Skip to content
November 8, 2026
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube

Daily CyberSecurity

Zero-hour alerts. Unmatched analysis.

Primary Menu
  • Home
  • CVE Data
    • CVE Watchtower
    • Top Exploited CVEs
    • CVE Stats by Vendor
    • Q2 2026 Report
    • CVE Alerts
    • CVE Alert Settings
    • Pricing
  • Cyber Criminals
  • Data Leak
  • Free Tools
    • CVSS 3.1 Calculator
    • Certificate Viewer
    • DNS Lookup
    • Encoder & Hash Generator
    • IP / Subnet Calculator
    • Whois Lookup
  • Linux
  • Malware
  • Vulnerability
  • Submit Press Release
Light/Dark Button
Still on Windows 10? Microsoft Is Rolling Out Your Last Chance for Security Updates Windows 10 MSMQ Bug, KB5071546 Write Permissions Windows 10 Lawsuit Windows 10 ESU, Free Security Updates Windows 10 ESU program
  • Windows

Still on Windows 10? Microsoft Is Rolling Out Your Last Chance for Security Updates

Do Son August 27, 2025 0
Microsoft has now opened registration for the Extended Security Updates (ESU) program to Windows 10 Home users....
Read More Read more about Still on Windows 10? Microsoft Is Rolling Out Your Last Chance for Security Updates
Farmers Insurance Breach: 1.1 Million Customers Exposed in Salesforce Attack Fiverr Data Leak Claude Code Leak Anthropic DMCA Takedown Coupang 33.7M Breach South Korea Data Leak Red Hat Breach, Customer Data Theft Farmers Insurance, Salesforce ESLint Plugin -Mamont Android banking Trojan
  • Data Leak

Farmers Insurance Breach: 1.1 Million Customers Exposed in Salesforce Attack

Do Son August 27, 2025 0

A new report reveals that a phishing attack on a Salesforce vendor has led to a data breach at Farmers Insurance, exposing the data of over 1.1 million customers.

URGENT: NetScaler Zero-Day CVE-2025-7775 Under Active Attack NetScaler, CVE-2025-7775
  • Vulnerability Report

URGENT: NetScaler Zero-Day CVE-2025-7775 Under Active Attack

Do Son August 26, 2025 0

The Cloud Software Group has released urgent updates for NetScaler ADC and Gateway to patch a zero-day (CVE-2025-7775) being actively exploited in the wild.

AccuKnox Awarded Patent for Runtime Security of Kernel Events uspto_1756200202LyeNuAA3rp
  • Press Release

AccuKnox Awarded Patent for Runtime Security of Kernel Events

cybernewswire August 26, 2025 0
Menlo Park, United States, 26th August 2025, CyberNewsWire
Read More Read more about AccuKnox Awarded Patent for Runtime Security of Kernel Events
Aembit Extends Secretless CI/CD with Credential Lifecycle Management for GitLab large-aembit-gitlab-partnership_175615138556NCnfT7JA
  • Press Release

Aembit Extends Secretless CI/CD with Credential Lifecycle Management for GitLab

cybernewswire August 26, 2025 0
Silver Spring, USA / Maryland, 26th August 2025, CyberNewsWire
Read More Read more about Aembit Extends Secretless CI/CD with Credential Lifecycle Management for GitLab
PoC Code Available for Critical SQLite Vulnerability (CVE-2025-6965) SQLite vulnerability CVE-2025-6965 PoC
  • Vulnerability

PoC Code Available for Critical SQLite Vulnerability (CVE-2025-6965)

Do Son August 26, 2025 0

A new Google report reveals that its AI agent, Big Sleep, discovered and foiled a critical SQLite flaw (CVE-2025-6965) before attackers could exploit it.

A New Bridge Between Worlds? Google’s Quick Share May Be Coming to iPhone iOS Quick Share
  • Android

A New Bridge Between Worlds? Google’s Quick Share May Be Coming to iPhone

Do Son August 26, 2025 0

A new APK teardown reveals Google is actively working on bringing its Quick Share feature to iOS, a move that could finally bridge the gap in file sharing between Android and Apple.

Perplexity AI to Pay Publishers for Content in a Groundbreaking New Revenue Model AI Copyright, Getty Images, Perplexity AI Perplexity Max, AI Subscription
  • Technology

Perplexity AI to Pay Publishers for Content in a Groundbreaking New Revenue Model

Do Son August 26, 2025 0

Perplexity AI is launching a new subscription model that will pay publishers for content used in its AI-powered search, a major shift in how AI platforms interact with the web.

Langflow Hit by Privilege Escalation Flaw: CVE-2025-57760 Langflow, Privilege escalation
  • Vulnerability Report

Langflow Hit by Privilege Escalation Flaw: CVE-2025-57760

Do Son August 26, 2025 0
The Langflow project has issued an important security advisory regarding a newly discovered vulnerability that poses a...
Read More Read more about Langflow Hit by Privilege Escalation Flaw: CVE-2025-57760
CVE-2025-54370: SSRF Vulnerability Discovered in PhpSpreadsheet Library CVE-2026-45034 exploit PhpSpreadsheet RCE vulnerability PhpSpreadsheet CVE-2025-54370
  • Vulnerability Report

CVE-2025-54370: SSRF Vulnerability Discovered in PhpSpreadsheet Library

Do Son August 26, 2025 0

A new report reveals a critical SSRF vulnerability in the PhpSpreadsheet library. The flaw could allow attackers to access internal networks and sensitive data.

Microsoft Unveils a New Tool to Help Businesses Ditch VMware for Hyper-V VMware Hyper-V migration
  • Technology

Microsoft Unveils a New Tool to Help Businesses Ditch VMware for Hyper-V

Do Son August 26, 2025 0

Microsoft has released a new VM Conversion utility in Windows Admin Center, allowing enterprises to seamlessly migrate their VMs from VMware to Hyper-V.

A New Home for Gemini: Google Unveils Next-Gen Smart Home Devices Gemini Smart Home Smart home, Google Nest
  • Technology

A New Home for Gemini: Google Unveils Next-Gen Smart Home Devices

Do Son August 26, 2025 0

Google is overhauling its smart home line with new Nest cameras and a smart speaker integrated with Gemini AI, promising a more secure and convenient home experience.

A Power-Sharing iPhone? Rumors Suggest Reverse Wireless Charging Is Finally Coming iPhone 17 Air, ultra-thin design iPhone Reverse charging Apple AI, Siri Overhaul iOS 26 Features
  • Technology

A Power-Sharing iPhone? Rumors Suggest Reverse Wireless Charging Is Finally Coming

Do Son August 26, 2025 0
Reports have long suggested that Apple may introduce 7.5W wireless reverse charging in the upcoming iPhone 17...
Read More Read more about A Power-Sharing iPhone? Rumors Suggest Reverse Wireless Charging Is Finally Coming
Musk vs. The Monopolists: xAI Sues Apple and OpenAI Over AI Competition OpenAI token price reduction OpenAI Deployment Company DeployCo OpenAI IPO strategy OpenAI Privacy Filter 1.5B OpenAI $122 billion funding OpenAI GitHub alternative OpenAI military agreement 2026 OpenAI Stargate project collapse NVIDIA OpenAI investment stall ChatGPT Go $8 subscription, OpenAI GPT-5.2 Instant ads OpenAI Torch acquisition, Unified Medical Memory OpenAI Head of Preparedness 2025, Sam Altman AI safety lawsuits ChatGPT Advertising Speculation OpenAI Ad Code Denial OpenAI AI Confession Hallucination Mitigation ChatGPT Quality Focus OpenAI Gemini Red Alert ChatGPT Login, AI ecosystem OpenAI Mental Health, AI Well-Being Council ChatGPT Instant Checkout, Agentic Commerce OpenAI cloud computing OpenAI, startup incubator OpenAI chips, NVIDIA competition AI competition, antitrust lawsuit GPT-5, OpenAI Livestream OpenAI Open-Weight, AI Models OpenAI Infrastructure, AI Data Centers ChatGPT Business, Office Productivity OpenAI Open-Weight Model, WindSurf Acquisition OpenAI AI Browser, ChatGPT Integration Mattel AI, OpenAI Partnership OpenAI o3, Price Cut OpenAI's Next-Gen AI: O3-Pro's Enhanced Reasoning PowerOpenAI profit OpenAI Bid OpenAI Social Network ChatGPT Social OpenAI Non-profit OpenAI UAE ChatGPT Plus free
  • Technology

Musk vs. The Monopolists: xAI Sues Apple and OpenAI Over AI Competition

Do Son August 26, 2025 0

Elon Musk's xAI has sued Apple and OpenAI, alleging the two companies colluded to create a monopoly that unfairly stifles competition in the AI market.

Revealed: The Social Media App That’s a ‘Stalker’ for Your Location Data X API, monetization X API Location tracking, X/Twitter
  • Data Leak

Revealed: The Social Media App That’s a ‘Stalker’ for Your Location Data

Do Son August 26, 2025 0

A new study reveals X/Twitter is the most aggressive social media app for location tracking, while YouTube collects the least.

A Glassy Future: Apple to Launch Foldable iPhone, Eyeing a Radical 2027 Redesign India smartphone source code mandate, MeitY security requirements 2026 iOS photo backup, background upload iOS crash Foldable iPhone, iPhone design
  • Technology

A Glassy Future: Apple to Launch Foldable iPhone, Eyeing a Radical 2027 Redesign

Do Son August 26, 2025 0

Apple is reportedly planning to launch its first foldable iPhone in 2026, which may reintroduce Touch ID, and is considering a radical all-glass iPhone for its 20th anniversary in 2027.

Unsettling ‘Enhancements’: YouTube Admits to Secretly Using AI on Videos YouTube End Screens, User Experience YouTube ad blocker YouTube Age Detection, AI Content Restrictions Youtube page load YouTube AI Overviews
  • Technology

Unsettling ‘Enhancements’: YouTube Admits to Secretly Using AI on Videos

Do Son August 26, 2025 0

YouTube has admitted to secretly using AI to "enhance" Shorts videos without creators' consent, a move that has sparked backlash over transparency and trust.

NVIDIA’s New NVLink Fusion Initiative Is Building a “Trillion-Scale AI Superfactory” NVLink Fusion, AI infrastructure
  • Technology

NVIDIA’s New NVLink Fusion Initiative Is Building a “Trillion-Scale AI Superfactory”

Do Son August 26, 2025 0

NVIDIA has launched NVLink Fusion, a new initiative that allows third-party chipmakers to integrate their custom processors with NVIDIA's GPUs to create massive AI superfactories.

Two RCE Vulnerabilities Found in Open-Source BI Tool DataEase DataEase, RCE vulnerability
  • Vulnerability Report

Two RCE Vulnerabilities Found in Open-Source BI Tool DataEase

Do Son August 26, 2025 0

Two critical flaws in the open-source BI tool DataEase allow attackers to achieve remote code execution and arbitrary file writes, exposing unpatched systems to compromise.

CISA Adds Citrix and Git Flaws to Known Exploited Vulnerabilities Catalog n8n RCE Vulnerability CVE-2025-68613 CISA KEV WinRAR Zero-Day, Cloud Files UAF OpenPLC ScadaBR, CVE-2021-26829 CISA KEV, Gladinet LFI RCE XWiki RCE, VMware EoP CISA KEV CISA, Known Exploited Vulnerabilities CVE-2020-2883 CISA, Trend Micro
  • Vulnerability Report

CISA Adds Citrix and Git Flaws to Known Exploited Vulnerabilities Catalog

Do Son August 26, 2025 0

CISA has added two Citrix and one critical Git vulnerability to its KEV Catalog, warning that all three flaws are being actively exploited by malicious actors.

A Storm Is Coming: A Massive Coordinated Attack Is Probing RDP Connections RDP scanning, Remote Desktop Protocol
  • Cybercriminals

A Storm Is Coming: A Massive Coordinated Attack Is Probing RDP Connections

Do Son August 26, 2025 0

GreyNoise reports a massive, coordinated scanning campaign targeting Microsoft RDP services. Attackers are probing tens of thousands of IPs to prepare for future attacks.

FortiGuard Labs Uncovers Global Phishing Campaign Using UpCrypter to Deploy RATs Phishing campaign, UpCrypter
  • Malware

FortiGuard Labs Uncovers Global Phishing Campaign Using UpCrypter to Deploy RATs

Do Son August 26, 2025 0

A new report reveals a rapidly growing global phishing campaign using fake voicemails and purchase orders to distribute UpCrypter, a sophisticated malware loader.

❮ Prev Page
Next Page ❯

Search

CVE ALERTS
📈

EPSS Spike Alerts
Catch risk spikes before they make headlines.

🎯

Custom EPSS/CVSS
Set score thresholds to effectively filter noise.

🛡️

Exploit Intel
Real-world exploit signals beyond the KEV catalog.

🐙

GitHub Issues
Auto-create alert tickets without duplication.

📬

Weekly Digest
Clean summaries, eliminating email spam.

🏷️

Watchlist Groups
Tag vulnerabilities by team (Infra/AppSec/SOC).

🔀

Smart Routing
Route chat channels based on severity levels.

🚨

RBP Tracker
Early warning detection and tracking system.

Subscribe – $7/mo or try free for 14 days →

🚨 Active Exploits in the Wild

  • CVE-2026-123158CVSS 8.1
    sshd in OpenSSH before 10.6p2 on Linux, when musl libc is used without PAM, lacks a workaround for...
    Admin intel📅 Updated: Nov 6, 2026
  • CVE-2026-19868CVSS 7.5
    An authentication enforcement vulnerability in SonicOS SSLVPN service may allow a user with valid credentials for an alternate...
    CISA KEV📅 Added to KEV: Nov 6, 2026
  • CVE-2026-120422CVSS 8.9
    Sogou Input Method for Windows contains a vulnerability in the configuration retrieval mechanism of its SGTool.exe component. The...
    Admin intel📅 Updated: Nov 5, 2026
  • CVE-2026-102895CVSS 9.8
    GPUStack is an open-source GPU cluster manager for AI model serving and GPU instance provisioning. Prior to 2.2.0,...
    Watchtower Verified📅 Updated: Nov 5, 2026
  • CVE-2026-115732CVSS 9.0
    Incorrect authorization in the certificate-name matching of trapperkeeper-authorization, as used by Puppet Server, in the affected products, allows...
    Admin intel📅 Updated: Nov 4, 2026
  • CVE-2026-98432CVSS 9.8
    In the Linux kernel, the following vulnerability has been resolved: ipv4: free inet_opt and ireq_opt after an RCU...
    Admin intel📅 Updated: Nov 4, 2026
  • CVE-2026-107441CVSS 8.8
    An out-of-bounds write vulnerability in the CGI program of Zyxel GS1900-24E firmware versions through 2.90(AAHK.2)C0 could allow an...
    Admin intel📅 Updated: Nov 4, 2026
  • CVE-2019-25779CVSS 7.5
    The Diarise theme for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.5.9....
    Watchtower Verified📅 Updated: Nov 4, 2026
Powered by CVE Watchtower

Critical Vulnerabilities

  • CVE-2026-112346CVSS 9.3
    OpenHands Software Agent SDK before 1.52.0 contains an unauthenticated remote code execution vulnerability where the DockerWorkspace and Apptainer...
    📅 Updated: Nov 8, 2026
  • CVE-2026-10042CVSS 9.2
    manga-image-translator contains a remote code execution vulnerability in the shared API server mode due to unsafe deserialization of...
    📅 Updated: Nov 8, 2026
  • CVE-2025-71325CVSS 9.3
    picklescan before 0.0.27 contains a parsing logic error in the _list_globals function when handling STACK_GLOBAL opcodes, failing to...
    📅 Updated: Nov 8, 2026
  • CVE-2025-71323CVSS 9.3
    picklescan before 0.0.33 fails to block the ctypes module, allowing attackers to achieve remote code execution by invoking...
    📅 Updated: Nov 8, 2026
  • CVE-2025-71320CVSS 9.3
    picklescan before 0.0.33 contains an incomplete deny-list that fails to block pydoc.locate and operator.methodcaller functions, allowing attackers to...
    📅 Updated: Nov 8, 2026
  • CVE-2025-71321CVSS 9.3
    picklescan before 0.0.33 contains an arbitrary file writing vulnerability that allows attackers to bypass the dangerous blocklist by...
    📅 Updated: Nov 8, 2026
  • CVE-2024-58351CVSS 9.3
    Flowise before 2.1.4 allows configuration to be injected into the Chainflow during execution via the overrideConfig option, supported...
    📅 Updated: Nov 8, 2026
  • CVE-2020-37282CVSS 9.3
    office-converter through 1.0.2 contains an OS command injection vulnerability that allows attackers to execute commands by supplying a...
    📅 Updated: Nov 8, 2026
Powered by CVE Watchtower

Daily CyberSecurity

  • About SecurityOnline.info
  • Advertise with us
  • Announcement
  • Contact
  • Contributor Register
  • Login
  • Disclaimer
  • DCMA
  • Privacy Policy
  • About SecurityOnline.info
  • Advertise on SecurityOnline.info
  • Contact Us

When you purchase through links on our site, we may earn an affiliate commission. Here’s how it works

  • CVE Watchtower
  • CVE Statistics by Vendor 2026
  • Q3 2026 Report
  • Top Exploited CVEs
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube
© 2017 - 2026 Daily CyberSecurity. All Rights Reserved.