Skip to content
October 29, 2026
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube

Daily CyberSecurity

Zero-hour alerts. Unmatched analysis.

Primary Menu
  • Home
  • CVE Data
    • CVE Watchtower
    • Top Exploited CVEs
    • CVE Stats by Vendor
    • Q2 2026 Report
    • CVE Alerts
    • CVE Alert Settings
    • Pricing
  • Cyber Criminals
  • Data Leak
  • Free Tools
    • CVSS 3.1 Calculator
    • Certificate Viewer
    • DNS Lookup
    • Encoder & Hash Generator
    • IP / Subnet Calculator
    • Whois Lookup
  • Linux
  • Malware
  • Vulnerability
  • Submit Press Release
  • Weekly Recap
Light/Dark Button
Firefox 158.0 Released: Default JPEG XL Support Firefox 158.0 release default JPEG XL format support
  • Technology

Firefox 158.0 Released: Default JPEG XL Support

Do Son October 13, 2026 0

Mozilla Firefox 158.0 is officially available, featuring default JPEG XL image format support, CSS enhancements, and advanced WebDriver automation capabilities.

Massive Cyberattack Paralyzes French Supermarket Refrigeration French supermarket cyberattack damage, Danfoss refrigeration system hack, grocery cold chain disruption
  • Cybercriminals

Massive Cyberattack Paralyzes French Supermarket Refrigeration

Do Son October 13, 2026 0

A massive French supermarket cyberattack targeted Danfoss refrigeration systems, causing catastrophic food spoilage and fires across 400 retail locations.

Intel Implements Significant Price Increases on PC Processors Intel hyper-threading return in 2028 Coral Rapids Xeon server CPUs announced by CEO Lip-Bu Tan to reclaim data center CPU market share
  • Technology

Intel Implements Significant Price Increases on PC Processors

Do Son October 13, 2026 0

Recent reports from the Taiwan supply chain indicate major Intel and AMD PC processor price hikes, with high-end CPUs seeing up to a 20% increase.

SAP Security Patch Day October 2026 Fixes CVSS 10 Cloud SDK Flaw and Three More Critical Bugs SAP Security Patch Day October 2026 critical vulnerabilities in Cloud SDK, Visual Composer and S/4HANA
  • Vulnerability Report

SAP Security Patch Day October 2026 Fixes CVSS 10 Cloud SDK Flaw and Three More Critical Bugs

Do Son October 13, 2026 0

SAP Security Patch Day October 2026 fixes four critical vulnerabilities, including a CVSS 10.0 Cloud SDK flaw and 9.9 bugs in Visual Composer and S/4HANA.

Yandex Cloud Drone Strike Causes Widespread Service Outages Yandex Cloud drone strike Vladimir data center destruction
  • Technology

Yandex Cloud Drone Strike Causes Widespread Service Outages

Do Son October 13, 2026 0

A recent Yandex Cloud drone strike in Vladimir caused severe service outages across Russia, disrupting Yandex Pay, search, and enterprise cloud operations.

Qualcomm AI Wi-Fi 8: The Next Broadband Evolution Qualcomm AI Wi-Fi 8 gateway router and related AI native broadband technology
  • Technology

Qualcomm AI Wi-Fi 8: The Next Broadband Evolution

Do Son October 13, 2026 0

Discover the new Qualcomm AI Wi-Fi 8 broadband technology. Learn how gFiber and Gemtek are transforming routers into edge computing smart service gateways.

ChatGPT Meetings Plugin Radically Transforms Audio Capture ChatGPT Meetings plugin macOS audio capture workspace integration
  • Technology

ChatGPT Meetings Plugin Radically Transforms Audio Capture

Do Son October 13, 2026 0

Explore the new ChatGPT Meetings plugin for macOS. It offers native OS-level audio capture and seamless integration with the ChatGPT Space workspace.

IBM Patches Three Critical Flaws in IBM i, Db2 Mirror and Maximo AI Service IBM critical vulnerabilities in IBM i, Db2 Mirror and Maximo enabling remote code execution
  • Vulnerability Report

IBM Patches Three Critical Flaws in IBM i, Db2 Mirror and Maximo AI Service

Do Son October 13, 2026 0

Three IBM critical vulnerabilities, rated up to CVSS 9.9, hit IBM i, Db2 Mirror and Maximo AI Service, including remote code execution. Patch now.

Discourse Vulnerabilities Let Attackers Hijack Pages for Every Visitor and Read Server Files Discourse vulnerabilities CVE-2026-55674 cache poisoning and CVE-2026-55420 server file read
  • Vulnerability Report

Discourse Vulnerabilities Let Attackers Hijack Pages for Every Visitor and Read Server Files

Do Son October 13, 2026 0

Two Discourse vulnerabilities, CVE-2026-55674 and CVE-2026-55420, enable cache poisoning XSS and server file reads. Patch to the fixed releases now.

Critical Ghostscript Vulnerability CVE-2026-39919 Turns Uploaded PDFs Into Remote Code Execution Ghostscript vulnerability CVE-2026-39919 enabling remote code execution through uploaded PDF files
  • Vulnerability Report

Critical Ghostscript Vulnerability CVE-2026-39919 Turns Uploaded PDFs Into Remote Code Execution

Do Son October 12, 2026 0

A critical Ghostscript vulnerability, CVE-2026-39919 (CVSS 9.8), allows remote code execution via crafted PDFs. Update Ghostscript to 10.08.0 now.

Seeworld Clay-Style 3D Previews: Explore a Scene From Every Angle image
  • Technique

Seeworld Clay-Style 3D Previews: Explore a Scene From Every Angle

Do Son October 12, 2026 0
One camera can be convincing, and the relationships in space can be convincing, but not in another...
Read More Read more about Seeworld Clay-Style 3D Previews: Explore a Scene From Every Angle
Progress Fixes 31 MarkLogic Server Vulnerabilities, Three Rated CVSS 9.9 MarkLogic Server vulnerabilities enabling privilege escalation and admin takeover
  • Vulnerability Report

Progress Fixes 31 MarkLogic Server Vulnerabilities, Three Rated CVSS 9.9

Do Son October 12, 2026 0

Progress fixed 31 MarkLogic Server vulnerabilities, including CVSS 9.9 privilege escalation flaws. Upgrade to MarkLogic 12.1 or 11.3.7 now.

CERT/CC Warns of 11 Unpatched Thelia Vulnerabilities Enabling Remote Code Execution Thelia vulnerabilities enabling remote code execution on unpatched e-commerce servers
  • Vulnerability Report

CERT/CC Warns of 11 Unpatched Thelia Vulnerabilities Enabling Remote Code Execution

Do Son October 12, 2026 0

CERT/CC lists 11 unpatched Thelia vulnerabilities, including remote code execution flaws in versions 2.6.0, 2.6.1 and 3.0.0. Lock down admin access now.

MariaDB Patches Nine Vulnerabilities Enabling Privilege Escalation and Code Execution MariaDB vulnerabilities CVE-2026-107815 privilege escalation and code execution in database server
  • Vulnerability Report

MariaDB Patches Nine Vulnerabilities Enabling Privilege Escalation and Code Execution

Do Son October 12, 2026 0

Nine MariaDB vulnerabilities enable privilege escalation and code execution, rated up to CVSS 8.5. Upgrade to the fixed Server and Connector/C releases.

RD Web Access Breaks as Chrome Drops XSLT Support RD Web Access portal on Windows Server failing to load after Chrome XSLT deprecation removes client-side XSLT
  • Technology

RD Web Access Breaks as Chrome Drops XSLT Support

Do Son October 12, 2026 0

Chrome 158 drops XSLT on November 17, which can break RD Web Access on Windows Server. See the timeline and Microsoft's interim fixes.

Windows 11 Quick Settings Can Now Ring Your Android Phone Windows 11 Quick Settings panel showing a paired phone with Do Not Disturb, volume, and a find my phone Windows 11 ring option
  • Windows

Windows 11 Quick Settings Can Now Ring Your Android Phone

Do Son October 12, 2026 0

Microsoft is testing Windows 11 Quick Settings controls for Android: toggle Do Not Disturb, set volume, and ring a lost phone without Phone Link.

LineageOS 24.0 Released: Android 17 & Web Flashing Tool LineageOS 24.0 Android 17 custom ROM and WebUSB Lineage Flash Tools interface
  • Android

LineageOS 24.0 Released: Android 17 & Web Flashing Tool

Do Son October 12, 2026 0

Discover the official release of LineageOS 24.0 based on Android 17. Explore new system updates, synchronized security patches, and the WebUSB flashing tool.

Run Googlebook OS on MacBook via QEMU Virtualization Googlebook OS running on Apple Silicon MacBook via QEMU virtualization
  • Technology

Run Googlebook OS on MacBook via QEMU Virtualization

Do Son October 12, 2026 0

Discover how to run Googlebook OS on an Apple Silicon MacBook using QEMU virtualization, MoltenVK, and the open-source GBOS-VM project.

Google AI Edge Foresight: A Free Offline Mac Tool Google AI Edge Foresight offline meeting tool for Mac
  • Technology

Google AI Edge Foresight: A Free Offline Mac Tool

Do Son October 12, 2026 0

Discover Google AI Edge Foresight, a free offline meeting tool for Mac. It uses Gemma 4 and RAG technology to create secure, local knowledge bases easily.

GitLab Patches CVE-2026-97229 (CVSS 10.0) Flaw That Lets Unauthenticated Attackers Execute Arbitrary Code GitLab critical vulnerability CVE-2026-97229 enabling arbitrary code execution on self-managed servers
  • Vulnerability Report

GitLab Patches CVE-2026-97229 (CVSS 10.0) Flaw That Lets Unauthenticated Attackers Execute Arbitrary Code

Do Son October 12, 2026 0

A GitLab critical vulnerability, CVE-2026-97229 (CVSS 10.0), allows unauthenticated arbitrary code execution. Upgrade to GitLab 19.4.2 now.

Suspected TraderTraitor Hackers Use Trojanized Terraform Provider to Deliver FLATROOF and ROOFDECK Trojanized Terraform provider attack chain linked to suspected TraderTraitor hackers delivering FLATROOF and ROOFDECK malware
  • Cybercriminals

Suspected TraderTraitor Hackers Use Trojanized Terraform Provider to Deliver FLATROOF and ROOFDECK

Do Son October 12, 2026 0

Suspected TraderTraitor hackers used a trojanized Terraform provider to drop FLATROOF and ROOFDECK malware on macOS, Linux, and Windows.

Warden Stealer Rust Infostealer Targets AI Coding Agent Tokens and Browser Data Warden Stealer Rust infostealer stealing AI coding agent tokens, browser passwords and crypto wallet data
  • Malware

Warden Stealer Rust Infostealer Targets AI Coding Agent Tokens and Browser Data

Do Son October 12, 2026 0

Warden Stealer, a fast-growing Rust infostealer, steals AI agent tokens, browser data, and crypto while bundling its own loader and clipper.

❮ Prev Page
Next Page ❯

Search

Translation

CVE ALERTS
📈

EPSS Spike Alerts
Catch risk spikes before they make headlines.

🎯

Custom EPSS/CVSS
Set score thresholds to effectively filter noise.

🛡️

Exploit Intel
Real-world exploit signals beyond the KEV catalog.

🐙

GitHub Issues
Auto-create alert tickets without duplication.

📬

Weekly Digest
Clean summaries, eliminating email spam.

🏷️

Watchlist Groups
Tag vulnerabilities by team (Infra/AppSec/SOC).

🔀

Smart Routing
Route chat channels based on severity levels.

🚨

RBP Tracker
Early warning detection and tracking system.

Subscribe – $7/mo or try free for 14 days →

🚨 Active Exploits in the Wild

  • CVE-2026-118539
    This module enables you to sell goods and services to customers through an included shopping cart and checkout...
    Admin intel📅 Updated: Oct 29, 2026
  • CVE-2022-31034CVSS 8.3
    Impact All versions of Argo CD starting with v0.11.0 are vulnerable to a variety of attacks when an...
    Watchtower Verified📅 Updated: Oct 29, 2026
  • CVE-2026-112353CVSS 6.2
    GFI KerioConnect (Kerio Connect) before 10.0.8 Patch 2 contains a stored cross-site scripting vulnerability in the Webmail component...
    Watchtower Verified📅 Updated: Oct 29, 2026
  • CVE-2026-116779CVSS 9.8
    Summary `sofia_presence_handle_sip_i_message()` splits the To user of an inbound SIP MESSAGE on `+` and treats the left half...
    Admin intel📅 Updated: Oct 29, 2026
  • CVE-2026-97229CVSS 10.0
    GitLab has remediated an issue that, under certain conditions, could have allowed an unauthenticated user to execute arbitrary...
    Admin intel📅 Updated: Oct 29, 2026
  • CVE-2026-76418CVSS 8.6
    A vulnerability in the Remote Access SSL VPN service of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software...
    Admin intel📅 Updated: Oct 29, 2026
  • CVE-2026-116690CVSS 7.5
    MLflow is an open source AI engineering platform for agents, large language models, and machine learning models. From...
    Admin intel📅 Updated: Oct 28, 2026
  • CVE-2026-101767CVSS 9.8
    Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: Core). Supported versions that are...
    Admin intel📅 Updated: Oct 28, 2026
Powered by CVE Watchtower

Critical Vulnerabilities

  • CVE-2026-62018CVSS 9.8
    Unauthenticated PHP Object Injection in Gunslinger
    📅 Updated: Oct 29, 2026
  • CVE-2026-62131CVSS 9.8
    Unauthenticated PHP Object Injection in Zoho Flow
    📅 Updated: Oct 29, 2026
  • CVE-2026-62017CVSS 9.8
    Unauthenticated PHP Object Injection in Good Homes
    📅 Updated: Oct 29, 2026
  • CVE-2026-62016CVSS 9.8
    Unauthenticated PHP Object Injection in Gamic
    📅 Updated: Oct 29, 2026
  • CVE-2026-62015CVSS 9.8
    Unauthenticated PHP Object Injection in Gamezone
    📅 Updated: Oct 29, 2026
  • CVE-2026-62014CVSS 9.8
    Unauthenticated PHP Object Injection in EmojiNation
    📅 Updated: Oct 29, 2026
  • CVE-2026-62013CVSS 9.8
    Unauthenticated PHP Object Injection in Edge Decor
    📅 Updated: Oct 29, 2026
  • CVE-2026-62012CVSS 9.8
    Unauthenticated PHP Object Injection in Coinpress
    📅 Updated: Oct 29, 2026
Powered by CVE Watchtower

Daily CyberSecurity

  • About SecurityOnline.info
  • Advertise with us
  • Announcement
  • Contact
  • Contributor Register
  • Login
  • Disclaimer
  • DCMA
  • Privacy Policy
  • About SecurityOnline.info
  • Advertise on SecurityOnline.info
  • Contact Us

When you purchase through links on our site, we may earn an affiliate commission. Here’s how it works

  • CVE Watchtower
  • CVE Statistics by Vendor 2026
  • Q3 2026 Report
  • Top Exploited CVEs
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube
© 2017 - 2026 Daily CyberSecurity. All Rights Reserved.