Skip to content
June 16, 2026
  • Linkedin
  • Twitter
  • Facebook
  • Youtube

Daily CyberSecurity

Zero-hour alerts. Unmatched analysis.

Primary Menu
  • Home
  • CVE Watchtower
  • Cyber Criminals
  • Data Leak
  • Linux
  • Malware
  • Vulnerability
  • Submit Press Release
  • Vulnerability Report
Light/Dark Button
Windows 11 Adds Hidden Setting for Haptic Feedback and UI Vibrations Windows 11 Haptic Haptic Signals
  • Windows

Windows 11 Adds Hidden Setting for Haptic Feedback and UI Vibrations

Do Son November 11, 2025 0
Most modern smartphones and tablets are equipped with miniature vibration motors that provide haptic feedback, producing subtle...
Read More Read more about Windows 11 Adds Hidden Setting for Haptic Feedback and UI Vibrations
EU Spectrum War: Will the Upper 6GHz Band Go to Wi-Fi 7 or 6G Networks? EU 6GHz Spectrum Wi-Fi 7 vs 6G Wi-Fi 8, Wireless Standard Captive portal - WPA3 Security
  • Technology

EU Spectrum War: Will the Upper 6GHz Band Go to Wi-Fi 7 or 6G Networks?

Do Son November 11, 2025 0
The European Union is currently engaged in a heated debate over the allocation of the 6GHz wireless...
Read More Read more about EU Spectrum War: Will the Upper 6GHz Band Go to Wi-Fi 7 or 6G Networks?
Critical Triofox Zero-Day (CVE-2025-12480) Under Active Exploit: Host Header Bypass Allows Unauthenticated Admin Takeover Triofox Zero-Day, Host Header Bypass
  • Vulnerability Report

Critical Triofox Zero-Day (CVE-2025-12480) Under Active Exploit: Host Header Bypass Allows Unauthenticated Admin Takeover

Do Son November 11, 2025 0
Researchers at Mandiant Threat Defense, part of Google Cloud Security Operations, have revealed that a critical unauthenticated...
Read More Read more about Critical Triofox Zero-Day (CVE-2025-12480) Under Active Exploit: Host Header Bypass Allows Unauthenticated Admin Takeover
SuiteCRM SQL Injection Flaws (CVE-2025-64492, CVE-2025-64493) Expose Customer Data SuiteCRM SQL Injection, GraphQL SQLi
  • Vulnerability Report

SuiteCRM SQL Injection Flaws (CVE-2025-64492, CVE-2025-64493) Expose Customer Data

Do Son November 11, 2025 0
The maintainers of SuiteCRM, the popular open-source customer relationship management (CRM) platform, have released an urgent security...
Read More Read more about SuiteCRM SQL Injection Flaws (CVE-2025-64492, CVE-2025-64493) Expose Customer Data
Australia Joins US, Slaps Sanctions on North Korean Cybercriminals for Funding WMD Programs North Korean Laptop Farm DPRK Insider Threat North Korea WMD Cyber Funding, Australia Sanctions Insider threat, North Korean hackers Kimsuky, cyber-espionage NPM Malware, North Korea Cyber-espionage North Korea, Remote IT Job Scam Laptop Farm - DriverEasy - Kimsuky Watering Hole Attack
  • Cybercriminals

Australia Joins US, Slaps Sanctions on North Korean Cybercriminals for Funding WMD Programs

Do Son November 11, 2025 0
The Australian Government has announced financial sanctions and travel bans on four entities and one individual involved...
Read More Read more about Australia Joins US, Slaps Sanctions on North Korean Cybercriminals for Funding WMD Programs
Telegram-Powered Phishing Campaign Targets European Businesses Using HTML Attachments to Steal Credentials HTML Attachment Phishing, Telegram C2
  • Cybercriminals

Telegram-Powered Phishing Campaign Targets European Businesses Using HTML Attachments to Steal Credentials

Do Son November 11, 2025 0
Researchers from Cyble Research and Intelligence Labs (CRIL) have uncovered a massive, multi-brand phishing campaign that uses...
Read More Read more about Telegram-Powered Phishing Campaign Targets European Businesses Using HTML Attachments to Steal Credentials
Critical Devolutions Server Flaw (CVE-2025-12485, CVSS 9.4) Allows User Impersonation via Pre-MFA Cookie Hijacking Devolutions Auth Bypass, Pre-MFA Cookie Hijacking
  • Vulnerability Report

Critical Devolutions Server Flaw (CVE-2025-12485, CVSS 9.4) Allows User Impersonation via Pre-MFA Cookie Hijacking

Do Son November 11, 2025 0
Devolutions, a leading provider of privileged access management (PAM) and remote connection solutions, has released an urgent...
Read More Read more about Critical Devolutions Server Flaw (CVE-2025-12485, CVSS 9.4) Allows User Impersonation via Pre-MFA Cookie Hijacking
Critical WatchGuard Firebox Flaw (CVE-2025-59396, CVSS 9.8) Allows Unauthenticated Admin SSH Takeover via Default Credentials shell-quote command injection AI-Driven Vulnerabilities Q1 2026 Cyber Threats vm2 Sandbox Escape Node.js RCE upKeeper Privilege Escalation CVE-2026-2449 Pharos Controls Vulnerability Root Access Exploit Cybersecurity Vulnerability Roundup CVSS 10.0 Flaws Shadow Archives CVE-2026-0866 MS-Agent Prompt Injection CVE-2026-2256 basic-ftp Path Traversal CVE-2026-27699 telnetd Root Vulnerability CVE-1999-0073 Regression USR-W610 Vulnerabilities End-of-Life IoT Security IceWarp Security Update IceWarp Vulnerabilities Airleader Master Vulnerability CVE-2026-1358 ZLAN5143D Vulnerability CISA ICS Advisory Acronis Cyber Protect Vulnerability CVE-2025-30411 WAGO 852 Vulnerability OT Network Security SandboxJS Vulnerability Sandbox Escape (CVSS 10.0) Kubernetes Local Path Provisioner CVE-2025-62878 CISA Unresponsive Vendors Avation & RISS Vulnerabilities KiloView Vulnerability CVE-2026-1453 OpenClaw RCE vulnerability Johnson Controls Vulnerability CVE-2025-26385 SandboxJS Vulnerability CVE-2026-23830 ibaPDA Vulnerability CVE-2025-14988 Protobuf Vulnerability CVE-2026-0994 AVEVA Process Optimization Vulnerability CVE-2025-61937 ConnectWise PSA Vulnerability CVE-2026-0695 Aruba VIA Vulnerability CVE-2025-37186 aiohttp v3.13.3, Denial of Service (DoS) SmarterMail RCE, CVE-2025-52691 Airoha RACE, Headphone Jacking HPE OneView RCE CVE-2025-37164 FreePBX Auth Bypass, PBX Takeover ScreenConnect Config Flaw, Untrusted Extensions Ruby SAML Auth Bypass, XML Parser Differential Devolutions SQL Injection, Password Manager Flaw Vivotek Unauthenticated RCE, EOL IP Camera Flaw Lynx+ Critical Flaw, Unauthenticated Reset Firebox Default Credentials, CVE-2025-59396 Veeder-Root RCE, Critical ATG Flaw ArcGIS Server SQLi Watchdoc RCE, CVE-2025-58384 Delta DIALink Daikin Security Gateway, authentication bypass Frostbyte10, industrial controller security SunPower, vulnerability Ubiquiti UniFi Connect, EV Station Vulnerabilities Adobe Experience Manager, RCE Vulnerability UniFi Access, Command Injection LDAPNightmare - CVE-2025-1316
  • Vulnerability Report

Critical WatchGuard Firebox Flaw (CVE-2025-59396, CVSS 9.8) Allows Unauthenticated Admin SSH Takeover via Default Credentials

Do Son November 11, 2025 0
A critical configuration flaw (CVE-2025-59396) has been discovered in WatchGuard Firebox devices, allowing remote attackers to gain...
Read More Read more about Critical WatchGuard Firebox Flaw (CVE-2025-59396, CVSS 9.8) Allows Unauthenticated Admin SSH Takeover via Default Credentials
Critical GE Vernova ICS Flaw (CVE-2025-3222, CVSS 9.3) Allows Authentication Bypass in Smallworld Master File Server Smallworld Auth Bypass, GE Vernova ICS Flaw
  • Vulnerability Report

Critical GE Vernova ICS Flaw (CVE-2025-3222, CVSS 9.3) Allows Authentication Bypass in Smallworld Master File Server

Do Son November 11, 2025 0
GE Vernova’s Electrification Software division has released a critical security advisory addressing a high-severity authentication vulnerability (CVE-2025-3222)...
Read More Read more about Critical GE Vernova ICS Flaw (CVE-2025-3222, CVSS 9.3) Allows Authentication Bypass in Smallworld Master File Server
North Korea’s KONNI APT Hijacks Google Find Hub to Remotely Wipe and Track South Korean Android Devices AdaptixC2 Abuse, Russian Cybercrime RondoDox Botnet, Exploit Shotgun China Cyber Power, Red Hackers Nvidia cyberattack
  • Cyber Security
  • Malware

North Korea’s KONNI APT Hijacks Google Find Hub to Remotely Wipe and Track South Korean Android Devices

Do Son November 11, 2025 0
The Genians Security Center (GSC) has uncovered a new phase in the KONNI APT campaign, revealing a...
Read More Read more about North Korea’s KONNI APT Hijacks Google Find Hub to Remotely Wipe and Track South Korean Android Devices
Critical Calibre Flaw (CVE-2025-64486, CVSS 9.3) Allows RCE via Malicious FB2 E-book Calibre Vulnerability CVE-2026-26065 Calibre RCE, FB2 File Flaw
  • Vulnerability Report

Critical Calibre Flaw (CVE-2025-64486, CVSS 9.3) Allows RCE via Malicious FB2 E-book

Do Son November 11, 2025 0
A critical vulnerability in Calibre, the popular cross-platform e-book manager, allows arbitrary code execution when an attacker...
Read More Read more about Critical Calibre Flaw (CVE-2025-64486, CVSS 9.3) Allows RCE via Malicious FB2 E-book
Lazarus Group Attacks Aerospace/Defense with New ChaCha20-Encrypted Comebacker Backdoor Seedworm Espionage Campaign 2026 ChromElevator Stealer DLL Sideloading SIM Swapping Crypto Theft Lazarus Comebacker, Aerospace Espionage Delete PlugX Malware
  • Cyber Security
  • Malware

Lazarus Group Attacks Aerospace/Defense with New ChaCha20-Encrypted Comebacker Backdoor

Do Son November 11, 2025 0
Cybersecurity researchers at ENKI have identified a new variant of the Comebacker backdoor, attributed to the North...
Read More Read more about Lazarus Group Attacks Aerospace/Defense with New ChaCha20-Encrypted Comebacker Backdoor
DragonForce Ransomware Evolves with BYOVD to Kill EDR and Fixes Encryption Flaws in Conti V3 Codebase DragonForce BYOVD, Conti Codebase
  • Malware

DragonForce Ransomware Evolves with BYOVD to Kill EDR and Fixes Encryption Flaws in Conti V3 Codebase

Do Son November 11, 2025 0
The Acronis Threat Research Unit (TRU) has identified a new DragonForce ransomware variant that showcases a dramatic...
Read More Read more about DragonForce Ransomware Evolves with BYOVD to Kill EDR and Fixes Encryption Flaws in Conti V3 Codebase
Incident Response Team (ShieldForce) Partners with AccuKnox for Zero Trust CNAPP in Latin America sheidlforce__1762424082WhCkzx4gDQ
  • Press Release

Incident Response Team (ShieldForce) Partners with AccuKnox for Zero Trust CNAPP in Latin America

cybernewswire November 10, 2025 0
Menlo Park, CA, USA, 10th November 2025, CyberNewsWire
Read More Read more about Incident Response Team (ShieldForce) Partners with AccuKnox for Zero Trust CNAPP in Latin America
Laid-Off Intel Engineer Allegedly Stole 18,000 Confidential Files Before Disappearing Intel EU Antitrust Fine, Naked Restrictions Intel Layoff Data Theft Jinfeng Luo Intel leadership change Intel SoftBank Intel Foundry, Semiconductor Market Intel Arrow Lake Refresh, Copilot+ PC Intel GPU Performance, Security Mitigations Mitigation Downfall Vulnerability
  • Data Leak

Laid-Off Intel Engineer Allegedly Stole 18,000 Confidential Files Before Disappearing

Do Son November 10, 2025 0
Intel is currently undergoing a massive wave of layoffs. Over the past few years, the chipmaker has...
Read More Read more about Laid-Off Intel Engineer Allegedly Stole 18,000 Confidential Files Before Disappearing
Whisper Leak: Attack Infers Encrypted AI Chat Topics with 98%+ Accuracy Whisper Leak Encrypted AI Chat
  • Vulnerability Report

Whisper Leak: Attack Infers Encrypted AI Chat Topics with 98%+ Accuracy

Do Son November 10, 2025 0
Microsoft’s Threat Intelligence team has disclosed a novel side-channel attack on remote language models, demonstrating that a...
Read More Read more about Whisper Leak: Attack Infers Encrypted AI Chat Topics with 98%+ Accuracy
Touchscreen MacBook Pro & Foldable iPhone: Apple’s “Most Pivotal Year Yet” Revealed Apple Spring Event 2026 Apple Intel 14A iPhone 2028, Intel Foundry Apple Silicon iPhone 18 glass cloth shortage, Nittobo T-glass Apple crisis Apple UK App Store lawsuit appeal, Apple tax Β£1.5bn damages Apple AI Leadership Shakeup Giannandrea Subramanya Touchscreen MacBook Pro Apple 2026 Roadmap Apple Smart Home, Desktop Robot Apple H3 Chip, AirPods Camera Apple chips, on-device AI Apple AI, retail chatbot MacBook, Affordable Foldable iPhone, Apple Strategy Apple COO, Leadership Transition DOJ Lawsuit Apple EU Policy, App Store Fees CVE-2024-23222 Apple French antitrust fine
  • Technology

Touchscreen MacBook Pro & Foldable iPhone: Apple’s “Most Pivotal Year Yet” Revealed

Do Son November 10, 2025 0
In addition to the upcoming satellite features for the iPhone, Bloomberg News has outlined Apple’s ambitious 2026...
Read More Read more about Touchscreen MacBook Pro & Foldable iPhone: Apple’s “Most Pivotal Year Yet” Revealed
iPhone’s Off-Grid Future: Maps, Photos, & ‘Natural Usage’ Satellite Features Revealed FCC Chinese lab ban iPhone NATO certification iPhone 18 Pro Deep Red iOS 27 Snow Leopard update 2026 smartphone memory shortage, IDC mobile market forecast iPhone Satellite Natural Usage iPhone 17 Speaker Issue, USB-C Static iPhone 17 Pro, MagSafe Scratches iPhone 17 Pro, professional filmmaking
  • Technology

iPhone’s Off-Grid Future: Maps, Photos, & ‘Natural Usage’ Satellite Features Revealed

Do Son November 10, 2025 0
According to a report by Bloomberg’s Mark Gurman in his latest Power On newsletter, Apple is actively...
Read More Read more about iPhone’s Off-Grid Future: Maps, Photos, & ‘Natural Usage’ Satellite Features Revealed
Zero-Click Samsung Zero-Day (CVE-2025-21042) Delivered LANDFALL Spyware Via Malicious DNG Images Samsung Zero-Click Spyware, LANDFALL
  • Malware
  • Vulnerability Report

Zero-Click Samsung Zero-Day (CVE-2025-21042) Delivered LANDFALL Spyware Via Malicious DNG Images

Do Son November 10, 2025 0
Researchers from Unit 42, the threat intelligence team at Palo Alto Networks, have discovered a previously unknown...
Read More Read more about Zero-Click Samsung Zero-Day (CVE-2025-21042) Delivered LANDFALL Spyware Via Malicious DNG Images
Fantasy Hub RAT MaaS Uncovered: Russian Spyware Uses Telegram Bot and WebRTC to Hijack Android Devices Fantasy Hub MaaS, Android RAT WebRTC
  • Malware

Fantasy Hub RAT MaaS Uncovered: Russian Spyware Uses Telegram Bot and WebRTC to Hijack Android Devices

Do Son November 10, 2025 0
Researchers at zLabs have uncovered a sophisticated Android Remote Access Trojan (RAT) known as Fantasy Hub, being...
Read More Read more about Fantasy Hub RAT MaaS Uncovered: Russian Spyware Uses Telegram Bot and WebRTC to Hijack Android Devices
❮ Prev Page
Next Page ❯

Search

Translation

CVE WATCHTOWER
🚨

Receive alerts for vulnerabilities being exploited in the wild.

⚑

Get notified instantly when a Proof of Concept (PoC) exploit is published.

πŸ”

Access critical info on vulnerabilities even when marked as "RESERVED".

🧠

Insights powered by decades of expertise and global intelligence sources.

🎯

Customize alerts with up to 10 keywords for your specific tech stack.

πŸ“Š

Export the raw CVE database for SIEM integration and reporting.

Upgrade Package

πŸ”΄ Live Critical Threats

  • CVE-2026-53776CVSS 9.1
    Perry before 0.5.1166 contains a JWT validation vulnerability that allows remote attackers...
  • CVE-2026-40750CVSS 9.9
    Unrestricted Upload of File with Dangerous Type vulnerability in themagnifico52 Kids Online...
  • CVE-2026-52715CVSS 9.3
    Unauthenticated SQL Injection in GEO my WordPress
  • CVE-2026-49774CVSS 9.9
    Improper Control of Generation of Code ('Code Injection') vulnerability in Filipe Nasc...
  • CVE-2026-49772CVSS 9.3
    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')...
  • CVE-2026-39574CVSS 9.3
    Unauthenticated SQL Injection in InPost Gallery
  • CVE-2026-48714CVSS 9.1
    i18next-http-middleware is a middleware to be used with Node.js web frameworks like...
  • CVE-2026-48713CVSS 9.1
    Versions prior to 2.6.6 are vulnerable to prototype pollution via crafted missing-key...
  • CVE-2026-9691CVSS 9.8
    Unauthenticated PHP Object Injection in Integration for ActiveCampaign and Contact Form 7,...
  • CVE-2026-52703CVSS 9.6
    Unauthenticated Path Traversal in FastDup
Powered by CVE WATCHTOWER

Recent Zero-Day Vulnerabilities

  • GreatXML BitLocker Bypass: Public PoC Exploit Disclosed
  • Check Point VPN Vulnerability Exploited in the Wild with Ransomware Links
  • Weekly Threat Intelligence: June 1 to June 7, 2026
  • Cisco SD-WAN Vulnerability Exploited in the Wild with Root RCE Risks
  • Android Zero-Day Flaw Exploited in the Wild: June 2026 Patches Released
  • Exploited in the Wild: Critical OWA Spoofing Flaw (CVE-2026-42897) Hits On-Premises Exchange Servers
Our Websites
  • Penetration Testing Tools
  • The Daily Information Technology
  • Daily CyberSecurity

    • About SecurityOnline.info
    • Advertise with us
    • Announcement
    • Contact
    • Contributor Register
    • Login
    • Disclaimer
    • Privacy Policy
    • About SecurityOnline.info
    • Advertise on SecurityOnline.info
    • Contact Us

    When you purchase through links on our site, we may earn an affiliate commission. Here’s how it works

    • Disclaimer
    • Privacy Policy
    • DMCA NOTICE
    • Linkedin
    • Twitter
    • Facebook
    • Youtube
    Β© 2017 - 2026 Daily CyberSecurity. All Rights Reserved.