Skip to content
November 7, 2026
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube

Daily CyberSecurity

Zero-hour alerts. Unmatched analysis.

Primary Menu
  • Home
  • CVE Data
    • CVE Watchtower
    • Top Exploited CVEs
    • CVE Stats by Vendor
    • Q2 2026 Report
    • CVE Alerts
    • CVE Alert Settings
    • Pricing
  • Cyber Criminals
  • Data Leak
  • Free Tools
    • CVSS 3.1 Calculator
    • Certificate Viewer
    • DNS Lookup
    • Encoder & Hash Generator
    • IP / Subnet Calculator
    • Whois Lookup
  • Linux
  • Malware
  • Vulnerability
  • Submit Press Release
Light/Dark Button
Decades-Old Flaw & New Heap Corruption: Critical glibc Bugs Revealed glibc Security Legacy DNS Flaws glibc Vulnerabilities Linux Security Alert glibc Vulnerability CVE-2026-0861
  • Vulnerability Report

Decades-Old Flaw & New Heap Corruption: Critical glibc Bugs Revealed

Do Son January 19, 2026 0

glibc patches CVE-2026-0861 (CVSS 8.4) & CVE-2026-0915. High-severity heap corruption and a 20-year-old leak affect Linux systems. Patch now.

CodeBreach: Missing Regex Anchors Exposed AWS Console to Takeover CodeBreach Vulnerability AWS Supply Chain Attack
  • Vulnerability Report

CodeBreach: Missing Regex Anchors Exposed AWS Console to Takeover

Do Son January 17, 2026 0

Wiz reveals "CodeBreach": A regex typo in AWS CodeBuild could have let hackers hijack the AWS Console via the JS SDK. Issue is now patched.

Keylogger Found Harvesting Credentials on Top US Bank’s Employee Store Bank Employee Store Breach Sansec Keylogger
  • Malware

Keylogger Found Harvesting Credentials on Top US Bank’s Employee Store

Do Son January 17, 2026 0

Sansec uncovers a keylogger on a major US bank's employee portal. 200,000 staff at risk of credential theft via hidden "side door" malware.

CVE-2025-60021: Apache bRPC Flaw Opens Door to Remote Command Injection Apache bRPC Vulnerability CVE-2025-60021 Apache bRPC, CVE-2025-59789 Apache bRPC, Redis Vulnerability
  • Vulnerability Report

CVE-2025-60021: Apache bRPC Flaw Opens Door to Remote Command Injection

Do Son January 17, 2026 0

Apache patches bRPC flaw CVE-2025-60021. Vulnerable heap profiler allows remote command injection. Upgrade to v1.15.0 to secure your infrastructure.

The Ad Era Begins: OpenAI Launches $8 ChatGPT Go with Sponsored Answers ChatGPT Go $8 subscription, OpenAI ads GPT-5.2
  • Technology

The Ad Era Begins: OpenAI Launches $8 ChatGPT Go with Sponsored Answers

Do Son January 17, 2026 0

OpenAI launches ChatGPT Go at $8/mo in Jan 2026. Get more messages with the new GPT-5.2 Instant model as ads arrive on the Free and Go tiers.

The $8 Revolution: OpenAI Launches ChatGPT Go and Breaks the Ad Barrier OpenAI token price reduction OpenAI Deployment Company DeployCo OpenAI IPO strategy OpenAI Privacy Filter 1.5B OpenAI $122 billion funding OpenAI GitHub alternative OpenAI military agreement 2026 OpenAI Stargate project collapse NVIDIA OpenAI investment stall ChatGPT Go $8 subscription, OpenAI GPT-5.2 Instant ads OpenAI Torch acquisition, Unified Medical Memory OpenAI Head of Preparedness 2025, Sam Altman AI safety lawsuits ChatGPT Advertising Speculation OpenAI Ad Code Denial OpenAI AI Confession Hallucination Mitigation ChatGPT Quality Focus OpenAI Gemini Red Alert ChatGPT Login, AI ecosystem OpenAI Mental Health, AI Well-Being Council ChatGPT Instant Checkout, Agentic Commerce OpenAI cloud computing OpenAI, startup incubator OpenAI chips, NVIDIA competition AI competition, antitrust lawsuit GPT-5, OpenAI Livestream OpenAI Open-Weight, AI Models OpenAI Infrastructure, AI Data Centers ChatGPT Business, Office Productivity OpenAI Open-Weight Model, WindSurf Acquisition OpenAI AI Browser, ChatGPT Integration Mattel AI, OpenAI Partnership OpenAI o3, Price Cut OpenAI's Next-Gen AI: O3-Pro's Enhanced Reasoning PowerOpenAI profit OpenAI Bid OpenAI Social Network ChatGPT Social OpenAI Non-profit OpenAI UAE ChatGPT Plus free
  • Technology

The $8 Revolution: OpenAI Launches ChatGPT Go and Breaks the Ad Barrier

Do Son January 17, 2026 0

OpenAI launches ChatGPT Go at $8/mo in Jan 2026. Get 10x more messages with the new GPT-5.2 Instant model as ads arrive on the Free and Go tiers.

The Silver Jubilee: Wikipedia Inks Landmark AI Deals with Meta, Microsoft, and Amazon Wikipedia JavaScript worm Wikimedia Enterprise AI partners, Wikipedia 25th anniversary monetization Wikipedia down Wikipedia Paid API AI Traffic Decline
  • Technology

The Silver Jubilee: Wikipedia Inks Landmark AI Deals with Meta, Microsoft, and Amazon

Do Son January 17, 2026 0

Wikipedia marks 25 years on Jan 15, 2026, by announcing major AI data deals with Microsoft, Meta, and Amazon to fund its non-profit human knowledge mission.

The Infinite Loop: Windows 11 Update KB5073455 Breaks Shutdown & Hibernation Windows 11 app updates Windows Insider preview build, Calculator app update, built-in Windows apps Windows 11 KB5089549 network lag Windows 11 Home to Pro Education upgrade Windows 11 Start menu update Windows 11 update KB5079391 Windows 11 KB5085516 OOB update Windows 11 C drive permission error Windows 11 C drive access denied Windows native NVMe driver UEFI Secure Boot certificate rotation Windows 11 printer driver policy Windows 11 printer driver deprecation Windows 11 Build 26300 Sysmon Windows 11 Storage settings restriction Windows 11 Build 26300.7674, Windows Insider channel migration 2026 Windows 11 Update Fix KB5073455 shutdown bug, Secure Launch restart loop Windows 11 File Explorer search performance, Search Indexer RAM usage fix Windows 11 Gaming PC Specs, NVMe DirectStorage Windows 10 End of Support Windows 11 Slow Adoption Windows 11 Crash Loop KB5062553 Bug Update and Shut Down, KB5067036 Windows authentication, Kerberos bug Windows 11 fix, localhost bug Windows 11 Update Restart, Update and Shut Down Windows SMBv1 Windows 11 Arm, Easy Anti-Cheat Windows 11 error, Pluton Windows 11 24H2, Easy Anti-Cheat Windows Firewall Bug, Microsoft Update Error Windows 11, JScript9Legacy Windows Activation, TSforge Windows 11 Update, Firewall Error Windows 11 25H2, Annual Update Windows Resiliency Initiative, Kernel Security Windows 11 Upgrade, ESU Program Windows 11 Recall, Data Export Windows 11 Easy Anti-Cheat Windows 11 Update, Cumulative Update Windows Update, ACPI.sys Windows Updates, Enterprise Software Windows 11 Start Data Encryption Standard Printing Problems Windows 11 updates Estimated installation time Smart App Control, Windows 11 security
  • Windows

The Infinite Loop: Windows 11 Update KB5073455 Breaks Shutdown & Hibernation

Do Son January 17, 2026 0

Microsoft confirms KB5073455 causes Windows 11 23H2 Enterprise PCs to restart instead of shutting down. Use the shutdown /s /t 0 workaround now.

The Great Expurgation: X Bans “InfoFi” to Kill AI-Generated Crypto Spam X InfoFi ban, Nikita Bier AI spam purge
  • Technology

The Great Expurgation: X Bans “InfoFi” to Kill AI-Generated Crypto Spam

Do Son January 17, 2026 0

X product lead Nikita Bier announces a total ban on InfoFi apps in Jan 2026, revoking API access to stop AI-driven crypto spam and token farming.

Microsoft Kills the Last Vista-Era Server Lifecycle Windows Server 2025 Accidental Upgrade Windows Server 2008 final support 2026, Premium Assurance expiration Windows Server, update bug Windows Server PPTP Vulnerability KB5051987 Hotpatching
  • Windows

Microsoft Kills the Last Vista-Era Server Lifecycle

Do Son January 17, 2026 0

Windows Server 2008 reaches its absolute end of life on Jan 14, 2026. With Premium Assurance expired, all Vista-era server patches have ceased.

The End of Rationing: Google Boosts Gemini Limits and Unbundles Model Quotas Chrome hidden weights.bin download Gemini Nano privacy controversy 2026 Google Antigravity account suspension Gemini Lyria 3 integration Google Gemini enterprise sales, Google Cloud AI revenue 2026 Google Gemini daily limits 2026, Gemini Thinking model quotas Google Gemini 3 Agentic Development Platform
  • Technology

The End of Rationing: Google Boosts Gemini Limits and Unbundles Model Quotas

Do Son January 17, 2026 0

Google updates Gemini limits in Jan 2026, tripling Thinking model prompts to 300 for Pro users and launching a 1,500-prompt Ultra tier for $250/mo.

Beyond Words: OpenAI Launches “ChatGPT Translate” to Rewrite the World ChatGPT Translate launch 2026, OpenAI translation vs Google Translate
  • Technology

Beyond Words: OpenAI Launches “ChatGPT Translate” to Rewrite the World

Do Son January 16, 2026 0

OpenAI quietly launches ChatGPT Translate in Jan 2026, featuring AI refinement toggles for "Executive Formal" and "Child-Friendly" translations.

Defeating the Epochalypse: GRUB 2.14 Arrives to Save Linux from Year 2038 GRUB 2.14 release Y2038 fix, Linux bootloader Argon2 TPM2 GRUB2 Bootloader Vulnerabilities - CVE-2025-0624
  • Linux

Defeating the Epochalypse: GRUB 2.14 Arrives to Save Linux from Year 2038

Do Son January 16, 2026 0

GRUB 2.14 launches in Jan 2026, fixing the Year 2038 bug and adding Argon2, TPM 2.0, and EROFS support for the ultimate Linux boot security.

Canon Critical Alert: 7 New Flaws Expose Printers to Remote Hackers CVE-2024-47406 CVE-2025-1268 Canon Printer Vulnerability CVE-2025-14231
  • Vulnerability Report

Canon Critical Alert: 7 New Flaws Expose Printers to Remote Hackers

Do Son January 16, 2026 0

Canon warns of 7 critical flaws (CVSS 9.8) in imageCLASS & i-SENSYS printers. Unauthenticated RCE risk. Update firmware immediately to secure devices.

Zero-Day Threat: UAT-8837 Targets North American Infrastructure Mercenary Akula European Financial Targeting AI-Generated Malware React2Shell Exploit UAT-8837 Critical Infrastructure Attack APT36, BOSS Linux BRICKSTORM Malware, China Espionage Curly COMrades, MucorAgent Chinese APT - HTTP Client Tools Shuckworm Cyber Espionage
  • Cyber Security

Zero-Day Threat: UAT-8837 Targets North American Infrastructure

Do Son January 16, 2026 0

Cisco Talos warns: China-linked UAT-8837 targets North American infrastructure using zero-days (CVE-2025-53690) & open-source tools.

40,000 Hits in 4 Hours: RondoDox Botnet Storms HPE OneView GUARDIANWALL MailSuite Exploit CVE-2026-32661 FileZen Vulnerability CVE-2026-25108 Ivanti EPMM Vulnerability Dormant Backdoor Fortinet Authentication Bypass CVE-2026-24858 VMware vCenter Server Flaw CVE-2025-21590
  • Malware

40,000 Hits in 4 Hours: RondoDox Botnet Storms HPE OneView

Do Son January 16, 2026 0

RondoDox botnet targets HPE OneView with 40k attacks in 4 hours. Critical RCE CVE-2025-37164 allows full system takeover. Patch immediately.

DeadLock Ransomware: New Strain Hides C2 in Polygon Smart Contracts DeadLock Ransomware Polygon Smart Contracts
  • Cybercriminals

DeadLock Ransomware: New Strain Hides C2 in Polygon Smart Contracts

Do Son January 16, 2026 0

Group-IB uncovers DeadLock ransomware using Polygon smart contracts for resilient C2. This "EtherHiding" tactic signals a new era of blockchain abuse.

One Click to Compromise: Microsoft Copilot’s “Reprompt” Flaw Exposed Microsoft Strategic Market Status investigation Dell CES 2026 AI PC marketing, Microsoft Copilot+ PC consumer apathy Microsoft AI Sales Quota Enterprise AI Demand Edge Copilot, AI browsing
  • Vulnerability Report

One Click to Compromise: Microsoft Copilot’s “Reprompt” Flaw Exposed

Do Son January 16, 2026 0

Microsoft patches "Reprompt," a critical Copilot flaw. Attackers could steal sensitive data with just one click on a legitimate link.

OpenStack Admin Forgery: CVE-2026-22797 Lets Users ‘Ask’ for Root CVE-2022-38065 OpenStack Vulnerability CVE-2026-22797
  • Vulnerability Report

OpenStack Admin Forgery: CVE-2026-22797 Lets Users ‘Ask’ for Root

Do Son January 16, 2026 0

OpenStack patches CVE-2026-22797 (Privilege Escalation). Flaw in OAuth2 middleware allows header forgery for admin access. Update keystonemiddleware now.

Trusted Tool Turned Traitor: Signed ‘ahost.exe’ Weaponized to Sideload Malware ahost.exe DLL Sideloading Signed Application Abuse PS1Bot, malware ransomware attacks bill
  • Malware

Trusted Tool Turned Traitor: Signed ‘ahost.exe’ Weaponized to Sideload Malware

Do Son January 16, 2026 0

Attackers exploit legitimate ahost.exe via DLL sideloading to deploy RATs & stealers. Trusted dev utility bypasses security scanners. Watch out.

Sicarii Ransomware Masquerades as Israeli Hacktivists AccountDumpling Phishing Google AppSheet Abuse AI-Generated Malware PureRAT Campaign RondoDoX Botnet, Next.js React2Shell EchoGather, Paper Werewolf Salt Typhoon, Telecom Espionage BreachForums, Conor Fitzpatrick Ransomware Negotiation, DOJ Investigation MirrorFace group - Earth Kasha Emperor Dragonfly
  • Cybercriminals

Sicarii Ransomware Masquerades as Israeli Hacktivists

Do Son January 16, 2026 0

Check Point reveals Sicarii ransomware is a Russian false flag operation. Despite Israeli branding, the group relies on machine-translated Hebrew.

A United Front: Nintendo, Sony, and Microsoft Update Shared Safety Principles Nintendo Sony Microsoft safety manifesto, 2026 gaming safety alliance
  • Technology

A United Front: Nintendo, Sony, and Microsoft Update Shared Safety Principles

Do Son January 16, 2026 0

Nintendo, Sony, and Microsoft issue a 2026 joint manifesto to tackle cyberbullying and harassment using AI moderation across all gaming ecosystems.

❮ Prev Page
Next Page ❯

Search

CVE ALERTS
📈

EPSS Spike Alerts
Catch risk spikes before they make headlines.

🎯

Custom EPSS/CVSS
Set score thresholds to effectively filter noise.

🛡️

Exploit Intel
Real-world exploit signals beyond the KEV catalog.

🐙

GitHub Issues
Auto-create alert tickets without duplication.

📬

Weekly Digest
Clean summaries, eliminating email spam.

🏷️

Watchlist Groups
Tag vulnerabilities by team (Infra/AppSec/SOC).

🔀

Smart Routing
Route chat channels based on severity levels.

🚨

RBP Tracker
Early warning detection and tracking system.

Subscribe – $7/mo or try free for 14 days →

🚨 Active Exploits in the Wild

  • CVE-2026-123158CVSS 8.1
    sshd in OpenSSH before 10.6p2 on Linux, when musl libc is used without PAM, lacks a workaround for...
    Admin intel📅 Updated: Nov 6, 2026
  • CVE-2026-19868CVSS 7.5
    An authentication enforcement vulnerability in SonicOS SSLVPN service may allow a user with valid credentials for an alternate...
    CISA KEV📅 Added to KEV: Nov 6, 2026
  • CVE-2026-120422CVSS 8.9
    Sogou Input Method for Windows contains a vulnerability in the configuration retrieval mechanism of its SGTool.exe component. The...
    Admin intel📅 Updated: Nov 5, 2026
  • CVE-2026-102895CVSS 9.8
    GPUStack is an open-source GPU cluster manager for AI model serving and GPU instance provisioning. Prior to 2.2.0,...
    Watchtower Verified📅 Updated: Nov 5, 2026
  • CVE-2026-115732CVSS 9.0
    Incorrect authorization in the certificate-name matching of trapperkeeper-authorization, as used by Puppet Server, in the affected products, allows...
    Admin intel📅 Updated: Nov 4, 2026
  • CVE-2026-98432CVSS 9.8
    In the Linux kernel, the following vulnerability has been resolved: ipv4: free inet_opt and ireq_opt after an RCU...
    Admin intel📅 Updated: Nov 4, 2026
  • CVE-2026-107441CVSS 8.8
    An out-of-bounds write vulnerability in the CGI program of Zyxel GS1900-24E firmware versions through 2.90(AAHK.2)C0 could allow an...
    Admin intel📅 Updated: Nov 4, 2026
  • CVE-2019-25779CVSS 7.5
    The Diarise theme for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.5.9....
    Watchtower Verified📅 Updated: Nov 4, 2026
Powered by CVE Watchtower

Critical Vulnerabilities

  • CVE-2026-124060CVSS 9.4
    A vulnerability was detected in TOTOLINK CA300-PoE 6.2c.884. Affected by this issue is the function UploadCustomModule of the...
    📅 Updated: Nov 7, 2026
  • CVE-2026-122041CVSS 9.1
    The Checkout Field Editor for WooCommerce (Pro) plugin for WordPress is vulnerable to unauthorized deletion of arbitrary attachments...
    📅 Updated: Nov 7, 2026
  • CVE-2026-121379CVSS 9.6
    The Tournamatch WordPress plugin before 4.7.1 does not validate or restrict the path of a previously stored profile...
    📅 Updated: Nov 7, 2026
  • CVE-2026-121491CVSS 9.0
    The Fiber Admin WordPress plugin before 4.0.1 does not validate or escape a request header before writing it...
    📅 Updated: Nov 7, 2026
  • CVE-2026-119516CVSS 9.8
    Deserialization of Untrusted Data vulnerability in Mamunur Rashid Radius Booking — Booking Calendar for Appointments & Services radius-booking...
    📅 Updated: Nov 7, 2026
  • CVE-2026-119075CVSS 9.8
    The Registration Form for WooCommerce plugin for WordPress is vulnerable to privilege escalation due to a missing allow-list...
    📅 Updated: Nov 7, 2026
  • CVE-2026-104014CVSS 9.8
    The Naimur Email OTP Verification for WooCommerce plugin for WordPress is vulnerable to authentication bypass in versions up...
    📅 Updated: Nov 7, 2026
  • CVE-2026-124059CVSS 9.4
    A security vulnerability has been detected in TOTOLINK CA300-PoE 6.2c.884. Affected by this vulnerability is the function setWiFiWdsAddConfig...
    📅 Updated: Nov 7, 2026
Powered by CVE Watchtower

Daily CyberSecurity

  • About SecurityOnline.info
  • Advertise with us
  • Announcement
  • Contact
  • Contributor Register
  • Login
  • Disclaimer
  • DCMA
  • Privacy Policy
  • About SecurityOnline.info
  • Advertise on SecurityOnline.info
  • Contact Us

When you purchase through links on our site, we may earn an affiliate commission. Here’s how it works

  • CVE Watchtower
  • CVE Statistics by Vendor 2026
  • Q3 2026 Report
  • Top Exploited CVEs
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube
© 2017 - 2026 Daily CyberSecurity. All Rights Reserved.