Skip to content
November 7, 2026
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube

Daily CyberSecurity

Zero-hour alerts. Unmatched analysis.

Primary Menu
  • Home
  • CVE Data
    • CVE Watchtower
    • Top Exploited CVEs
    • CVE Stats by Vendor
    • Q2 2026 Report
    • CVE Alerts
    • CVE Alert Settings
    • Pricing
  • Cyber Criminals
  • Data Leak
  • Free Tools
    • CVSS 3.1 Calculator
    • Certificate Viewer
    • DNS Lookup
    • Encoder & Hash Generator
    • IP / Subnet Calculator
    • Whois Lookup
  • Linux
  • Malware
  • Vulnerability
  • Submit Press Release
Light/Dark Button
The Speed of Thought: OpenAI Inks $10B Deal for 15x Faster AI Responses OpenAI Cerebras $10B deal, wafer-scale AI inference speed
  • Technology

The Speed of Thought: OpenAI Inks $10B Deal for 15x Faster AI Responses

Do Son January 16, 2026 0

OpenAI and Cerebras sign a $10B+ deal in Jan 2026 to deploy 750MW of wafer-scale chips, promising 15x faster AI responses than traditional GPUs.

The Digital Ego: Google Gemini Now Learns Your Life via Gmail and Photos Gemini Personal Intelligence, Google cross-source reasoning
  • Technology

The Digital Ego: Google Gemini Now Learns Your Life via Gmail and Photos

Do Son January 16, 2026 0

Google Gemini launches Personal Intelligence in Jan 2026, using Gmail and Photos for "cross-source reasoning" to solve your unique life problems.

BreachLock Expands Adversarial Exposure Validation (AEV) to Web Applications BreachLock_AEV_Web_Capabilities_Launch_Featured_Im_1768429575s2MfKTO6Fa
  • Press Release

BreachLock Expands Adversarial Exposure Validation (AEV) to Web Applications

cybernewswire January 15, 2026 0
New York, United States, 15th January 2026, CyberNewsWire
Read More Read more about BreachLock Expands Adversarial Exposure Validation (AEV) to Web Applications
AppGuard Critiques AI Hyped Defenses; Expands its Insider Release for its Next-Generation Platform Fatih_GRC-Award-2025-logo_1768258746GI1XeKg0k4
  • Press Release

AppGuard Critiques AI Hyped Defenses; Expands its Insider Release for its Next-Generation Platform

cybernewswire January 15, 2026 0
McLean, Virginia, United States, 15th January 2026, CyberNewsWire
Read More Read more about AppGuard Critiques AI Hyped Defenses; Expands its Insider Release for its Next-Generation Platform
Aembit Announces Agenda and Speaker Lineup for NHIcon 2026 on Agentic AI Security NHIcon2026-pressrelease_1768423204eABnYeTVC1
  • Press Release

Aembit Announces Agenda and Speaker Lineup for NHIcon 2026 on Agentic AI Security

cybernewswire January 15, 2026 0
Silver Spring, Maryland, 15th January 2026, CyberNewsWire
Read More Read more about Aembit Announces Agenda and Speaker Lineup for NHIcon 2026 on Agentic AI Security
Exploited in the Wild: Critical Modular DS Flaw CVE-2026-23550 (CVSS 10) Allows Instant Admin Takeover Check Point VPN vulnerability exploited in the wild Check Point VPN exploit CVE-2026-50751 zero-day Checkmarx Breach Supply Chain Attack Ivanti EPMM RCE CVE-2026-1281 Modular DS Vulnerability CVE-2026-23550 D-Link RCE Vulnerability CVE-2026-0625 Christmas 2025 GreyNoise Campaign, Japan-Based Initial Access Broker React2Shell Zero-Day, APT Active Exploitation WordPress vulnerability, authentication bypass FreePBX, zero-day Trend Micro Apex One, Remote Code Execution BitoPro Hack, Crypto Theft UNC5337 - CVE-2022-47945 Safe{Wallet} hack Fortinet vulnerability, CVE-2024-21762, FortiGate attack Balloonfly, Play ransomware Ivanti EPMM CVE-2025-4427 and CVE-2025-4428
  • Vulnerability Report

Exploited in the Wild: Critical Modular DS Flaw CVE-2026-23550 (CVSS 10) Allows Instant Admin Takeover

Do Son January 15, 2026 0

Urgent: Modular DS flaw CVE-2026-23550 (CVSS 10) is actively exploited in the wild. Attackers are creating fake admins. Update to the latest version now.

The Invisible Bottleneck: AI Hunger for “Glass Cloth” Threatens iPhone 18 Apple Spring Event 2026 Apple Intel 14A iPhone 2028, Intel Foundry Apple Silicon iPhone 18 glass cloth shortage, Nittobo T-glass Apple crisis Apple UK App Store lawsuit appeal, Apple tax £1.5bn damages Apple AI Leadership Shakeup Giannandrea Subramanya Touchscreen MacBook Pro Apple 2026 Roadmap Apple Smart Home, Desktop Robot Apple H3 Chip, AirPods Camera Apple chips, on-device AI Apple AI, retail chatbot MacBook, Affordable Foldable iPhone, Apple Strategy Apple COO, Leadership Transition DOJ Lawsuit Apple EU Policy, App Store Fees CVE-2024-23222 Apple French antitrust fine
  • Technology

The Invisible Bottleneck: AI Hunger for “Glass Cloth” Threatens iPhone 18

Do Son January 15, 2026 0

Apple faces a critical T-glass shortage for the iPhone 18 in Jan 2026 as AI giants like NVIDIA monopolize Japan's "glass cloth" supply.

The Orbital Lifeline: Starlink Battles Military-Grade Jamming in Iran Iran internet blackout 2026, Starlink free Iran activation SpaceX Military, Golden Dome, Missile Defense
  • Technology

The Orbital Lifeline: Starlink Battles Military-Grade Jamming in Iran

Do Son January 15, 2026 0

Starlink activates free service in Iran in Jan 2026 to bypass a 99% internet blackout, using firmware updates to defeat military-grade jamming.

The June Deadline: Microsoft Issues Urgent Secure Boot Certificate Updates HTTP.sys RCE vulnerability, Windows HTTP stack exploit, CVE-2026-47291 Netlogon RCE vulnerability Exploited in the wild Secure Boot certificate renewal 2026, Windows 11 UEFI update Community-First AI Infrastructure, Microsoft self-funding energy mandate aka.ms/aoh online portal CVE-2025-55681, Windows DWM Elevation Windows Administrator Protection, CVE-2025-60718 Microsoft AI Compute, IREN Infrastructure Microsoft Japan PPA, Renewable Energy Microsoft AI Investment, Cloud Expansion Microsoft Azure, Startup Credits Infinite Workday, AI in Work Microsoft Russia, Bankruptcy AI code generation, Microsoft AI Microsoft Layoffs, Restructuring
  • Windows

The June Deadline: Microsoft Issues Urgent Secure Boot Certificate Updates

Do Son January 15, 2026 0

Microsoft begins rotating Secure Boot certificates in Jan 2026. Act now to prevent boot failures and maintain security before the June 2026 expiration.

Collections Retired: Microsoft Edge Sunsets Research Tool Amid Data Loss Fears Microsoft Edge Google account login interface and synchronization settings Browser Choice Alliance letter Microsoft Edge cleartext credentials memory dump Microsoft Edge auto-startup Microsoft Edge Collections sunset, export Edge Collections CSV Edge IE Mode Zero-Day, Chakra Exploit Windows Search, Microsoft Edge AI video translation, Edge browser Microsoft Editor, Edge Edge Developer tools Windows 10 ESU, Microsoft Edge Microsoft Edge, FCP Optimization CVE-2023-36735 Edge, AI Search
  • Technology

Collections Retired: Microsoft Edge Sunsets Research Tool Amid Data Loss Fears

Do Son January 15, 2026 0

Microsoft Edge is killing the Collections feature in Jan 2026. Users must export notes and images to CSV or face permanent data loss on Edge servers.

Powering the Boom: Microsoft Agrees to Trump’s “Self-Funding” Energy Mandate HTTP.sys RCE vulnerability, Windows HTTP stack exploit, CVE-2026-47291 Netlogon RCE vulnerability Exploited in the wild Secure Boot certificate renewal 2026, Windows 11 UEFI update Community-First AI Infrastructure, Microsoft self-funding energy mandate aka.ms/aoh online portal CVE-2025-55681, Windows DWM Elevation Windows Administrator Protection, CVE-2025-60718 Microsoft AI Compute, IREN Infrastructure Microsoft Japan PPA, Renewable Energy Microsoft AI Investment, Cloud Expansion Microsoft Azure, Startup Credits Infinite Workday, AI in Work Microsoft Russia, Bankruptcy AI code generation, Microsoft AI Microsoft Layoffs, Restructuring
  • Technology

Powering the Boom: Microsoft Agrees to Trump’s “Self-Funding” Energy Mandate

Do Son January 15, 2026 0

Microsoft pledges to pay its own way for AI energy in January 2026 after President Trump demands tech giants stop shifting costs to U.S. households.

The Anonymity Trap: New Telegram Flaw Leaks Real IPs via Proxy Links Telegram IP leak proxy link, Telegram security update 2026 Amsterdam ban Telegram - Golang Backdoor Telegram backdoor France encryption
  • Data Leak

The Anonymity Trap: New Telegram Flaw Leaks Real IPs via Proxy Links

Do Son January 15, 2026 0

Telegram confirms a January 2026 flaw where clicking "proxy links" can leak your real IP. A new warning prompt is coming to protect Android & iOS users.

CVE-2025-33206: High-Severity Flaw Patched in NVIDIA Nsight Graphics for Linux NVIDIA Nsight Vulnerability CVE-2025-33206 NVIDIA ConnectX Firmware - CVE-2024-0105
  • Vulnerability Report

CVE-2025-33206: High-Severity Flaw Patched in NVIDIA Nsight Graphics for Linux

Do Son January 15, 2026 0

NVIDIA patches high-severity command injection in Nsight Graphics for Linux (CVE-2025-33206). Update to v2025.5 to prevent code execution.

The $24 Criminal Tool: Microsoft & Police Shut Down RedVDS Fraud Engine RedVDS Takedown Microsoft Digital Crimes Unit
  • Cybercriminals

The $24 Criminal Tool: Microsoft & Police Shut Down RedVDS Fraud Engine

Do Son January 15, 2026 0

Microsoft & police seize RedVDS, a service providing disposable VMs for crime. The takedown stops a network responsible for over $40M in fraud losses.

Palo Alto Networks Firewalls Hit by Unauthenticated GlobalProtect DoS Flaw PAN-OS IKEv2 Buffer Overflow CVE-2026-0263 Palo Alto Cortex XDR Privilege Escalation Palo Alto Networks Vulnerability CVE-2026-0229 PAN-OS Vulnerability CVE-2026-0227 CVE-2024-5914 - Palo Alto Networks - CVE-2025-0108 & CVE-2025-0110
  • Vulnerability Report

Palo Alto Networks Firewalls Hit by Unauthenticated GlobalProtect DoS Flaw

Do Son January 15, 2026 0

Palo Alto warns: CVE-2026-0227 forces GlobalProtect firewalls into maintenance mode. Unauthenticated DoS risk. Update PAN-OS immediately.

HPE Aruba Patches High-Severity DoS and Data Leak Flaws in Instant On Devices HPE Aruba Private 5G Vulnerability CVE-2026-23595 HPE Instant On Vulnerability CVE-2025-37166 CVE-2024-31466 & CVE-2024-31467 HPE Aruba Networking, vulnerability
  • Vulnerability Report

HPE Aruba Patches High-Severity DoS and Data Leak Flaws in Instant On Devices

Do Son January 15, 2026 0

Critical HPE Instant On update fixes DoS flaw CVE-2025-37166 that forces hard resets. Firmware 3.3.2.0 also stops config leaks. Check your version now.

Zoho Patches Critical “9.1” Flaw in ADSelfService Plus CVE-2025-1723 ManageEngine Vulnerability CVE-2025-11250
  • Vulnerability Report

Zoho Patches Critical “9.1” Flaw in ADSelfService Plus

Do Son January 15, 2026 0

ManageEngine patches critical ADSelfService Plus flaw CVE-2025-11250 (CVSS 9.1). Update to Build 6519 immediately to secure your Active Directory.

SHADOW#REACTOR Malware Builds Remcos RAT via Text Files TanStack Typosquatting npm Supply Chain Attack Axios Supply Chain Attack npm Poisoning eScan Supply Chain Attack Antivirus Compromise APT-36, NCERT WhatsApp Advisory FBI alert, Salesforce Salt Typhoon, APT group ConnectWise ScreenConnect hack Nation-state cyberattack FortiGate Leak - zkLend vulnerability - TRIPLESTRENGTH Threat Actor Group Dark Storm
  • Malware

SHADOW#REACTOR Malware Builds Remcos RAT via Text Files

Do Son January 15, 2026 0

Securonix reveals SHADOW#REACTOR: A stealthy framework using "text-only" fragments to deploy Remcos RAT in memory via MSBuild. Avoids disk detection.

One API Call to Hijack: Critical Cal.com Flaw (CVE-2026-23478, CVSS 10) Bypasses 2FA Cal.com Vulnerability CVE-2026-23478 Cal.com Auth Bypass, TOTP Logic Flaw
  • Vulnerability Report

One API Call to Hijack: Critical Cal.com Flaw (CVE-2026-23478, CVSS 10) Bypasses 2FA

Do Son January 15, 2026 0

Critical Cal.com flaw (CVE-2026-23478) allows full account takeover via a single API call. CVSS 10.0. Update self-hosted instances to v6.0.7 immediately.

“Browser-in-the-Browser” Attack Escalates: Trellix Reports Surge in Sophisticated Facebook Phishing phishing-3390518_1280
  • Cybercriminals

“Browser-in-the-Browser” Attack Escalates: Trellix Reports Surge in Sophisticated Facebook Phishing

Do Son January 15, 2026 0

Trellix warns: "Browser-in-the-Browser" phishing creates perfect fake Facebook login pop-ups. Learn how this invisible trap steals credentials.

High-Severity Flaws in HPE Aruba Networking Expose Mobility Controllers to Attack CVE-2024-54006 & CVE-2024-54007 Aruba AOS Vulnerabilities CVE-2025-37168
  • Vulnerability Report

High-Severity Flaws in HPE Aruba Networking Expose Mobility Controllers to Attack

Do Son January 15, 2026 0

Critical Aruba AOS flaw CVE-2025-37168 (CVSS 8.2) allows unauthenticated file deletion & DoS. Multiple RCE bugs also patched. Upgrade AOS immediately.

“Magecart” Strikes Again: Long-Running Web Skimming Campaign Targets Global Payment Networks Magecart Campaign Fake Stripe Payment Form
  • Cybercriminals

“Magecart” Strikes Again: Long-Running Web Skimming Campaign Targets Global Payment Networks

Do Son January 15, 2026 0

New Magecart campaign mimics Stripe forms to skim credit cards. Malware hides from admins & tricks users with fake errors. Active since 2022.

❮ Prev Page
Next Page ❯

Search

CVE ALERTS
📈

EPSS Spike Alerts
Catch risk spikes before they make headlines.

🎯

Custom EPSS/CVSS
Set score thresholds to effectively filter noise.

🛡️

Exploit Intel
Real-world exploit signals beyond the KEV catalog.

🐙

GitHub Issues
Auto-create alert tickets without duplication.

📬

Weekly Digest
Clean summaries, eliminating email spam.

🏷️

Watchlist Groups
Tag vulnerabilities by team (Infra/AppSec/SOC).

🔀

Smart Routing
Route chat channels based on severity levels.

🚨

RBP Tracker
Early warning detection and tracking system.

Subscribe – $7/mo or try free for 14 days →

🚨 Active Exploits in the Wild

  • CVE-2026-123158CVSS 8.1
    sshd in OpenSSH before 10.6p2 on Linux, when musl libc is used without PAM, lacks a workaround for...
    Admin intel📅 Updated: Nov 6, 2026
  • CVE-2026-19868CVSS 7.5
    An authentication enforcement vulnerability in SonicOS SSLVPN service may allow a user with valid credentials for an alternate...
    CISA KEV📅 Added to KEV: Nov 6, 2026
  • CVE-2026-120422CVSS 8.9
    Sogou Input Method for Windows contains a vulnerability in the configuration retrieval mechanism of its SGTool.exe component. The...
    Admin intel📅 Updated: Nov 5, 2026
  • CVE-2026-102895CVSS 9.8
    GPUStack is an open-source GPU cluster manager for AI model serving and GPU instance provisioning. Prior to 2.2.0,...
    Watchtower Verified📅 Updated: Nov 5, 2026
  • CVE-2026-115732CVSS 9.0
    Incorrect authorization in the certificate-name matching of trapperkeeper-authorization, as used by Puppet Server, in the affected products, allows...
    Admin intel📅 Updated: Nov 4, 2026
  • CVE-2026-98432CVSS 9.8
    In the Linux kernel, the following vulnerability has been resolved: ipv4: free inet_opt and ireq_opt after an RCU...
    Admin intel📅 Updated: Nov 4, 2026
  • CVE-2026-107441CVSS 8.8
    An out-of-bounds write vulnerability in the CGI program of Zyxel GS1900-24E firmware versions through 2.90(AAHK.2)C0 could allow an...
    Admin intel📅 Updated: Nov 4, 2026
  • CVE-2019-25779CVSS 7.5
    The Diarise theme for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.5.9....
    Watchtower Verified📅 Updated: Nov 4, 2026
Powered by CVE Watchtower

Critical Vulnerabilities

  • CVE-2026-124060CVSS 9.4
    A vulnerability was detected in TOTOLINK CA300-PoE 6.2c.884. Affected by this issue is the function UploadCustomModule of the...
    📅 Updated: Nov 7, 2026
  • CVE-2026-122041CVSS 9.1
    The Checkout Field Editor for WooCommerce (Pro) plugin for WordPress is vulnerable to unauthorized deletion of arbitrary attachments...
    📅 Updated: Nov 7, 2026
  • CVE-2026-121379CVSS 9.6
    The Tournamatch WordPress plugin before 4.7.1 does not validate or restrict the path of a previously stored profile...
    📅 Updated: Nov 7, 2026
  • CVE-2026-121491CVSS 9.0
    The Fiber Admin WordPress plugin before 4.0.1 does not validate or escape a request header before writing it...
    📅 Updated: Nov 7, 2026
  • CVE-2026-119516CVSS 9.8
    Deserialization of Untrusted Data vulnerability in Mamunur Rashid Radius Booking — Booking Calendar for Appointments & Services radius-booking...
    📅 Updated: Nov 7, 2026
  • CVE-2026-119075CVSS 9.8
    The Registration Form for WooCommerce plugin for WordPress is vulnerable to privilege escalation due to a missing allow-list...
    📅 Updated: Nov 7, 2026
  • CVE-2026-104014CVSS 9.8
    The Naimur Email OTP Verification for WooCommerce plugin for WordPress is vulnerable to authentication bypass in versions up...
    📅 Updated: Nov 7, 2026
  • CVE-2026-124059CVSS 9.4
    A security vulnerability has been detected in TOTOLINK CA300-PoE 6.2c.884. Affected by this vulnerability is the function setWiFiWdsAddConfig...
    📅 Updated: Nov 7, 2026
Powered by CVE Watchtower

Daily CyberSecurity

  • About SecurityOnline.info
  • Advertise with us
  • Announcement
  • Contact
  • Contributor Register
  • Login
  • Disclaimer
  • DCMA
  • Privacy Policy
  • About SecurityOnline.info
  • Advertise on SecurityOnline.info
  • Contact Us

When you purchase through links on our site, we may earn an affiliate commission. Here’s how it works

  • CVE Watchtower
  • CVE Statistics by Vendor 2026
  • Q3 2026 Report
  • Top Exploited CVEs
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube
© 2017 - 2026 Daily CyberSecurity. All Rights Reserved.