Skip to content
November 8, 2026
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube

Daily CyberSecurity

Zero-hour alerts. Unmatched analysis.

Primary Menu
  • Home
  • CVE Data
    • CVE Watchtower
    • Top Exploited CVEs
    • CVE Stats by Vendor
    • Q2 2026 Report
    • CVE Alerts
    • CVE Alert Settings
    • Pricing
  • Cyber Criminals
  • Data Leak
  • Free Tools
    • CVSS 3.1 Calculator
    • Certificate Viewer
    • DNS Lookup
    • Encoder & Hash Generator
    • IP / Subnet Calculator
    • Whois Lookup
  • Linux
  • Malware
  • Vulnerability
  • Submit Press Release
Light/Dark Button
Apple Revokes a Torrent Client’s Notarization, Sparking a New EU Dispute Vibe Coding apps Vibe Coding App Store surge Vibe Coding App Store Apple 50th Anniversary hardware Brazil CADE Apple settlement, iOS third-party app stores Brazil Tim Cook Succession Apple CEO Rumors App Store Mini Apps 15% Commission Fee iOS Japan Sideloading, Third-Party App Stores Web App Store, App Discovery Apple Age Verification, Texas SB2420 Apple AI acquisitions App Store, Antitrust Apple WebKit, Japan Regulations App Store Age Ratings, Parental Controls Apple App Store, Epic Games Lawsuit
  • Technology

Apple Revokes a Torrent Client’s Notarization, Sparking a New EU Dispute

Do Son August 28, 2025 0

Apple has revoked the notarization for a torrent client on an alternative EU app store, raising questions about its control over the notarization process and the intent of the DMA.

An Espionage System: NSA, CISA, & Partners Expose Chinese APT Groups Chinese APT, cyber espionage
  • Cyber Security

An Espionage System: NSA, CISA, & Partners Expose Chinese APT Groups

Do Son August 28, 2025 0

The NSA, CISA, and partners have released a joint advisory exposing how Chinese APT groups are compromising telecom and government networks for global espionage.

OFAC Sanctions North Korean IT Worker Network Funding Weapons Programs North Korea malware North Korea, OFAC sanctions DPRK AI hiring, Wagemole campaigns
  • Cybercriminals

OFAC Sanctions North Korean IT Worker Network Funding Weapons Programs

Do Son August 28, 2025 0

The U.S. Treasury has sanctioned individuals and entities linked to a North Korean IT worker scheme, which funnels millions of dollars to the regime's weapons programs.

A Single Packet Can Crash a DHCP Server: High-Severity Flaw CVE-2025-40779 Found in Kea critical BIND 9 flaws Kea DHCP Vulnerability CVE-2026-3608 CVE-2022-1183 CVE-2025-40779 Kea DHCP, vulnerability
  • Vulnerability Report

A Single Packet Can Crash a DHCP Server: High-Severity Flaw CVE-2025-40779 Found in Kea

Do Son August 28, 2025 0

A new report reveals a high-severity flaw (CVE-2025-40779) in the Kea DHCP server that allows a single crafted packet to crash the service, leading to a DoS condition.

Beyond the Terminal: Zed Editor Integrates Google Gemini for AI-Powered Coding Zed Editor, Gemini AI
  • Technology

Beyond the Terminal: Zed Editor Integrates Google Gemini for AI-Powered Coding

Do Son August 28, 2025 0

Zed Editor has partnered with Google to natively integrate the Gemini CLI, allowing developers to generate, refactor, and review code with AI directly in the editor.

Beyond Translation: Google Translate Adds a Gemini-Powered Language Tutor Google Translate, Gemini AI
  • Technology

Beyond Translation: Google Translate Adds a Gemini-Powered Language Tutor

Do Son August 28, 2025 0

Google Translate is getting a major upgrade with new Gemini AI features, including a language practice tool and enhanced real-time conversation translations.

A Game-Changer for Gamers: Windows 11 Is Fixing Bluetooth Audio at Last Bluetooth audio, Windows 11
  • Windows

A Game-Changer for Gamers: Windows 11 Is Fixing Bluetooth Audio at Last

Do Son August 28, 2025 0

Microsoft is overhauling Bluetooth audio in Windows 11 to allow high-fidelity stereo sound while the microphone is active, a major improvement for gamers and callers.

Parallels Desktop 26 Arrives, Optimized for macOS Tahoe and Windows 11 Parallels Desktop 26, virtualization
  • Technology

Parallels Desktop 26 Arrives, Optimized for macOS Tahoe and Windows 11

Do Son August 28, 2025 0

Parallels Desktop 26 for Mac is out, optimized for macOS Tahoe and Windows 11 25H2. The new version adds deep integration and performance enhancements for virtualization.

A Strategic Pivot: Alphabet’s Verily Shuts Down Its Medical Devices Division to Focus on AI Verily, medical devices
  • Technology

A Strategic Pivot: Alphabet’s Verily Shuts Down Its Medical Devices Division to Focus on AI

Do Son August 28, 2025 0

Alphabet's subsidiary Verily is closing its medical devices division and laying off staff. The move is part of a strategic shift to focus on AI and data infrastructure.

Beyond Lobbying: Meta Creates a Super PAC to Shape AI Policy in California Meta Horizon Worlds Quest shutdown Meta AI, Child Safety Meta Robotics, Android of Robotics Meta AI, Llama 4.X Meta, AI regulation Meta AI, Data Center Impact Meta AI, Superintelligence Meta Copyrighted Data AI chatbot
  • Technology

Beyond Lobbying: Meta Creates a Super PAC to Shape AI Policy in California

Do Son August 28, 2025 0

Meta is creating a Super PAC to influence California politics ahead of the 2026 elections, aiming to prevent strict AI regulations from stifling tech innovation.

Samsung to Unveil Galaxy S25 FE with Premium Features at IFA 2024 Galaxy S25 FE, Samsung event
  • Technology

Samsung to Unveil Galaxy S25 FE with Premium Features at IFA 2024

Do Son August 28, 2025 0

Samsung will unveil the Galaxy S25 FE at its IFA 2024 event on Sept 4. The new phone will feature an Exynos 2400 chip and a large 4,900mAh battery.

A Landmark Deal: Anthropic Settles Class-Action Lawsuit with Authors Over AI Training Anthropic Vercept acquisition Claude AI model Anthropic ad-free Claude
  • Technology

A Landmark Deal: Anthropic Settles Class-Action Lawsuit with Authors Over AI Training

Do Son August 28, 2025 0

Anthropic has reached a settlement in a class-action lawsuit filed by authors who accused the company of using their works to train its AI models.

NVIDIA Issues Security Update for NeMo Framework: Multiple High-Severity Vulnerabilities Patched NVIDIA NeMo Framework
  • Vulnerability Report

NVIDIA Issues Security Update for NeMo Framework: Multiple High-Severity Vulnerabilities Patched

Do Son August 28, 2025 0

NVIDIA has released a critical security update for its NeMo Framework, patching four high-severity flaws that could allow attackers to execute code and tamper with AI pipelines.

Festival of Fraud: How Scammers Exploit Ganesh Chaturthi for Cybercrime Ganesh Chaturthi, festival scams
  • Cybercriminals

Festival of Fraud: How Scammers Exploit Ganesh Chaturthi for Cybercrime

Do Son August 28, 2025 0

A new report reveals how scammers are exploiting the Ganesh Chaturthi festival in India with fake websites, lottery fraud, and phishing to steal money and data.

PoC Available: CrushFTP Zero-Day (CVE-2025-54309) Exploited in the Wild CrushFTP zero-day
  • Vulnerability Report

PoC Available: CrushFTP Zero-Day (CVE-2025-54309) Exploited in the Wild

Do Son August 28, 2025 0

A zero-day authentication bypass flaw (CVE-2025-54309) in CrushFTP is being actively exploited in the wild. A PoC is available, and an urgent patch is required.

Infrawatch Uncovers Belarusian-Run Residential Proxy Network Inside U.S. Homes Residential proxies, DSLRoot
  • Cybercriminals

Infrawatch Uncovers Belarusian-Run Residential Proxy Network Inside U.S. Homes

Do Son August 28, 2025 0

A new report reveals DSLRoot, a residential proxy network operated by a Belarusian national that uses hardware planted in U.S. homes, enabling foreign operators to bypass security.

A Persistent Threat: Blind Eagle Hacking Group Continues to Target Colombia Blind Eagle, cyber espionage
  • Cyber Security

A Persistent Threat: Blind Eagle Hacking Group Continues to Target Colombia

Do Son August 28, 2025 0

A new report reveals the Blind Eagle hacking group is using spearphishing and commodity RATs to conduct cyber espionage against Colombian government and private sector targets.

A Deceptive App Is Stealing Data from Indonesian Civil Servants and Retirees TASPEN, mobile malware North Korean IT Worker Fraud
  • Cybercriminals

A Deceptive App Is Stealing Data from Indonesian Civil Servants and Retirees

Do Son August 28, 2025 0

A new report reveals a mobile malware campaign in Indonesia impersonating the state pension fund TASPEN to steal financial and personal data from civil servants.

Data Theft Alert: Salesforce Instances Breached via Third-Party App OAuth Tokens Salesforce data theft
  • Cybercriminals

Data Theft Alert: Salesforce Instances Breached via Third-Party App OAuth Tokens

Do Son August 28, 2025 0

A new report reveals a widespread data theft campaign targeting Salesforce instances. Attackers used compromised OAuth tokens from a third-party app to steal data and credentials.

A Silent Threat: How a Stealthy Campaign Is Stealing ScreenConnect Credentials for Ransomware ScreenConnect, credential harvesting
  • Cybercriminals

A Silent Threat: How a Stealthy Campaign Is Stealing ScreenConnect Credentials for Ransomware

Do Son August 28, 2025 0

A new report reveals a persistent phishing campaign targeting ScreenConnect super admins. The stolen credentials are being sold to ransomware affiliates for future attacks.

The Reversed Phishing Attack: New Campaign Triggers Victims to Call Hackers NATS-as-C2 Sysdig CVE-2026-33017 Langflow RCE Microsoft Phone Link Hijack CloudZ Pheno Plugin Insider Threat BlackCat (ALPHV) OFAC Sanctions DPRK IT Workers Transparent Tribe APT36 React2Shell, EtherRAT SideWinder Espionage, Netlify Phishing DDNS Abuse, C2 Infrastructure Hacking Health Club
  • Cybercriminals

The Reversed Phishing Attack: New Campaign Triggers Victims to Call Hackers

Do Son August 28, 2025 0

A new phishing campaign called ZipLine reverses the attack by tricking victims into initiating contact. It targets supply chains and deploys a custom in-memory implant.

NVIDIA Warns of a High-Severity Flaw in NeMo AI Curator (CVE-2025-23307) NeMo Curator, NVIDIA vulnerability
  • Vulnerability Report

NVIDIA Warns of a High-Severity Flaw in NeMo AI Curator (CVE-2025-23307)

Do Son August 27, 2025 0

NVIDIA has issued a high-severity security update for a flaw (CVE-2025-23307) in NeMo Curator. The vulnerability allows code injection and could compromise AI training pipelines.

❮ Prev Page
Next Page ❯

Search

CVE ALERTS
📈

EPSS Spike Alerts
Catch risk spikes before they make headlines.

🎯

Custom EPSS/CVSS
Set score thresholds to effectively filter noise.

🛡️

Exploit Intel
Real-world exploit signals beyond the KEV catalog.

🐙

GitHub Issues
Auto-create alert tickets without duplication.

📬

Weekly Digest
Clean summaries, eliminating email spam.

🏷️

Watchlist Groups
Tag vulnerabilities by team (Infra/AppSec/SOC).

🔀

Smart Routing
Route chat channels based on severity levels.

🚨

RBP Tracker
Early warning detection and tracking system.

Subscribe – $7/mo or try free for 14 days →

🚨 Active Exploits in the Wild

  • CVE-2026-123158CVSS 8.1
    sshd in OpenSSH before 10.6p2 on Linux, when musl libc is used without PAM, lacks a workaround for...
    Admin intel📅 Updated: Nov 6, 2026
  • CVE-2026-19868CVSS 7.5
    An authentication enforcement vulnerability in SonicOS SSLVPN service may allow a user with valid credentials for an alternate...
    CISA KEV📅 Added to KEV: Nov 6, 2026
  • CVE-2026-120422CVSS 8.9
    Sogou Input Method for Windows contains a vulnerability in the configuration retrieval mechanism of its SGTool.exe component. The...
    Admin intel📅 Updated: Nov 5, 2026
  • CVE-2026-102895CVSS 9.8
    GPUStack is an open-source GPU cluster manager for AI model serving and GPU instance provisioning. Prior to 2.2.0,...
    Watchtower Verified📅 Updated: Nov 5, 2026
  • CVE-2026-115732CVSS 9.0
    Incorrect authorization in the certificate-name matching of trapperkeeper-authorization, as used by Puppet Server, in the affected products, allows...
    Admin intel📅 Updated: Nov 4, 2026
  • CVE-2026-98432CVSS 9.8
    In the Linux kernel, the following vulnerability has been resolved: ipv4: free inet_opt and ireq_opt after an RCU...
    Admin intel📅 Updated: Nov 4, 2026
  • CVE-2026-107441CVSS 8.8
    An out-of-bounds write vulnerability in the CGI program of Zyxel GS1900-24E firmware versions through 2.90(AAHK.2)C0 could allow an...
    Admin intel📅 Updated: Nov 4, 2026
  • CVE-2019-25779CVSS 7.5
    The Diarise theme for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.5.9....
    Watchtower Verified📅 Updated: Nov 4, 2026
Powered by CVE Watchtower

Critical Vulnerabilities

  • CVE-2026-18535CVSS 9.6
    IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 are vulnerable to a Regular Expression Denial of...
    📅 Updated: Nov 8, 2026
  • CVE-2026-17409CVSS 9.4
    IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote attacker to execute unauthorized...
    📅 Updated: Nov 8, 2026
  • CVE-2026-123614CVSS 9.3
    imgproxy from 4.0.0 before 4.0.16 contains an integer overflow in the ICO loader that allows remote attackers to...
    📅 Updated: Nov 8, 2026
  • CVE-2026-123550CVSS 9.3
    OpenAM before 16.1.4 contains an authentication bypass vulnerability in its SAML v2.0 service provider that accepts unsigned assertions...
    📅 Updated: Nov 8, 2026
  • CVE-2026-123551CVSS 10.0
    OpenAM from 14.0.0 before 16.1.4 contains an information disclosure vulnerability that allows unauthenticated attackers to read live session...
    📅 Updated: Nov 8, 2026
  • CVE-2026-123549CVSS 9.3
    OpenAM before 16.1.4 fails to enforce the Valid Creation Attributes list during self-registration, allowing anonymous attackers to set...
    📅 Updated: Nov 8, 2026
  • CVE-2025-57085CVSS 9.8
    Tenda W30E V16.01.0.19 (5037) was discovered to contain a stack overflow in the v17 parameter in the UploadCfg...
    📅 Updated: Nov 8, 2026
  • CVE-2025-59359CVSS 9.8
    The cleanTcs mutation in Chaos Controller Manager is vulnerable to OS command injection. In conjunction with CVE-2025-59358, this...
    📅 Updated: Nov 8, 2026
Powered by CVE Watchtower

Daily CyberSecurity

  • About SecurityOnline.info
  • Advertise with us
  • Announcement
  • Contact
  • Contributor Register
  • Login
  • Disclaimer
  • DCMA
  • Privacy Policy
  • About SecurityOnline.info
  • Advertise on SecurityOnline.info
  • Contact Us

When you purchase through links on our site, we may earn an affiliate commission. Here’s how it works

  • CVE Watchtower
  • CVE Statistics by Vendor 2026
  • Q3 2026 Report
  • Top Exploited CVEs
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube
© 2017 - 2026 Daily CyberSecurity. All Rights Reserved.