Skip to content
November 9, 2026
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube

Daily CyberSecurity

Zero-hour alerts. Unmatched analysis.

Primary Menu
  • Home
  • CVE Data
    • CVE Watchtower
    • Top Exploited CVEs
    • CVE Stats by Vendor
    • Q2 2026 Report
    • CVE Alerts
    • CVE Alert Settings
    • Pricing
  • Cyber Criminals
  • Data Leak
  • Free Tools
    • CVSS 3.1 Calculator
    • Certificate Viewer
    • DNS Lookup
    • Encoder & Hash Generator
    • IP / Subnet Calculator
    • Whois Lookup
  • Linux
  • Malware
  • Vulnerability
  • Submit Press Release
Light/Dark Button
CVSS 10.0 Unauthenticated Remote Code Execution in FreeScout (Public Proof-of-Concept Disclosed) FreeScout RCE CVE-2026-28289
  • Vulnerability Report

CVSS 10.0 Unauthenticated Remote Code Execution in FreeScout (Public Proof-of-Concept Disclosed)

Do Son March 5, 2026 0

A critical 10.0 CVSS unauthenticated remote code execution flaw (CVE-2026-28289) in FreeScout allows full server takeover via an invisible character exploit.

BadPaw and MeowMeow: Russian Cyber Offensive Targets Ukraine with Novel Malware Duo BadPaw Malware MeowMeow Backdoor
  • Cyber Security
  • Malware

BadPaw and MeowMeow: Russian Cyber Offensive Targets Ukraine with Novel Malware Duo

Do Son March 5, 2026 0

ClearSky uncovers a Russian campaign targeting Ukraine with BadPaw and MeowMeow malware, using steganography and feline decoys for stealthy espionage.

Critical Infrastructure Alert: Unauthenticated Flaw in Labkotec Ice Detectors Could Freeze Operations Labkotec LID-3300IP CVE-2026-1775 ASUSTOR ADM Vulnerability CVE-2026-3179 Russian Cyberattacks - Security Operations Center
  • Vulnerability Report

Critical Infrastructure Alert: Unauthenticated Flaw in Labkotec Ice Detectors Could Freeze Operations

Do Son March 5, 2026 0

A critical 9.4 CVSS flaw (CVE-2026-1775) in Labkotec LID-3300IP ice detectors allows hackers to hijack wind turbines and airports. Hardware upgrade needed.

Unmasking Silver Dragon: The Chinese-Nexus APT Haunting Southeast Asia and Europe CloudComputating - QSC framework
  • Cyber Security
  • Malware

Unmasking Silver Dragon: The Chinese-Nexus APT Haunting Southeast Asia and Europe

Do Son March 5, 2026 0

Check Point Research uncovers Silver Dragon, an APT41-linked group using the GearDoor backdoor and Google Drive for stealthy cyber espionage.

Coruna: The High-Powered iOS Exploit Kit Proliferating Across the Global Threat Landscape Coruna iOS Exploit GTIG Threat Report
  • Vulnerability Report

Coruna: The High-Powered iOS Exploit Kit Proliferating Across the Global Threat Landscape

Do Son March 5, 2026 0

Google Threat Intelligence uncovers "Coruna", a repurposed iOS exploit kit now used by state-sponsored and financially motivated hackers to steal crypto.

RedAlert: Mobile Espionage Exploiting Crisis and Fear Red Alert Malware SMS Spoofing
  • Malware

RedAlert: Mobile Espionage Exploiting Crisis and Fear

Do Son March 5, 2026 0

CloudSEK exposes a smishing campaign spreading a trojanized "Red Alert" app. The fake emergency tool tracks locations and steals data during air raids.

EV Charging Grid Alert: Critical Flaws Exposed in Everon OCPP Backends Everon OCPP Vulnerability CVE-2026-26288 ASUSTOR ADM Vulnerability CVE-2026-24936 PrismX MX100 Vulnerability Hard-Coded Credentials Advantech Vulnerability CVE-2025-52694 Eaton UPS Companion, CVE-2025-59887 ASUS Router, Authentication Bypass ASUSTOR DLL Hijacking, Privilege Escalation OpenShift AI, Privilege Escalation GoAnywhere vulnerability CVE-2025-10035 LangChainGo, template injection DeepDiff, class pollution ToolShell Sunshine, CSRF Vulnerability KACE SMA, Critical Vulnerabilities Oracle Zero-Days - PDQ Deploy vulnerability
  • Vulnerability Report

EV Charging Grid Alert: Critical Flaws Exposed in Everon OCPP Backends

Do Son March 5, 2026 0

Critical authentication flaws (CVE-2026-26288) in Everon's OCPP backend allowed hackers to hijack EV chargers, forcing a complete platform shutdown.

Suspected North Korean Actors Target the Cryptocurrency Supply Chain AWS Kill Chain React2Shell
  • Cybercriminals

Suspected North Korean Actors Target the Cryptocurrency Supply Chain

Do Son March 5, 2026 0

Ctrl-Alt-Intel exposes a suspected DPRK campaign using an 'Amazon Kill Chain' and React2Shell to systematically breach crypto exchanges and steal code.

Stealth and Deception: Transparent Tribe’s Multi-Stage Assault on Indian Government Entities NATS-as-C2 Sysdig CVE-2026-33017 Langflow RCE Microsoft Phone Link Hijack CloudZ Pheno Plugin Insider Threat BlackCat (ALPHV) OFAC Sanctions DPRK IT Workers Transparent Tribe APT36 React2Shell, EtherRAT SideWinder Espionage, Netlify Phishing DDNS Abuse, C2 Infrastructure Hacking Health Club
  • Cyber Security

Stealth and Deception: Transparent Tribe’s Multi-Stage Assault on Indian Government Entities

Do Son March 5, 2026 0

CYFIRMA reveals a new cyber espionage campaign by Transparent Tribe (APT36) targeting Indian defense with stealthy multi-stage malware and decoy PDFs.

Intelligence Compromised: Data Abyss Report Details China’s Exploitation of U.S. IARPA Research IARPA Research Security Data Abyss Report Telecom threat, Secret Service cybersecurity news - Cyber Espionage Campaign
  • Cyber Security

Intelligence Compromised: Data Abyss Report Details China’s Exploitation of U.S. IARPA Research

Do Son March 5, 2026 0

A new Data Abyss report reveals how PRC-affiliated entities systematically exploited U.S. IARPA research to advance China's military capabilities.

The Return of Funnull: Rebranded and Ramping Up Supply Chain Attacks Funnull Syndicate RingH23 Framework
  • Cybercriminals

The Return of Funnull: Rebranded and Ramping Up Supply Chain Attacks

Do Son March 5, 2026 0

XLab researchers reveal the return of OFAC-sanctioned Funnull. The group is using the new RingH23 framework to hijack CDNs and poison supply chains.

Reclaim Security Raises $26M to Eliminate the 27-Day Remediation Gap WhatsApp_Image_2026-03-04_at_35548_PM_17726342808yOtGeCk70
  • Press Release

Reclaim Security Raises $26M to Eliminate the 27-Day Remediation Gap

cybernewswire March 4, 2026 0
New York, USA, 4th March 2026, CyberNewswire
Read More Read more about Reclaim Security Raises $26M to Eliminate the 27-Day Remediation Gap
How to Improve Home Security: What Every St. Louis Homeowner Needs to Know WD Discovery Vulnerability CVE-2025-30248 binary-parser Vulnerability CVE-2026-1245 H3C RCE Vulnerability CVE-2025-60262 Telenium RCE, CVE-2025-10659 Fuel station security, ICS vulnerabilities FreePBX vulnerability CVE-2024-9478 & CVE-2024-9479 SysTrack Vulnerability, Privilege Escalation
  • Technique

How to Improve Home Security: What Every St. Louis Homeowner Needs to Know

Do Son March 4, 2026 0
Home security is a growing concern for residents across St. Louis, Missouri. Whether you live in Soulard,...
Read More Read more about How to Improve Home Security: What Every St. Louis Homeowner Needs to Know
Android’s March Update Brings “Find Hub” Luggage Sharing and Play Store Shorts Android March 2026 update
  • Android

Android’s March Update Brings “Find Hub” Luggage Sharing and Play Store Shorts

Do Son March 4, 2026 0

Google’s March 2026 update is live! From sharing lost luggage links with airlines via Find Hub to perusing apps via Play Store Shorts, see what's new.

From $180 to $82,000 in 48 Hours: The Gemini API Key Leak Bankrupting Small Dev Teams Google Gemini Enterprise, AI Agents No-Code
  • Data Leak

From $180 to $82,000 in 48 Hours: The Gemini API Key Leak Bankrupting Small Dev Teams

Do Son March 4, 2026 0

A Mexican dev team faces bankruptcy after a leaked Gemini API key racked up an $82,314 bill in 48 hours. Is Google Cloud's billing model to blame?

240,000 OpenClaw AI Instances Exposed to the Public Web OpenClaw AI security
  • Data Leak

240,000 OpenClaw AI Instances Exposed to the Public Web

Do Son March 4, 2026 0

240,000 OpenClaw AI instances are currently exposed to the public internet. Learn how to secure your personal assistant before it becomes a portal for hackers.

Drone Strikes Cripple AWS Data Centers Across the Middle East Motorola Smart Feed redirect Anthropic Amazon 5GW partnership Amazon Perplexity lawsuit AWS-LC Vulnerabilities Cryptographic Bypass AWS Middle East drone strikes Amazon layoffs 2026, Amazon AI restructuring Amazon Kindle DRM Policy, Publisher Control EPUB AWS Nova Forge AI Model Customization AWS Trainium3 EC2 Trn3 UltraServer Route 53 Accelerated Recovery AWS DNS Resilience AI Browser War, Amazon Comet Amazon layoffs, cost reduction AWS outage, DynamoDB DNS AWS outage, cloud dependency AWS VPN Client, Root Privilege Escalation WSA shutdown, Amazon Appstore Amazon Wondery, Podcast Restructuring Amazon Q2 2025 Generative AI AWS Client VPN, Privilege Escalation Amazon AI, Wearable AI
  • Technology

Drone Strikes Cripple AWS Data Centers Across the Middle East

Do Son March 4, 2026 0

Successive drone strikes on AWS data centers in the UAE and Bahrain have caused catastrophic outages. Amazon urges immediate data migration as conflict escalates.

Google Launches Gemini 3.1 Flash-Lite for High-Speed, Low-Cost AI Scaling Gemini AI branching threads Gemini 3.1 Flash-Lite Google Gemini compute shortage affecting Meta operations and AI token limits
  • Technology

Google Launches Gemini 3.1 Flash-Lite for High-Speed, Low-Cost AI Scaling

Do Son March 4, 2026 0

Google’s Gemini 3.1 Flash-Lite is here! At $0.25/1M tokens and 2.5x faster speeds, it’s the new champion for high-volume, low-latency enterprise AI workloads.

The AI Heartbeat: Why Microsoft is Moving Build 2026 to San Francisco’s Historic Fort Mason Microsoft Build 2026
  • Technology

The AI Heartbeat: Why Microsoft is Moving Build 2026 to San Francisco’s Historic Fort Mason

Do Son March 4, 2026 0

Microsoft Build 2026 moves to San Francisco on June 2–3. With a 2,500-attendee limit at Fort Mason, the focus is on "Agentic AI" and deep technical immersion.

Personal Superintelligence: Meta AI Unveils “Shopping Research” to Take on Gemini and ChatGPT Instagram account recovery flaw Meta incident notification Meta AI data center Louisiana Meta AI news partnerships Meta AI Shopping Assistant Meta Vibes standalone app Meta Oversight Board account ban, Instagram permanent suspension review Meta Compute initiative 2026, personal superintelligence nuclear power Meta AI News Licensing Publisher Content Deal Meta Project Mercury Omnilingual ASR 1600 Languages Meta $600B Investment, AI Data Centers Meta AI strategy, Llama models Meta AI Glasses, Smart Glasses
  • Technology

Personal Superintelligence: Meta AI Unveils “Shopping Research” to Take on Gemini and ChatGPT

Do Son March 4, 2026 0

Meta AI launches "Shopping Research" trials in the US. With visual carousels and tailored advice, Zuckerberg’s agentic tools aim to revolutionize e-commerce.

The Ray Tracing Revolution: Microsoft’s Shader Model 6.9 Unlocks a 90% Power Surge for Intel and NVIDIA Shader Execution Reordering (SER)
  • Technology

The Ray Tracing Revolution: Microsoft’s Shader Model 6.9 Unlocks a 90% Power Surge for Intel and NVIDIA

Do Son March 4, 2026 0

Microsoft’s Shader Model 6.9 introduces Shader Execution Reordering (SER), delivering a staggering 90% ray tracing boost for Intel Arc and 40% for NVIDIA GPUs.

From Vision to Validation: Ericsson Unveils the “Superbrain” of 6G with First Live OTA Trials at MWC 2026 Ericsson 6G OTA trial CVE-2024-39696
  • Technology

From Vision to Validation: Ericsson Unveils the “Superbrain” of 6G with First Live OTA Trials at MWC 2026

Do Son March 4, 2026 0

Ericsson makes 6G real at MWC 2026 with the world’s first pre-standard OTA trial and radar-like ISAC technology, powering the next era of AI-native networks.

❮ Prev Page
Next Page ❯

Search

CVE ALERTS
📈

EPSS Spike Alerts
Catch risk spikes before they make headlines.

🎯

Custom EPSS/CVSS
Set score thresholds to effectively filter noise.

🛡️

Exploit Intel
Real-world exploit signals beyond the KEV catalog.

🐙

GitHub Issues
Auto-create alert tickets without duplication.

📬

Weekly Digest
Clean summaries, eliminating email spam.

🏷️

Watchlist Groups
Tag vulnerabilities by team (Infra/AppSec/SOC).

🔀

Smart Routing
Route chat channels based on severity levels.

🚨

RBP Tracker
Early warning detection and tracking system.

Subscribe – $7/mo or try free for 14 days →

🚨 Active Exploits in the Wild

  • CVE-2026-123751
    The WP Duplicate WordPress plugin through 1.1.11 does not properly verify a request authentication value and does not...
    Watchtower Verified📅 Updated: Nov 9, 2026
  • CVE-2026-111793CVSS 4.3
    Openwave Webtop Media Transcoder does not enforce administrator-defined file type restrictions to restrict the file-types to be converted....
    Admin intel📅 Updated: Nov 9, 2026
  • CVE-2026-114713CVSS 8.6
    The labeled-response module in UnrealIRCd 6.0.0 before 6.2.7.1 does not escape the IRCv3 "label" message tag when echoing...
    Admin intel📅 Updated: Nov 9, 2026
  • CVE-2026-123158CVSS 8.1
    sshd in OpenSSH before 10.6p2 on Linux, when musl libc is used without PAM, lacks a workaround for...
    Admin intel📅 Updated: Nov 6, 2026
  • CVE-2026-19868CVSS 7.5
    An authentication enforcement vulnerability in SonicOS SSLVPN service may allow a user with valid credentials for an alternate...
    CISA KEV📅 Added to KEV: Nov 6, 2026
  • CVE-2026-120422CVSS 8.9
    Sogou Input Method for Windows contains a vulnerability in the configuration retrieval mechanism of its SGTool.exe component. The...
    Admin intel📅 Updated: Nov 5, 2026
  • CVE-2026-102895CVSS 9.8
    GPUStack is an open-source GPU cluster manager for AI model serving and GPU instance provisioning. Prior to 2.2.0,...
    Watchtower Verified📅 Updated: Nov 5, 2026
  • CVE-2026-115732CVSS 9.0
    Incorrect authorization in the certificate-name matching of trapperkeeper-authorization, as used by Puppet Server, in the affected products, allows...
    Admin intel📅 Updated: Nov 4, 2026
Powered by CVE Watchtower

Critical Vulnerabilities

  • CVE-2026-124585CVSS 9.4
    A vulnerability was found in Chengdu Feiyuxing Technology VW2100 and VEC10GP 1.0 B-MB3W202-210825-r11775. This issue affects the function...
    📅 Updated: Nov 9, 2026
  • CVE-2026-123870CVSS 9.5
    The otterdog webapp evaluates a format-string built from the incoming GitHub webhook JSON body using Python's eval(). When...
    📅 Updated: Nov 9, 2026
  • CVE-2026-124580CVSS 10.0
    A vulnerability was found in Chengdu Feiyuxing Technology VW2100 and VEC10GP 1.0 B-MB3W202-210825-r11775. This impacts the function handle_wechat_cn_wifi...
    📅 Updated: Nov 9, 2026
  • CVE-2026-124577CVSS 9.3
    A weakness has been identified in Intelbras SG 2404 PoE L2+ 1.00.70/1.00.72. The affected element is an unknown...
    📅 Updated: Nov 9, 2026
  • CVE-2026-17408CVSS 9.8
    IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote attacker to execute arbitrary...
    📅 Updated: Nov 9, 2026
  • CVE-2026-17399CVSS 9.9
    IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to execute...
    📅 Updated: Nov 9, 2026
  • CVE-2026-17340CVSS 9.8
    IBM API Connect 12.1.0.0 through 12.1.1.2 could allow a remote attacker to execute arbitrary code due to a...
    📅 Updated: Nov 9, 2026
  • CVE-2026-17342CVSS 9.9
    IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to execute...
    📅 Updated: Nov 9, 2026
Powered by CVE Watchtower

Daily CyberSecurity

  • About SecurityOnline.info
  • Advertise with us
  • Announcement
  • Contact
  • Contributor Register
  • Login
  • Disclaimer
  • DCMA
  • Privacy Policy
  • About SecurityOnline.info
  • Advertise on SecurityOnline.info
  • Contact Us

When you purchase through links on our site, we may earn an affiliate commission. Here’s how it works

  • CVE Watchtower
  • CVE Statistics by Vendor 2026
  • Q3 2026 Report
  • Top Exploited CVEs
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube
© 2017 - 2026 Daily CyberSecurity. All Rights Reserved.