Skip to content
November 7, 2026
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube

Daily CyberSecurity

Zero-hour alerts. Unmatched analysis.

Primary Menu
  • Home
  • CVE Data
    • CVE Watchtower
    • Top Exploited CVEs
    • CVE Stats by Vendor
    • Q2 2026 Report
    • CVE Alerts
    • CVE Alert Settings
    • Pricing
  • Cyber Criminals
  • Data Leak
  • Free Tools
    • CVSS 3.1 Calculator
    • Certificate Viewer
    • DNS Lookup
    • Encoder & Hash Generator
    • IP / Subnet Calculator
    • Whois Lookup
  • Linux
  • Malware
  • Vulnerability
  • Submit Press Release
Light/Dark Button
Malicious Chrome Extension Drains Crypto via Secret API Keys MEXC API Automator Malware Crypto Wallet Drainer
  • Malware

Malicious Chrome Extension Drains Crypto via Secret API Keys

Do Son January 14, 2026 0

Malicious Chrome extension "MEXC API Automator" hijacks API keys to drain crypto wallets. Russian-linked malware hides withdrawal permissions. Remove now.

CVE-2026-22718: EOL Spring CLI Tool for VS Code Found Vulnerable to Command Injection Spring HATEOAS flaws, CVE-2026-41006, CVE-2026-41007 CVE-2024-22243 Spring CLI Vulnerability CVE-2026-22718
  • Vulnerability Report

CVE-2026-22718: EOL Spring CLI Tool for VS Code Found Vulnerable to Command Injection

Do Son January 13, 2026 0

Urgent: Uninstall the EOL Spring CLI VS Code extension now. CVE-2026-22718 (CVSS 6.6) allows command injection and will not be patched.

6 Types of Equipment You Should Invest In Early in Your Business’s Life tech
  • Technique

6 Types of Equipment You Should Invest In Early in Your Business’s Life

Do Son January 13, 2026 0
Many aspiring entrepreneurs understand that starting a new business involves a range of investments, from securing the...
Read More Read more about 6 Types of Equipment You Should Invest In Early in Your Business’s Life
Hexaware Partners with AccuKnox for Cloud Security Services Hexaware-768x480_2_1768287544dpGB5zRWbr
  • Press Release

Hexaware Partners with AccuKnox for Cloud Security Services

cybernewswire January 13, 2026 0
Menlo Park, USA, 13th January 2026, CyberNewsWire
Read More Read more about Hexaware Partners with AccuKnox for Cloud Security Services
Hikvision Security Cameras and Access Controls Hit by Stack Overflow Flaws Hikvision Vulnerability CVE-2026-0709 Hikvision Vulnerability CVE-2025-66176 Hikvision, vulnerability Canada Hikvision Ban, National Security Hikvision firmware updates
  • Vulnerability

Hikvision Security Cameras and Access Controls Hit by Stack Overflow Flaws

Do Son January 13, 2026 0

High-severity Hikvision stack overflow flaws (CVE-2025-66176) allow attackers to crash cameras & NVRs via LAN. Update firmware now to prevent DoS.

AI Identity Theft: Critical ServiceNow Flaw (CVE-2025-12420) Allows Unauthenticated Impersonation ServiceNow AI Platform CVE-2026-0542 ServiceNow AI Vulnerability CVE-2025-12420 CVE-2025-0337
  • Vulnerability Report

AI Identity Theft: Critical ServiceNow Flaw (CVE-2025-12420) Allows Unauthenticated Impersonation

Do Son January 13, 2026 0

Critical ServiceNow AI flaw (CVE-2025-12420) allows unauthenticated user impersonation. Self-hosted users: update Now Assist & Virtual Agent immediately.

CISA “Must-Patch” Alert: Critical Gogs Exploit CVE-2025-8110 Active in Wild Gogs Vulnerability CVE-2025-8110 CVE-2025-64111
  • Vulnerability Report

CISA “Must-Patch” Alert: Critical Gogs Exploit CVE-2025-8110 Active in Wild

Do Son January 13, 2026 0

CISA warns: Active exploits target Gogs Git service via CVE-2025-8110 (CVSS 8.7). Attackers use symlink bypass for RCE. Patch by Feb 2, 2026.

Attackers Weaponize Legitimate RMM Tools via Fake PDFs RMM Software Abuse AhnLab ASEC Report
  • Cybercriminals

Attackers Weaponize Legitimate RMM Tools via Fake PDFs

Do Son January 13, 2026 0

ASEC warns: Hackers abuse Syncro, SuperOps & NinjaOne RMM tools via fake PDF lures. Learn how this phishing campaign installs persistent backdoors.

Angular Security Alert: High-Severity SVG Flaw CVE-2026-22610 Exposes Apps to XSS Angular hostname hijacking vulnerability Angular SSRF Origin Hijacking Angular XSS Vulnerability CVE-2026-32635 Angular i18n XSS CVE-2026-27970 Angular SSR SSRF CVE-2026-27739 Angular Vulnerability CVE-2026-22610 CVE-2025-59052 Angular security Angular XSS Bypass, SVG Injection
  • Vulnerability Report

Angular Security Alert: High-Severity SVG Flaw CVE-2026-22610 Exposes Apps to XSS

Do Son January 13, 2026 0

Angular CVE-2026-22610 (CVSS 8.5) allows XSS via SVG script attributes. Update to v21.0.7 or v20.3.16 immediately to secure your apps.

“TryCloudflare” Abuse: AsyncRAT Exploits Free Tunnels to Build Stealthy WebDAV Network AsyncRAT Malware Cloudflare Tunnel Abuse
  • Malware

“TryCloudflare” Abuse: AsyncRAT Exploits Free Tunnels to Build Stealthy WebDAV Network

Do Son January 13, 2026 0

New AsyncRAT campaign abuses free Cloudflare tunnels for stealthy malware delivery. Learn how phishing emails lead to WebDAV attacks & Python injection.

The AI Alliance: Apple Taps Google Gemini to Power the New Siri iOS 27 Apple Intelligence Apple AI Extensions bazaar Siri iOS 27 Gemini integration Apple AI server Baltra Siri AI delay iOS 26.4 Apple Google Gemini Siri partnership, Siri powered by Google Gemini 2026 Siri Gemini, Apple Intelligence Siri, Apple AI Apple "Veritas", Siri AI Siri Gemini Supercharged Siri, AI assistant Siri Integration, App Intents Apple Siri Apple AI Strategy, ChatGPT Rival
  • Technology

The AI Alliance: Apple Taps Google Gemini to Power the New Siri

Do Son January 13, 2026 0

It’s official: Apple will use Google Gemini to power its next-gen Siri and AI features in 2026, combining Google's models with Apple's privacy.

India’s Source Code Demand Sparks Tech Revolt India smartphone source code mandate, MeitY security requirements 2026 iOS photo backup, background upload iOS crash Foldable iPhone, iPhone design
  • Technology

India’s Source Code Demand Sparks Tech Revolt

Do Son January 13, 2026 0

India faces a revolt from Apple and Samsung over a 2026 proposal to mandate source code disclosure for security audits, sparking a major IP standoff.

Cutting the Cord: QEMU 11.0 to Expunge 32-Bit Host Support in Cloud Variant QEMU 11.0 Cloud 32-bit host deprecation, QEMU TCG code reduction
  • Linux

Cutting the Cord: QEMU 11.0 to Expunge 32-Bit Host Support in Cloud Variant

Do Son January 13, 2026 0

QEMU 11.0 Cloud is set to drop 32-bit host support, removing 7,000+ lines of legacy code to boost efficiency and security in cloud environments.

Double Critical: Hardcoded Secrets Expose Ruckus IoT Controllers to Root RCE Ruckus vRIoT Vulnerability CVE-2025-69425 Ruckus Wireless, Critical Vulnerabilities
  • Vulnerability Report

Double Critical: Hardcoded Secrets Expose Ruckus IoT Controllers to Root RCE

Do Son January 13, 2026 0

Two CVSS 10 flaws (CVE-2025-69425 & CVE-2025-69426) hit Ruckus vRIoT. Hardcoded secrets allow attackers to seize root access. Update to v3.0.0.0 now.

CVE-2025-52694 (CVSS 10): Critical Advantech SQL Injection Exposes IoT Devices Everon OCPP Vulnerability CVE-2026-26288 ASUSTOR ADM Vulnerability CVE-2026-24936 PrismX MX100 Vulnerability Hard-Coded Credentials Advantech Vulnerability CVE-2025-52694 Eaton UPS Companion, CVE-2025-59887 ASUS Router, Authentication Bypass ASUSTOR DLL Hijacking, Privilege Escalation OpenShift AI, Privilege Escalation GoAnywhere vulnerability CVE-2025-10035 LangChainGo, template injection DeepDiff, class pollution ToolShell Sunshine, CSRF Vulnerability KACE SMA, Critical Vulnerabilities Oracle Zero-Days - PDQ Deploy vulnerability
  • Vulnerability Report

CVE-2025-52694 (CVSS 10): Critical Advantech SQL Injection Exposes IoT Devices

Do Son January 13, 2026 0

Critical Advantech flaw CVE-2025-52694 (CVSS 10.0) allows remote SQL injection. Unauthenticated attackers can seize control. Update IoTSuite now.

Critical Alert: Moxa Switches Exposed to OpenSSH Remote Code Execution (CVSS 9.8) Moxa Linux kernel vulnerabilities Moxa Vulnerability CVE-2024-12297 Moxa OpenSSH Vulnerability CVE-2023-38408 CVE-2023-5961 - CVE-2024-9138 and CVE-2024-9140
  • Vulnerability Report

Critical Alert: Moxa Switches Exposed to OpenSSH Remote Code Execution (CVSS 9.8)

Do Son January 13, 2026 0

Critical OpenSSH flaw (CVE-2023-38408) hits Moxa EDS & RKS switches. CVSS 9.8. Remote attackers can execute code. Contact support for patches now.

Tearing Down the Wall: Google Brings AirDrop Support to the Pixel 9 Google Quick Share AirDrop Google Quick Share AirDrop interoperability, Pixel 9 AirDrop support 2026 Snapdragon AirDrop Quick Share Interoperability Quick Share AirDrop Cross-Platform File Transfer
  • Android

Tearing Down the Wall: Google Brings AirDrop Support to the Pixel 9

Do Son January 13, 2026 0

Pixel 9 is next in line for AirDrop support! New firmware leaks show Google is backporting the Pixel 10’s game-changing file-sharing bridge to older models.

The End of the Shopping Tab: Google Unveils “Agentic Commerce” and UCP Google Agentic Commerce UCP, Universal Commerce Protocol retail partners
  • Technology

The End of the Shopping Tab: Google Unveils “Agentic Commerce” and UCP

Do Son January 13, 2026 0

Google debuts Agentic Commerce and the Universal Commerce Protocol (UCP) at NRF 2026, enabling AI agents to shop and checkout across retailers natively.

Everything to Know about Staying Safe While Reconnecting With Old Friends Online bored man with laptop working at home office
  • Technique

Everything to Know about Staying Safe While Reconnecting With Old Friends Online

Do Son January 12, 2026 0
Reconnecting with old friends online can be a powerful and uplifting experience. It brings back shared memories,...
Read More Read more about Everything to Know about Staying Safe While Reconnecting With Old Friends Online
The Hype Hangover: Dell Admits Consumers Aren’t Buying the “AI PC” Narrative Dell AI PC marketing pivot, XPS 2026 brand revival, NPU, Tech Industry News CVE-2023-32484 PowerScale OneFS, CVE-2024-53298
  • Technology

The Hype Hangover: Dell Admits Consumers Aren’t Buying the “AI PC” Narrative

Do Son January 12, 2026 0

At CES 2026, Dell admitted that "AI PC" marketing is failing to drive sales, prompting a pivot back to the XPS brand and traditional performance.

The 2nm Reunion: Qualcomm Confirms Samsung Foundry Talks at CES 2026 Qualcomm Samsung 2nm foundry deal, Snapdragon 8 Elite 2nm refresh Qualcomm Ventana Acquisition, RISC-V Strategy Qualcomm Autotalks, China Antitrust Qualcomm Antitrust, Which? Lawsuit Qualcomm GPU driver, CVE-2024-38399 Qualcomm's March 2025 Security Bulletin
  • Technology

The 2nm Reunion: Qualcomm Confirms Samsung Foundry Talks at CES 2026

Do Son January 12, 2026 0

At CES 2026, Qualcomm CEO Cristiano Amon confirmed a return to Samsung for 2nm chip production, aiming to diversify supply as TSMC capacity tightens.

The Glass Box: Musk Pledges Full X Algorithm & Ad Transparency in 7 Days Elon Musk SEC settlement X bootloader verification X Creator Revenue Sharing suspension X Platform, AI Training X open-source algorithm 2026, Elon Musk ad transparency
  • Technology

The Glass Box: Musk Pledges Full X Algorithm & Ad Transparency in 7 Days

Do Son January 12, 2026 0

Elon Musk vows to open-source X’s recommendation code and ad algorithms by mid-Jan 2026, targeting full transparency amid intense EU regulatory pressure.

❮ Prev Page
Next Page ❯

Search

CVE ALERTS
📈

EPSS Spike Alerts
Catch risk spikes before they make headlines.

🎯

Custom EPSS/CVSS
Set score thresholds to effectively filter noise.

🛡️

Exploit Intel
Real-world exploit signals beyond the KEV catalog.

🐙

GitHub Issues
Auto-create alert tickets without duplication.

📬

Weekly Digest
Clean summaries, eliminating email spam.

🏷️

Watchlist Groups
Tag vulnerabilities by team (Infra/AppSec/SOC).

🔀

Smart Routing
Route chat channels based on severity levels.

🚨

RBP Tracker
Early warning detection and tracking system.

Subscribe – $7/mo or try free for 14 days →

🚨 Active Exploits in the Wild

  • CVE-2026-123158CVSS 8.1
    sshd in OpenSSH before 10.6p2 on Linux, when musl libc is used without PAM, lacks a workaround for...
    Admin intel📅 Updated: Nov 6, 2026
  • CVE-2026-19868CVSS 7.5
    An authentication enforcement vulnerability in SonicOS SSLVPN service may allow a user with valid credentials for an alternate...
    CISA KEV📅 Added to KEV: Nov 6, 2026
  • CVE-2026-120422CVSS 8.9
    Sogou Input Method for Windows contains a vulnerability in the configuration retrieval mechanism of its SGTool.exe component. The...
    Admin intel📅 Updated: Nov 5, 2026
  • CVE-2026-102895CVSS 9.8
    GPUStack is an open-source GPU cluster manager for AI model serving and GPU instance provisioning. Prior to 2.2.0,...
    Watchtower Verified📅 Updated: Nov 5, 2026
  • CVE-2026-115732CVSS 9.0
    Incorrect authorization in the certificate-name matching of trapperkeeper-authorization, as used by Puppet Server, in the affected products, allows...
    Admin intel📅 Updated: Nov 4, 2026
  • CVE-2026-98432CVSS 9.8
    In the Linux kernel, the following vulnerability has been resolved: ipv4: free inet_opt and ireq_opt after an RCU...
    Admin intel📅 Updated: Nov 4, 2026
  • CVE-2026-107441CVSS 8.8
    An out-of-bounds write vulnerability in the CGI program of Zyxel GS1900-24E firmware versions through 2.90(AAHK.2)C0 could allow an...
    Admin intel📅 Updated: Nov 4, 2026
  • CVE-2019-25779CVSS 7.5
    The Diarise theme for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.5.9....
    Watchtower Verified📅 Updated: Nov 4, 2026
Powered by CVE Watchtower

Critical Vulnerabilities

  • CVE-2026-109469CVSS 10.0
    Authorization bypass through user-controlled key in Entra Device Registration allows an unauthorized attacker to elevate privileges over a...
    📅 Updated: Nov 6, 2026
  • CVE-2026-68935CVSS 9.1
    Chartbrew is an open-source web application for creating charts from databases and APIs. In versions 4.8.5 through 5.2.2,...
    📅 Updated: Nov 6, 2026
  • CVE-2025-9230CVSS 9.8
    Issue summary: An application trying to decrypt CMS messages encrypted using password based encryption can trigger an out-of-bounds...
    📅 Updated: Nov 6, 2026
  • CVE-2024-4741CVSS 9.8
    Issue summary: Calling the OpenSSL API function SSL_free_buffers may cause memory to be accessed that was previously freed...
    📅 Updated: Nov 6, 2026
  • CVE-2026-59104CVSS 9.3
    UgCS server before 6.2 contains an authentication bypass in the HCI protocol login handler (LoginHandler) exposed on TCP...
    📅 Updated: Nov 6, 2026
  • CVE-2026-54143CVSS 9.8
    OpenHuman is an open-source agent harness available as a desktop application and Rust library. Before version 0.57.13, an...
    📅 Updated: Nov 6, 2026
  • CVE-2026-54141CVSS 9.0
    OpenHuman is an open-source agent harness available as a desktop application and Rust library. Before 0.57.13, a remote...
    📅 Updated: Nov 6, 2026
  • CVE-2026-77596CVSS 9.6
    Kubeflow Pipelines enables users to build and deploy portable, scalable machine learning workflows. Prior to 2.18.0, the multi-user...
    📅 Updated: Nov 6, 2026
Powered by CVE Watchtower

Daily CyberSecurity

  • About SecurityOnline.info
  • Advertise with us
  • Announcement
  • Contact
  • Contributor Register
  • Login
  • Disclaimer
  • DCMA
  • Privacy Policy
  • About SecurityOnline.info
  • Advertise on SecurityOnline.info
  • Contact Us

When you purchase through links on our site, we may earn an affiliate commission. Here’s how it works

  • CVE Watchtower
  • CVE Statistics by Vendor 2026
  • Q3 2026 Report
  • Top Exploited CVEs
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube
© 2017 - 2026 Daily CyberSecurity. All Rights Reserved.