Skip to content
November 8, 2026
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube

Daily CyberSecurity

Zero-hour alerts. Unmatched analysis.

Primary Menu
  • Home
  • CVE Data
    • CVE Watchtower
    • Top Exploited CVEs
    • CVE Stats by Vendor
    • Q2 2026 Report
    • CVE Alerts
    • CVE Alert Settings
    • Pricing
  • Cyber Criminals
  • Data Leak
  • Free Tools
    • CVSS 3.1 Calculator
    • Certificate Viewer
    • DNS Lookup
    • Encoder & Hash Generator
    • IP / Subnet Calculator
    • Whois Lookup
  • Linux
  • Malware
  • Vulnerability
  • Submit Press Release
Light/Dark Button
A New Threat to Artists: Hackers Threaten to Feed Stolen Art to AI AI extortion, artists' rights
  • Cybercriminals

A New Threat to Artists: Hackers Threaten to Feed Stolen Art to AI

Do Son September 8, 2025 0

A hacker group is extorting an art platform with a new threat: if the ransom isn't paid, they will feed the stolen artworks to AI training models.

Microsoft Access 2016/2019 Is Nearing End-of-Life Smart App Control blocking Armoury Crate, ROG Ally Defender false positive 2026 Microsoft Zero-Day, Cloud Files UAF Microsoft Access end of life CVE-2025-21298 Azure Vulnerabilities
  • Technology

Microsoft Access 2016/2019 Is Nearing End-of-Life

Do Son September 8, 2025 0

Microsoft Access 2016 and 2019 will officially lose support on October 14, 2025. Learn why it’s critical to upgrade to a newer version to stay secure.

CVE-2025-58782: Apache Jackrabbit Vulnerability Exposes Systems to JNDI Injection and RCE Apache Jackrabbit, JNDI injection CVE-2023-37895 Apache Jackrabbit, XXE Vulnerability
  • Vulnerability Report

CVE-2025-58782: Apache Jackrabbit Vulnerability Exposes Systems to JNDI Injection and RCE

Do Son September 8, 2025 0

A new vulnerability in Apache Jackrabbit (CVE-2025-58782) exposes enterprise systems to JNDI injection, which could lead to remote code execution.

Microsoft Gives U.S. University Students Free Microsoft 365 Personal student discount Microsoft 365, Intelligent Services Microsoft 365 UWP, App Deprecation Microsoft 365, Startup Boost Windows 10 EOL, Microsoft 365 Support Protocol Deprecation Microsoft 365 Updates, IT Admin Alert Microsoft 365 VPN shut down Microsoft Authenticator, password manager Windows 10 Microsoft 365 Microsoft nonprofit policy, software donations
  • Technology

Microsoft Gives U.S. University Students Free Microsoft 365 Personal

Do Son September 8, 2025 0

Microsoft is giving a free one-year subscription to Microsoft 365 Personal to all U.S. university students, including access to Copilot and 1TB of storage.

iPhone 17 Air: A Beautifully Thin Phone, but with Major Compromises iPhone 17 Air, ultra-thin design iPhone Reverse charging Apple AI, Siri Overhaul iOS 26 Features
  • Technology

iPhone 17 Air: A Beautifully Thin Phone, but with Major Compromises

Do Son September 8, 2025 0

Apple is set to unveil the iPhone 17 Air, an ultra-thin phone with a single camera and potentially a small battery. Is the trade-off for design worth it?

Qualcomm CEO: Intel’s Foundry Is Not Ready for Our Chips Qualcomm support updates vs. Arm
  • Technology

Qualcomm CEO: Intel’s Foundry Is Not Ready for Our Chips

Do Son September 8, 2025 0

Qualcomm's CEO says Intel's foundry technology isn't advanced enough for its needs, signaling continued reliance on TSMC and Samsung for chip production.

iOS 26 Finally Unlocks Full-Resolution Screen Recording Apple Russia payment suspension iOS 26.3 Proximity Pairing, Apple DMA compliance 2026 Tap to Pay, Apple Pay Wireless charging Always-On Display, iOS 26 iOS 26, EU App APIs Rare Earths, Apple Supply Chain
  • Technology

iOS 26 Finally Unlocks Full-Resolution Screen Recording

Do Son September 8, 2025 0

Apple's new iOS 26 beta finally removes the 1920-pixel cap on screen recordings, allowing you to capture full-resolution video on your iPhone.

Noisy Bear: A New APT Group Is Spying on Kazakhstan’s Energy Sector Noisy Bear, cyber espionage
  • Cyber Security

Noisy Bear: A New APT Group Is Spying on Kazakhstan’s Energy Sector

Do Son September 8, 2025 0

A new report reveals Noisy Bear, an APT group targeting Kazakhstan’s oil and gas sector with spear-phishing and multi-stage malware, mimicking internal communications.

Progress Patches Remote Command Execution Flaw in OpenEdge AdminServer (CVE-2025-7388) CVE-2024-46909 & CVE-2024-8785 OpenEdge, Remote Command Execution
  • Vulnerability Report

Progress Patches Remote Command Execution Flaw in OpenEdge AdminServer (CVE-2025-7388)

Do Son September 8, 2025 0

Progress Software has patched a high-severity RCE flaw (CVE-2025-7388) in OpenEdge AdminServer. The bug allows authenticated attackers to execute commands via Java RMI.

NightshadeC2: A New Botnet Is Using “UAC Prompt Bombing” to Bypass Windows Defender NightshadeC2, UAC Prompt Bombing
  • Malware

NightshadeC2: A New Botnet Is Using “UAC Prompt Bombing” to Bypass Windows Defender

Do Son September 8, 2025 0

A new botnet, NightshadeC2, is using a technique called "UAC Prompt Bombing" to bypass sandboxes and Windows Defender by relentlessly looping UAC prompts.

Podman Patches Symlink Traversal Vulnerability in kube play Command (CVE-2025-9566) Podman, container vulnerability
  • Vulnerability Report

Podman Patches Symlink Traversal Vulnerability in kube play Command (CVE-2025-9566)

Do Son September 8, 2025 0

A high-severity flaw (CVE-2025-9566) in Podman allows malicious containers to overwrite host files via a symlink traversal attack. A patch is available in Podman v5.6.1.

50,000 Emails a Day: How a Cloud Flaw Is Fueling Phishing Campaigns phishing-3390518_1280
  • Cybercriminals

50,000 Emails a Day: How a Cloud Flaw Is Fueling Phishing Campaigns

Do Son September 8, 2025 0

A new report reveals how a compromised AWS key was used to bypass security controls in Amazon SES, enabling a 50,000-email-per-day phishing campaign.

CVE-2025-57052: Critical JSON Parsing Flaw in cJSON With CVSS 9.8, PoC Available cJSON vulnerability
  • Vulnerability Report

CVE-2025-57052: Critical JSON Parsing Flaw in cJSON With CVSS 9.8, PoC Available

Do Son September 8, 2025 0

A critical flaw in the cJSON library (CVE-2025-57052) allows attackers to bypass array bounds checking with a malformed JSON pointer. The bug has a CVSS 9.8 score.

Anthropic to Pay Authors $1.5B in Landmark AI Copyright Settlement Anthropic Claude Code telemetry rollback response and developer community controversy Claude Code human error Claude AI Data Wipe, Constraining AI Tools Anthropic lawsuit, AI copyright Claude Code, web editor
  • Technology

Anthropic to Pay Authors $1.5B in Landmark AI Copyright Settlement

Do Son September 8, 2025 0

Anthropic has agreed to pay a record $1.5 billion to settle a lawsuit with authors who accused the company of using their books to train its Claude model.

Google to Restrict Android Sideloading in New Security Push Android Zero-Click RCE CVE-2026-0073 Android sideloading CVE-2024-43096, CVE-2024-43770, CVE-2024-43771, CVE-2024-49747 and, CVE-2024-49748
  • Android

Google to Restrict Android Sideloading in New Security Push

Do Son September 8, 2025 0

Google will require developers to verify their identity to enable app sideloading on Android, a move intended to enhance security but with potential consequences.

CVE-2025-58179: Astro Cloudflare Adapter Vulnerability Enables SSRF Astro vulnerability
  • Vulnerability Report

CVE-2025-58179: Astro Cloudflare Adapter Vulnerability Enables SSRF

Do Son September 7, 2025 0

A high-severity flaw (CVE-2025-58179) in Astro's Cloudflare adapter allows attackers to bypass domain restrictions, leading to SSRF and XSS attacks.

Azure Services Disrupted After Red Sea Submarine Cables Severed Azure outage, Front Door Microsoft Azure Surveillance, Gaza Call Records Red Sea cables, Azure outage MFA enforcement Azure outage, Red Sea cables Azure Key Vault Azure, Surveillance
  • Technology

Azure Services Disrupted After Red Sea Submarine Cables Severed

Do Son September 7, 2025 0

Microsoft Azure cloud services were disrupted after multiple international cables in the Red Sea were severed. Rerouted traffic may increase latency.

EU Fines Google $3.5B for Abusing Its Ad Tech Monopoly Google Self-Preferencing Fine Idealo Antitrust Damages Anthropic, Google TPUs Google DMA Compliance, Search Self-Preferencing Google Play Store Ruling, Epic Games Victory Google fine, ad tech Google lawsuit, privacy violation Gmail security, false alarm Google Play EU regulation Google Security, Phone Number Leak Google 2025 - Google China’s Anti-Monopoly Law Google monopoly, ad tech Pixel 7a battery, battery swelling
  • Technology

EU Fines Google $3.5B for Abusing Its Ad Tech Monopoly

Do Son September 7, 2025 0

The EU has fined Google €2.95B for favoring its own ad tech services, a practice that distorted competition and harmed rivals, advertisers, and publishers.

Unity 6.3 Makes Gaming More Accessible for Visually Impaired Players Unity ironSource shutdown game accessibility, Unity screen reader
  • Technology

Unity 6.3 Makes Gaming More Accessible for Visually Impaired Players

Do Son September 7, 2025 0

Unity's new 6000.3.0a5 alpha release adds native support for screen readers on macOS and Windows, making it easier and cheaper to create accessible games.

OpenAI Is Making Its Own AI Chips to Challenge NVIDIA OpenAI token price reduction OpenAI Deployment Company DeployCo OpenAI IPO strategy OpenAI Privacy Filter 1.5B OpenAI $122 billion funding OpenAI GitHub alternative OpenAI military agreement 2026 OpenAI Stargate project collapse NVIDIA OpenAI investment stall ChatGPT Go $8 subscription, OpenAI GPT-5.2 Instant ads OpenAI Torch acquisition, Unified Medical Memory OpenAI Head of Preparedness 2025, Sam Altman AI safety lawsuits ChatGPT Advertising Speculation OpenAI Ad Code Denial OpenAI AI Confession Hallucination Mitigation ChatGPT Quality Focus OpenAI Gemini Red Alert ChatGPT Login, AI ecosystem OpenAI Mental Health, AI Well-Being Council ChatGPT Instant Checkout, Agentic Commerce OpenAI cloud computing OpenAI, startup incubator OpenAI chips, NVIDIA competition AI competition, antitrust lawsuit GPT-5, OpenAI Livestream OpenAI Open-Weight, AI Models OpenAI Infrastructure, AI Data Centers ChatGPT Business, Office Productivity OpenAI Open-Weight Model, WindSurf Acquisition OpenAI AI Browser, ChatGPT Integration Mattel AI, OpenAI Partnership OpenAI o3, Price Cut OpenAI's Next-Gen AI: O3-Pro's Enhanced Reasoning PowerOpenAI profit OpenAI Bid OpenAI Social Network ChatGPT Social OpenAI Non-profit OpenAI UAE ChatGPT Plus free
  • Technology

OpenAI Is Making Its Own AI Chips to Challenge NVIDIA

Do Son September 7, 2025 0

OpenAI is partnering with Broadcom to mass-produce its own AI chips starting in 2026, a move aimed at reducing its reliance on NVIDIA.

Qualcomm & BMW Partner to Revolutionize Autonomous Driving Qualcomm Q1 2026 earnings Snapdragon Ride, autonomous driving
  • Technology

Qualcomm & BMW Partner to Revolutionize Autonomous Driving

Do Son September 7, 2025 0

Qualcomm and BMW have partnered to create Snapdragon Ride AD, a new software stack for autonomous driving that's debuting in the all-new BMW iX3.

Apple Sued for Training AI on Pirated Books Apple Zero-Day CVE-2025-43529 WebKit Zero-Day, Targeted iOS Spyware Apple spyware alerts, zero-click attacks Apple, trademark lawsuit CVE-2024-54527 PoC exploit Apple, App Store
  • Technology

Apple Sued for Training AI on Pirated Books

Do Son September 7, 2025 0

Apple is the latest tech giant to face a copyright lawsuit. Authors claim the company used a dataset of pirated e-books to train its new AI models.

❮ Prev Page
Next Page ❯

Search

CVE ALERTS
📈

EPSS Spike Alerts
Catch risk spikes before they make headlines.

🎯

Custom EPSS/CVSS
Set score thresholds to effectively filter noise.

🛡️

Exploit Intel
Real-world exploit signals beyond the KEV catalog.

🐙

GitHub Issues
Auto-create alert tickets without duplication.

📬

Weekly Digest
Clean summaries, eliminating email spam.

🏷️

Watchlist Groups
Tag vulnerabilities by team (Infra/AppSec/SOC).

🔀

Smart Routing
Route chat channels based on severity levels.

🚨

RBP Tracker
Early warning detection and tracking system.

Subscribe – $7/mo or try free for 14 days →

🚨 Active Exploits in the Wild

  • CVE-2026-123158CVSS 8.1
    sshd in OpenSSH before 10.6p2 on Linux, when musl libc is used without PAM, lacks a workaround for...
    Admin intel📅 Updated: Nov 6, 2026
  • CVE-2026-19868CVSS 7.5
    An authentication enforcement vulnerability in SonicOS SSLVPN service may allow a user with valid credentials for an alternate...
    CISA KEV📅 Added to KEV: Nov 6, 2026
  • CVE-2026-120422CVSS 8.9
    Sogou Input Method for Windows contains a vulnerability in the configuration retrieval mechanism of its SGTool.exe component. The...
    Admin intel📅 Updated: Nov 5, 2026
  • CVE-2026-102895CVSS 9.8
    GPUStack is an open-source GPU cluster manager for AI model serving and GPU instance provisioning. Prior to 2.2.0,...
    Watchtower Verified📅 Updated: Nov 5, 2026
  • CVE-2026-115732CVSS 9.0
    Incorrect authorization in the certificate-name matching of trapperkeeper-authorization, as used by Puppet Server, in the affected products, allows...
    Admin intel📅 Updated: Nov 4, 2026
  • CVE-2026-98432CVSS 9.8
    In the Linux kernel, the following vulnerability has been resolved: ipv4: free inet_opt and ireq_opt after an RCU...
    Admin intel📅 Updated: Nov 4, 2026
  • CVE-2026-107441CVSS 8.8
    An out-of-bounds write vulnerability in the CGI program of Zyxel GS1900-24E firmware versions through 2.90(AAHK.2)C0 could allow an...
    Admin intel📅 Updated: Nov 4, 2026
  • CVE-2019-25779CVSS 7.5
    The Diarise theme for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.5.9....
    Watchtower Verified📅 Updated: Nov 4, 2026
Powered by CVE Watchtower

Critical Vulnerabilities

  • CVE-2026-18535CVSS 9.6
    IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 are vulnerable to a Regular Expression Denial of...
    📅 Updated: Nov 8, 2026
  • CVE-2026-17409CVSS 9.4
    IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote attacker to execute unauthorized...
    📅 Updated: Nov 8, 2026
  • CVE-2026-123614CVSS 9.3
    imgproxy from 4.0.0 before 4.0.16 contains an integer overflow in the ICO loader that allows remote attackers to...
    📅 Updated: Nov 8, 2026
  • CVE-2026-123550CVSS 9.3
    OpenAM before 16.1.4 contains an authentication bypass vulnerability in its SAML v2.0 service provider that accepts unsigned assertions...
    📅 Updated: Nov 8, 2026
  • CVE-2026-123551CVSS 10.0
    OpenAM from 14.0.0 before 16.1.4 contains an information disclosure vulnerability that allows unauthenticated attackers to read live session...
    📅 Updated: Nov 8, 2026
  • CVE-2026-123549CVSS 9.3
    OpenAM before 16.1.4 fails to enforce the Valid Creation Attributes list during self-registration, allowing anonymous attackers to set...
    📅 Updated: Nov 8, 2026
  • CVE-2025-57085CVSS 9.8
    Tenda W30E V16.01.0.19 (5037) was discovered to contain a stack overflow in the v17 parameter in the UploadCfg...
    📅 Updated: Nov 8, 2026
  • CVE-2025-59359CVSS 9.8
    The cleanTcs mutation in Chaos Controller Manager is vulnerable to OS command injection. In conjunction with CVE-2025-59358, this...
    📅 Updated: Nov 8, 2026
Powered by CVE Watchtower

Daily CyberSecurity

  • About SecurityOnline.info
  • Advertise with us
  • Announcement
  • Contact
  • Contributor Register
  • Login
  • Disclaimer
  • DCMA
  • Privacy Policy
  • About SecurityOnline.info
  • Advertise on SecurityOnline.info
  • Contact Us

When you purchase through links on our site, we may earn an affiliate commission. Here’s how it works

  • CVE Watchtower
  • CVE Statistics by Vendor 2026
  • Q3 2026 Report
  • Top Exploited CVEs
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube
© 2017 - 2026 Daily CyberSecurity. All Rights Reserved.