Daily CyberSecurity • Page 146 of 738 • Zero-hour alerts. Unmatched analysis.

Critical Alert 1 Active Exploit Detected Today

CVE-2026-20253 — Splunk Enterprise Missing Authentication for Critical Function Vulnerability →

Powered by CVE Watchtower

×

Hidden Danger in 3D: Malicious Blender Files Unleash StealC V2 Infostealer Ollama Heap Leak CVE-2026-5757 Anritsu Vulnerability Authentication Bypass Gootloader Malware Malformed ZIP Evasion Blender Malware, StealC V2 Lectora, XSS CVE-2025-9125 HFS RCE, Template Injection Arch Linux Malware, CHAOS RAT CVE-2024-56404 - CVE-2024-39327 CVE-2025-2538

Ollama Heap Leak CVE-2026-5757 Anritsu Vulnerability Authentication Bypass Gootloader Malware Malformed ZIP Evasion Blender Malware, StealC V2 Lectora, XSS CVE-2025-9125 HFS RCE, Template Injection Arch Linux Malware, CHAOS RAT CVE-2024-56404 - CVE-2024-39327 CVE-2025-2538

Hidden Danger in 3D: Malicious Blender Files Unleash StealC V2 Infostealer

Do Son November 27, 2025

Morphisec has issued a critical alert regarding a sophisticated malware campaign targeting 3D artists, game developers, and...

Zero-Day Warning: Unpatched Twonky Server Flaws Expose Media to Total Takeover WHILL Wheelchair Hijacking, CVE-2025-14346 MAS typosquatting malware, get.activate.win vs get.activated.win OpenShift GitOps RCE, Cluster Takeover Flaw Twonky Server, CVE-2025-13315 AI agents CVE-2024-52875 PoC

WHILL Wheelchair Hijacking, CVE-2025-14346 MAS typosquatting malware, get.activate.win vs get.activated.win OpenShift GitOps RCE, Cluster Takeover Flaw Twonky Server, CVE-2025-13315 AI agents CVE-2024-52875 PoC

Zero-Day Warning: Unpatched Twonky Server Flaws Expose Media to Total Takeover

Do Son November 27, 2025

A critical security warning has been issued for users of Twonky Server, the popular media server software...

UNMASKED: Massive Leak Exposes Iran’s ‘Department 40’ Cyber-Terror Unit Department 40, IRGC Cyber Leak

Department 40, IRGC Cyber Leak

UNMASKED: Massive Leak Exposes Iran’s ‘Department 40’ Cyber-Terror Unit

Do Son November 27, 2025

A leak of internal documents has shattered the anonymity of one of Iran’s most feared cyber units,...

Angular Alert: Protocol-Relative URLs Leak XSRF Tokens (CVE-2025-66035) Angular, CVE-2025-66035

Angular, CVE-2025-66035

Angular Alert: Protocol-Relative URLs Leak XSRF Tokens (CVE-2025-66035)

Do Son November 27, 2025

The Angular team has issued a high-severity security advisory regarding a logic flaw in the framework’s HTTP...

Holiday Heist: 200,000 Fake Shops & Amazon Clones Target Black Friday Fake Online Shops, Black Friday Scams

Fake Online Shops, Black Friday Scams

Holiday Heist: 200,000 Fake Shops & Amazon Clones Target Black Friday

Do Son November 27, 2025

As the holiday shopping season accelerates, cybersecurity researchers have identified a sprawling network of fraudulent online stores...

GitLab Patch: Fixes CI/CD Credential Theft & Unauthenticated DoS Attacks GitLab security updates, GitLab patch release, CVE-2026-6552, CVE-2026-10087, CVE-2026-7250 GitLab Security Update May 2026 GitLab XSS and DoS Vulnerabilities GitLab Security Session Hijacking GitLab Security Update, CI/CD Vulnerability GitLab DoS, Security Update bypassing SAML - CVE-2024-8312 and CVE-2024-6826

GitLab security updates, GitLab patch release, CVE-2026-6552, CVE-2026-10087, CVE-2026-7250 GitLab Security Update May 2026 GitLab XSS and DoS Vulnerabilities GitLab Security Session Hijacking GitLab Security Update, CI/CD Vulnerability GitLab DoS, Security Update bypassing SAML - CVE-2024-8312 and CVE-2024-6826

GitLab Patch: Fixes CI/CD Credential Theft & Unauthenticated DoS Attacks

Do Son November 26, 2025

GitLab has released an important security update today affecting both its Community Edition (CE) and Enterprise Edition...

INE Expands Cross-Skilling Innovations PR___November_2025___INE_Expands_Cross-Skilling_In_1764098354c65hu0TUvt

PR___November_2025___INE_Expands_Cross-Skilling_In_1764098354c65hu0TUvt

INE Expands Cross-Skilling Innovations

cybernewswire November 26, 2025

Cary, North Carolina, USA, 26th November 2025, CyberNewsWire

Qualcomm Unveils Snapdragon 8 Gen 5: 36% Faster CPU, 46% More AI Power

Snapdragon 8 Gen 5

Qualcomm Unveils Snapdragon 8 Gen 5: 36% Faster CPU, 46% More AI Power

Do Son November 26, 2025

Following the debut of the ultra-performance-focused Snapdragon 8 Elite Gen 5, Qualcomm has now officially unveiled the...

Pichai Forecast: Quantum Computing Will Reach ‘Breathless Excitement’ in Five Years Pichai Quantum Forecast Lightweight AI, on-device AI

Pichai Quantum Forecast Lightweight AI, on-device AI

Pichai Forecast: Quantum Computing Will Reach ‘Breathless Excitement’ in Five Years

Do Son November 26, 2025

With the rapid debut of Gemini 3, Nano Banana Pro, and other AI offerings, Google’s momentum in...

Perplexity Launches AI Shopping with PayPal Instant Buy & Personalized Product Search Perplexity AI Shopping

Perplexity AI Shopping

Perplexity Launches AI Shopping with PayPal Instant Buy & Personalized Product Search

Do Son November 26, 2025

Perplexity has announced the launch of a new AI-powered shopping experience designed to make purchasing goods through...

Meta Accused of Hiding Internal Data Showing Facebook Causes Depression & Anxiety

Instagram account recovery flaw Meta incident notification Meta AI data center Louisiana Meta AI news partnerships Meta AI Shopping Assistant Meta Vibes standalone app Meta Oversight Board account ban, Instagram permanent suspension review Meta Compute initiative 2026, personal superintelligence nuclear power Meta AI News Licensing Publisher Content Deal Meta Project Mercury Omnilingual ASR 1600 Languages Meta $600B Investment, AI Data Centers Meta AI strategy, Llama models Meta AI Glasses, Smart Glasses

Meta Accused of Hiding Internal Data Showing Facebook Causes Depression & Anxiety

Do Son November 26, 2025

Meta has once again become embroiled in allegations of concealing internal research data. According to a report...

Anthropic Unleashes Opus 4.5: Excel Integration & ‘Infinite Chat’ for Enterprise AI Claude Cowork quota update Claude Desktop native messaging bridge Anthropic Opus 4.5 Claude Excel Integration

Claude Cowork quota update Claude Desktop native messaging bridge Anthropic Opus 4.5 Claude Excel Integration

Anthropic Unleashes Opus 4.5: Excel Integration & ‘Infinite Chat’ for Enterprise AI

Do Son November 26, 2025

Following Google’s release of Gemini 3 Pro, AI unicorn Anthropic has responded in kind, formally unveiling the...

Tor Project Develops New CGO Encryption to Replace Vulnerable Tor1 Protocol Firefox Vulnerability Tor CGO Encryption Tor1 Protocol Vulnerability

Firefox Vulnerability Tor CGO Encryption Tor1 Protocol Vulnerability

Tor Project Develops New CGO Encryption to Replace Vulnerable Tor1 Protocol

Do Son November 26, 2025

The Onion Network (Tor) has long been synonymous with accessing the dark web, though its primary purpose...

CVE-2025-54918: Windows NTLM Elevation of Privilege Vulnerability Smart App Control blocking Armoury Crate, ROG Ally Defender false positive 2026 Microsoft Zero-Day, Cloud Files UAF Microsoft Access end of life CVE-2025-21298 Azure Vulnerabilities

Smart App Control blocking Armoury Crate, ROG Ally Defender false positive 2026 Microsoft Zero-Day, Cloud Files UAF Microsoft Access end of life CVE-2025-21298 Azure Vulnerabilities

CVE-2025-54918: Windows NTLM Elevation of Privilege Vulnerability

Do Son November 26, 2025

Just when administrators thought NTLM relay attacks were becoming a thing of the past, a dangerous new...

Critical Patch: NVIDIA DGX Spark Flaw (CVE-2025-33187, CVSS 9.3) Exposes AI Secrets to Takeover NVIDIA GPU Security CUDA-Q Vulnerability NVIDIA Apex Vulnerability AI Infrastructure Security NVIDIA Cumulus Linux CVE-2025-33179 NVIDIA Arm divestment NVIDIA DGX Spark, CVE-2025-33187 NVIDIA Isaac-GROOT, Code Injection Megatron-LM Vulnerability, AI Code Injection NVIDIA China NVIDIA GPUs, Hardware Kill Switches NVIDIA Megatron-LM, LLM Vulnerabilities NVIDIA Base Command Manager - CVE-2024-0138

NVIDIA GPU Security CUDA-Q Vulnerability NVIDIA Apex Vulnerability AI Infrastructure Security NVIDIA Cumulus Linux CVE-2025-33179 NVIDIA Arm divestment NVIDIA DGX Spark, CVE-2025-33187 NVIDIA Isaac-GROOT, Code Injection Megatron-LM Vulnerability, AI Code Injection NVIDIA China NVIDIA GPUs, Hardware Kill Switches NVIDIA Megatron-LM, LLM Vulnerabilities NVIDIA Base Command Manager - CVE-2024-0138

Critical Patch: NVIDIA DGX Spark Flaw (CVE-2025-33187, CVSS 9.3) Exposes AI Secrets to Takeover

Do Son November 26, 2025

NVIDIA has issued an urgent security update for its DGX Spark platform, a compact AI supercomputer designed...

Silent, Fast, & Brutal: How WormGPT 4 and KawaiiGPT Democratize Cybercrime Malicious LLMs, WormGPT 4

Malicious LLMs, WormGPT 4

Silent, Fast, & Brutal: How WormGPT 4 and KawaiiGPT Democratize Cybercrime

Do Son November 26, 2025

The cybersecurity landscape is facing a pivotal shift as the very tools designed to revolutionize productivity are...

GRU Unit 29155 Uses SocGholish to Target US Firm RomCom, SocGholish

RomCom, SocGholish

GRU Unit 29155 Uses SocGholish to Target US Firm

Do Son November 26, 2025

In a significant escalation of the cyber threat landscape, Arctic Wolf Labs has identified a campaign where...

URGENT PATCH REQUIRED: Zenitel TCIV-3+ Intercoms Hit by Multiple Critical Flaws (CVSS 9.8) Gardyn Home Kit Vulnerabilities IoT Command Injection Vivotek Vulnerability CVE-2026-22755 Command Injection Ofuji Fishing data breach

Gardyn Home Kit Vulnerabilities IoT Command Injection Vivotek Vulnerability CVE-2026-22755 Command Injection Ofuji Fishing data breach

URGENT PATCH REQUIRED: Zenitel TCIV-3+ Intercoms Hit by Multiple Critical Flaws (CVSS 9.8)

Do Son November 26, 2025

Zenitel has issued an urgent security advisory, also reported by CISA, concerning a set of critical vulnerabilities...

Critical node-forge Flaw (CVE-2025-12816) Allows Signature Verification Bypass via ASN.1 Manipulation (21M Downloads/Week) node-forge Signature Bypass, ASN.1 Vulnerability

node-forge Signature Bypass, ASN.1 Vulnerability

Critical node-forge Flaw (CVE-2025-12816) Allows Signature Verification Bypass via ASN.1 Manipulation (21M Downloads/Week)

Do Son November 26, 2025

CERT/CC has issued a warning about a high-impact cryptographic vulnerability in the Forge JavaScript library — also...

8 Flaws: ASUS Routers Urgently Need Patch for Authentication Bypass (CVE-2025-59366, CVSS 9.4)

Everon OCPP Vulnerability CVE-2026-26288 ASUSTOR ADM Vulnerability CVE-2026-24936 PrismX MX100 Vulnerability Hard-Coded Credentials Advantech Vulnerability CVE-2025-52694 Eaton UPS Companion, CVE-2025-59887 ASUS Router, Authentication Bypass ASUSTOR DLL Hijacking, Privilege Escalation OpenShift AI, Privilege Escalation GoAnywhere vulnerability CVE-2025-10035 LangChainGo, template injection DeepDiff, class pollution ToolShell Sunshine, CSRF Vulnerability KACE SMA, Critical Vulnerabilities Oracle Zero-Days - PDQ Deploy vulnerability

8 Flaws: ASUS Routers Urgently Need Patch for Authentication Bypass (CVE-2025-59366, CVSS 9.4)

Do Son November 26, 2025

ASUS has released an urgent security update to address a sweeping list of eight potential vulnerabilities in...

❮ Prev Page

Next Page ❯