Skip to content
November 8, 2026
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube

Daily CyberSecurity

Zero-hour alerts. Unmatched analysis.

Primary Menu
  • Home
  • CVE Data
    • CVE Watchtower
    • Top Exploited CVEs
    • CVE Stats by Vendor
    • Q2 2026 Report
    • CVE Alerts
    • CVE Alert Settings
    • Pricing
  • Cyber Criminals
  • Data Leak
  • Free Tools
    • CVSS 3.1 Calculator
    • Certificate Viewer
    • DNS Lookup
    • Encoder & Hash Generator
    • IP / Subnet Calculator
    • Whois Lookup
  • Linux
  • Malware
  • Vulnerability
  • Submit Press Release
Light/Dark Button
A Safer Chat: OpenAI Unveils ChatGPT for Teens GPT-OSS-SafeGuard, AI safety ChatGPT Memory Management, Paid Feature ChatGPT Teens ChatGPT, mental health
  • Technology

A Safer Chat: OpenAI Unveils ChatGPT for Teens

Do Son September 18, 2025 0

OpenAI is launching a new version of ChatGPT for teens aged 13-18 with enhanced privacy and parental controls to ensure a safer AI experience.

The MacBook is Getting a Touchscreen, But Not How You Think MacBook Touchscreen Apple OS Betas, Liquid Glass Design
  • Technology

The MacBook is Getting a Touchscreen, But Not How You Think

Do Son September 18, 2025 0

Apple is reportedly bringing touchscreen technology to its MacBook Pro lineup. Find out what this could mean for the future of Apple laptops.

Meta Unveils Ray-Ban Display: Smart Glasses with a Built-In Screen Meta Reality Labs restructuring, AI wearables pivot Meta Alan Dye Hire Apple Design Defection smart glasses, Ray-Ban Display
  • Technology

Meta Unveils Ray-Ban Display: Smart Glasses with a Built-In Screen

Do Son September 18, 2025 0

Meta's new smart glasses, the Ray-Ban Display, feature a heads-up screen for notifications, video calls, and more, launching in the U.S. on Sept. 30.

SonicWall Security Incident: Exposed Backups Could Put Your Firewall at Risk SonicWall Zero-Day, SMA1000 Exploit Chain SonicWall, firewall configuration CVE-2024-29010 & CVE-2024-29011 SonicWall NetExtender VPN Vulnerability
  • Data Leak

SonicWall Security Incident: Exposed Backups Could Put Your Firewall at Risk

Do Son September 18, 2025 0

A SonicWall security incident exposed firewall configuration backups from some MySonicWall accounts. The company is warning users to check for exposure and apply remediation.

Jenkins Patches High-Severity Vulnerabilities, Including a DoS Flaw Jenkins security advisory 2026, CVE-2026-53435, CVE-2026-53436 Jenkins Plugin RCE CI/CD Security Advisory Jenkins Vulnerability CVE-2026-33001 Jenkins CLI DoS, Coverage Plugin XSS Jenkins SAML Hijacking, Plaintext Secrets CVE-2023-43495 - Jenkins Vulnerability
  • Vulnerability Report

Jenkins Patches High-Severity Vulnerabilities, Including a DoS Flaw

Do Son September 18, 2025 0

Jenkins has patched multiple flaws, including a high-severity DoS vulnerability in its bundled Jetty server that could allow unauthenticated attackers to crash the service.

Hacktivists Launch Coordinated Attacks on India’s Infrastructure hacktivist attacks
  • Cyber Security

Hacktivists Launch Coordinated Attacks on India’s Infrastructure

Do Son September 18, 2025 0

A new report reveals a surge in coordinated hacktivist attacks on India's critical infrastructure. Groups from Pakistan, Russia, and others are launching breaches and DDoS attacks.

Chrome Emergency Update: Zero-Day (CVE-2025-10585) in V8 Exploited in the Wild Chrome security update exploit in the wild Chrome Zero-Day CVE-2026-3909 Chrome Zero-Day PoC CVE-2026-2441 Chrome Zero-Day CVE-2026-2441 Chrome Zero-Day, Active Exploitation CVE-2025-10585 Chrome vulnerability, zero-day exploit CVE-2025-6558 Chrome Zero-Day, V8 Vulnerability Chrome Zero-Day, Security Update
  • Vulnerability Report

Chrome Emergency Update: Zero-Day (CVE-2025-10585) in V8 Exploited in the Wild

Do Son September 18, 2025 0

Google has released an urgent Chrome update, patching a V8 zero-day (CVE-2025-10585) being exploited in the wild, along with other high-severity flaws.

Critical Vulnerabilities Discovered in Planet Technology Industrial Cellular Gateways CVE-2025-9971 CVE-2025-9972 PLANET Technology - CVE-2024-8456
  • Vulnerability Report

Critical Vulnerabilities Discovered in Planet Technology Industrial Cellular Gateways

Do Son September 18, 2025 0

Two critical vulnerabilities in Planet Technology’s Industrial Cellular Gateways could allow unauthenticated attackers to take over devices, exposing critical infrastructure.

Microsoft Dismantles RaccoonO365 Phishing Service RaccoonO365 Phishing
  • Cybercriminals

Microsoft Dismantles RaccoonO365 Phishing Service

Do Son September 18, 2025 0

Microsoft’s DCU has seized 338 websites to disrupt RaccoonO365, a growing phishing service used to steal Microsoft 365 credentials from 94 countries.

The Silent Spy: How Chinese Hackers are Exploiting U.S.-China Policy Chinese espionage groups APT35 Phishing, Stormshield CTI
  • Cyber Security

The Silent Spy: How Chinese Hackers are Exploiting U.S.-China Policy

Do Son September 18, 2025 0

A new report reveals Chinese threat actor TA415 is targeting U.S. policy organizations with sophisticated spearphishing campaigns to gather intelligence.

FileFix: A New Attack Hides Malware in Plain Sight FBI email system hack
  • Malware

FileFix: A New Attack Hides Malware in Plain Sight

Do Son September 18, 2025 0

A new, advanced FileFix attack campaign uses social engineering and steganography to hide malware in images, bypassing traditional security defenses.

Raven Stealer: A Stealthy New Threat in the Malware Ecosystem Raven Stealer, Malware
  • Malware

Raven Stealer: A Stealthy New Threat in the Malware Ecosystem

Do Son September 18, 2025 0

A new malware called Raven Stealer is emerging, targeting individuals and businesses by stealing credentials and data, and exfiltrating it via Telegram.

Phoenix (CVE-2025-6202): A New Rowhammer Attack Bypasses DDR5 Protections Phoenix (CVE-2025-6202)
  • Vulnerability Report

Phoenix (CVE-2025-6202): A New Rowhammer Attack Bypasses DDR5 Protections

Do Son September 18, 2025 0

A new Rowhammer attack, "Phoenix," bypasses DDR5 protections on all tested SK Hynix devices, enabling memory corruption and privilege escalation.

From Simple Bug to RCE: A Flaw (CVE-2025-21692) in the Linux Kernel, PoC Published Linux Kernel vulnerability CVE-2025-21692
  • Vulnerability Report

From Simple Bug to RCE: A Flaw (CVE-2025-21692) in the Linux Kernel, PoC Published

Do Son September 18, 2025 0

A new Linux kernel vulnerability, CVE-2025-21692, can be exploited to achieve remote code execution by manipulating the ETS qdisc, a simple but critical flaw.

New in Syteca Release 7.21: Agentless Access, Sensitive Data Masking, and Smooth Session Playback image-Syteca_new_UI_1758041671gXWwtERDit
  • Press Release

New in Syteca Release 7.21: Agentless Access, Sensitive Data Masking, and Smooth Session Playback

cybernewswire September 17, 2025 0
Waltham, United States, 17th September 2025, CyberNewsWire
Read More Read more about New in Syteca Release 7.21: Agentless Access, Sensitive Data Masking, and Smooth Session Playback
CVE-2025-9242: Critical WatchGuard Flaw Allows Remote Code Execution WatchGuard Agent Privilege Escalation CVE-2026-6787 WatchGuard Vulnerability CVE-2026-1498 WatchGuard Firebox VPN Flaws, Command Injection WatchGuard Vulnerability CVE-2024-6592 and CVE-2024-6593
  • Vulnerability Report

CVE-2025-9242: Critical WatchGuard Flaw Allows Remote Code Execution

Do Son September 17, 2025 0

A critical vulnerability (CVE-2025-9242) in WatchGuard's Fireware OS could allow an unauthenticated remote attacker to execute arbitrary code.

YouTube Unveils AI-Powered Creator Tools to Revolutionize Content Creation YouTube deepfake YouTube AI YouTube Premium YouTube Ad Blockers, Fake Buffering Google Lens, YouTube Shorts
  • Technology

YouTube Unveils AI-Powered Creator Tools to Revolutionize Content Creation

Do Son September 17, 2025 0

YouTube has launched a new suite of AI-powered tools to help creators produce content faster, optimize their channels, and boost audience engagement.

Firefox Password Manager: Stronger Security With New Encryption Firefox built-in VPN Firefox VPN data limit, Firefox VPN countries, Mozilla VPN subscription Sanitizer API Firefox 148 Security Firefox WebRTC Vulnerability CVE-2025-14321 PoC Firefox VPN Feature, Browser-Only VPN Firefox Add-ons Rollback Firefox Encryption Firefox MKV support Firefox ESR, Windows 7
  • Technology

Firefox Password Manager: Stronger Security With New Encryption

Do Son September 17, 2025 0

Firefox has upgraded its local password manager encryption from 3DES-CBC to the stronger AES-256-CBC, enhancing user data security.

NVIDIA Patches Critical RCE Flaw (CVE-2025-23316, CVSS 9.8) in Triton Inference Server NVIDIA acquisition rumors NVIDIA AI Security AI Framework Vulnerabilities Nvidia 595.76 Hotfix NVIDIA Megatron Bridge vulnerability GPU vs ASIC AI battle NVIDIA Driver Vulnerability CVE-2025-33217 NVIDIA biggest TSMC customer 2026, NVIDIA vs Apple TSMC revenue share NVIDIA CUDA Toolkit CVE-2025-33228 Groq NVIDIA licensing deal, Jonathan Ross acquihire 2025 NeMo Code Injection, AI Framework RCE NVIDIA App Privilege Escalation, CVE-2025-23358 NVIDIA Security Update, DLS Vulnerability CVE-2025-23316 NVIDIA NVDebug, vulnerabilities NVIDIA Driver Vulnerabilities, vGPU Security Nvidia Jetson, UEFI Vulnerabilities CVE-2024-0130 - CVE-2024-0136 CVE-2024-0148 NVIDIA Driver Support, Windows 10 EOL
  • Vulnerability Report

NVIDIA Patches Critical RCE Flaw (CVE-2025-23316, CVSS 9.8) in Triton Inference Server

Do Son September 17, 2025 0

NVIDIA has released a critical security update for its Triton Inference Server, fixing multiple high-severity flaws that could lead to remote code execution and DoS.

Multiple High-Severity Vulnerabilities Found in HPE Aruba Networking EdgeConnect SD-WAN Gateways HPE Aruba Private 5G Vulnerability CVE-2026-23595 HPE Instant On Vulnerability CVE-2025-37166 CVE-2024-31466 & CVE-2024-31467 HPE Aruba Networking, vulnerability
  • Vulnerability Report

Multiple High-Severity Vulnerabilities Found in HPE Aruba Networking EdgeConnect SD-WAN Gateways

Do Son September 17, 2025 0

HPE Aruba Networking has patched multiple high-severity flaws in its SD-WAN gateways. The bugs could lead to RCE, privilege escalation, and unauthorized access.

A New Crisis for CrowdStrike: A Self-Replicating Worm Has Compromised Its NPM Packages OCRFix Botnet EtherHiding CrowdStrike supply chain attack Ivanti CSA Vulnerabilities
  • Malware

A New Crisis for CrowdStrike: A Self-Replicating Worm Has Compromised Its NPM Packages

Do Son September 17, 2025 0

A new worm, Shai-Hulud, has compromised CrowdStrike’s NPM packages. The malware steals credentials and can spread rapidly across the developer ecosystem.

A New Way to Pay: Apple Wallet Is Getting a New Security Feature Apple Wallet iOS 26
  • Technology

A New Way to Pay: Apple Wallet Is Getting a New Security Feature

Do Son September 17, 2025 0

Apple's new iOS 26 update allows users to securely store their full credit card details in the Wallet app, enabling a safer way to autofill payment info.

❮ Prev Page
Next Page ❯

Search

CVE ALERTS
📈

EPSS Spike Alerts
Catch risk spikes before they make headlines.

🎯

Custom EPSS/CVSS
Set score thresholds to effectively filter noise.

🛡️

Exploit Intel
Real-world exploit signals beyond the KEV catalog.

🐙

GitHub Issues
Auto-create alert tickets without duplication.

📬

Weekly Digest
Clean summaries, eliminating email spam.

🏷️

Watchlist Groups
Tag vulnerabilities by team (Infra/AppSec/SOC).

🔀

Smart Routing
Route chat channels based on severity levels.

🚨

RBP Tracker
Early warning detection and tracking system.

Subscribe – $7/mo or try free for 14 days →

🚨 Active Exploits in the Wild

  • CVE-2026-123158CVSS 8.1
    sshd in OpenSSH before 10.6p2 on Linux, when musl libc is used without PAM, lacks a workaround for...
    Admin intel📅 Updated: Nov 6, 2026
  • CVE-2026-19868CVSS 7.5
    An authentication enforcement vulnerability in SonicOS SSLVPN service may allow a user with valid credentials for an alternate...
    CISA KEV📅 Added to KEV: Nov 6, 2026
  • CVE-2026-120422CVSS 8.9
    Sogou Input Method for Windows contains a vulnerability in the configuration retrieval mechanism of its SGTool.exe component. The...
    Admin intel📅 Updated: Nov 5, 2026
  • CVE-2026-102895CVSS 9.8
    GPUStack is an open-source GPU cluster manager for AI model serving and GPU instance provisioning. Prior to 2.2.0,...
    Watchtower Verified📅 Updated: Nov 5, 2026
  • CVE-2026-115732CVSS 9.0
    Incorrect authorization in the certificate-name matching of trapperkeeper-authorization, as used by Puppet Server, in the affected products, allows...
    Admin intel📅 Updated: Nov 4, 2026
  • CVE-2026-98432CVSS 9.8
    In the Linux kernel, the following vulnerability has been resolved: ipv4: free inet_opt and ireq_opt after an RCU...
    Admin intel📅 Updated: Nov 4, 2026
  • CVE-2026-107441CVSS 8.8
    An out-of-bounds write vulnerability in the CGI program of Zyxel GS1900-24E firmware versions through 2.90(AAHK.2)C0 could allow an...
    Admin intel📅 Updated: Nov 4, 2026
  • CVE-2019-25779CVSS 7.5
    The Diarise theme for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.5.9....
    Watchtower Verified📅 Updated: Nov 4, 2026
Powered by CVE Watchtower

Critical Vulnerabilities

  • CVE-2026-18535CVSS 9.6
    IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 are vulnerable to a Regular Expression Denial of...
    📅 Updated: Nov 8, 2026
  • CVE-2026-17409CVSS 9.4
    IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote attacker to execute unauthorized...
    📅 Updated: Nov 8, 2026
  • CVE-2026-123614CVSS 9.3
    imgproxy from 4.0.0 before 4.0.16 contains an integer overflow in the ICO loader that allows remote attackers to...
    📅 Updated: Nov 8, 2026
  • CVE-2026-123550CVSS 9.3
    OpenAM before 16.1.4 contains an authentication bypass vulnerability in its SAML v2.0 service provider that accepts unsigned assertions...
    📅 Updated: Nov 8, 2026
  • CVE-2026-123551CVSS 10.0
    OpenAM from 14.0.0 before 16.1.4 contains an information disclosure vulnerability that allows unauthenticated attackers to read live session...
    📅 Updated: Nov 8, 2026
  • CVE-2026-123549CVSS 9.3
    OpenAM before 16.1.4 fails to enforce the Valid Creation Attributes list during self-registration, allowing anonymous attackers to set...
    📅 Updated: Nov 8, 2026
  • CVE-2025-57085CVSS 9.8
    Tenda W30E V16.01.0.19 (5037) was discovered to contain a stack overflow in the v17 parameter in the UploadCfg...
    📅 Updated: Nov 8, 2026
  • CVE-2025-59359CVSS 9.8
    The cleanTcs mutation in Chaos Controller Manager is vulnerable to OS command injection. In conjunction with CVE-2025-59358, this...
    📅 Updated: Nov 8, 2026
Powered by CVE Watchtower

Daily CyberSecurity

  • About SecurityOnline.info
  • Advertise with us
  • Announcement
  • Contact
  • Contributor Register
  • Login
  • Disclaimer
  • DCMA
  • Privacy Policy
  • About SecurityOnline.info
  • Advertise on SecurityOnline.info
  • Contact Us

When you purchase through links on our site, we may earn an affiliate commission. Here’s how it works

  • CVE Watchtower
  • CVE Statistics by Vendor 2026
  • Q3 2026 Report
  • Top Exploited CVEs
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube
© 2017 - 2026 Daily CyberSecurity. All Rights Reserved.