Skip to content
November 7, 2026
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube

Daily CyberSecurity

Zero-hour alerts. Unmatched analysis.

Primary Menu
  • Home
  • CVE Data
    • CVE Watchtower
    • Top Exploited CVEs
    • CVE Stats by Vendor
    • Q2 2026 Report
    • CVE Alerts
    • CVE Alert Settings
    • Pricing
  • Cyber Criminals
  • Data Leak
  • Free Tools
    • CVSS 3.1 Calculator
    • Certificate Viewer
    • DNS Lookup
    • Encoder & Hash Generator
    • IP / Subnet Calculator
    • Whois Lookup
  • Linux
  • Malware
  • Vulnerability
  • Submit Press Release
Light/Dark Button
Google Assembles Foxconn/Samsung Supply Chain for Q4 2026 AI Glasses Launch Google AI Glasses Foxconn Samsung Supply Chain
  • Android

Google Assembles Foxconn/Samsung Supply Chain for Q4 2026 AI Glasses Launch

Do Son November 29, 2025 0

Google is accelerating its new AI glasses project (Project Astra), setting up a supply chain (Foxconn/Samsung/Qualcomm) and targeting an ambitious Q4 2026 launch window.

EU Launches Probe: Are Apple Maps & Apple Ads Next for DMA Gatekeeper Status? Apple Maps Apple Ads DMA EU Gatekeeper Probe
  • Technology

EU Launches Probe: Are Apple Maps & Apple Ads Next for DMA Gatekeeper Status?

Do Son November 29, 2025 0

The EU is investigating if Apple Maps and Apple Ads should be named DMA Gatekeepers, a status Apple denies, claiming negligible market share compared to rivals.

Critical Alert: Apache Kvrocks ‘RESET’ Command Flaw Grants Admin Privileges Apache Kvrocks, Privilege Escalation
  • Vulnerability Report

Critical Alert: Apache Kvrocks ‘RESET’ Command Flaw Grants Admin Privileges

Do Son November 29, 2025 0

Critical Apache Kvrocks flaw (CVE-2025-59790) grants admin privileges via RESET command. Update to v2.14.0 now to prevent unauthorized access and leaks.

CISA Flags Actively Exploited OpenPLC Flaw (CVE-2021-26829) n8n RCE Vulnerability CVE-2025-68613 CISA KEV WinRAR Zero-Day, Cloud Files UAF OpenPLC ScadaBR, CVE-2021-26829 CISA KEV, Gladinet LFI RCE XWiki RCE, VMware EoP CISA KEV CISA, Known Exploited Vulnerabilities CVE-2020-2883 CISA, Trend Micro
  • Vulnerability Report

CISA Flags Actively Exploited OpenPLC Flaw (CVE-2021-26829)

Do Son November 29, 2025 0

CISA warns of active exploitation of OpenPLC ScadaBR (CVE-2021-26829). This critical Stored XSS flaw puts SCADA systems at risk. Update now.

The Authentication Gap Among Retail Shift Workers: Implications and Risks Undertow Vulnerability CVE-2025-12543 CVE-2025-0107: PoC Exploit Code Undersea Cable Security, China Tech Ban
  • Technique

The Authentication Gap Among Retail Shift Workers: Implications and Risks

Do Son November 28, 2025
Retail operations move fast. Shift workers rotate in and out throughout the day, stores rely on shared...
Read More Read more about The Authentication Gap Among Retail Shift Workers: Implications and Risks
OpenAI API Users Exposed in Mixpanel Security Breach ChatGPT Lockdown Mode OpenAI OpenClaw acquisition OpenAI Prism GPT-5.2 LaTeX, scientific research AI workspace OpenAI, Mixpanel Breach ChatGPT Data Preservation, NYT Lawsuit ChatGPT Apps SDK, super app OpenAI Jony Ive, AI Hardware Delay Musk Apple lawsuit, App Store antitrust UK AI Partnership, OpenAI Collaboration Jony Ive OpenAI, DoD Contract OpenAI Lawsuit, ChatGPT Privacy North Korea ChatGPT - GPT-4.5 model OpenAI Models, AI Advancements OpenAI pricing, Flex API
  • Data Leak

OpenAI API Users Exposed in Mixpanel Security Breach

Do Son November 28, 2025 0

OpenAI reveals a data breach at analytics vendor Mixpanel exposed API user emails and IDs. OpenAI has terminated the partnership. Watch out for phishing.

Google Cuts Free Daily Quota for Gemini 3 Pro and Nano Banana Pro AI Models Gemini Free Quota Cut Nano Banana Pro Limit
  • Technology

Google Cuts Free Daily Quota for Gemini 3 Pro and Nano Banana Pro AI Models

Do Son November 28, 2025 0

Google quietly cut the free daily usage quota for its new Nano Banana Pro image generator (from 3 to 2 images) and Gemini 3 Pro text model due to high demand.

Pixel 10 Exclusive: Google Maps Launches Power-Saving Navigation Mode for 4-Hour Battery Boost Pixel 10 Power-Saving Navigation Google Maps Battery Saver
  • Android

Pixel 10 Exclusive: Google Maps Launches Power-Saving Navigation Mode for 4-Hour Battery Boost

Do Son November 28, 2025 0

Google Maps launched a new Power-Saving Navigation Mode for the Pixel 10: a simplified, monochrome lock screen interface that extends the phone's battery life by up to 4 hours.

AWS Guarantees 60-Minute Recovery Time with New Route 53 Accelerated Recovery Motorola Smart Feed redirect Anthropic Amazon 5GW partnership Amazon Perplexity lawsuit AWS-LC Vulnerabilities Cryptographic Bypass AWS Middle East drone strikes Amazon layoffs 2026, Amazon AI restructuring Amazon Kindle DRM Policy, Publisher Control EPUB AWS Nova Forge AI Model Customization AWS Trainium3 EC2 Trn3 UltraServer Route 53 Accelerated Recovery AWS DNS Resilience AI Browser War, Amazon Comet Amazon layoffs, cost reduction AWS outage, DynamoDB DNS AWS outage, cloud dependency AWS VPN Client, Root Privilege Escalation WSA shutdown, Amazon Appstore Amazon Wondery, Podcast Restructuring Amazon Q2 2025 Generative AI AWS Client VPN, Privilege Escalation Amazon AI, Wearable AI
  • Technology

AWS Guarantees 60-Minute Recovery Time with New Route 53 Accelerated Recovery

Do Son November 28, 2025 0

AWS unveiled Route 53 Accelerated Recovery, guaranteeing a 60-minute RTO during DNS outages. The new feature is free for public hosted zones to boost cloud resilience.

Zombie Protocol: How NTLM Flaws Like CVE-2024-43451 Are Haunting 2025 NTLM Vulnerabilities, CVE-2024-43451 CVE-2024-37361 - RESURGE Malware
  • Vulnerability Report

Zombie Protocol: How NTLM Flaws Like CVE-2024-43451 Are Haunting 2025

Do Son November 28, 2025 0

Kaspersky reveals critical NTLM flaws active in 2025. Attackers use "clickless" exploits like CVE-2024-43451 to steal credentials and gain SYSTEM privileges.

Silent Threat: How Malicious Calendars & ‘Promptware’ Target 4M+ Devices Daily Calendar Phishing, Promptware
  • Malware

Silent Threat: How Malicious Calendars & ‘Promptware’ Target 4M+ Devices Daily

Do Son November 28, 2025 0

Bitsight TRACE exposes a massive calendar phishing network targeting 4M+ devices. Learn how "Promptware" exploits AI assistants via malicious calendar events.

The “Korean Leaks” Siege: Qilin & North Korea Cripple Financial Sector via MSP Hack Korean Leaks, Qilin Ransomware
  • Cybercriminals

The “Korean Leaks” Siege: Qilin & North Korea Cripple Financial Sector via MSP Hack

Do Son November 28, 2025 0

Qilin & North Korean hackers launch "Korean Leaks," a massive supply chain attack on South Korea's financial sector via a compromised MSP.

One Identity Safeguard Named a Visionary in the 2025 Gartner Magic Quadrant for PAM BlogImage-PR-for-Safeguard-PG-101025-v3-012_17640779809ShhKcE3ww
  • Press Release

One Identity Safeguard Named a Visionary in the 2025 Gartner Magic Quadrant for PAM

cybernewswire November 27, 2025 0
Alisa Viejo, CA, USA, 27th November 2025, CyberNewsWire
Read More Read more about One Identity Safeguard Named a Visionary in the 2025 Gartner Magic Quadrant for PAM
Quttera Launches “Evidence-as-Code” API to Automate Security Compliance for SOC 2 and PCI DSS v4.0 PR1_1763893999MTTVSEjwNS
  • Press Release

Quttera Launches “Evidence-as-Code” API to Automate Security Compliance for SOC 2 and PCI DSS v4.0

cybernewswire November 27, 2025 0
Tel Aviv, Israel, 27th November 2025, CyberNewsWire
Read More Read more about Quttera Launches “Evidence-as-Code” API to Automate Security Compliance for SOC 2 and PCI DSS v4.0
Crypto Crisis: UPBIT Hacked for $369 Million in Solana-Based Tokens BeyondTrust Vulnerability CVE-2026-1731 UPBIT $369M Hack CVE-2024-55591 Ivanti VPN vulnerability, cyber espionage
  • Cybercriminals

Crypto Crisis: UPBIT Hacked for $369 Million in Solana-Based Tokens

Do Son November 27, 2025 0

South Korea’s largest exchange, UPBIT, was hacked for $369M in Solana tokens from its hot wallet, forcing a withdrawal suspension. The exchange vows full user compensation.

500M PCs Stranded: Windows 11 Adoption Lags as Windows 10 Support Ends Windows 11 app updates Windows Insider preview build, Calculator app update, built-in Windows apps Windows 11 KB5089549 network lag Windows 11 Home to Pro Education upgrade Windows 11 Start menu update Windows 11 update KB5079391 Windows 11 KB5085516 OOB update Windows 11 C drive permission error Windows 11 C drive access denied Windows native NVMe driver UEFI Secure Boot certificate rotation Windows 11 printer driver policy Windows 11 printer driver deprecation Windows 11 Build 26300 Sysmon Windows 11 Storage settings restriction Windows 11 Build 26300.7674, Windows Insider channel migration 2026 Windows 11 Update Fix KB5073455 shutdown bug, Secure Launch restart loop Windows 11 File Explorer search performance, Search Indexer RAM usage fix Windows 11 Gaming PC Specs, NVMe DirectStorage Windows 10 End of Support Windows 11 Slow Adoption Windows 11 Crash Loop KB5062553 Bug Update and Shut Down, KB5067036 Windows authentication, Kerberos bug Windows 11 fix, localhost bug Windows 11 Update Restart, Update and Shut Down Windows SMBv1 Windows 11 Arm, Easy Anti-Cheat Windows 11 error, Pluton Windows 11 24H2, Easy Anti-Cheat Windows Firewall Bug, Microsoft Update Error Windows 11, JScript9Legacy Windows Activation, TSforge Windows 11 Update, Firewall Error Windows 11 25H2, Annual Update Windows Resiliency Initiative, Kernel Security Windows 11 Upgrade, ESU Program Windows 11 Recall, Data Export Windows 11 Easy Anti-Cheat Windows 11 Update, Cumulative Update Windows Update, ACPI.sys Windows Updates, Enterprise Software Windows 11 Start Data Encryption Standard Printing Problems Windows 11 updates Estimated installation time Smart App Control, Windows 11 security
  • Windows

500M PCs Stranded: Windows 11 Adoption Lags as Windows 10 Support Ends

Do Son November 27, 2025 0

Windows 10 support ends, yet Dell reports Windows 11 adoption is significantly slower than expected. Over 500M PCs fail hardware checks, slowing transition.

“As XRP Adoption Explodes, Here’s Why Daily 840 XRP Rewards Are Now Possible with SolStaking” so
  • Technique

“As XRP Adoption Explodes, Here’s Why Daily 840 XRP Rewards Are Now Possible with SolStaking”

Do Son November 27, 2025 0
Regulatory acceleration × Payment infrastructure upgrades × On-chain yield strategies rising The IMF’s FinTech Notes has officially...
Read More Read more about “As XRP Adoption Explodes, Here’s Why Daily 840 XRP Rewards Are Now Possible with SolStaking”
Security Alert: Apache SkyWalking Stored XSS Vulnerability (CVE-2025-54057) Apache SkyWalking, CVE-2025-54057
  • Vulnerability Report

Security Alert: Apache SkyWalking Stored XSS Vulnerability (CVE-2025-54057)

Do Son November 27, 2025 0

Apache SkyWalking patches a Stored XSS flaw (CVE-2025-54057) affecting versions 10.2.0 and older. Upgrade to v10.3.0 to secure your APM dashboards.

Hidden Theft: ‘Crypto Copilot’ Chrome Extension Drains Solana Wallets on X Crypto Copilot, Solana Scam
  • Malware

Hidden Theft: ‘Crypto Copilot’ Chrome Extension Drains Solana Wallets on X

Do Son November 27, 2025 0

The malicious 'Crypto Copilot' Chrome extension drains Solana funds from traders on X by injecting hidden transfers. Remove this malware immediately.

Critical Ray AI Flaw Exposes Devs via Safari & Firefox (CVE-2025-62593) Ray Framework, CVE-2025-62593
  • Vulnerability Report

Critical Ray AI Flaw Exposes Devs via Safari & Firefox (CVE-2025-62593)

Do Son November 27, 2025 0

Critical Ray AI flaw (CVE-2025-62593) allows RCE via DNS rebinding on Safari & Firefox. Chrome is immune. Update to Ray v2.52.0 immediately.

Water Gamayun Weaponizes “MSC EvilTwin” Zero-Day for Stealthy Backdoor Attacks CVE-2024-36072 Water Gamayun, MSC EvilTwin
  • Cyber Security
  • Vulnerability Report

Water Gamayun Weaponizes “MSC EvilTwin” Zero-Day for Stealthy Backdoor Attacks

Do Son November 27, 2025 0

Zscaler reveals Water Gamayun exploiting the MSC EvilTwin zero-day (CVE-2025-26633) via fake hiring lures to deploy stealthy backdoors.

Fragging Your Data: Fake ‘Battlefield 6’ Cracks & Trainers Spread Infostealers Battlefield 6 Malware, Fake Game Cracks
  • Malware

Fragging Your Data: Fake ‘Battlefield 6’ Cracks & Trainers Spread Infostealers

Do Son November 27, 2025 0

Cybercriminals are using fake Battlefield 6 cracks and trainers to deploy infostealers. Avoid "InsaneRamZes" & "RUNE" torrents to protect your data.

❮ Prev Page
Next Page ❯

Search

CVE ALERTS
📈

EPSS Spike Alerts
Catch risk spikes before they make headlines.

🎯

Custom EPSS/CVSS
Set score thresholds to effectively filter noise.

🛡️

Exploit Intel
Real-world exploit signals beyond the KEV catalog.

🐙

GitHub Issues
Auto-create alert tickets without duplication.

📬

Weekly Digest
Clean summaries, eliminating email spam.

🏷️

Watchlist Groups
Tag vulnerabilities by team (Infra/AppSec/SOC).

🔀

Smart Routing
Route chat channels based on severity levels.

🚨

RBP Tracker
Early warning detection and tracking system.

Subscribe – $7/mo or try free for 14 days →

🚨 Active Exploits in the Wild

  • CVE-2026-123158CVSS 8.1
    sshd in OpenSSH before 10.6p2 on Linux, when musl libc is used without PAM, lacks a workaround for...
    Admin intel📅 Updated: Nov 6, 2026
  • CVE-2026-19868CVSS 7.5
    An authentication enforcement vulnerability in SonicOS SSLVPN service may allow a user with valid credentials for an alternate...
    CISA KEV📅 Added to KEV: Nov 6, 2026
  • CVE-2026-120422CVSS 8.9
    Sogou Input Method for Windows contains a vulnerability in the configuration retrieval mechanism of its SGTool.exe component. The...
    Admin intel📅 Updated: Nov 5, 2026
  • CVE-2026-102895CVSS 9.8
    GPUStack is an open-source GPU cluster manager for AI model serving and GPU instance provisioning. Prior to 2.2.0,...
    Watchtower Verified📅 Updated: Nov 5, 2026
  • CVE-2026-115732CVSS 9.0
    Incorrect authorization in the certificate-name matching of trapperkeeper-authorization, as used by Puppet Server, in the affected products, allows...
    Admin intel📅 Updated: Nov 4, 2026
  • CVE-2026-98432CVSS 9.8
    In the Linux kernel, the following vulnerability has been resolved: ipv4: free inet_opt and ireq_opt after an RCU...
    Admin intel📅 Updated: Nov 4, 2026
  • CVE-2026-107441CVSS 8.8
    An out-of-bounds write vulnerability in the CGI program of Zyxel GS1900-24E firmware versions through 2.90(AAHK.2)C0 could allow an...
    Admin intel📅 Updated: Nov 4, 2026
  • CVE-2019-25779CVSS 7.5
    The Diarise theme for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.5.9....
    Watchtower Verified📅 Updated: Nov 4, 2026
Powered by CVE Watchtower

Critical Vulnerabilities

  • CVE-2026-124060CVSS 9.4
    A vulnerability was detected in TOTOLINK CA300-PoE 6.2c.884. Affected by this issue is the function UploadCustomModule of the...
    📅 Updated: Nov 7, 2026
  • CVE-2026-122041CVSS 9.1
    The Checkout Field Editor for WooCommerce (Pro) plugin for WordPress is vulnerable to unauthorized deletion of arbitrary attachments...
    📅 Updated: Nov 7, 2026
  • CVE-2026-121379CVSS 9.6
    The Tournamatch WordPress plugin before 4.7.1 does not validate or restrict the path of a previously stored profile...
    📅 Updated: Nov 7, 2026
  • CVE-2026-121491CVSS 9.0
    The Fiber Admin WordPress plugin before 4.0.1 does not validate or escape a request header before writing it...
    📅 Updated: Nov 7, 2026
  • CVE-2026-119516CVSS 9.8
    Deserialization of Untrusted Data vulnerability in Mamunur Rashid Radius Booking — Booking Calendar for Appointments & Services radius-booking...
    📅 Updated: Nov 7, 2026
  • CVE-2026-119075CVSS 9.8
    The Registration Form for WooCommerce plugin for WordPress is vulnerable to privilege escalation due to a missing allow-list...
    📅 Updated: Nov 7, 2026
  • CVE-2026-104014CVSS 9.8
    The Naimur Email OTP Verification for WooCommerce plugin for WordPress is vulnerable to authentication bypass in versions up...
    📅 Updated: Nov 7, 2026
  • CVE-2026-124059CVSS 9.4
    A security vulnerability has been detected in TOTOLINK CA300-PoE 6.2c.884. Affected by this vulnerability is the function setWiFiWdsAddConfig...
    📅 Updated: Nov 7, 2026
Powered by CVE Watchtower

Daily CyberSecurity

  • About SecurityOnline.info
  • Advertise with us
  • Announcement
  • Contact
  • Contributor Register
  • Login
  • Disclaimer
  • DCMA
  • Privacy Policy
  • About SecurityOnline.info
  • Advertise on SecurityOnline.info
  • Contact Us

When you purchase through links on our site, we may earn an affiliate commission. Here’s how it works

  • CVE Watchtower
  • CVE Statistics by Vendor 2026
  • Q3 2026 Report
  • Top Exploited CVEs
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube
© 2017 - 2026 Daily CyberSecurity. All Rights Reserved.