Skip to content
November 10, 2026
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube

Daily CyberSecurity

Zero-hour alerts. Unmatched analysis.

Primary Menu
  • Home
  • CVE Data
    • CVE Watchtower
    • Top Exploited CVEs
    • CVE Stats by Vendor
    • Q2 2026 Report
    • CVE Alerts
    • CVE Alert Settings
    • Pricing
  • Cyber Criminals
  • Data Leak
  • Free Tools
    • CVSS 3.1 Calculator
    • Certificate Viewer
    • DNS Lookup
    • Encoder & Hash Generator
    • IP / Subnet Calculator
    • Whois Lookup
  • Linux
  • Malware
  • Vulnerability
  • Submit Press Release
Light/Dark Button
42.5 ExaFLOPS: Google Launches Ironwood TPU to Power Next-Gen Agentic AI Google Ironwood TPU, Agentic AI
  • Technology

42.5 ExaFLOPS: Google Launches Ironwood TPU to Power Next-Gen Agentic AI

Do Son November 8, 2025 0

Google launches Ironwood, its 7th-gen TPU, promising 4x Trillium performance, 42.5 EFLOPS per pod, and 1.77 PB shared HBM to power Agentic AI models like Claude.

Unlocking Function Calling in LLMs (And Why It’s a Big Deal) Fractile AI inference chip AI Market Trends 2025, Similarweb AI Report
  • Technique

Unlocking Function Calling in LLMs (And Why It’s a Big Deal)

Do Son November 7, 2025 0
Large language models can generate impressive text, answer questions, and engage in conversation. But until recently, they...
Read More Read more about Unlocking Function Calling in LLMs (And Why It’s a Big Deal)
US Treasury Sanctions 8 North Koreans and 2 Banks for Laundering Crypto to Fund WMD Programs DPRK Sanctions, Crypto Money Laundering
  • Cybercriminals

US Treasury Sanctions 8 North Koreans and 2 Banks for Laundering Crypto to Fund WMD Programs

Do Son November 7, 2025 0

OFAC sanctioned 8 individuals and 2 banks linked to North Korea for laundering millions in stolen crypto and IT earnings to fund Pyongyang's WMD and missile programs.

OCI Fixes Container Escape Vulnerabilities in runc (CVE-2025-31133, CVE-2025-52565, CVE-2025-52881) runc Container Escape, Mount Race Condition
  • Vulnerability Report

OCI Fixes Container Escape Vulnerabilities in runc (CVE-2025-31133, CVE-2025-52565, CVE-2025-52881)

Do Son November 7, 2025 0

OCI patched three critical runc flaws allowing container escape and host DoS/RCE. Attackers exploit mount race conditions in maskedPaths and /dev/console bind-mounts. Update to v1.2.8+.

Booking.com Phishing Campaign Hijacks Hotel Accounts to Deliver PureRAT via ClickFix Lure PureRAT ClickFix, Booking.com Phishing
  • Cybercriminals

Booking.com Phishing Campaign Hijacks Hotel Accounts to Deliver PureRAT via ClickFix Lure

Do Son November 7, 2025 0

Sekoia exposed a campaign exploiting compromised Booking.com/Expedia accounts to deliver PureRAT malware via a ClickFix lure. Attackers use authentic reservation details to steal guest credentials.

High-Severity Cisco ISE Flaw (CVE-2025-20343) Allows Unauthenticated DoS via Crafted RADIUS Requests Cisco ISE RADIUS DoS, CVE-2025-20343
  • Vulnerability Report

High-Severity Cisco ISE Flaw (CVE-2025-20343) Allows Unauthenticated DoS via Crafted RADIUS Requests

Do Son November 7, 2025 0

Cisco patched a High-severity DoS flaw (CVE-2025-20343) in ISE that allows unauthenticated remote attackers to crash the server via crafted RADIUS requests. Disable the Reject setting as a workaround.

DragonForce Ransomware Strikes Manufacturing Sector with Brute-Force, Exfiltrating Data Over SSH to Russian Host DragonForce RaaS, Manufacturing Ransomware
  • Malware

DragonForce Ransomware Strikes Manufacturing Sector with Brute-Force, Exfiltrating Data Over SSH to Russian Host

Do Son November 7, 2025 0

Darktrace exposed a DragonForce RaaS attack on a manufacturer. The multi-phase intrusion used brute force and OpenVAS for recon, then exfiltrated data over SSH to a Russian-based malicious host.

Amazon Fixes High-Severity Authentication Token Exposure in WorkSpaces Client for Linux (CVE-2025-12779) WorkSpaces Token Leak, Local Privilege Escalation CVE-2025-0500 & CVE-2025-0501
  • Vulnerability Report

Amazon Fixes High-Severity Authentication Token Exposure in WorkSpaces Client for Linux (CVE-2025-12779)

Do Son November 7, 2025 0

AWS patched a High-severity flaw (CVE-2025-12779) in the WorkSpaces client for Linux. A local user can extract DCV authentication tokens to hijack another user’s virtual desktop session. Update to v2025.0.

New Cephalus Ransomware Uses Fake AES Keys and GoLang to Thwart Analysis Cephalus Go Ransomware, Fake AES Key
  • Cybercriminals

New Cephalus Ransomware Uses Fake AES Keys and GoLang to Thwart Analysis

Do Son November 7, 2025 0

ASEC exposed Cephalus, a Go-based RaaS group attacking RDP. The malware uses VirtualLock, XOR encryption, and a fake AES key pattern to severely complicate memory and forensic analysis.

The Essential Role of DSPM in Cloud Data Security Salesforce vulnerability CVE-2025-9844 Salt Typhoon cyberattack
  • Technique

The Essential Role of DSPM in Cloud Data Security

Do Son November 6, 2025
The shift to cloud migration alters information management and security. Multi-cloud systems pose new challenges to securing...
Read More Read more about The Essential Role of DSPM in Cloud Data Security
Critical Dell CloudLink Flaws Allow User to Escape Shell and Gain Full System Control Dell CloudLink Privilege Escalation, Command Injection
  • Vulnerability

Critical Dell CloudLink Flaws Allow User to Escape Shell and Gain Full System Control

Do Son November 6, 2025 0

Dell patched seven flaws in CloudLink, including two Critical bugs that allow an authenticated user to escape the restricted shell and execute arbitrary commands for system takeover. Update to v8.2.

Beyond the App Store: iOS 26.2 Beta Teases Sideloading Support for Japan Vibe Coding apps Vibe Coding App Store surge Vibe Coding App Store Apple 50th Anniversary hardware Brazil CADE Apple settlement, iOS third-party app stores Brazil Tim Cook Succession Apple CEO Rumors App Store Mini Apps 15% Commission Fee iOS Japan Sideloading, Third-Party App Stores Web App Store, App Discovery Apple Age Verification, Texas SB2420 Apple AI acquisitions App Store, Antitrust Apple WebKit, Japan Regulations App Store Age Ratings, Parental Controls Apple App Store, Epic Games Lawsuit
  • Technology

Beyond the App Store: iOS 26.2 Beta Teases Sideloading Support for Japan

Do Son November 6, 2025 0

iOS 26.2 beta code suggests Apple is enabling third-party app stores in Japan to comply with new antitrust laws. Users report accessing AltStore & Epic Games Store.

The $1 Billion Secret: Apple to Use Google Gemini AI to Power Next-Gen Siri iOS 27 Apple Intelligence Apple AI Extensions bazaar Siri iOS 27 Gemini integration Apple AI server Baltra Siri AI delay iOS 26.4 Apple Google Gemini Siri partnership, Siri powered by Google Gemini 2026 Siri Gemini, Apple Intelligence Siri, Apple AI Apple "Veritas", Siri AI Siri Gemini Supercharged Siri, AI assistant Siri Integration, App Intents Apple Siri Apple AI Strategy, ChatGPT Rival
  • Technology

The $1 Billion Secret: Apple to Use Google Gemini AI to Power Next-Gen Siri

Do Son November 6, 2025 0

Apple will reportedly pay Google $1B annually to license Gemini AI to power the next-gen Siri's "summarizer" and "planner" functions within its Private Cloud Compute.

Regulatory Friction: Apple to Disable Automatic Wi-Fi Sync on Apple Watch in the EU Apple Watch EU Ban, Wi-Fi Sync Apple Watch blood oxygen workaround
  • Technology

Regulatory Friction: Apple to Disable Automatic Wi-Fi Sync on Apple Watch in the EU

Do Son November 6, 2025 0

Apple will disable automatic Wi-Fi credential sync on Apple Watch in the EU starting with iOS 26.2. The change stems from a dispute over accessory interoperability.

One-Click Setup: Microsoft Store Adds Multi-App Batch Installation for New PCs Microsoft Store Batch Install, Multi-App Installation
  • Windows

One-Click Setup: Microsoft Store Adds Multi-App Batch Installation for New PCs

Do Son November 6, 2025 0

Microsoft Store now supports multi-app batch installation, allowing users to select and install multiple recommended apps from a curated list in a single click.

Your New Co-Pilot: Google Maps Replaces Assistant with Gemini AI for Conversational Driving Gemini in Google Maps, Conversational Navigation
  • Technology

Your New Co-Pilot: Google Maps Replaces Assistant with Gemini AI for Conversational Driving

Do Son November 6, 2025 0

Google Maps integrates Gemini AI, replacing Assistant for natural, complex navigation and quick task handling. New features include Landmark Directions and Google Lens integration.

Antitrust Truce: Google & Epic Games Reach Settlement to Open Up Google Play Store Google Play Settlement, Epic Games Antitrust Fortnite Creator Economy Google Play, Epic Games Lawsuit
  • Android

Antitrust Truce: Google & Epic Games Reach Settlement to Open Up Google Play Store

Do Son November 6, 2025 0

Google and Epic settled their antitrust suit, proposing changes to open the Play Store. The deal mandates third-party stores, alternative payments, and new fee caps (9-20%).

AI Browser War: Amazon Demands Perplexity’s Comet AI Stop Automated Purchasing Motorola Smart Feed redirect Anthropic Amazon 5GW partnership Amazon Perplexity lawsuit AWS-LC Vulnerabilities Cryptographic Bypass AWS Middle East drone strikes Amazon layoffs 2026, Amazon AI restructuring Amazon Kindle DRM Policy, Publisher Control EPUB AWS Nova Forge AI Model Customization AWS Trainium3 EC2 Trn3 UltraServer Route 53 Accelerated Recovery AWS DNS Resilience AI Browser War, Amazon Comet Amazon layoffs, cost reduction AWS outage, DynamoDB DNS AWS outage, cloud dependency AWS VPN Client, Root Privilege Escalation WSA shutdown, Amazon Appstore Amazon Wondery, Podcast Restructuring Amazon Q2 2025 Generative AI AWS Client VPN, Privilege Escalation Amazon AI, Wearable AI
  • Technology

AI Browser War: Amazon Demands Perplexity’s Comet AI Stop Automated Purchasing

Do Son November 6, 2025 0

Amazon issued a cease-and-desist to Perplexity's Comet AI browser, demanding it stop automated purchasing. Amazon calls it a bot; Perplexity calls it a user agent.

Locked Out: Windows Update Bug Forces Users Into BitLocker Recovery Mode After Reboot Microsoft BitLocker FBI recovery key, Windows 11 cloud escrow privacy BitLocker Recovery, Windows Update Bug BitLocker, data loss ShrinkLocker ransomware Windows update BitLocker, BitLocker fix
  • Windows

Locked Out: Windows Update Bug Forces Users Into BitLocker Recovery Mode After Reboot

Do Son November 6, 2025 0

A Microsoft bug is forcing Windows 10/11 users into BitLocker Recovery Mode after updates. Affected Intel-based PCs need the recovery key to regain access to data.

The Restartless Update: Microsoft Tests Unusual Windows 11 Build That Installs Without a Reboot Windows Secure Lock Screen Clock Lag Windows 11 KB5079391 error Windows 11 Kernel Driver Trust Microslop Windows 11 Windows 11 modem driver removal 2026, CVE-2025-24052 Agere driver exploit Windows 11 Password Icon Bug Lock Screen Glitch Windows 11 26H1 ARM Snapdragon X2 Windows 11 Reboot-Free, Insider Build Windows Update Error, 0x80070103 File Explorer, NTLM leak Windows bug, WinRE Windows Update, UAC prompts Secure Boot Certificate, Windows Security Windows 11 22H2 Installation security updates Windows UEFI CA 2023 Windows 11 25H2
  • Windows

The Restartless Update: Microsoft Tests Unusual Windows 11 Build That Installs Without a Reboot

Do Son November 6, 2025 0

Microsoft released an unusual Windows 11 Insider test build (26220.7052) that installs without requiring a system restart, hinting at future update process improvements.

The Vanishing Act: Apple Forces GitHub to Delete 8,270 Repositories of Leaked App Store Code Apple DMCA, App Store Source Code
  • Data Leak

The Vanishing Act: Apple Forces GitHub to Delete 8,270 Repositories of Leaked App Store Code

Do Son November 6, 2025 0

Apple issued a DMCA takedown to GitHub, forcing the deletion of over 8,270 repositories and forks containing the leaked App Store web front-end source code.

Critical Cisco CCX RCE Flaws (CVSS 9.8) Allow Unauthenticated Root Access via Java RMI and CCX Editor Cisco CCX RCE and Java RMI Flaw CVE-2024-20458 - CVE-2025-20111 Cisco Smart Licensing Utility Flaw
  • Vulnerability Report

Critical Cisco CCX RCE Flaws (CVSS 9.8) Allow Unauthenticated Root Access via Java RMI and CCX Editor

Do Son November 6, 2025 0

Cisco patched two Critical flaws in Unified CCX. CVE-2025-20354 (CVSS 9.8) risks unauthenticated root RCE via Java RMI, and CVE-2025-20358 allows admin bypass via the CCX Editor application.

❮ Prev Page
Next Page ❯

Search

CVE ALERTS
📈

EPSS Spike Alerts
Catch risk spikes before they make headlines.

🎯

Custom EPSS/CVSS
Set score thresholds to effectively filter noise.

🛡️

Exploit Intel
Real-world exploit signals beyond the KEV catalog.

🐙

GitHub Issues
Auto-create alert tickets without duplication.

📬

Weekly Digest
Clean summaries, eliminating email spam.

🏷️

Watchlist Groups
Tag vulnerabilities by team (Infra/AppSec/SOC).

🔀

Smart Routing
Route chat channels based on severity levels.

🚨

RBP Tracker
Early warning detection and tracking system.

Subscribe – $7/mo or try free for 14 days →

🚨 Active Exploits in the Wild

  • CVE-2026-116606CVSS 9.3
    An authentication bypass in Barracuda Email Security Gateway versions earlier than 9.4.0.030 allows an unauthenticated remote attacker to...
    Admin intel📅 Updated: Nov 10, 2026
  • CVE-2026-125350
    Use after free in XML. Reported by anonymous on 2026-11-06. Google is aware that an exploit for CVE-2026-125350...
    Admin intel📅 Updated: Nov 10, 2026
  • CVE-2026-123751CVSS 9.8
    The WP Duplicate WordPress plugin through 1.1.11 does not properly verify a request authentication value and does not...
    Watchtower Verified📅 Updated: Nov 9, 2026
  • CVE-2026-111793CVSS 4.3
    Openwave Webtop Media Transcoder does not enforce administrator-defined file type restrictions to restrict the file-types to be converted....
    Admin intel📅 Updated: Nov 9, 2026
  • CVE-2026-114713CVSS 8.6
    The labeled-response module in UnrealIRCd 6.0.0 before 6.2.7.1 does not escape the IRCv3 "label" message tag when echoing...
    Admin intel📅 Updated: Nov 9, 2026
  • CVE-2026-116779CVSS 9.8
    Summary `sofia_presence_handle_sip_i_message()` splits the To user of an inbound SIP MESSAGE on `+` and treats the left half...
    CISA KEV📅 Added to KEV: Nov 9, 2026
  • CVE-2026-102895CVSS 9.8
    GPUStack is an open-source GPU cluster manager for AI model serving and GPU instance provisioning. Prior to 2.2.0,...
    CISA KEV📅 Added to KEV: Nov 9, 2026
  • CVE-2026-123158CVSS 8.1
    sshd in OpenSSH before 10.6p2 on Linux, when musl libc is used without PAM, lacks a workaround for...
    CISA KEV📅 Added to KEV: Nov 9, 2026
Powered by CVE Watchtower

Critical Vulnerabilities

  • CVE-2026-61949CVSS 9.3
    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Bookly Bookly bookly-responsive-appointment-booking-tool allows...
    📅 Updated: Nov 10, 2026
  • CVE-2026-13312CVSS 9.9
    A vulnerability that could allow an attacker to compromise a system.
    📅 Updated: Nov 10, 2026
  • CVE-2026-72868CVSS 9.9
    Dokploy is a free, self-hostable Platform as a Service (PaaS). Prior to 0.29.13, apps/dokploy/server/api/routers/destination.ts interpolates the accessKey, secretAccessKey,...
    📅 Updated: Nov 10, 2026
  • CVE-2026-6715CVSS 9.8
    IBM Concert 1.0 through 3.0.1.1 allows an attacker can supply crafted input that is incorporated into an operating...
    📅 Updated: Nov 10, 2026
  • CVE-2026-17403CVSS 9.0
    IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote attacker to gain full...
    📅 Updated: Nov 10, 2026
  • CVE-2026-17409CVSS 9.4
    IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote attacker to execute unauthorized...
    📅 Updated: Nov 10, 2026
  • CVE-2026-17402CVSS 9.9
    IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to execute...
    📅 Updated: Nov 10, 2026
  • CVE-2026-17392CVSS 9.9
    IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to gain...
    📅 Updated: Nov 10, 2026
Powered by CVE Watchtower

Daily CyberSecurity

  • About SecurityOnline.info
  • Advertise with us
  • Announcement
  • Contact
  • Contributor Register
  • Login
  • Disclaimer
  • DCMA
  • Privacy Policy
  • About SecurityOnline.info
  • Advertise on SecurityOnline.info
  • Contact Us

When you purchase through links on our site, we may earn an affiliate commission. Here’s how it works

  • CVE Watchtower
  • CVE Statistics by Vendor 2026
  • Q3 2026 Report
  • Top Exploited CVEs
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube
© 2017 - 2026 Daily CyberSecurity. All Rights Reserved.