Skip to content
November 10, 2026
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube

Daily CyberSecurity

Zero-hour alerts. Unmatched analysis.

Primary Menu
  • Home
  • CVE Data
    • CVE Watchtower
    • Top Exploited CVEs
    • CVE Stats by Vendor
    • Q2 2026 Report
    • CVE Alerts
    • CVE Alert Settings
    • Pricing
  • Cyber Criminals
  • Data Leak
  • Free Tools
    • CVSS 3.1 Calculator
    • Certificate Viewer
    • DNS Lookup
    • Encoder & Hash Generator
    • IP / Subnet Calculator
    • Whois Lookup
  • Linux
  • Malware
  • Vulnerability
  • Submit Press Release
Light/Dark Button
Meet Mico: Microsoft Unveils Clippy’s Emotional, AI-Powered Successor for Copilot Copilot, Mico avatar
  • Technology

Meet Mico: Microsoft Unveils Clippy’s Emotional, AI-Powered Successor for Copilot

Do Son October 25, 2025 0

Microsoft unveiled "Mico," a friendly, expressive avatar for Copilot voice mode, and new features like real-time "Groups" collaboration and persistent memory.

EA Partners with Stable Diffusion Creator to Slash Game Development Costs EA, Stability AI
  • Technology

EA Partners with Stable Diffusion Creator to Slash Game Development Costs

Do Son October 25, 2025 0

EA and Stability AI will co-develop generative AI tools for faster asset and texture creation, a move likely aimed at cutting costs amid EA's privatization.

CRITICAL ALERT: Windows Server WSUS Flaw Actively Exploited (CVE-2025-59287, CVSS 9.8) critical server patch Pygmy Goat malware - Fuji Electric Ransomware Attack
  • Vulnerability Report

CRITICAL ALERT: Windows Server WSUS Flaw Actively Exploited (CVE-2025-59287, CVSS 9.8)

Do Son October 25, 2025 0

Microsoft released an emergency update for a critical WSUS flaw (CVSS 9.8) that allows unauthenticated RCE and is already being actively exploited.

The Memory Tax: OpenAI May Use ChatGPT Memory for Targeted Ads ChatGPT advertising US only OpenAI GPT-5.4 launch OpenAI Responses API file support ChatGPT Ads pricing ChatGPT conversational advertising, OpenAI monetization strategy 2026 OpenAI Code Red, ChatGPT Sycophancy Crisis AI music ChatGPT memory, targeted ads ChatGPT User Milestone, Generative AI Adoption ChatGPT ads, AI monetization GPT-5, OpenAI
  • Technology

The Memory Tax: OpenAI May Use ChatGPT Memory for Targeted Ads

Do Son October 25, 2025 0

OpenAI is reportedly considering using ChatGPT's memory feature to deliver hyper-personalized targeted advertising, potentially making user conversations a new ad vector.

Critical Rust Coreutils Bug Blocks Automatic Updates on Ubuntu 25.10 Ubuntu 26.04 sudo-rs Ubuntu 26.04 LTS, Release Schedule Ubuntu update bug, Rust coreutils Ubuntu, sudo-rs NVIDIA CUDA, Ubuntu
  • Linux

Critical Rust Coreutils Bug Blocks Automatic Updates on Ubuntu 25.10

Do Son October 25, 2025 0

A bug in Ubuntu 25.10's Rust coreutils prevents automatic system updates on desktop, server, and cloud deployments. Manual patch required.

Apple Loses Landmark UK Antitrust Lawsuit Over ‘Excessive’ App Store Fees iOS 27 Liquid Glass slider iPhone Flip rumors 2026 Setapp Mobile iOS shutdown, Apple DMA political delay tactics Apple AI pin wearable 2027, Siri Campos Gemini integration Apple AI strategy 2026, Liquid Glass interface Apple Intelligence Mac Pro Cancelled Mac Studio Future App Store antitrust, UK lawsuit iPhone Fold Hinge, Cost Optimization MacBook Pro, OLED display Apple supply chain, manufacturing automation Apple home security, smart camera Apple Earnings, AI Investment Apple EU Fine, DMA Appeal CVE-2023-23529
  • Technology

Apple Loses Landmark UK Antitrust Lawsuit Over ‘Excessive’ App Store Fees

Do Son October 25, 2025 0

A UK court ruled Apple abused its dominance by charging "excessive and unfair" App Store fees, making it liable for up to £1.5 billion in damages.

OpenAI Buys Mac Automation App to Give ChatGPT System-Level Control OpenAI acquisition, agentic AI
  • Technology

OpenAI Buys Mac Automation App to Give ChatGPT System-Level Control

Do Son October 25, 2025 0

OpenAI acquired Software Applications, the team behind the Mac app Sky, to integrate system-level automation and agentic AI capabilities into ChatGPT.

The Domino Effect: AWS Outage Caused by DNS Automation Race Condition Motorola Smart Feed redirect Anthropic Amazon 5GW partnership Amazon Perplexity lawsuit AWS-LC Vulnerabilities Cryptographic Bypass AWS Middle East drone strikes Amazon layoffs 2026, Amazon AI restructuring Amazon Kindle DRM Policy, Publisher Control EPUB AWS Nova Forge AI Model Customization AWS Trainium3 EC2 Trn3 UltraServer Route 53 Accelerated Recovery AWS DNS Resilience AI Browser War, Amazon Comet Amazon layoffs, cost reduction AWS outage, DynamoDB DNS AWS outage, cloud dependency AWS VPN Client, Root Privilege Escalation WSA shutdown, Amazon Appstore Amazon Wondery, Podcast Restructuring Amazon Q2 2025 Generative AI AWS Client VPN, Privilege Escalation Amazon AI, Wearable AI
  • Technology

The Domino Effect: AWS Outage Caused by DNS Automation Race Condition

Do Son October 25, 2025 0

AWS confirmed its 15-hour US-EAST-1 outage was caused by a DynamoDB DNS automation race condition that wiped out all service IP addresses.

Cloud Gaming for Free: Amazon Luna Relaunches as a Free Prime Perk Amazon Luna, Prime gaming
  • Technology

Cloud Gaming for Free: Amazon Luna Relaunches as a Free Prime Perk

Do Son October 25, 2025 0

Amazon Luna relaunches with a new smartphone-controlled "GameNight" mode and a selection of AAA titles now free for all Amazon Prime members.

The 30% Mandate: How Microsoft’s Unrealistic Profit Goal Crippled Xbox Studios Xbox Publishing Guide Indie Dev Barriers Xbox profit margin, Microsoft layoffs Gaming Copilot
  • Technology

The 30% Mandate: How Microsoft’s Unrealistic Profit Goal Crippled Xbox Studios

Do Son October 25, 2025 0

Microsoft imposed an "unrealistic" 30% profit margin target on Xbox, far above the 17-22% industry average, leading to layoffs and canceled titles.

Amazon Unveils AI Smart Glasses to Boost Delivery Speed and Safety Amazon, smart glasses
  • Technology

Amazon Unveils AI Smart Glasses to Boost Delivery Speed and Safety

Do Son October 25, 2025 0

Amazon confirmed the development of AI-powered smart glasses for delivery drivers, providing turn-by-turn HUD navigation and saving them 30 minutes per shift.

Critical WordPress RCE Flaws Resurface: Over 8.7 Million Attacks Exploit GutenKit & Hunk Companion WordPress RCE Plugins, Unauthenticated Install
  • Vulnerability Report

Critical WordPress RCE Flaws Resurface: Over 8.7 Million Attacks Exploit GutenKit & Hunk Companion

Do Son October 25, 2025 0

Wordfence warned of a massive RCE campaign (8.7M+ attacks) exploiting flaws in GutenKit/Hunk Companion plugins. Unauthenticated attackers can install malicious plugins via vulnerable REST API endpoints.

Arsen Launches Smishing Simulation to Help Companies Defend Against Mobile Phishing Threats SmishingCapture_1761036856Dq34Ncvk65
  • Press Release

Arsen Launches Smishing Simulation to Help Companies Defend Against Mobile Phishing Threats

cybernewswire October 24, 2025 0
Paris, France, 24th October 2025, CyberNewsWire
Read More Read more about Arsen Launches Smishing Simulation to Help Companies Defend Against Mobile Phishing Threats
Jingle Thief Cybercrime Gang Steals Hundreds of Thousands in Gift Card Fraud via Microsoft 365 Identity Abuse Seedworm Espionage Campaign 2026 ChromElevator Stealer DLL Sideloading SIM Swapping Crypto Theft Lazarus Comebacker, Aerospace Espionage Delete PlugX Malware
  • Cybercriminals

Jingle Thief Cybercrime Gang Steals Hundreds of Thousands in Gift Card Fraud via Microsoft 365 Identity Abuse

Do Son October 24, 2025 0

Unit 42 exposed Jingle Thief, a Morocco-linked group exploiting Microsoft 365 credentials via phishing. They maintain 10-month access to issue fraudulent gift cards worth hundreds of thousands of dollars.

Warlock Ransomware Hits US Firms Exploiting SharePoint Zero-Day, Linked to China’s CamoFei APT Warlock Ransomware, SharePoint Zero-Day
  • Malware
  • Vulnerability Report

Warlock Ransomware Hits US Firms Exploiting SharePoint Zero-Day, Linked to China’s CamoFei APT

Do Son October 24, 2025 0

Symantec exposed Warlock ransomware (a probable Anylock rebrand) used by China-linked Storm-2603. It exploits the SharePoint zero-day and BYOVD to disable security and encrypt files with the .x2anylock extension.

PhantomCaptcha Spyware Targets Ukraine NGOs with Fake Cloudflare Lure to Deploy WebSocket RAT CVE-2024-22394
  • Cyber Security
  • Malware

PhantomCaptcha Spyware Targets Ukraine NGOs with Fake Cloudflare Lure to Deploy WebSocket RAT

Do Son October 24, 2025 0

SentinelLABS exposed PhantomCaptcha, a ClickFix campaign targeting Ukraine NGOs. It uses a fake Cloudflare CAPTCHA to deploy a multi-stage PowerShell WebSocket RAT and a parallel Android spyware attack.

Pakistan-Linked TransparentTribe APT Deploys AI-Assisted DeskRAT Malware Against India’s BOSS Linux Systems APT
  • Cyber Security
  • Malware

Pakistan-Linked TransparentTribe APT Deploys AI-Assisted DeskRAT Malware Against India’s BOSS Linux Systems

Do Son October 24, 2025 0

Sekoia exposed TransparentTribe (Pakistan-linked APT) targeting Indian government with AI-assisted DeskRAT malware. The Golang RAT infects BOSS Linux via malicious .desktop files and staging servers.

GM Bets on AI: Gemini to Replace CarPlay/Android Auto in All Cars by 2026 GM Google Gemini
  • Technology

GM Bets on AI: Gemini to Replace CarPlay/Android Auto in All Cars by 2026

Do Son October 24, 2025 0

GM is integrating Google Gemini into all vehicles by 2026, creating a natural-language AI assistant and phasing out both Apple CarPlay and Android Auto.

Curbing the Scroll: YouTube Shorts Adds Timer to Fight Digital Addiction YouTube Shorts, digital well-being YouTube AI doppelgängers Shorts, Gemini 3 Playables games
  • Technology

Curbing the Scroll: YouTube Shorts Adds Timer to Fight Digital Addiction

Do Son October 24, 2025 0

YouTube has rolled out a new, optional timer feature for Shorts, letting users set a daily viewing limit to curb mindless scrolling and digital addiction.

AI Sidebar Spoofing Attack: SquareX Uncovers Malicious Extensions that Impersonate AI Browser Sidebars YOBB_AI_Sidebar_Spoofing_Hero_Image_1200x720px_1761118976rK69kLNW6p
  • Press Release

AI Sidebar Spoofing Attack: SquareX Uncovers Malicious Extensions that Impersonate AI Browser Sidebars

cybernewswire October 23, 2025 0
Palo Alto, California, 23rd October 2025, CyberNewsWire
Read More Read more about AI Sidebar Spoofing Attack: SquareX Uncovers Malicious Extensions that Impersonate AI Browser Sidebars
Reddit Sues Perplexity and Data Brokers for ‘Industrial-Scale’ Scraping Reddit AI bot crackdown 2026 Reddit lawsuit, data scraping AI licensing, data monetization Reddit, AI Scraping Reddit Lawsuit, AI Data Scraping Reddit Bing search
  • Technology

Reddit Sues Perplexity and Data Brokers for ‘Industrial-Scale’ Scraping

Do Son October 23, 2025 0

Reddit has filed a lawsuit against Perplexity and three data brokers, accusing them of unauthorized, "industrial-scale" scraping of its content for AI training.

iPhone Air Flops: Apple to Slash Production by Over 80% After Weak Sales iOS 27 AirDrop speed, AirDrop transfer speed, AirDrop file transfer, AWDL protocol iPhone 17e rumors iPhone Air 2 Roadmap Apple Launch Cadence Shift iPhone Air sales collapse Apple iPhone Fold iPhone Air, thinnest iPhone camera flaw
  • Technology

iPhone Air Flops: Apple to Slash Production by Over 80% After Weak Sales

Do Son October 23, 2025 0

Analyst Ming-Chi Kuo reports that sales of the ultra-thin iPhone Air have collapsed, prompting Apple to cut production by over 80% due to poor demand.

❮ Prev Page
Next Page ❯

Search

CVE ALERTS
📈

EPSS Spike Alerts
Catch risk spikes before they make headlines.

🎯

Custom EPSS/CVSS
Set score thresholds to effectively filter noise.

🛡️

Exploit Intel
Real-world exploit signals beyond the KEV catalog.

🐙

GitHub Issues
Auto-create alert tickets without duplication.

📬

Weekly Digest
Clean summaries, eliminating email spam.

🏷️

Watchlist Groups
Tag vulnerabilities by team (Infra/AppSec/SOC).

🔀

Smart Routing
Route chat channels based on severity levels.

🚨

RBP Tracker
Early warning detection and tracking system.

Subscribe – $7/mo or try free for 14 days →

🚨 Active Exploits in the Wild

  • CVE-2026-116606CVSS 9.3
    An authentication bypass in Barracuda Email Security Gateway versions earlier than 9.4.0.030 allows an unauthenticated remote attacker to...
    Admin intel📅 Updated: Nov 10, 2026
  • CVE-2026-125350
    Use after free in XML. Reported by anonymous on 2026-11-06. Google is aware that an exploit for CVE-2026-125350...
    Admin intel📅 Updated: Nov 10, 2026
  • CVE-2026-123751CVSS 9.8
    The WP Duplicate WordPress plugin through 1.1.11 does not properly verify a request authentication value and does not...
    Watchtower Verified📅 Updated: Nov 9, 2026
  • CVE-2026-111793CVSS 4.3
    Openwave Webtop Media Transcoder does not enforce administrator-defined file type restrictions to restrict the file-types to be converted....
    Admin intel📅 Updated: Nov 9, 2026
  • CVE-2026-114713CVSS 8.6
    The labeled-response module in UnrealIRCd 6.0.0 before 6.2.7.1 does not escape the IRCv3 "label" message tag when echoing...
    Admin intel📅 Updated: Nov 9, 2026
  • CVE-2026-116779CVSS 9.8
    Summary `sofia_presence_handle_sip_i_message()` splits the To user of an inbound SIP MESSAGE on `+` and treats the left half...
    CISA KEV📅 Added to KEV: Nov 9, 2026
  • CVE-2026-102895CVSS 9.8
    GPUStack is an open-source GPU cluster manager for AI model serving and GPU instance provisioning. Prior to 2.2.0,...
    CISA KEV📅 Added to KEV: Nov 9, 2026
  • CVE-2026-123158CVSS 8.1
    sshd in OpenSSH before 10.6p2 on Linux, when musl libc is used without PAM, lacks a workaround for...
    CISA KEV📅 Added to KEV: Nov 9, 2026
Powered by CVE Watchtower

Critical Vulnerabilities

  • CVE-2026-61949CVSS 9.3
    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Bookly Bookly bookly-responsive-appointment-booking-tool allows...
    📅 Updated: Nov 10, 2026
  • CVE-2026-13312CVSS 9.9
    A vulnerability that could allow an attacker to compromise a system.
    📅 Updated: Nov 10, 2026
  • CVE-2026-72868CVSS 9.9
    Dokploy is a free, self-hostable Platform as a Service (PaaS). Prior to 0.29.13, apps/dokploy/server/api/routers/destination.ts interpolates the accessKey, secretAccessKey,...
    📅 Updated: Nov 10, 2026
  • CVE-2026-6715CVSS 9.8
    IBM Concert 1.0 through 3.0.1.1 allows an attacker can supply crafted input that is incorporated into an operating...
    📅 Updated: Nov 10, 2026
  • CVE-2026-17403CVSS 9.0
    IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote attacker to gain full...
    📅 Updated: Nov 10, 2026
  • CVE-2026-17409CVSS 9.4
    IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote attacker to execute unauthorized...
    📅 Updated: Nov 10, 2026
  • CVE-2026-17402CVSS 9.9
    IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to execute...
    📅 Updated: Nov 10, 2026
  • CVE-2026-17392CVSS 9.9
    IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to gain...
    📅 Updated: Nov 10, 2026
Powered by CVE Watchtower

Daily CyberSecurity

  • About SecurityOnline.info
  • Advertise with us
  • Announcement
  • Contact
  • Contributor Register
  • Login
  • Disclaimer
  • DCMA
  • Privacy Policy
  • About SecurityOnline.info
  • Advertise on SecurityOnline.info
  • Contact Us

When you purchase through links on our site, we may earn an affiliate commission. Here’s how it works

  • CVE Watchtower
  • CVE Statistics by Vendor 2026
  • Q3 2026 Report
  • Top Exploited CVEs
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube
© 2017 - 2026 Daily CyberSecurity. All Rights Reserved.