • CVSS 3.1 Calculator
    • Certificate Viewer
    • DNS Lookup
    • Encoder & Hash Generator
    • IP / Subnet Calculator
    • Whois Lookup
  • Linux
  • Malware
  • Vulnerability
  • Submit Press Release
Light/Dark Button
JDY Botnet Resurges: China-Nexus IoT Army Hunts New Vulnerabilities Within Hours JDY botnet Volt Typhoon, SOHO botnet, CVE-2026-35616
  • Malware

JDY Botnet Resurges: China-Nexus IoT Army Hunts New Vulnerabilities Within Hours

Do Son June 17, 2026 0

The JDY botnet, a China-nexus IoT network tied to Volt Typhoon, now spans 1,500+ devices and scans for new bugs like CVE-2026-35616 within hours.

Mastra Supply Chain Attack Compromises 140+ npm Packages Mastra supply chain attack delivering an npm infostealer through the typosquatted easy-day-js dependency during npm install
  • Malware

Mastra Supply Chain Attack Compromises 140+ npm Packages

Do Son June 17, 2026 0

A Mastra supply chain attack compromised 140+ npm packages, using the typosquatted easy-day-js dependency to drop a crypto-stealing infostealer.

AdGuard Email Tracking Protection: Stop Hidden Pixels AdGuard email tracking protection blocking hidden 1x1 pixel trackers
  • Technology

AdGuard Email Tracking Protection: Stop Hidden Pixels

Do Son June 17, 2026 0

Discover how the new AdGuard email tracking protection feature blocks hidden 1x1 pixels. Safeguard your inbox privacy and prevent covert surveillance today.

UK to Ban Social Media for Under-16s by Spring 2027 UK social media ban for under-16s with age verification requirements on Instagram TikTok and Snapchat
  • Technology

UK to Ban Social Media for Under-16s by Spring 2027

Do Son June 17, 2026 0

The UK will ban social media for under-16s by spring 2027, requiring age verification on platforms like Instagram, TikTok, and Snapchat.

SilabRAT Malware: The $5,000-a-Month Crypto-Hunting RAT Hiding Behind HijackLoader SilabRAT malware SnappyClient, HijackLoader, Malware-as-a-Service
  • Malware

SilabRAT Malware: The $5,000-a-Month Crypto-Hunting RAT Hiding Behind HijackLoader

Do Son June 17, 2026 0

SilabRAT malware, aka SnappyClient, is a $5K/month MaaS RAT flagged as HijackLoader. It uses HVNC and cracks crypto wallets, per Group-IB.

WooCommerce Payment Skimmer Mimics Stripe to Steal Cards at Real Checkouts WooCommerce payment skimmer Magecart attack, card data theft, checkout backdoor
  • Cybercriminals

WooCommerce Payment Skimmer Mimics Stripe to Steal Cards at Real Checkouts

Do Son June 17, 2026 0

A WooCommerce payment skimmer mimics Stripe to steal card data during real checkouts. Inside this Magecart-style attack and how merchants can fight back.

Google Wear OS 7 Update: Gemini AI & Live Updates Google Wear OS 7 update featuring Live Updates and Gemini AI
  • Android

Google Wear OS 7 Update: Gemini AI & Live Updates

Do Son June 17, 2026 0

Discover the Google Wear OS 7 update. Explore new Live Updates, cross-device control, and Gemini AI integration for a smarter wearable experience.

ChatGPT Market Share Slips Below 50% As Rivals Grow ChatGPT market share graph showing competition from Gemini and Claude
  • Technology

ChatGPT Market Share Slips Below 50% As Rivals Grow

Do Son June 17, 2026 0

Discover why ChatGPT market share recently dropped below 50 percent. Explore how rival AI assistants like Gemini and Claude capture new active users.

Cloudflare DMARC Management Reaches General Availability Cloudflare DMARC Management dashboard for email authentication protocol
  • Technology

Cloudflare DMARC Management Reaches General Availability

Do Son June 17, 2026 0

Discover how Cloudflare DMARC Management enhances email security. Learn about the new general availability update, SPF auditing, and simplified remediation.

Google Unveils Android 17 and Innovative June Pixel Drop Google Android 17 features and June Pixel Drop multitasking bubbles
  • Android

Google Unveils Android 17 and Innovative June Pixel Drop

Do Son June 17, 2026 0

Discover how the new Android 17 operating system and June Pixel Drop redefine mobile productivity, privacy protection, and Gemini AI creativity.

Chrome Security Update Fixes 33 Flaws, Seven Critical Chrome security update patching a critical use-after-free vulnerability (CVE-2026-12437) in the Google Chrome 149 desktop browser
  • Vulnerability Report

Chrome Security Update Fixes 33 Flaws, Seven Critical

Do Son June 17, 2026 0

A new Chrome security update fixes 33 flaws, including critical use-after-free bugs like CVE-2026-12437. Update Chrome 149 now to stay safe.

Fortra BoKS Vulnerability Opens Door to Remote Command Injection Fortra BoKS vulnerability OS command injection, CVE-2026-9862 Altium Enterprise Server Vulnerability CVE-2026-9129 Path Traversal Patreon OAuth Vulnerability Identity Collision DRC INSIGHT Vulnerability Exam Data Hijacking Horner Automation PLC Industrial Brute Force Honeywell IQ4x Vulnerability CVE-2026-3611 DJI Romo vacuum security flaw Python Cryptography Vulnerability CVE-2026-26007 Open5GS Vulnerability CVE-2026-0622 Vivotek IP7137 Vulnerabilities CVE-2025-66049 Forcepoint DLP Vulnerability CVE-2025-14026 Cellopoint Secure Email Gateway - CVE-2024-9043
  • Vulnerability Report

Fortra BoKS Vulnerability Opens Door to Remote Command Injection

Do Son June 17, 2026 0

A critical Fortra BoKS vulnerability (CVE-2026-9862) enables remote OS command injection via the autoregistration service. Mitigate now.

GitHub Overload: Microsoft Rents Amazon Cloud Capacity Microsoft rents Amazon cloud infrastructure to resolve GitHub server capacity limits
  • Technology

GitHub Overload: Microsoft Rents Amazon Cloud Capacity

Do Son June 17, 2026 0

Discover why explosive AI coding growth forces GitHub to seek help. Microsoft rents Amazon cloud infrastructure to resolve severe Azure server capacity limits.

Critical Yarbo Robot Vulnerability Exposes Global Fleet Yarbo robot vulnerability hard-coded MQTT credentials, CVE-2026-10557, CVE-2026-7368 command injection vulnerabilities InHand router flaws
  • Vulnerability Report

Critical Yarbo Robot Vulnerability Exposes Global Fleet

Do Son June 17, 2026 0

A critical Yarbo robot vulnerability lets attackers extract hard-coded MQTT credentials and command the global fleet via CVE-2026-10557.

SpaceX Acquires Cursor for $60 Billion in AI Tech Buyout SpaceX acquires Cursor to dominate the AI coding tools market
  • Technology

SpaceX Acquires Cursor for $60 Billion in AI Tech Buyout

Do Son June 17, 2026 0

Discover why SpaceX acquires Cursor for $60 billion. Explore how this monumental Anysphere buyout transforms AI programming and elevates Grok models.

Cloud Foundry UAA Vulnerability Enables SAML Authentication Bypass Cloud Foundry UAA vulnerability SAML authentication bypass, CVE-2026-41005 Cloud Foundry key disclosure Elliptic Curve private keys
  • Vulnerability Report

Cloud Foundry UAA Vulnerability Enables SAML Authentication Bypass

Do Son June 17, 2026 0

A Cloud Foundry UAA vulnerability (CVE-2026-41005) enables SAML authentication bypass, letting attackers forge trusted assertions. Upgrade now.

NVIDIA Patches Three High-Severity NeMo Framework Code Injection Flaws NVIDIA NeMo vulnerability CVE-2026-24155, CVE-2026-24252, CVE-2026-24228, code injection NVIDIA DALI vulnerabilities NVIDIA Driver Security Update CVE-2026-24187 Linux
  • Vulnerability Report

NVIDIA Patches Three High-Severity NeMo Framework Code Injection Flaws

Do Son June 17, 2026 0

Three NVIDIA NeMo vulnerabilities (CVE-2026-24155, CVE-2026-24252, CVE-2026-24228) enable code execution. Update NeMo Framework to v2.7.3 now.

MongoDB Server Vulnerability Wave Hits Document Databases MongoDB Server vulnerability use-after-free vulnerability, CVE-2026-11933, CVE-2026-9740, CVE-2026-9750 MongoDB DoS, Pre-Authentication Vulnerability CVE-2024-7553 - MongoDB Server CVE-2025-3083, CVE-2025-3084, and CVE-2025-3085
  • Vulnerability Report

MongoDB Server Vulnerability Wave Hits Document Databases

Do Son June 17, 2026 0

A MongoDB Server vulnerability chain, including a use-after-free flaw (CVE-2026-11933), lets attackers crash servers or leak memory. Patch now.

Customer-Managed Certificate Authorities Move Into the Cloud as Echoworx Extends S/MIME Automation on AWS AISelect_20260617_062341_Docs
  • Technique

Customer-Managed Certificate Authorities Move Into the Cloud as Echoworx Extends S/MIME Automation on AWS

Do Son June 16, 2026 0
Echoworx has added support for automated S/MIME certificate generation using customer-managed Certificate Authorities hosted in AWS Private...
Read More Read more about Customer-Managed Certificate Authorities Move Into the Cloud as Echoworx Extends S/MIME Automation on AWS
ShapedPlugin Supply Chain Attack Exposes WordPress Sites ShapedPlugin Supply Chain Attack CVE-2026-10735, CVE-2026-49777, WordPress Plugin Malware
  • Malware
  • Vulnerability Report

ShapedPlugin Supply Chain Attack Exposes WordPress Sites

Do Son June 16, 2026 0

A ShapedPlugin supply chain attack (CVE-2026-10735) injected malware into WordPress Pro plugins. Discover the impact and how to protect your site today.

Aembit Extends IAM for Agentic AI to Microsoft Copilot Studio aembit-now-secures-microsoft-copilot-studio-agents_1781558980bWDf0TQsQw
  • Press Release

Aembit Extends IAM for Agentic AI to Microsoft Copilot Studio

cybernewswire June 16, 2026 0
Las Vegas, USA / Nevada, 16th June 2026, CyberNewswire
Read More Read more about Aembit Extends IAM for Agentic AI to Microsoft Copilot Studio
AppViewX Launches Agent Identity Security to Govern Agents for the AI and Quantum Era agentidentitysecurity-pr-1_1781531484fFMfttEC6z
  • Press Release

AppViewX Launches Agent Identity Security to Govern Agents for the AI and Quantum Era

cybernewswire June 16, 2026 0
New York, United States of America, 16th June 2026, CyberNewswire
Read More Read more about AppViewX Launches Agent Identity Security to Govern Agents for the AI and Quantum Era
❮ Prev Page
Next Page ❯

Search

CVE ALERTS
📈

EPSS Spike Alerts
Catch risk spikes before they make headlines.

🎯

Custom EPSS/CVSS
Set score thresholds to effectively filter noise.

🛡️

Exploit Intel
Real-world exploit signals beyond the KEV catalog.

🐙

GitHub Issues
Auto-create alert tickets without duplication.

📬

Weekly Digest
Clean summaries, eliminating email spam.

🏷️

Watchlist Groups
Tag vulnerabilities by team (Infra/AppSec/SOC).

🔀

Smart Routing
Route chat channels based on severity levels.

🚨

RBP Tracker
Early warning detection and tracking system.

Subscribe – $7/mo or try free for 14 days →

🚨 Active Exploits in the Wild

  • CVE-2026-123158CVSS 8.1
    sshd in OpenSSH before 10.6p2 on Linux, when musl libc is used without PAM, lacks a workaround for...
    Admin intel📅 Updated: Nov 6, 2026
  • CVE-2026-19868CVSS 7.5
    An authentication enforcement vulnerability in SonicOS SSLVPN service may allow a user with valid credentials for an alternate...
    CISA KEV📅 Added to KEV: Nov 6, 2026
  • CVE-2026-120422CVSS 8.9
    Sogou Input Method for Windows contains a vulnerability in the configuration retrieval mechanism of its SGTool.exe component. The...
    Admin intel📅 Updated: Nov 5, 2026
  • CVE-2026-102895CVSS 9.8
    GPUStack is an open-source GPU cluster manager for AI model serving and GPU instance provisioning. Prior to 2.2.0,...
    Watchtower Verified📅 Updated: Nov 5, 2026
  • CVE-2026-115732CVSS 9.0
    Incorrect authorization in the certificate-name matching of trapperkeeper-authorization, as used by Puppet Server, in the affected products, allows...
    Admin intel📅 Updated: Nov 4, 2026
  • CVE-2026-98432CVSS 9.8
    In the Linux kernel, the following vulnerability has been resolved: ipv4: free inet_opt and ireq_opt after an RCU...
    Admin intel📅 Updated: Nov 4, 2026
  • CVE-2026-107441CVSS 8.8
    An out-of-bounds write vulnerability in the CGI program of Zyxel GS1900-24E firmware versions through 2.90(AAHK.2)C0 could allow an...
    Admin intel📅 Updated: Nov 4, 2026
  • CVE-2019-25779CVSS 7.5
    The Diarise theme for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.5.9....
    Watchtower Verified📅 Updated: Nov 4, 2026
Powered by CVE Watchtower

Critical Vulnerabilities

  • CVE-2026-18535CVSS 9.6
    IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 are vulnerable to a Regular Expression Denial of...
    📅 Updated: Nov 8, 2026
  • CVE-2026-17409CVSS 9.4
    IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote attacker to execute unauthorized...
    📅 Updated: Nov 8, 2026
  • CVE-2026-123614CVSS 9.3
    imgproxy from 4.0.0 before 4.0.16 contains an integer overflow in the ICO loader that allows remote attackers to...
    📅 Updated: Nov 8, 2026
  • CVE-2026-123550CVSS 9.3
    OpenAM before 16.1.4 contains an authentication bypass vulnerability in its SAML v2.0 service provider that accepts unsigned assertions...
    📅 Updated: Nov 8, 2026
  • CVE-2026-123551CVSS 10.0
    OpenAM from 14.0.0 before 16.1.4 contains an information disclosure vulnerability that allows unauthenticated attackers to read live session...
    📅 Updated: Nov 8, 2026
  • CVE-2026-123549CVSS 9.3
    OpenAM before 16.1.4 fails to enforce the Valid Creation Attributes list during self-registration, allowing anonymous attackers to set...
    📅 Updated: Nov 8, 2026
  • CVE-2025-57085CVSS 9.8
    Tenda W30E V16.01.0.19 (5037) was discovered to contain a stack overflow in the v17 parameter in the UploadCfg...
    📅 Updated: Nov 8, 2026
  • CVE-2025-59359CVSS 9.8
    The cleanTcs mutation in Chaos Controller Manager is vulnerable to OS command injection. In conjunction with CVE-2025-59358, this...
    📅 Updated: Nov 8, 2026
Powered by CVE Watchtower

Daily CyberSecurity

  • About SecurityOnline.info
  • Advertise with us
  • Announcement
  • Contact
  • Contributor Register
  • Login
  • Disclaimer
  • DCMA
  • Privacy Policy
  • About SecurityOnline.info
  • Advertise on SecurityOnline.info
  • Contact Us

When you purchase through links on our site, we may earn an affiliate commission. Here’s how it works

  • CVE Watchtower
  • CVE Statistics by Vendor 2026
  • Q3 2026 Report
  • Top Exploited CVEs
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube
© 2017 - 2026 Daily CyberSecurity. All Rights Reserved.