Skip to content
November 10, 2026
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube

Daily CyberSecurity

Zero-hour alerts. Unmatched analysis.

Primary Menu
  • Home
  • CVE Data
    • CVE Watchtower
    • Top Exploited CVEs
    • CVE Stats by Vendor
    • Q2 2026 Report
    • CVE Alerts
    • CVE Alert Settings
    • Pricing
  • Cyber Criminals
  • Data Leak
  • Free Tools
    • CVSS 3.1 Calculator
    • Certificate Viewer
    • DNS Lookup
    • Encoder & Hash Generator
    • IP / Subnet Calculator
    • Whois Lookup
  • Linux
  • Malware
  • Vulnerability
  • Submit Press Release
Light/Dark Button
The Great Expurgation: X Bans “InfoFi” to Kill AI-Generated Crypto Spam X InfoFi ban, Nikita Bier AI spam purge
  • Technology

The Great Expurgation: X Bans “InfoFi” to Kill AI-Generated Crypto Spam

Do Son January 17, 2026 0

X product lead Nikita Bier announces a total ban on InfoFi apps in Jan 2026, revoking API access to stop AI-driven crypto spam and token farming.

Microsoft Kills the Last Vista-Era Server Lifecycle Windows Server 2025 Accidental Upgrade Windows Server 2008 final support 2026, Premium Assurance expiration Windows Server, update bug Windows Server PPTP Vulnerability KB5051987 Hotpatching
  • Windows

Microsoft Kills the Last Vista-Era Server Lifecycle

Do Son January 17, 2026 0

Windows Server 2008 reaches its absolute end of life on Jan 14, 2026. With Premium Assurance expired, all Vista-era server patches have ceased.

The End of Rationing: Google Boosts Gemini Limits and Unbundles Model Quotas Chrome hidden weights.bin download Gemini Nano privacy controversy 2026 Google Antigravity account suspension Gemini Lyria 3 integration Google Gemini enterprise sales, Google Cloud AI revenue 2026 Google Gemini daily limits 2026, Gemini Thinking model quotas Google Gemini 3 Agentic Development Platform
  • Technology

The End of Rationing: Google Boosts Gemini Limits and Unbundles Model Quotas

Do Son January 17, 2026 0

Google updates Gemini limits in Jan 2026, tripling Thinking model prompts to 300 for Pro users and launching a 1,500-prompt Ultra tier for $250/mo.

Beyond Words: OpenAI Launches “ChatGPT Translate” to Rewrite the World ChatGPT Translate launch 2026, OpenAI translation vs Google Translate
  • Technology

Beyond Words: OpenAI Launches “ChatGPT Translate” to Rewrite the World

Do Son January 16, 2026 0

OpenAI quietly launches ChatGPT Translate in Jan 2026, featuring AI refinement toggles for "Executive Formal" and "Child-Friendly" translations.

Defeating the Epochalypse: GRUB 2.14 Arrives to Save Linux from Year 2038 GRUB 2.14 release Y2038 fix, Linux bootloader Argon2 TPM2 GRUB2 Bootloader Vulnerabilities - CVE-2025-0624
  • Linux

Defeating the Epochalypse: GRUB 2.14 Arrives to Save Linux from Year 2038

Do Son January 16, 2026 0

GRUB 2.14 launches in Jan 2026, fixing the Year 2038 bug and adding Argon2, TPM 2.0, and EROFS support for the ultimate Linux boot security.

Canon Critical Alert: 7 New Flaws Expose Printers to Remote Hackers CVE-2024-47406 CVE-2025-1268 Canon Printer Vulnerability CVE-2025-14231
  • Vulnerability Report

Canon Critical Alert: 7 New Flaws Expose Printers to Remote Hackers

Do Son January 16, 2026 0

Canon warns of 7 critical flaws (CVSS 9.8) in imageCLASS & i-SENSYS printers. Unauthenticated RCE risk. Update firmware immediately to secure devices.

Zero-Day Threat: UAT-8837 Targets North American Infrastructure Mercenary Akula European Financial Targeting AI-Generated Malware React2Shell Exploit UAT-8837 Critical Infrastructure Attack APT36, BOSS Linux BRICKSTORM Malware, China Espionage Curly COMrades, MucorAgent Chinese APT - HTTP Client Tools Shuckworm Cyber Espionage
  • Cyber Security

Zero-Day Threat: UAT-8837 Targets North American Infrastructure

Do Son January 16, 2026 0

Cisco Talos warns: China-linked UAT-8837 targets North American infrastructure using zero-days (CVE-2025-53690) & open-source tools.

40,000 Hits in 4 Hours: RondoDox Botnet Storms HPE OneView GUARDIANWALL MailSuite Exploit CVE-2026-32661 FileZen Vulnerability CVE-2026-25108 Ivanti EPMM Vulnerability Dormant Backdoor Fortinet Authentication Bypass CVE-2026-24858 VMware vCenter Server Flaw CVE-2025-21590
  • Malware

40,000 Hits in 4 Hours: RondoDox Botnet Storms HPE OneView

Do Son January 16, 2026 0

RondoDox botnet targets HPE OneView with 40k attacks in 4 hours. Critical RCE CVE-2025-37164 allows full system takeover. Patch immediately.

DeadLock Ransomware: New Strain Hides C2 in Polygon Smart Contracts DeadLock Ransomware Polygon Smart Contracts
  • Cybercriminals

DeadLock Ransomware: New Strain Hides C2 in Polygon Smart Contracts

Do Son January 16, 2026 0

Group-IB uncovers DeadLock ransomware using Polygon smart contracts for resilient C2. This "EtherHiding" tactic signals a new era of blockchain abuse.

One Click to Compromise: Microsoft Copilot’s “Reprompt” Flaw Exposed Microsoft Strategic Market Status investigation Dell CES 2026 AI PC marketing, Microsoft Copilot+ PC consumer apathy Microsoft AI Sales Quota Enterprise AI Demand Edge Copilot, AI browsing
  • Vulnerability Report

One Click to Compromise: Microsoft Copilot’s “Reprompt” Flaw Exposed

Do Son January 16, 2026 0

Microsoft patches "Reprompt," a critical Copilot flaw. Attackers could steal sensitive data with just one click on a legitimate link.

OpenStack Admin Forgery: CVE-2026-22797 Lets Users ‘Ask’ for Root CVE-2022-38065 OpenStack Vulnerability CVE-2026-22797
  • Vulnerability Report

OpenStack Admin Forgery: CVE-2026-22797 Lets Users ‘Ask’ for Root

Do Son January 16, 2026 0

OpenStack patches CVE-2026-22797 (Privilege Escalation). Flaw in OAuth2 middleware allows header forgery for admin access. Update keystonemiddleware now.

Trusted Tool Turned Traitor: Signed ‘ahost.exe’ Weaponized to Sideload Malware ahost.exe DLL Sideloading Signed Application Abuse PS1Bot, malware ransomware attacks bill
  • Malware

Trusted Tool Turned Traitor: Signed ‘ahost.exe’ Weaponized to Sideload Malware

Do Son January 16, 2026 0

Attackers exploit legitimate ahost.exe via DLL sideloading to deploy RATs & stealers. Trusted dev utility bypasses security scanners. Watch out.

Sicarii Ransomware Masquerades as Israeli Hacktivists AccountDumpling Phishing Google AppSheet Abuse AI-Generated Malware PureRAT Campaign RondoDoX Botnet, Next.js React2Shell EchoGather, Paper Werewolf Salt Typhoon, Telecom Espionage BreachForums, Conor Fitzpatrick Ransomware Negotiation, DOJ Investigation MirrorFace group - Earth Kasha Emperor Dragonfly
  • Cybercriminals

Sicarii Ransomware Masquerades as Israeli Hacktivists

Do Son January 16, 2026 0

Check Point reveals Sicarii ransomware is a Russian false flag operation. Despite Israeli branding, the group relies on machine-translated Hebrew.

A United Front: Nintendo, Sony, and Microsoft Update Shared Safety Principles Nintendo Sony Microsoft safety manifesto, 2026 gaming safety alliance
  • Technology

A United Front: Nintendo, Sony, and Microsoft Update Shared Safety Principles

Do Son January 16, 2026 0

Nintendo, Sony, and Microsoft issue a 2026 joint manifesto to tackle cyberbullying and harassment using AI moderation across all gaming ecosystems.

The Speed of Thought: OpenAI Inks $10B Deal for 15x Faster AI Responses OpenAI Cerebras $10B deal, wafer-scale AI inference speed
  • Technology

The Speed of Thought: OpenAI Inks $10B Deal for 15x Faster AI Responses

Do Son January 16, 2026 0

OpenAI and Cerebras sign a $10B+ deal in Jan 2026 to deploy 750MW of wafer-scale chips, promising 15x faster AI responses than traditional GPUs.

The Digital Ego: Google Gemini Now Learns Your Life via Gmail and Photos Gemini Personal Intelligence, Google cross-source reasoning
  • Technology

The Digital Ego: Google Gemini Now Learns Your Life via Gmail and Photos

Do Son January 16, 2026 0

Google Gemini launches Personal Intelligence in Jan 2026, using Gmail and Photos for "cross-source reasoning" to solve your unique life problems.

BreachLock Expands Adversarial Exposure Validation (AEV) to Web Applications BreachLock_AEV_Web_Capabilities_Launch_Featured_Im_1768429575s2MfKTO6Fa
  • Press Release

BreachLock Expands Adversarial Exposure Validation (AEV) to Web Applications

cybernewswire January 15, 2026 0
New York, United States, 15th January 2026, CyberNewsWire
Read More Read more about BreachLock Expands Adversarial Exposure Validation (AEV) to Web Applications
AppGuard Critiques AI Hyped Defenses; Expands its Insider Release for its Next-Generation Platform Fatih_GRC-Award-2025-logo_1768258746GI1XeKg0k4
  • Press Release

AppGuard Critiques AI Hyped Defenses; Expands its Insider Release for its Next-Generation Platform

cybernewswire January 15, 2026 0
McLean, Virginia, United States, 15th January 2026, CyberNewsWire
Read More Read more about AppGuard Critiques AI Hyped Defenses; Expands its Insider Release for its Next-Generation Platform
Aembit Announces Agenda and Speaker Lineup for NHIcon 2026 on Agentic AI Security NHIcon2026-pressrelease_1768423204eABnYeTVC1
  • Press Release

Aembit Announces Agenda and Speaker Lineup for NHIcon 2026 on Agentic AI Security

cybernewswire January 15, 2026 0
Silver Spring, Maryland, 15th January 2026, CyberNewsWire
Read More Read more about Aembit Announces Agenda and Speaker Lineup for NHIcon 2026 on Agentic AI Security
Exploited in the Wild: Critical Modular DS Flaw CVE-2026-23550 (CVSS 10) Allows Instant Admin Takeover Check Point VPN vulnerability exploited in the wild Check Point VPN exploit CVE-2026-50751 zero-day Checkmarx Breach Supply Chain Attack Ivanti EPMM RCE CVE-2026-1281 Modular DS Vulnerability CVE-2026-23550 D-Link RCE Vulnerability CVE-2026-0625 Christmas 2025 GreyNoise Campaign, Japan-Based Initial Access Broker React2Shell Zero-Day, APT Active Exploitation WordPress vulnerability, authentication bypass FreePBX, zero-day Trend Micro Apex One, Remote Code Execution BitoPro Hack, Crypto Theft UNC5337 - CVE-2022-47945 Safe{Wallet} hack Fortinet vulnerability, CVE-2024-21762, FortiGate attack Balloonfly, Play ransomware Ivanti EPMM CVE-2025-4427 and CVE-2025-4428
  • Vulnerability Report

Exploited in the Wild: Critical Modular DS Flaw CVE-2026-23550 (CVSS 10) Allows Instant Admin Takeover

Do Son January 15, 2026 0

Urgent: Modular DS flaw CVE-2026-23550 (CVSS 10) is actively exploited in the wild. Attackers are creating fake admins. Update to the latest version now.

The Invisible Bottleneck: AI Hunger for “Glass Cloth” Threatens iPhone 18 Apple Spring Event 2026 Apple Intel 14A iPhone 2028, Intel Foundry Apple Silicon iPhone 18 glass cloth shortage, Nittobo T-glass Apple crisis Apple UK App Store lawsuit appeal, Apple tax £1.5bn damages Apple AI Leadership Shakeup Giannandrea Subramanya Touchscreen MacBook Pro Apple 2026 Roadmap Apple Smart Home, Desktop Robot Apple H3 Chip, AirPods Camera Apple chips, on-device AI Apple AI, retail chatbot MacBook, Affordable Foldable iPhone, Apple Strategy Apple COO, Leadership Transition DOJ Lawsuit Apple EU Policy, App Store Fees CVE-2024-23222 Apple French antitrust fine
  • Technology

The Invisible Bottleneck: AI Hunger for “Glass Cloth” Threatens iPhone 18

Do Son January 15, 2026 0

Apple faces a critical T-glass shortage for the iPhone 18 in Jan 2026 as AI giants like NVIDIA monopolize Japan's "glass cloth" supply.

The Orbital Lifeline: Starlink Battles Military-Grade Jamming in Iran Iran internet blackout 2026, Starlink free Iran activation SpaceX Military, Golden Dome, Missile Defense
  • Technology

The Orbital Lifeline: Starlink Battles Military-Grade Jamming in Iran

Do Son January 15, 2026 0

Starlink activates free service in Iran in Jan 2026 to bypass a 99% internet blackout, using firmware updates to defeat military-grade jamming.

❮ Prev Page
Next Page ❯

Search

CVE ALERTS
📈

EPSS Spike Alerts
Catch risk spikes before they make headlines.

🎯

Custom EPSS/CVSS
Set score thresholds to effectively filter noise.

🛡️

Exploit Intel
Real-world exploit signals beyond the KEV catalog.

🐙

GitHub Issues
Auto-create alert tickets without duplication.

📬

Weekly Digest
Clean summaries, eliminating email spam.

🏷️

Watchlist Groups
Tag vulnerabilities by team (Infra/AppSec/SOC).

🔀

Smart Routing
Route chat channels based on severity levels.

🚨

RBP Tracker
Early warning detection and tracking system.

Subscribe – $7/mo or try free for 14 days →

🚨 Active Exploits in the Wild

  • CVE-2026-125350
    Use after free in XML. Reported by anonymous on 2026-11-06. Google is aware that an exploit for CVE-2026-125350...
    Admin intel📅 Updated: Nov 10, 2026
  • CVE-2026-123751CVSS 9.8
    The WP Duplicate WordPress plugin through 1.1.11 does not properly verify a request authentication value and does not...
    Watchtower Verified📅 Updated: Nov 9, 2026
  • CVE-2026-111793CVSS 4.3
    Openwave Webtop Media Transcoder does not enforce administrator-defined file type restrictions to restrict the file-types to be converted....
    Admin intel📅 Updated: Nov 9, 2026
  • CVE-2026-114713CVSS 8.6
    The labeled-response module in UnrealIRCd 6.0.0 before 6.2.7.1 does not escape the IRCv3 "label" message tag when echoing...
    Admin intel📅 Updated: Nov 9, 2026
  • CVE-2026-116779CVSS 9.8
    Summary `sofia_presence_handle_sip_i_message()` splits the To user of an inbound SIP MESSAGE on `+` and treats the left half...
    CISA KEV📅 Added to KEV: Nov 9, 2026
  • CVE-2026-102895CVSS 9.8
    GPUStack is an open-source GPU cluster manager for AI model serving and GPU instance provisioning. Prior to 2.2.0,...
    CISA KEV📅 Added to KEV: Nov 9, 2026
  • CVE-2026-123158CVSS 8.1
    sshd in OpenSSH before 10.6p2 on Linux, when musl libc is used without PAM, lacks a workaround for...
    CISA KEV📅 Added to KEV: Nov 9, 2026
  • CVE-2026-19868CVSS 7.5
    An authentication enforcement vulnerability in SonicOS SSLVPN service may allow a user with valid credentials for an alternate...
    CISA KEV📅 Added to KEV: Nov 6, 2026
Powered by CVE Watchtower

Critical Vulnerabilities

  • CVE-2026-125383CVSS 9.3
    INDOTALENT WHMS (Asp.Net-Core-Inventory-Order-Management-System) before 10.20261109 contains an authentication bypass vulnerability caused by a hard-coded JWT signing key, issuer...
    📅 Updated: Nov 9, 2026
  • CVE-2026-125384CVSS 9.3
    INDOTALENT WHMS before 10.20261109 contains a default credentials vulnerability that allows unauthenticated attackers to gain administrator access because...
    📅 Updated: Nov 9, 2026
  • CVE-2026-125370CVSS 9.3
    Kubero 3.0.0 through 3.1.1 contains an authentication bypass vulnerability that allows unauthenticated remote attackers to forge administrative JWTs...
    📅 Updated: Nov 9, 2026
  • CVE-2026-85295CVSS 9.8
    Chartbrew is an open-source web application that can connect directly to databases and APIs and use the data...
    📅 Updated: Nov 9, 2026
  • CVE-2026-54143CVSS 9.8
    OpenHuman is an open-source agent harness available as a desktop application and Rust library. Before version 0.57.13, an...
    📅 Updated: Nov 9, 2026
  • CVE-2026-54141CVSS 9.0
    OpenHuman is an open-source agent harness available as a desktop application and Rust library. Before 0.57.13, a remote...
    📅 Updated: Nov 9, 2026
  • CVE-2026-125120CVSS 9.8
    Mongoose is a MongoDB object modeling tool designed to work in an asynchronous environment. Prior to 6.13.11, 7.8.12,...
    📅 Updated: Nov 9, 2026
  • CVE-2026-115934CVSS 9.3
    An unauthenticated SQL injection can occur on the front end of any site that uses craft.search to perform a search,...
    📅 Updated: Nov 9, 2026
Powered by CVE Watchtower

Daily CyberSecurity

  • About SecurityOnline.info
  • Advertise with us
  • Announcement
  • Contact
  • Contributor Register
  • Login
  • Disclaimer
  • DCMA
  • Privacy Policy
  • About SecurityOnline.info
  • Advertise on SecurityOnline.info
  • Contact Us

When you purchase through links on our site, we may earn an affiliate commission. Here’s how it works

  • CVE Watchtower
  • CVE Statistics by Vendor 2026
  • Q3 2026 Report
  • Top Exploited CVEs
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube
© 2017 - 2026 Daily CyberSecurity. All Rights Reserved.