Skip to content
November 8, 2026
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube

Daily CyberSecurity

Zero-hour alerts. Unmatched analysis.

Primary Menu
  • Home
  • CVE Data
    • CVE Watchtower
    • Top Exploited CVEs
    • CVE Stats by Vendor
    • Q2 2026 Report
    • CVE Alerts
    • CVE Alert Settings
    • Pricing
  • Cyber Criminals
  • Data Leak
  • Free Tools
    • CVSS 3.1 Calculator
    • Certificate Viewer
    • DNS Lookup
    • Encoder & Hash Generator
    • IP / Subnet Calculator
    • Whois Lookup
  • Linux
  • Malware
  • Vulnerability
  • Submit Press Release
Light/Dark Button
A Legal Breakthrough: Internet Archive Settles Copyright Lawsuit with Record Labels Wayback Machine AI Blockade Internet Archive, FDLP Designation Internet Archive, copyright lawsuit
  • Technology

A Legal Breakthrough: Internet Archive Settles Copyright Lawsuit with Record Labels

Do Son September 17, 2025 0

The Internet Archive has settled a copyright lawsuit with record labels over its Great 78 Project. The case highlights the conflict between digital preservation and copyright.

Avert the Ban: A U.S.-China Deal Will Grant Americans Majority Control Over TikTok TikTok acquisition TikTok, U.S.-China deal TikTok M2, US DivestmentTrump saves TikTok
  • Technology

Avert the Ban: A U.S.-China Deal Will Grant Americans Majority Control Over TikTok

Do Son September 17, 2025 0

The U.S. and China are finalizing a deal for TikTok. The new arrangement will give U.S. investors majority control, ensuring the app's survival.

BreachForums Founder Resentenced to Three Years in Prison for Cybercrime AccountDumpling Phishing Google AppSheet Abuse AI-Generated Malware PureRAT Campaign RondoDoX Botnet, Next.js React2Shell EchoGather, Paper Werewolf Salt Typhoon, Telecom Espionage BreachForums, Conor Fitzpatrick Ransomware Negotiation, DOJ Investigation MirrorFace group - Earth Kasha Emperor Dragonfly
  • Cybercriminals

BreachForums Founder Resentenced to Three Years in Prison for Cybercrime

Do Son September 17, 2025 0

The founder of BreachForums, Conor Fitzpatrick, has been resentenced to three years in prison after his initial lenient sentence was overturned by a U.S. appeals court.

Kubernetes C# Client Flaw Exposes API to MITM Attacks (CVE-2025-9708) Ingress-Nginx Vulnerability Kubernetes RCE Vulnerability CVE-2025-9708 Kubernetes Security, Image Builder Vulnerability CVE-2024-10220 - OPA Gatekeeper Bypass
  • Vulnerability Report

Kubernetes C# Client Flaw Exposes API to MITM Attacks (CVE-2025-9708)

Do Son September 17, 2025 0

A medium-severity vulnerability (CVE-2025-9708) in the Kubernetes C# client allows MITM attacks and API impersonation. Update now to patch.

RevengeHotels Strikes Back: AI-Generated Phishing and a New RAT Target Hotels RevengeHotels, Hospitality Cybercrime
  • Cybercriminals

RevengeHotels Strikes Back: AI-Generated Phishing and a New RAT Target Hotels

Do Son September 17, 2025 0

The RevengeHotels cybercrime group has returned, using phishing lures with AI-generated code to target hotels and steal credit card data.

Shai-Hulud Supply Chain Attack Now Targets CrowdStrike’s npm Packages supply-chain-attack
  • Cybercriminals

Shai-Hulud Supply Chain Attack Now Targets CrowdStrike’s npm Packages

Do Son September 17, 2025 0

The Shai-Hulud supply chain attack has compromised multiple CrowdStrike npm packages, injecting malware to steal credentials and data.

KSMBDrain (CVE-2025-38501): Linux Kernel Flaw Allows Remote DoS Attacks, PoC Available Linux DoS CVE-2025-38501
  • Vulnerability Report

KSMBDrain (CVE-2025-38501): Linux Kernel Flaw Allows Remote DoS Attacks, PoC Available

Do Son September 17, 2025 0

A new Linux kernel flaw, CVE-2025-38501, exposes KSMBD servers to unauthenticated remote DoS attacks. A public PoC is available now.

APT28’s BeardShell Campaign: Steganography, Cloud Abuse, and Persistent Espionage Labkotec LID-3300IP CVE-2026-1775 ASUSTOR ADM Vulnerability CVE-2026-3179 Russian Cyberattacks - Security Operations Center
  • Cyber Security

APT28’s BeardShell Campaign: Steganography, Cloud Abuse, and Persistent Espionage

Do Son September 17, 2025 0

A new APT28 campaign targets Ukraine's military with a blend of steganography, open-source tools, and legitimate cloud services for covert C2.

SmokeLoader Rises From the Ashes with New, Evasive Variants SmokeLoader, Malware
  • Malware

SmokeLoader Rises From the Ashes with New, Evasive Variants

Do Son September 17, 2025 0

SmokeLoader is back. Despite a recent takedown, the malware loader returns with new versions, fixing bugs and adding advanced evasion tactics.

PureHVNC RAT: Inside the HVNC Malware and the PureCoder Ecosystem Kali365 phishing platform EmEditor Supply Chain Attack, WALSHAM INVESTMENTS LIMITED EggStreme, fileless malware North Korea Cybercrime, Remote IT Job Fraud RedDelta APT
  • Cybercriminals

PureHVNC RAT: Inside the HVNC Malware and the PureCoder Ecosystem

Do Son September 17, 2025 0

A new report uncovers the Pure malware family and its developer, PureCoder, highlighting an eight-day intrusion using the sophisticated PureHVNC RAT.

AISURU Botnet: From Record-Breaking DDoS to Residential Proxy Empire CVE-2024-22394
  • Malware

AISURU Botnet: From Record-Breaking DDoS to Residential Proxy Empire

Do Son September 17, 2025 0

Discover how the AISURU botnet has evolved from a destructive DDoS force to a multi-purpose criminal enterprise, monetizing residential proxies.

3 Weeks Left Until the Start of the OpenSSL Conference 2025 OpenSSLConf_BLOG-3weeks2_1758037240kgUqjwfaSj
  • Press Release

3 Weeks Left Until the Start of the OpenSSL Conference 2025

cybernewswire September 16, 2025 0
Newark, New Jersey, United States, 16th September 2025, CyberNewsWire
Read More Read more about 3 Weeks Left Until the Start of the OpenSSL Conference 2025
Malicious Update to Popular NPM Package TinyColor Exposes Software Supply Chains Quest KACE Vulnerability CVE-2025-32975 FortiGate SSO Bypass, Active Exploitation GoAnywhere RCE, Storm-1175 Cisco VPN RCE, ASA Zero-Day TinyColor Supply Chain Attack SK Telecom, data breach Erlang/OTP RCE, OT Network Security Ivanti CSA Attacks WordPress RCE, Theme Vulnerability
  • Malware

Malicious Update to Popular NPM Package TinyColor Exposes Software Supply Chains

Do Son September 16, 2025 0

A sophisticated supply chain attack has compromised over 40 npm packages, including the popular TinyColor library, to steal developer credentials.

Seraphic Browser-Native Protection Now Available for Purchase on the CrowdStrike Marketplace photo_2025-09-15_14-04-00_17579342690col3v700h
  • Press Release

Seraphic Browser-Native Protection Now Available for Purchase on the CrowdStrike Marketplace

cybernewswire September 16, 2025 0
Las Vegas, United States, 16th September 2025, CyberNewsWire
Read More Read more about Seraphic Browser-Native Protection Now Available for Purchase on the CrowdStrike Marketplace
Microsoft’s Latest Update Breaks SMBv1, Here’s How to Fix It Windows 11 app updates Windows Insider preview build, Calculator app update, built-in Windows apps Windows 11 KB5089549 network lag Windows 11 Home to Pro Education upgrade Windows 11 Start menu update Windows 11 update KB5079391 Windows 11 KB5085516 OOB update Windows 11 C drive permission error Windows 11 C drive access denied Windows native NVMe driver UEFI Secure Boot certificate rotation Windows 11 printer driver policy Windows 11 printer driver deprecation Windows 11 Build 26300 Sysmon Windows 11 Storage settings restriction Windows 11 Build 26300.7674, Windows Insider channel migration 2026 Windows 11 Update Fix KB5073455 shutdown bug, Secure Launch restart loop Windows 11 File Explorer search performance, Search Indexer RAM usage fix Windows 11 Gaming PC Specs, NVMe DirectStorage Windows 10 End of Support Windows 11 Slow Adoption Windows 11 Crash Loop KB5062553 Bug Update and Shut Down, KB5067036 Windows authentication, Kerberos bug Windows 11 fix, localhost bug Windows 11 Update Restart, Update and Shut Down Windows SMBv1 Windows 11 Arm, Easy Anti-Cheat Windows 11 error, Pluton Windows 11 24H2, Easy Anti-Cheat Windows Firewall Bug, Microsoft Update Error Windows 11, JScript9Legacy Windows Activation, TSforge Windows 11 Update, Firewall Error Windows 11 25H2, Annual Update Windows Resiliency Initiative, Kernel Security Windows 11 Upgrade, ESU Program Windows 11 Recall, Data Export Windows 11 Easy Anti-Cheat Windows 11 Update, Cumulative Update Windows Update, ACPI.sys Windows Updates, Enterprise Software Windows 11 Start Data Encryption Standard Printing Problems Windows 11 updates Estimated installation time Smart App Control, Windows 11 security
  • Windows

Microsoft’s Latest Update Breaks SMBv1, Here’s How to Fix It

Do Son September 16, 2025 0

Microsoft's latest security updates are causing SMBv1 connectivity issues. Learn why and find a temporary fix for your file sharing problems.

Wine 10.15: A Major Step Towards Faster Windows Gaming on Linux Wine 10.15, NTSYNC
  • Technology

Wine 10.15: A Major Step Towards Faster Windows Gaming on Linux

Do Son September 16, 2025 0

Wine 10.15 is here with a new NTSYNC driver that promises to boost Windows game performance on Linux, paving the way for Proton 11.

Chrome’s New Preloading is a Game-Changer Chrome 148 lazy loading Chrome for Linux ARM64 Chrome 145 Update Chrome Security Fixes Chrome Security Update CVE-2026-1220 Chrome 144 Security Update CVE-2026-0899 Chrome Memory Safety, WebGPU UAF Chrome V8 Type Confusion, Google Updater Flaw Chrome V8 Flaw, CVE-2025-13042 Chrome V8, Type Confusion, Chrome 142 Update Chrome V8 Flaw, CVE-2025-12036 Chrome 141, WebGPU Overflow Google Chrome preloading Chrome, V8 vulnerability CVE-2025-9132 Chrome Security Update, Use-After-Free Chrome V8, Type Confusion Chrome Telemetry, Windows 10 EOL Microsoft Family Safety, Chrome Blocking Chrome Security Update, High-Severity Google Chrome, Antitrust CVE-2024-10487 and CVE-2024-10488 Google Chrome Root Program Chrome Update, CVE-2025-3619 Chrome Acquisition, Perplexity.ai
  • Technology

Chrome’s New Preloading is a Game-Changer

Do Son September 16, 2025 0

Google is revamping Chrome with a new, lightweight preloading mechanism. This tech will make pages open instantly from your bookmarks and new tabs.

China Accuses NVIDIA of Anti-Monopoly Violations NVIDIA GPU Security CUDA-Q Vulnerability NVIDIA Apex Vulnerability AI Infrastructure Security NVIDIA Cumulus Linux CVE-2025-33179 NVIDIA Arm divestment NVIDIA DGX Spark, CVE-2025-33187 NVIDIA Isaac-GROOT, Code Injection Megatron-LM Vulnerability, AI Code Injection NVIDIA China NVIDIA GPUs, Hardware Kill Switches NVIDIA Megatron-LM, LLM Vulnerabilities NVIDIA Base Command Manager - CVE-2024-0138
  • Technology

China Accuses NVIDIA of Anti-Monopoly Violations

Do Son September 16, 2025 0

China's SAMR has launched a new probe into NVIDIA's 2019 Mellanox acquisition, alleging anti-monopoly violations and heightening tech tensions.

Apple Ends iCloud Support for Older Devices Apple Background Security CVE-2026-20643 Apple Background Security Improvement Apple Backdoor Apple Lawsuit, Data Exfiltration CVE-2024-44131 - CVE-2025-24118 PoC
  • Technology

Apple Ends iCloud Support for Older Devices

Do Son September 16, 2025 0

Apple has officially ended iCloud support for devices running iOS 10 and macOS 10.12. Backups and other services will no longer work.

NVIDIA CUDA is Coming to Ubuntu Repositories Ubuntu 26.04 sudo-rs Ubuntu 26.04 LTS, Release Schedule Ubuntu update bug, Rust coreutils Ubuntu, sudo-rs NVIDIA CUDA, Ubuntu
  • Linux
  • Technology

NVIDIA CUDA is Coming to Ubuntu Repositories

Do Son September 16, 2025 0

Canonical and NVIDIA are collaborating to bring the CUDA Toolkit to Ubuntu's repositories, streamlining the installation process for developers.

AV2 Codec: The Future of Video Compression is Coming AV2 codec, AOMedia
  • Technology

AV2 Codec: The Future of Video Compression is Coming

Do Son September 16, 2025 0

The Alliance for Open Media is set to release its next-gen AV2 video codec by the end of 2025. Learn how it will revolutionize video compression.

Is Your iOS 26 Battery Draining? Here’s Why AirDrop PIN Pairing 30-Day AirDrop Trust iOS 26 downgrade iOS 26 battery drain 5G MacBook, Cellular Mac iOS 26, Communication Safety iOS 26, Wi-Fi Synchronization iOS 26, Wi-Fi Synchronization Apple Redesign Apple Public Betas, AirPods Firmware
  • Technology

Is Your iOS 26 Battery Draining? Here’s Why

Do Son September 16, 2025 0

Worried about iOS 26 draining your battery? Apple confirms it's a temporary effect. Learn why your iPhone's battery life dips after a major update.

❮ Prev Page
Next Page ❯

Search

CVE ALERTS
📈

EPSS Spike Alerts
Catch risk spikes before they make headlines.

🎯

Custom EPSS/CVSS
Set score thresholds to effectively filter noise.

🛡️

Exploit Intel
Real-world exploit signals beyond the KEV catalog.

🐙

GitHub Issues
Auto-create alert tickets without duplication.

📬

Weekly Digest
Clean summaries, eliminating email spam.

🏷️

Watchlist Groups
Tag vulnerabilities by team (Infra/AppSec/SOC).

🔀

Smart Routing
Route chat channels based on severity levels.

🚨

RBP Tracker
Early warning detection and tracking system.

Subscribe – $7/mo or try free for 14 days →

🚨 Active Exploits in the Wild

  • CVE-2026-123158CVSS 8.1
    sshd in OpenSSH before 10.6p2 on Linux, when musl libc is used without PAM, lacks a workaround for...
    Admin intel📅 Updated: Nov 6, 2026
  • CVE-2026-19868CVSS 7.5
    An authentication enforcement vulnerability in SonicOS SSLVPN service may allow a user with valid credentials for an alternate...
    CISA KEV📅 Added to KEV: Nov 6, 2026
  • CVE-2026-120422CVSS 8.9
    Sogou Input Method for Windows contains a vulnerability in the configuration retrieval mechanism of its SGTool.exe component. The...
    Admin intel📅 Updated: Nov 5, 2026
  • CVE-2026-102895CVSS 9.8
    GPUStack is an open-source GPU cluster manager for AI model serving and GPU instance provisioning. Prior to 2.2.0,...
    Watchtower Verified📅 Updated: Nov 5, 2026
  • CVE-2026-115732CVSS 9.0
    Incorrect authorization in the certificate-name matching of trapperkeeper-authorization, as used by Puppet Server, in the affected products, allows...
    Admin intel📅 Updated: Nov 4, 2026
  • CVE-2026-98432CVSS 9.8
    In the Linux kernel, the following vulnerability has been resolved: ipv4: free inet_opt and ireq_opt after an RCU...
    Admin intel📅 Updated: Nov 4, 2026
  • CVE-2026-107441CVSS 8.8
    An out-of-bounds write vulnerability in the CGI program of Zyxel GS1900-24E firmware versions through 2.90(AAHK.2)C0 could allow an...
    Admin intel📅 Updated: Nov 4, 2026
  • CVE-2019-25779CVSS 7.5
    The Diarise theme for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.5.9....
    Watchtower Verified📅 Updated: Nov 4, 2026
Powered by CVE Watchtower

Critical Vulnerabilities

  • CVE-2026-18535CVSS 9.6
    IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 are vulnerable to a Regular Expression Denial of...
    📅 Updated: Nov 8, 2026
  • CVE-2026-17409CVSS 9.4
    IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote attacker to execute unauthorized...
    📅 Updated: Nov 8, 2026
  • CVE-2026-123614CVSS 9.3
    imgproxy from 4.0.0 before 4.0.16 contains an integer overflow in the ICO loader that allows remote attackers to...
    📅 Updated: Nov 8, 2026
  • CVE-2026-123550CVSS 9.3
    OpenAM before 16.1.4 contains an authentication bypass vulnerability in its SAML v2.0 service provider that accepts unsigned assertions...
    📅 Updated: Nov 8, 2026
  • CVE-2026-123551CVSS 10.0
    OpenAM from 14.0.0 before 16.1.4 contains an information disclosure vulnerability that allows unauthenticated attackers to read live session...
    📅 Updated: Nov 8, 2026
  • CVE-2026-123549CVSS 9.3
    OpenAM before 16.1.4 fails to enforce the Valid Creation Attributes list during self-registration, allowing anonymous attackers to set...
    📅 Updated: Nov 8, 2026
  • CVE-2025-57085CVSS 9.8
    Tenda W30E V16.01.0.19 (5037) was discovered to contain a stack overflow in the v17 parameter in the UploadCfg...
    📅 Updated: Nov 8, 2026
  • CVE-2025-59359CVSS 9.8
    The cleanTcs mutation in Chaos Controller Manager is vulnerable to OS command injection. In conjunction with CVE-2025-59358, this...
    📅 Updated: Nov 8, 2026
Powered by CVE Watchtower

Daily CyberSecurity

  • About SecurityOnline.info
  • Advertise with us
  • Announcement
  • Contact
  • Contributor Register
  • Login
  • Disclaimer
  • DCMA
  • Privacy Policy
  • About SecurityOnline.info
  • Advertise on SecurityOnline.info
  • Contact Us

When you purchase through links on our site, we may earn an affiliate commission. Here’s how it works

  • CVE Watchtower
  • CVE Statistics by Vendor 2026
  • Q3 2026 Report
  • Top Exploited CVEs
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube
© 2017 - 2026 Daily CyberSecurity. All Rights Reserved.