Skip to content
November 10, 2026
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube

Daily CyberSecurity

Zero-hour alerts. Unmatched analysis.

Primary Menu
  • Home
  • CVE Data
    • CVE Watchtower
    • Top Exploited CVEs
    • CVE Stats by Vendor
    • Q2 2026 Report
    • CVE Alerts
    • CVE Alert Settings
    • Pricing
  • Cyber Criminals
  • Data Leak
  • Free Tools
    • CVSS 3.1 Calculator
    • Certificate Viewer
    • DNS Lookup
    • Encoder & Hash Generator
    • IP / Subnet Calculator
    • Whois Lookup
  • Linux
  • Malware
  • Vulnerability
  • Submit Press Release
Light/Dark Button
CrazyHunter: The “Ruthless” Ransomware Stalking Healthcare CrazyHunter Ransomware Healthcare Cyberattacks
  • Malware

CrazyHunter: The “Ruthless” Ransomware Stalking Healthcare

Do Son January 8, 2026 0

New CrazyHunter ransomware targets healthcare with BYOVD tactics and rapid encryption. Trellix reveals how this "greedy" threat cripples hospitals.

GitLab Patch: High-Severity XSS & AI Flaws Expose User Data GitLab AI Gateway Vulnerability CVE-2026-1868 CVE-2025-0314 GitLab Security Update CVE-2025-9222
  • Vulnerability Report

GitLab Patch: High-Severity XSS & AI Flaws Expose User Data

Do Son January 8, 2026 0

GitLab patches critical Stored XSS (CVE-2025-9222) and AI flaws in versions 18.7.1, 18.6.3, & 18.5.5. Update immediately to secure your pipelines.

Spy Games or Glitch? The Truth Behind Venezuela’s BGP Leak Venezuela BGP Leak CANTV
  • Data Leak

Spy Games or Glitch? The Truth Behind Venezuela’s BGP Leak

Do Son January 8, 2026 0

Cloudflare debunks claims that Venezuela's CANTV BGP leak was a US military op, attributing the incident to chronic technical errors and misconfigurations.

“Sophisticated” Zero-Day Demystified: Public Exploit Drop Blows Cover on Critical Apple WebKit Flaw Apple Zero-Day CVE-2025-43529 WebKit Zero-Day, Targeted iOS Spyware Apple spyware alerts, zero-click attacks Apple, trademark lawsuit CVE-2024-54527 PoC exploit Apple, App Store
  • Vulnerability

“Sophisticated” Zero-Day Demystified: Public Exploit Drop Blows Cover on Critical Apple WebKit Flaw

Do Son January 8, 2026 0

Exploit blueprints for Apple zero-day CVE-2025-43529 are now public. Millions of iPhones and Macs are at risk. Update to iOS 26.2 immediately.

One Request to Rule Them All: Critical Trendnet Flaw (CVE-2025-15471) Allows Total Takeover Trendnet TEW-713RE Vulnerability CVE-2025-15471
  • Vulnerability Report

One Request to Rule Them All: Critical Trendnet Flaw (CVE-2025-15471) Allows Total Takeover

Do Son January 8, 2026 0

Critical flaw CVE-2025-15471 (CVSS 9.8) in Trendnet TEW-713RE allows unauthenticated attackers to execute root commands via a single HTTP request.

“Ghost Tap” Rising: New Wave of Android Malware Turns Phones into Digital Pickpockets Ghost Tap Malware NFC Relay Attack
  • Cybercriminals

“Ghost Tap” Rising: New Wave of Android Malware Turns Phones into Digital Pickpockets

Do Son January 8, 2026 0

New "Ghost Tap" malware lets hackers relay NFC signals from your Android phone to steal funds remotely. Learn how this sophisticated Group-IB discovery works.

CVE-2025-60262: Critical Misconfiguration in H3C Wireless Gear Hands Control to Hackers WD Discovery Vulnerability CVE-2025-30248 binary-parser Vulnerability CVE-2026-1245 H3C RCE Vulnerability CVE-2025-60262 Telenium RCE, CVE-2025-10659 Fuel station security, ICS vulnerabilities FreePBX vulnerability CVE-2024-9478 & CVE-2024-9479 SysTrack Vulnerability, Privilege Escalation
  • Vulnerability Report

CVE-2025-60262: Critical Misconfiguration in H3C Wireless Gear Hands Control to Hackers

Do Son January 8, 2026 0

Critical flaw CVE-2025-60262 hits H3C wireless devices. A misconfigured FTP setting grants anonymous users root access. Check your firmware now.

Taiwan Faces 2.6 Million Cyberattacks Daily from China Iranian Cyber Reconnaissance IP Camera Security NCSC Warning Russian Hacktivists Taiwan Cyberattacks China State-Sponsored Hacking state-sponsored threat actor Ransomware RAT Abuse, AnyDesk
  • Cyber Security

Taiwan Faces 2.6 Million Cyberattacks Daily from China

Do Son January 8, 2026 0

Taiwan's NSB reports 2.63M daily cyberattacks from China in 2025. Energy sector strikes spiked 1,000% as hybrid warfare intensifies.

Top 7 Real-World Use Cases of Modern License Plate Recognition Systems photo-1594852352010-63d76b89f85f
  • Technique

Top 7 Real-World Use Cases of Modern License Plate Recognition Systems

Do Son January 7, 2026 0

Discover the top 7 real-world use cases of modern license plate recognition systems. Explore LPR for parking, security, logistics & smart cities.

Self-Hosters Beware: 3 Critical Coolify Flaws Grant Root Access Coolify Vulnerabilities CVE-2025-64419 CVE-2025-22612, CVE-2025-22611, and CVE-2025-22609
  • Vulnerability Report

Self-Hosters Beware: 3 Critical Coolify Flaws Grant Root Access

Do Son January 7, 2026 0

Critical Coolify flaws (CVE-2025-64419+) expose 52k instances to root RCE and SSH key theft. Patch immediately to secure your self-hosted apps.

The $230B AI Titan: Musk’s xAI Raises $20B to Build the World’s Largest GPU Clusters Musk $134B OpenAI lawsuit, xAI Grok deepfake cease and desist xAI Series E $20 billion funding, Grok 5 NVIDIA supercomputer trade secret theft, xAI lawsuit Grok 2, Open Source AI Grok AI, xAI Investment xAI, MacroHard
  • Technology

The $230B AI Titan: Musk’s xAI Raises $20B to Build the World’s Largest GPU Clusters

Do Son January 7, 2026 0

xAI closes an upsized $20B funding round, hitting a $230B valuation. With NVIDIA backing, xAI scales its GPU clusters to fuel Grok 5 development.

The Logitech Blackout: How an Expired Certificate Bricked Your Mac Mouse Settings Logitech macOS certificate fix, Logi Options+ G HUB manual update Logi Options+ macOS certificate error, Logitech mouse settings not working 2026
  • Technology

The Logitech Blackout: How an Expired Certificate Bricked Your Mac Mouse Settings

Do Son January 7, 2026 0

Logitech forgot to renew its macOS developer certificate on Jan 6, 2026, breaking Logi Options+. Learn how to fix the loading screen & battery drain.

The Central Brain: Qualcomm Unveils Agentic AI and Dual-Elite Platforms at CES 2026 Qualcomm Snapdragon Digital Chassis, Agentic AI automotive 2026
  • Technology

The Central Brain: Qualcomm Unveils Agentic AI and Dual-Elite Platforms at CES 2026

Do Son January 7, 2026 0

At CES 2026, Qualcomm launched Agentic AI for cars and the world's first dual-chip Snapdragon Elite controller, promising a proactive driving era.

Brain Meets Brawn: Boston Dynamics and Google DeepMind Unite for the New Atlas Boston Dynamics Atlas Gemini AI, Google DeepMind robotics partnership
  • Technology

Brain Meets Brawn: Boston Dynamics and Google DeepMind Unite for the New Atlas

Do Son January 7, 2026 0

Boston Dynamics and Google DeepMind are bringing Gemini AI to the new Atlas robot. Hyundai plans to deploy these "intelligent" humanoids by 2028.

The Ten-Year Car: Qualcomm and Google Unveil the Future of AI-Powered Mobility Qualcomm Google SDV alliance, Snapdragon Digital Chassis Google AI
  • Technology

The Ten-Year Car: Qualcomm and Google Unveil the Future of AI-Powered Mobility

Do Son January 7, 2026 0

Qualcomm & Google at CES 2026: A new SDV era with 10 years of updates, Gemini-powered AI agents, and cloud-native development for smarter cars.

Reliability Over Speed: MediaTek Debuts Filogic 8000 to Power the Wi-Fi 8 Revolution MediaTek Filogic 8000 Wi-Fi 8, Wi-Fi 8 Ultra High Reliability
  • Technology

Reliability Over Speed: MediaTek Debuts Filogic 8000 to Power the Wi-Fi 8 Revolution

Do Son January 7, 2026 0

MediaTek's Filogic 8000 brings Wi-Fi 8 to life at CES 2026. Focused on reliability and AI, it cuts latency and interference for the next-gen smart home.

The 1000Hz Illusion: NVIDIA Unveils G-SYNC Pulsar and DLSS 4.5 at CES 2026 NVIDIA G-SYNC Pulsar 1000Hz, DLSS 4.5 RTX 50 series
  • Technology

The 1000Hz Illusion: NVIDIA Unveils G-SYNC Pulsar and DLSS 4.5 at CES 2026

Do Son January 7, 2026 0

NVIDIA at CES 2026: G-SYNC Pulsar hits 1000Hz-class clarity, while DLSS 4.5 brings 6x frame generation to the RTX 50 series. The future of gaming is here.

wolfSSH Alert: Critical Logic Flaw Exposes Client Passwords in Clear Text wolfSSL Vulnerability Certificate Validation Bypass wolfSSH Vulnerability CVE-2025-14942
  • Vulnerability

wolfSSH Alert: Critical Logic Flaw Exposes Client Passwords in Clear Text

Do Son January 7, 2026 0

wolfSSH 1.4.22 patches critical flaw CVE-2025-14942 (CVSS 9.4). The bug allows attackers to bypass authentication and steal passwords. Update immediately.

CVSS 10.0 Alert: Critical n8n Flaw CVE-2026-21877 Grants Total Control n8n Node RCE Vulnerabilities CVE-2026-44791 Prototype Pollution n8n RCE Vulnerabilities CVE-2026-27497 CVE-2026-25053 n8n RCE Vulnerability CVE-2026-21877 n8n RCE, CVE-2025-68613 n8n Git RCE, core.hooksPath Exploit
  • Vulnerability Report

CVSS 10.0 Alert: Critical n8n Flaw CVE-2026-21877 Grants Total Control

Do Son January 7, 2026 0

Urgent: n8n CVE-2026-21877 (CVSS 10.0) allows full server compromise via Git node. Update to v1.121.3 now to prevent RCE and arbitrary file writes.

CVE-2025-65606: TOTOLINK EX200 Error Opens Root Telnet Door TOTOLINK EX200 Vulnerability CVE-2025-65606 TOTOLINK Auth Bypass, Unauthenticated Telnet
  • Vulnerability Report

CVE-2025-65606: TOTOLINK EX200 Error Opens Root Telnet Door

Do Son January 7, 2026 0

Critical flaw in EOL TOTOLINK EX200 opens unauthenticated root Telnet on error. CVE-2025-65606 exposes your network to total compromise. Replace it now.

CVE-2026-0625: Critical Actively Exploited RCE Hits Unpatchable D-Link Routers Check Point VPN vulnerability exploited in the wild Check Point VPN exploit CVE-2026-50751 zero-day Checkmarx Breach Supply Chain Attack Ivanti EPMM RCE CVE-2026-1281 Modular DS Vulnerability CVE-2026-23550 D-Link RCE Vulnerability CVE-2026-0625 Christmas 2025 GreyNoise Campaign, Japan-Based Initial Access Broker React2Shell Zero-Day, APT Active Exploitation WordPress vulnerability, authentication bypass FreePBX, zero-day Trend Micro Apex One, Remote Code Execution BitoPro Hack, Crypto Theft UNC5337 - CVE-2022-47945 Safe{Wallet} hack Fortinet vulnerability, CVE-2024-21762, FortiGate attack Balloonfly, Play ransomware Ivanti EPMM CVE-2025-4427 and CVE-2025-4428
  • Vulnerability Report

CVE-2026-0625: Critical Actively Exploited RCE Hits Unpatchable D-Link Routers

Do Son January 7, 2026 0

CVE-2026-0625: Unpatchable D-Link routers face critical RCE attacks. Hackers are actively exploiting this zero-day. Replace legacy DSL models immediately.

Veeam Patches Critical RCE Flaws in Latest Backup & Replication Release CVE-2024-29212 - CVE-2025-23082 Veeam Backup & Replication CVE-2025-59470
  • Vulnerability Report

Veeam Patches Critical RCE Flaws in Latest Backup & Replication Release

Do Son January 7, 2026 0

Veeam updates Backup & Replication v13 to fix high-severity flaws. CVE-2025-59470 and others allow RCE and root access. Update to build 13.0.1.1071.

❮ Prev Page
Next Page ❯

Search

CVE ALERTS
📈

EPSS Spike Alerts
Catch risk spikes before they make headlines.

🎯

Custom EPSS/CVSS
Set score thresholds to effectively filter noise.

🛡️

Exploit Intel
Real-world exploit signals beyond the KEV catalog.

🐙

GitHub Issues
Auto-create alert tickets without duplication.

📬

Weekly Digest
Clean summaries, eliminating email spam.

🏷️

Watchlist Groups
Tag vulnerabilities by team (Infra/AppSec/SOC).

🔀

Smart Routing
Route chat channels based on severity levels.

🚨

RBP Tracker
Early warning detection and tracking system.

Subscribe – $7/mo or try free for 14 days →

🚨 Active Exploits in the Wild

  • CVE-2026-125350
    Use after free in XML. Reported by anonymous on 2026-11-06. Google is aware that an exploit for CVE-2026-125350...
    Admin intel📅 Updated: Nov 10, 2026
  • CVE-2026-123751CVSS 9.8
    The WP Duplicate WordPress plugin through 1.1.11 does not properly verify a request authentication value and does not...
    Watchtower Verified📅 Updated: Nov 9, 2026
  • CVE-2026-111793CVSS 4.3
    Openwave Webtop Media Transcoder does not enforce administrator-defined file type restrictions to restrict the file-types to be converted....
    Admin intel📅 Updated: Nov 9, 2026
  • CVE-2026-114713CVSS 8.6
    The labeled-response module in UnrealIRCd 6.0.0 before 6.2.7.1 does not escape the IRCv3 "label" message tag when echoing...
    Admin intel📅 Updated: Nov 9, 2026
  • CVE-2026-116779CVSS 9.8
    Summary `sofia_presence_handle_sip_i_message()` splits the To user of an inbound SIP MESSAGE on `+` and treats the left half...
    CISA KEV📅 Added to KEV: Nov 9, 2026
  • CVE-2026-102895CVSS 9.8
    GPUStack is an open-source GPU cluster manager for AI model serving and GPU instance provisioning. Prior to 2.2.0,...
    CISA KEV📅 Added to KEV: Nov 9, 2026
  • CVE-2026-123158CVSS 8.1
    sshd in OpenSSH before 10.6p2 on Linux, when musl libc is used without PAM, lacks a workaround for...
    CISA KEV📅 Added to KEV: Nov 9, 2026
  • CVE-2026-19868CVSS 7.5
    An authentication enforcement vulnerability in SonicOS SSLVPN service may allow a user with valid credentials for an alternate...
    CISA KEV📅 Added to KEV: Nov 6, 2026
Powered by CVE Watchtower

Critical Vulnerabilities

  • CVE-2026-89126CVSS 10.0
    SAP Web Dispatcher does not sufficiently validate certain network input processed by an internal component. An unauthenticated attacker...
    📅 Updated: Nov 10, 2026
  • CVE-2026-89119CVSS 9.6
    SAP Web Dispatcher and SAP NetWeaver Application Server ABAP (Internet Communication Manager) do not perform sufficient request validation...
    📅 Updated: Nov 10, 2026
  • CVE-2026-89103CVSS 10.0
    SAP Gateway activates the default Access Control List with high privileges allowing categorization of external attacker as internal...
    📅 Updated: Nov 10, 2026
  • CVE-2026-76964CVSS 10.0
    SAP NetWeaver Application Server ABAP does not sufficiently validate certain network input processed by an internal component. An...
    📅 Updated: Nov 10, 2026
  • CVE-2026-76965CVSS 9.9
    SAP NetWeaver Application Server ABAP and ABAP Platform does not perform necessary authorization checks for certain internal functionality....
    📅 Updated: Nov 10, 2026
  • CVE-2026-120017CVSS 10.0
    SAP NetWeaver AS ABAP and ABAP Platform does not perform sufficient verification of incoming authentication assertions under certain...
    📅 Updated: Nov 10, 2026
  • CVE-2026-109803CVSS 9.9
    SAP NetWeaver Knowledge Management (XML Forms) does not sufficiently restrict the selection of XSL transformations processed by the...
    📅 Updated: Nov 10, 2026
  • CVE-2026-109795CVSS 9.9
    SAP NetWeaver does not perform necessary authorization checks and lacks sufficient input validation in certain remote-enabled functionality. An...
    📅 Updated: Nov 10, 2026
Powered by CVE Watchtower

Daily CyberSecurity

  • About SecurityOnline.info
  • Advertise with us
  • Announcement
  • Contact
  • Contributor Register
  • Login
  • Disclaimer
  • DCMA
  • Privacy Policy
  • About SecurityOnline.info
  • Advertise on SecurityOnline.info
  • Contact Us

When you purchase through links on our site, we may earn an affiliate commission. Here’s how it works

  • CVE Watchtower
  • CVE Statistics by Vendor 2026
  • Q3 2026 Report
  • Top Exploited CVEs
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube
© 2017 - 2026 Daily CyberSecurity. All Rights Reserved.