Skip to content
November 7, 2026
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube

Daily CyberSecurity

Zero-hour alerts. Unmatched analysis.

Primary Menu
  • Home
  • CVE Data
    • CVE Watchtower
    • Top Exploited CVEs
    • CVE Stats by Vendor
    • Q2 2026 Report
    • CVE Alerts
    • CVE Alert Settings
    • Pricing
  • Cyber Criminals
  • Data Leak
  • Free Tools
    • CVSS 3.1 Calculator
    • Certificate Viewer
    • DNS Lookup
    • Encoder & Hash Generator
    • IP / Subnet Calculator
    • Whois Lookup
  • Linux
  • Malware
  • Vulnerability
  • Submit Press Release
Light/Dark Button
GoBruteforcer Returns: How AI Code Snippets Fueled a 50,000-Server Botnet Seedworm Espionage Campaign 2026 ChromElevator Stealer DLL Sideloading SIM Swapping Crypto Theft Lazarus Comebacker, Aerospace Espionage Delete PlugX Malware
  • Malware

GoBruteforcer Returns: How AI Code Snippets Fueled a 50,000-Server Botnet

Do Son January 8, 2026 0

New GoBruteforcer variant targets 50k+ servers by exploiting weak passwords from AI-generated code. Learn how this crypto-stealing botnet operates.

CVE-2025-67859: Critical Auth Bypass Discovered in Popular Linux Battery Utility TLP Vulnerability CVE-2025-67859 Linux Kernel 6.9 Linux Kernel, End-of-Life
  • Vulnerability Report

CVE-2025-67859: Critical Auth Bypass Discovered in Popular Linux Battery Utility

Do Son January 8, 2026 0

CVE-2025-67859: TLP 1.9.0 flaw lets users bypass root auth. SUSE researchers urge Linux users to update to version 1.9.1 to fix this critical security gap.

CrazyHunter: The “Ruthless” Ransomware Stalking Healthcare CrazyHunter Ransomware Healthcare Cyberattacks
  • Malware

CrazyHunter: The “Ruthless” Ransomware Stalking Healthcare

Do Son January 8, 2026 0

New CrazyHunter ransomware targets healthcare with BYOVD tactics and rapid encryption. Trellix reveals how this "greedy" threat cripples hospitals.

GitLab Patch: High-Severity XSS & AI Flaws Expose User Data GitLab AI Gateway Vulnerability CVE-2026-1868 CVE-2025-0314 GitLab Security Update CVE-2025-9222
  • Vulnerability Report

GitLab Patch: High-Severity XSS & AI Flaws Expose User Data

Do Son January 8, 2026 0

GitLab patches critical Stored XSS (CVE-2025-9222) and AI flaws in versions 18.7.1, 18.6.3, & 18.5.5. Update immediately to secure your pipelines.

Spy Games or Glitch? The Truth Behind Venezuela’s BGP Leak Venezuela BGP Leak CANTV
  • Data Leak

Spy Games or Glitch? The Truth Behind Venezuela’s BGP Leak

Do Son January 8, 2026 0

Cloudflare debunks claims that Venezuela's CANTV BGP leak was a US military op, attributing the incident to chronic technical errors and misconfigurations.

“Sophisticated” Zero-Day Demystified: Public Exploit Drop Blows Cover on Critical Apple WebKit Flaw Apple Zero-Day CVE-2025-43529 WebKit Zero-Day, Targeted iOS Spyware Apple spyware alerts, zero-click attacks Apple, trademark lawsuit CVE-2024-54527 PoC exploit Apple, App Store
  • Vulnerability

“Sophisticated” Zero-Day Demystified: Public Exploit Drop Blows Cover on Critical Apple WebKit Flaw

Do Son January 8, 2026 0

Exploit blueprints for Apple zero-day CVE-2025-43529 are now public. Millions of iPhones and Macs are at risk. Update to iOS 26.2 immediately.

One Request to Rule Them All: Critical Trendnet Flaw (CVE-2025-15471) Allows Total Takeover Trendnet TEW-713RE Vulnerability CVE-2025-15471
  • Vulnerability Report

One Request to Rule Them All: Critical Trendnet Flaw (CVE-2025-15471) Allows Total Takeover

Do Son January 8, 2026 0

Critical flaw CVE-2025-15471 (CVSS 9.8) in Trendnet TEW-713RE allows unauthenticated attackers to execute root commands via a single HTTP request.

“Ghost Tap” Rising: New Wave of Android Malware Turns Phones into Digital Pickpockets Ghost Tap Malware NFC Relay Attack
  • Cybercriminals

“Ghost Tap” Rising: New Wave of Android Malware Turns Phones into Digital Pickpockets

Do Son January 8, 2026 0

New "Ghost Tap" malware lets hackers relay NFC signals from your Android phone to steal funds remotely. Learn how this sophisticated Group-IB discovery works.

CVE-2025-60262: Critical Misconfiguration in H3C Wireless Gear Hands Control to Hackers WD Discovery Vulnerability CVE-2025-30248 binary-parser Vulnerability CVE-2026-1245 H3C RCE Vulnerability CVE-2025-60262 Telenium RCE, CVE-2025-10659 Fuel station security, ICS vulnerabilities FreePBX vulnerability CVE-2024-9478 & CVE-2024-9479 SysTrack Vulnerability, Privilege Escalation
  • Vulnerability Report

CVE-2025-60262: Critical Misconfiguration in H3C Wireless Gear Hands Control to Hackers

Do Son January 8, 2026 0

Critical flaw CVE-2025-60262 hits H3C wireless devices. A misconfigured FTP setting grants anonymous users root access. Check your firmware now.

Taiwan Faces 2.6 Million Cyberattacks Daily from China Iranian Cyber Reconnaissance IP Camera Security NCSC Warning Russian Hacktivists Taiwan Cyberattacks China State-Sponsored Hacking state-sponsored threat actor Ransomware RAT Abuse, AnyDesk
  • Cyber Security

Taiwan Faces 2.6 Million Cyberattacks Daily from China

Do Son January 8, 2026 0

Taiwan's NSB reports 2.63M daily cyberattacks from China in 2025. Energy sector strikes spiked 1,000% as hybrid warfare intensifies.

Top 7 Real-World Use Cases of Modern License Plate Recognition Systems photo-1594852352010-63d76b89f85f
  • Technique

Top 7 Real-World Use Cases of Modern License Plate Recognition Systems

Do Son January 7, 2026 0

Discover the top 7 real-world use cases of modern license plate recognition systems. Explore LPR for parking, security, logistics & smart cities.

Self-Hosters Beware: 3 Critical Coolify Flaws Grant Root Access Coolify Vulnerabilities CVE-2025-64419 CVE-2025-22612, CVE-2025-22611, and CVE-2025-22609
  • Vulnerability Report

Self-Hosters Beware: 3 Critical Coolify Flaws Grant Root Access

Do Son January 7, 2026 0

Critical Coolify flaws (CVE-2025-64419+) expose 52k instances to root RCE and SSH key theft. Patch immediately to secure your self-hosted apps.

The $230B AI Titan: Musk’s xAI Raises $20B to Build the World’s Largest GPU Clusters Musk $134B OpenAI lawsuit, xAI Grok deepfake cease and desist xAI Series E $20 billion funding, Grok 5 NVIDIA supercomputer trade secret theft, xAI lawsuit Grok 2, Open Source AI Grok AI, xAI Investment xAI, MacroHard
  • Technology

The $230B AI Titan: Musk’s xAI Raises $20B to Build the World’s Largest GPU Clusters

Do Son January 7, 2026 0

xAI closes an upsized $20B funding round, hitting a $230B valuation. With NVIDIA backing, xAI scales its GPU clusters to fuel Grok 5 development.

The Logitech Blackout: How an Expired Certificate Bricked Your Mac Mouse Settings Logitech macOS certificate fix, Logi Options+ G HUB manual update Logi Options+ macOS certificate error, Logitech mouse settings not working 2026
  • Technology

The Logitech Blackout: How an Expired Certificate Bricked Your Mac Mouse Settings

Do Son January 7, 2026 0

Logitech forgot to renew its macOS developer certificate on Jan 6, 2026, breaking Logi Options+. Learn how to fix the loading screen & battery drain.

The Central Brain: Qualcomm Unveils Agentic AI and Dual-Elite Platforms at CES 2026 Qualcomm Snapdragon Digital Chassis, Agentic AI automotive 2026
  • Technology

The Central Brain: Qualcomm Unveils Agentic AI and Dual-Elite Platforms at CES 2026

Do Son January 7, 2026 0

At CES 2026, Qualcomm launched Agentic AI for cars and the world's first dual-chip Snapdragon Elite controller, promising a proactive driving era.

Brain Meets Brawn: Boston Dynamics and Google DeepMind Unite for the New Atlas Boston Dynamics Atlas Gemini AI, Google DeepMind robotics partnership
  • Technology

Brain Meets Brawn: Boston Dynamics and Google DeepMind Unite for the New Atlas

Do Son January 7, 2026 0

Boston Dynamics and Google DeepMind are bringing Gemini AI to the new Atlas robot. Hyundai plans to deploy these "intelligent" humanoids by 2028.

The Ten-Year Car: Qualcomm and Google Unveil the Future of AI-Powered Mobility Qualcomm Google SDV alliance, Snapdragon Digital Chassis Google AI
  • Technology

The Ten-Year Car: Qualcomm and Google Unveil the Future of AI-Powered Mobility

Do Son January 7, 2026 0

Qualcomm & Google at CES 2026: A new SDV era with 10 years of updates, Gemini-powered AI agents, and cloud-native development for smarter cars.

Reliability Over Speed: MediaTek Debuts Filogic 8000 to Power the Wi-Fi 8 Revolution MediaTek Filogic 8000 Wi-Fi 8, Wi-Fi 8 Ultra High Reliability
  • Technology

Reliability Over Speed: MediaTek Debuts Filogic 8000 to Power the Wi-Fi 8 Revolution

Do Son January 7, 2026 0

MediaTek's Filogic 8000 brings Wi-Fi 8 to life at CES 2026. Focused on reliability and AI, it cuts latency and interference for the next-gen smart home.

The 1000Hz Illusion: NVIDIA Unveils G-SYNC Pulsar and DLSS 4.5 at CES 2026 NVIDIA G-SYNC Pulsar 1000Hz, DLSS 4.5 RTX 50 series
  • Technology

The 1000Hz Illusion: NVIDIA Unveils G-SYNC Pulsar and DLSS 4.5 at CES 2026

Do Son January 7, 2026 0

NVIDIA at CES 2026: G-SYNC Pulsar hits 1000Hz-class clarity, while DLSS 4.5 brings 6x frame generation to the RTX 50 series. The future of gaming is here.

wolfSSH Alert: Critical Logic Flaw Exposes Client Passwords in Clear Text wolfSSL Vulnerability Certificate Validation Bypass wolfSSH Vulnerability CVE-2025-14942
  • Vulnerability

wolfSSH Alert: Critical Logic Flaw Exposes Client Passwords in Clear Text

Do Son January 7, 2026 0

wolfSSH 1.4.22 patches critical flaw CVE-2025-14942 (CVSS 9.4). The bug allows attackers to bypass authentication and steal passwords. Update immediately.

CVSS 10.0 Alert: Critical n8n Flaw CVE-2026-21877 Grants Total Control n8n Node RCE Vulnerabilities CVE-2026-44791 Prototype Pollution n8n RCE Vulnerabilities CVE-2026-27497 CVE-2026-25053 n8n RCE Vulnerability CVE-2026-21877 n8n RCE, CVE-2025-68613 n8n Git RCE, core.hooksPath Exploit
  • Vulnerability Report

CVSS 10.0 Alert: Critical n8n Flaw CVE-2026-21877 Grants Total Control

Do Son January 7, 2026 0

Urgent: n8n CVE-2026-21877 (CVSS 10.0) allows full server compromise via Git node. Update to v1.121.3 now to prevent RCE and arbitrary file writes.

CVE-2025-65606: TOTOLINK EX200 Error Opens Root Telnet Door TOTOLINK EX200 Vulnerability CVE-2025-65606 TOTOLINK Auth Bypass, Unauthenticated Telnet
  • Vulnerability Report

CVE-2025-65606: TOTOLINK EX200 Error Opens Root Telnet Door

Do Son January 7, 2026 0

Critical flaw in EOL TOTOLINK EX200 opens unauthenticated root Telnet on error. CVE-2025-65606 exposes your network to total compromise. Replace it now.

❮ Prev Page
Next Page ❯

Search

CVE ALERTS
📈

EPSS Spike Alerts
Catch risk spikes before they make headlines.

🎯

Custom EPSS/CVSS
Set score thresholds to effectively filter noise.

🛡️

Exploit Intel
Real-world exploit signals beyond the KEV catalog.

🐙

GitHub Issues
Auto-create alert tickets without duplication.

📬

Weekly Digest
Clean summaries, eliminating email spam.

🏷️

Watchlist Groups
Tag vulnerabilities by team (Infra/AppSec/SOC).

🔀

Smart Routing
Route chat channels based on severity levels.

🚨

RBP Tracker
Early warning detection and tracking system.

Subscribe – $7/mo or try free for 14 days →

🚨 Active Exploits in the Wild

  • CVE-2026-123158CVSS 8.1
    sshd in OpenSSH before 10.6p2 on Linux, when musl libc is used without PAM, lacks a workaround for...
    Admin intel📅 Updated: Nov 6, 2026
  • CVE-2026-19868CVSS 7.5
    An authentication enforcement vulnerability in SonicOS SSLVPN service may allow a user with valid credentials for an alternate...
    CISA KEV📅 Added to KEV: Nov 6, 2026
  • CVE-2026-120422CVSS 8.9
    Sogou Input Method for Windows contains a vulnerability in the configuration retrieval mechanism of its SGTool.exe component. The...
    Admin intel📅 Updated: Nov 5, 2026
  • CVE-2026-102895CVSS 9.8
    GPUStack is an open-source GPU cluster manager for AI model serving and GPU instance provisioning. Prior to 2.2.0,...
    Watchtower Verified📅 Updated: Nov 5, 2026
  • CVE-2026-115732CVSS 9.0
    Incorrect authorization in the certificate-name matching of trapperkeeper-authorization, as used by Puppet Server, in the affected products, allows...
    Admin intel📅 Updated: Nov 4, 2026
  • CVE-2026-98432CVSS 9.8
    In the Linux kernel, the following vulnerability has been resolved: ipv4: free inet_opt and ireq_opt after an RCU...
    Admin intel📅 Updated: Nov 4, 2026
  • CVE-2026-107441CVSS 8.8
    An out-of-bounds write vulnerability in the CGI program of Zyxel GS1900-24E firmware versions through 2.90(AAHK.2)C0 could allow an...
    Admin intel📅 Updated: Nov 4, 2026
  • CVE-2019-25779CVSS 7.5
    The Diarise theme for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.5.9....
    Watchtower Verified📅 Updated: Nov 4, 2026
Powered by CVE Watchtower

Critical Vulnerabilities

  • CVE-2026-124060CVSS 9.4
    A vulnerability was detected in TOTOLINK CA300-PoE 6.2c.884. Affected by this issue is the function UploadCustomModule of the...
    📅 Updated: Nov 7, 2026
  • CVE-2026-122041CVSS 9.1
    The Checkout Field Editor for WooCommerce (Pro) plugin for WordPress is vulnerable to unauthorized deletion of arbitrary attachments...
    📅 Updated: Nov 7, 2026
  • CVE-2026-121379CVSS 9.6
    The Tournamatch WordPress plugin before 4.7.1 does not validate or restrict the path of a previously stored profile...
    📅 Updated: Nov 7, 2026
  • CVE-2026-121491CVSS 9.0
    The Fiber Admin WordPress plugin before 4.0.1 does not validate or escape a request header before writing it...
    📅 Updated: Nov 7, 2026
  • CVE-2026-119516CVSS 9.8
    Deserialization of Untrusted Data vulnerability in Mamunur Rashid Radius Booking — Booking Calendar for Appointments & Services radius-booking...
    📅 Updated: Nov 7, 2026
  • CVE-2026-119075CVSS 9.8
    The Registration Form for WooCommerce plugin for WordPress is vulnerable to privilege escalation due to a missing allow-list...
    📅 Updated: Nov 7, 2026
  • CVE-2026-104014CVSS 9.8
    The Naimur Email OTP Verification for WooCommerce plugin for WordPress is vulnerable to authentication bypass in versions up...
    📅 Updated: Nov 7, 2026
  • CVE-2026-124059CVSS 9.4
    A security vulnerability has been detected in TOTOLINK CA300-PoE 6.2c.884. Affected by this vulnerability is the function setWiFiWdsAddConfig...
    📅 Updated: Nov 7, 2026
Powered by CVE Watchtower

Daily CyberSecurity

  • About SecurityOnline.info
  • Advertise with us
  • Announcement
  • Contact
  • Contributor Register
  • Login
  • Disclaimer
  • DCMA
  • Privacy Policy
  • About SecurityOnline.info
  • Advertise on SecurityOnline.info
  • Contact Us

When you purchase through links on our site, we may earn an affiliate commission. Here’s how it works

  • CVE Watchtower
  • CVE Statistics by Vendor 2026
  • Q3 2026 Report
  • Top Exploited CVEs
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube
© 2017 - 2026 Daily CyberSecurity. All Rights Reserved.