Skip to content
November 10, 2026
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube

Daily CyberSecurity

Zero-hour alerts. Unmatched analysis.

Primary Menu
  • Home
  • CVE Data
    • CVE Watchtower
    • Top Exploited CVEs
    • CVE Stats by Vendor
    • Q2 2026 Report
    • CVE Alerts
    • CVE Alert Settings
    • Pricing
  • Cyber Criminals
  • Data Leak
  • Free Tools
    • CVSS 3.1 Calculator
    • Certificate Viewer
    • DNS Lookup
    • Encoder & Hash Generator
    • IP / Subnet Calculator
    • Whois Lookup
  • Linux
  • Malware
  • Vulnerability
  • Submit Press Release
Light/Dark Button
Critical Keras 3 RCE Flaw (CVE-2025-49655, CVSS 9.8) Allows Code Execution on Model Load Keras RCE, Insecure Deserialization
  • Vulnerability Report

Critical Keras 3 RCE Flaw (CVE-2025-49655, CVSS 9.8) Allows Code Execution on Model Load

Do Son October 20, 2025 0

A Critical (CVSS 9.8) RCE flaw in Keras 3’s Torch backend (CVE-2025-49655) allows attackers to execute arbitrary code by loading a malicious model due to insecure deserialization.

Wikipedia Warns of Existential AI Threat as Page Views Fall 8% Due to Chatbot Summaries Yoshua Bengio AI sycophancy, reverse deception AI feedback AI chatbots, FTC investigation AI-generated content Trump AI Policy, AI Deregulation Military AI, DoD Funding Stargate Project AI Art Restoration
  • Technology

Wikipedia Warns of Existential AI Threat as Page Views Fall 8% Due to Chatbot Summaries

Do Son October 20, 2025 0

The Wikimedia Foundation reported an 8% drop in page views, blaming AI chatbots and search summaries for siphoning traffic. It warns the decline threatens the sustainability of its volunteer community.

Privilege Escalation Flaw Discovered in MinIO Service Accounts — CVE-2025-62506 MinIO Signature Bypass Unauthenticated Object Write MinIO Privilege Escalation, Policy Bypass CVE-2024-55949
  • Vulnerability Report

Privilege Escalation Flaw Discovered in MinIO Service Accounts — CVE-2025-62506

Do Son October 18, 2025 0

MinIO patched a privilege escalation flaw (CVE-2025-62506) where restricted service accounts could bypass session policies during account creation to gain full parent privileges.

CAD Assistant for PC: Professional 3D CAD Visualization on Desktop tech-computer
  • Technique

CAD Assistant for PC: Professional 3D CAD Visualization on Desktop

Do Son October 17, 2025 0
CAD Assistant represents a sophisticated solution for professionals who demand reliable 3D model visualization capabilities. Originally developed...
Read More Read more about CAD Assistant for PC: Professional 3D CAD Visualization on Desktop
Google DeepMind Partners with CFS to Use AI for Optimizing SPARC Fusion Reactor Efficiency DeepMind Fusion AI, SPARC Optimization
  • Technology

Google DeepMind Partners with CFS to Use AI for Optimizing SPARC Fusion Reactor Efficiency

Do Son October 17, 2025 0

DeepMind is partnering with CFS to optimize its SPARC fusion reactor for net energy gain (Q>1) by 2027. The AI uses TORAX simulations and AlphaEvolve agents to control extreme plasma heat.

Zimbra Issues Emergency Patch for Critical SSRF Vulnerability in Chat Proxy Configuration Zimbra SSRF, Chat Proxy Flaw
  • Vulnerability Report

Zimbra Issues Emergency Patch for Critical SSRF Vulnerability in Chat Proxy Configuration

Do Son October 17, 2025 0

Zimbra issued an emergency patch (v10.1.12) for a Critical SSRF vulnerability in the chat proxy that lets attackers manipulate internal server requests. Update is urged immediately.

Record $40 Billion Deal: NVIDIA, Microsoft, BlackRock Consortium Acquires Aligned Data Centers AI Infrastructure Deal, Aligned Data Centers Abilene data center
  • Technology

Record $40 Billion Deal: NVIDIA, Microsoft, BlackRock Consortium Acquires Aligned Data Centers

Do Son October 17, 2025 0

A consortium including NVIDIA, Microsoft, and BlackRock acquired Aligned Data Centers for a record $40 billion. The move secures 5 GW of capacity for the AI Infrastructure Partnership.

Apple Planning Touchscreen OLED MacBook Pro with M6 Chip for Late 2026 Debut MacBook Pro OLED touch screen MacBook Pro Touchscreen, M6 Chip OLED M5 MacBook Pro, 24-Hour Battery
  • Technology

Apple Planning Touchscreen OLED MacBook Pro with M6 Chip for Late 2026 Debut

Do Son October 17, 2025 0

Apple is poised for a major shift, with the MacBook Pro reportedly getting a Touchscreen OLED display and M6 chip in late 2026. The redesign will also eliminate the notch and retain the keyboard/trackpad.

Meta Retiring Messenger Desktop App on Dec 15, Redirecting Users to Web Version Messenger Desktop EOL, Web Redirect Meta Political Ads, EU Regulation Meta EU Fine, DMA Compliance Meta AI, PlayAI Acquisition bypass AI security Meta AI EU Data Privacy
  • Technology

Meta Retiring Messenger Desktop App on Dec 15, Redirecting Users to Web Version

Do Son October 17, 2025 0

Meta is discontinuing the Messenger desktop app for macOS/Windows on Dec 15, pushing users to the web/Facebook app. Users must enable Secure Storage to save their chat history.

Sundar Pichai Admits ChatGPT Temporarily Surpassed Google, Recalls “Code Red” Moment at Dreamforce Sundar Pichai ChatGPT, Generative AI Rivalry Google AI Pro, student verification AI Overview, Publishers Drug Discovery AI, Isomorphic Labs Google AI Overviews, Antitrust Complaint Google AI Studio Google One AI, student offer Google Samsung Antitrust Gemini Gemini AI, Child Safety
  • Technology

Sundar Pichai Admits ChatGPT Temporarily Surpassed Google, Recalls “Code Red” Moment at Dreamforce

Do Son October 17, 2025 0

Google CEO Sundar Pichai admitted at Dreamforce that ChatGPT briefly surpassed Google's AI, but insists the "Code Red" moment fueled the company's long-term pursuit of generative AI innovation.

Microsoft Launches “Hey, Copilot” Voice Trigger and Visual AI Context to Transform Windows 11 Assistant Copilot Actions
  • Windows

Microsoft Launches “Hey, Copilot” Voice Trigger and Visual AI Context to Transform Windows 11 Assistant

Do Son October 17, 2025 0

Microsoft rolls out “Hey, Copilot” voice activation and visual context features in Windows 11. The assistant can now analyze your screen and automate system actions with optional Copilot Actions.

Spring Patches Two Flaws: SpEL Injection (CVE-2025-41253) Leaks Secrets, STOMP CSRF Bypasses WebSocket Security Spring Data vulnerabilities Spring Cloud Config CVE-2026-22739 Spring Gateway SpEL, STOMP WebSocket CSRF Spring Security, vulnerability CVE-2024-38819 CVE-2025-41243 Spring Cloud Gateway, vulnerability
  • Vulnerability Report

Spring Patches Two Flaws: SpEL Injection (CVE-2025-41253) Leaks Secrets, STOMP CSRF Bypasses WebSocket Security

Do Son October 17, 2025 0

Spring fixed two flaws: CVE-2025-41253 allows SpEL injection in Cloud Gateway to expose secrets, and CVE-2025-41254 allows STOMP CSRF to send unauthorized WebSocket messages. Update immediately.

Critical ConnectWise Automate Flaw (CVE-2025-11492, CVSS 9.6) Allows RMM Agent Man-in-the-Middle Attack ConnectWise RMM MitM, Agent Communications
  • Vulnerability Report

Critical ConnectWise Automate Flaw (CVE-2025-11492, CVSS 9.6) Allows RMM Agent Man-in-the-Middle Attack

Do Son October 17, 2025 0

ConnectWise patched two high-severity flaws in Automate RMM. CVE-2025-11492 (CVSS 9.6) allows MiTM attack to intercept unencrypted agent communications and inject malicious updates. Update to 2025.9.

North Korea’s Famous Chollima APT Uses Trojanized Node.js App to Deploy OtterCookie RAT for Crypto Theft jobs
  • Cyber Security
  • Malware

North Korea’s Famous Chollima APT Uses Trojanized Node.js App to Deploy OtterCookie RAT for Crypto Theft

Do Son October 17, 2025 0

Cisco Talos exposed Famous Chollima using fake job offers and a trojanized Node.js app (Chessfi) to infect developers. The OtterCookie RAT steals crypto wallets, credentials, and source code.

Cisco Patches High-Severity CVE-2025-20350 DoS Flaw in Desk and IP Phones Cisco Phone DoS, CVE-2025-20350 Cisco SNMP Flaw CVE-2025-20352 CVE-2024-20398 & CVE-2024-20381 CVE-2025-20206
  • Vulnerability Report

Cisco Patches High-Severity CVE-2025-20350 DoS Flaw in Desk and IP Phones

Do Son October 17, 2025 0

Cisco released updates for its Desk and IP Phone series, fixing a High-severity DoS flaw (CVE-2025-20350) from buffer overflow and a Medium XSS flaw (CVE-2025-20351).

Operation Silk Lure: Chinese Espionage Targets FinTech with Malicious Resume LNK to Implant ValleyRAT Operation Silk Lure, ValleyRAT LNK
  • Cybercriminals

Operation Silk Lure: Chinese Espionage Targets FinTech with Malicious Resume LNK to Implant ValleyRAT

Do Son October 17, 2025 0

Seqrite exposed Operation Silk Lure, a campaign using a malicious Chinese resume (.LNK) to implant ValleyRAT on FinTech systems. It achieves persistence via a “Security” scheduled task and uninstalls AV.

Qilin Ransomware’s Resilience Exposed: Bulletproof Hosting Network Underpins Asahi Group Holdings Attack Qilin Bulletproof Hosting, Asahi Group Ransomware
  • Cybercriminals

Qilin Ransomware’s Resilience Exposed: Bulletproof Hosting Network Underpins Asahi Group Holdings Attack

Do Son October 17, 2025 0

Resecurity exposed Qilin RaaS's reliance on bulletproof hosting (BPH) in Russia/HK. The same network was linked to the Asahi Group Holdings ransomware attack that stole 27 GB of data.

Maverick Fileless Trojan Turns Infected Phones into WhatsApp Worms to Steal Banking and UPI Credentials mav
  • Malware

Maverick Fileless Trojan Turns Infected Phones into WhatsApp Worms to Steal Banking and UPI Credentials

Do Son October 17, 2025 0

Kaspersky exposed Maverick, a sophisticated fileless banking Trojan targeting Brazil. It hijacks WhatsApp Web using WPPConnect for self-propagation and installs phishing overlays to steal UPI/banking data.

Google Cloud Launches Gemini Enterprise: Unifying AI Agents and No-Code Workbench for Business Transformation Google Gemini Enterprise, AI Agents No-Code
  • Technology

Google Cloud Launches Gemini Enterprise: Unifying AI Agents and No-Code Workbench for Business Transformation

Do Son October 17, 2025 0

Google Cloud launched Gemini Enterprise, a platform unifying models, governance, and a no-code workbench. It empowers employees to build AI agents to optimize factories and supply chains.

Zero-Click NTLM Leak Returns: New LNK Bypass (PoC Available) Bypasses Patch, Exposing Credentials Zero-Click NTLM Credential Leak, LNK Bypass
  • Vulnerability

Zero-Click NTLM Leak Returns: New LNK Bypass (PoC Available) Bypasses Patch, Exposing Credentials

Do Son October 17, 2025 0

A new Zero-Click NTLM leak bypasses Microsoft's LNK patch, allowing unauthenticated NTLM hash theft on patched systems. The PoC works by exploiting UNC paths and the default shell32.dll icon reference.

Meta to Invest $1.5 Billion in Massive 1-Gigawatt Texas Data Center for Next-Gen AI Infrastructure Meta Gigawatt Datacenter, AI Infrastructure
  • Technology

Meta to Invest $1.5 Billion in Massive 1-Gigawatt Texas Data Center for Next-Gen AI Infrastructure

Do Son October 17, 2025 0

Meta announced a $1.5B investment for a 1-gigawatt AI data center in El Paso, Texas, operational in 2028. It's part of a massive $72B CapEx plan to lead the global AI infrastructure race.

Google Unveils Veo 3.1 AI Video Generator with Enhanced Image-to-Video and Synchronized Audio Generation Veo 3.1, Image-to-Video Audio
  • Technology

Google Unveils Veo 3.1 AI Video Generator with Enhanced Image-to-Video and Synchronized Audio Generation

Do Son October 16, 2025 0

Google released Veo 3.1, an advanced AI video model with stronger prompt adherence, Image-to-Video generation from start/end frames, and a new capability for generating synchronized audio.

❮ Prev Page
Next Page ❯

Search

CVE ALERTS
📈

EPSS Spike Alerts
Catch risk spikes before they make headlines.

🎯

Custom EPSS/CVSS
Set score thresholds to effectively filter noise.

🛡️

Exploit Intel
Real-world exploit signals beyond the KEV catalog.

🐙

GitHub Issues
Auto-create alert tickets without duplication.

📬

Weekly Digest
Clean summaries, eliminating email spam.

🏷️

Watchlist Groups
Tag vulnerabilities by team (Infra/AppSec/SOC).

🔀

Smart Routing
Route chat channels based on severity levels.

🚨

RBP Tracker
Early warning detection and tracking system.

Subscribe – $7/mo or try free for 14 days →

🚨 Active Exploits in the Wild

  • CVE-2026-116606CVSS 9.3
    An authentication bypass in Barracuda Email Security Gateway versions earlier than 9.4.0.030 allows an unauthenticated remote attacker to...
    Admin intel📅 Updated: Nov 10, 2026
  • CVE-2026-125350
    Use after free in XML. Reported by anonymous on 2026-11-06. Google is aware that an exploit for CVE-2026-125350...
    Admin intel📅 Updated: Nov 10, 2026
  • CVE-2026-123751CVSS 9.8
    The WP Duplicate WordPress plugin through 1.1.11 does not properly verify a request authentication value and does not...
    Watchtower Verified📅 Updated: Nov 9, 2026
  • CVE-2026-111793CVSS 4.3
    Openwave Webtop Media Transcoder does not enforce administrator-defined file type restrictions to restrict the file-types to be converted....
    Admin intel📅 Updated: Nov 9, 2026
  • CVE-2026-114713CVSS 8.6
    The labeled-response module in UnrealIRCd 6.0.0 before 6.2.7.1 does not escape the IRCv3 "label" message tag when echoing...
    Admin intel📅 Updated: Nov 9, 2026
  • CVE-2026-116779CVSS 9.8
    Summary `sofia_presence_handle_sip_i_message()` splits the To user of an inbound SIP MESSAGE on `+` and treats the left half...
    CISA KEV📅 Added to KEV: Nov 9, 2026
  • CVE-2026-102895CVSS 9.8
    GPUStack is an open-source GPU cluster manager for AI model serving and GPU instance provisioning. Prior to 2.2.0,...
    CISA KEV📅 Added to KEV: Nov 9, 2026
  • CVE-2026-123158CVSS 8.1
    sshd in OpenSSH before 10.6p2 on Linux, when musl libc is used without PAM, lacks a workaround for...
    CISA KEV📅 Added to KEV: Nov 9, 2026
Powered by CVE Watchtower

Critical Vulnerabilities

  • CVE-2026-119446CVSS 9.4
    Session Fixation vulnerability in the CLI login flow in nerves-hub nerves_hub_web allows an unauthenticated attacker to obtain an...
    📅 Updated: Nov 10, 2026
  • CVE-2026-61949CVSS 9.3
    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Bookly Bookly bookly-responsive-appointment-booking-tool allows...
    📅 Updated: Nov 10, 2026
  • CVE-2026-13312CVSS 9.9
    A vulnerability that could allow an attacker to compromise a system.
    📅 Updated: Nov 10, 2026
  • CVE-2026-72868CVSS 9.9
    Dokploy is a free, self-hostable Platform as a Service (PaaS). Prior to 0.29.13, apps/dokploy/server/api/routers/destination.ts interpolates the accessKey, secretAccessKey,...
    📅 Updated: Nov 10, 2026
  • CVE-2026-6715CVSS 9.8
    IBM Concert 1.0 through 3.0.1.1 allows an attacker can supply crafted input that is incorporated into an operating...
    📅 Updated: Nov 10, 2026
  • CVE-2026-17403CVSS 9.0
    IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote attacker to gain full...
    📅 Updated: Nov 10, 2026
  • CVE-2026-17409CVSS 9.4
    IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote attacker to execute unauthorized...
    📅 Updated: Nov 10, 2026
  • CVE-2026-17402CVSS 9.9
    IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to execute...
    📅 Updated: Nov 10, 2026
Powered by CVE Watchtower

Daily CyberSecurity

  • About SecurityOnline.info
  • Advertise with us
  • Announcement
  • Contact
  • Contributor Register
  • Login
  • Disclaimer
  • DCMA
  • Privacy Policy
  • About SecurityOnline.info
  • Advertise on SecurityOnline.info
  • Contact Us

When you purchase through links on our site, we may earn an affiliate commission. Here’s how it works

  • CVE Watchtower
  • CVE Statistics by Vendor 2026
  • Q3 2026 Report
  • Top Exploited CVEs
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube
© 2017 - 2026 Daily CyberSecurity. All Rights Reserved.