Skip to content
November 8, 2026
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube

Daily CyberSecurity

Zero-hour alerts. Unmatched analysis.

Primary Menu
  • Home
  • CVE Data
    • CVE Watchtower
    • Top Exploited CVEs
    • CVE Stats by Vendor
    • Q2 2026 Report
    • CVE Alerts
    • CVE Alert Settings
    • Pricing
  • Cyber Criminals
  • Data Leak
  • Free Tools
    • CVSS 3.1 Calculator
    • Certificate Viewer
    • DNS Lookup
    • Encoder & Hash Generator
    • IP / Subnet Calculator
    • Whois Lookup
  • Linux
  • Malware
  • Vulnerability
  • Submit Press Release
Light/Dark Button
Beyond Banks: Android Malware Is Getting Smarter to Bypass Google Play Protect CVE-2023-20951 Honor Update
  • Malware

Beyond Banks: Android Malware Is Getting Smarter to Bypass Google Play Protect

Do Son August 26, 2025 0

A new report reveals that Android droppers are evolving. They are now being re-engineered to bypass Google Play Protect and deliver a wide range of malware.

Expel Uncovers Malicious PUP Ecosystem Masquerading as Free Utility Apps Potentially unwanted program, residential proxy
  • Malware

Expel Uncovers Malicious PUP Ecosystem Masquerading as Free Utility Apps

Do Son August 26, 2025 0

A new report reveals that potentially unwanted programs are evolving into malicious software that turns victims' computers into residential proxies for a profit.

Beyond Windows: Pakistan’s APT36 Group Is Now Attacking Linux Systems with Stealthy Malware AccountDumpling Phishing Google AppSheet Abuse AI-Generated Malware PureRAT Campaign RondoDoX Botnet, Next.js React2Shell EchoGather, Paper Werewolf Salt Typhoon, Telecom Espionage BreachForums, Conor Fitzpatrick Ransomware Negotiation, DOJ Investigation MirrorFace group - Earth Kasha Emperor Dragonfly
  • Cybercriminals

Beyond Windows: Pakistan’s APT36 Group Is Now Attacking Linux Systems with Stealthy Malware

Do Son August 26, 2025 0

A new report reveals that the Pakistan-linked APT36 is now targeting Indian government and defense entities with Linux-specific malware delivered via Google Drive.

Spur Links North Korean APT Infrastructure to Commercial Proxy Service WgetCloud proxy
  • Cybercriminals

Spur Links North Korean APT Infrastructure to Commercial Proxy Service WgetCloud

Do Son August 26, 2025 0

A data leak from an alleged North Korean APT group's workstation has revealed its use of a commercial proxy service, offering a rare look into its anonymizing infrastructure.

Attaxion Releases Agentless Traffic Monitoring for Immediate Risk Prioritization Attaxion_PR_Agentless_Traffic_Monitoring_17561209485J8i4WK5HY
  • Press Release

Attaxion Releases Agentless Traffic Monitoring for Immediate Risk Prioritization

cybernewswire August 25, 2025 0
Dover, DE, United States, 25th August 2025, CyberNewsWire
Read More Read more about Attaxion Releases Agentless Traffic Monitoring for Immediate Risk Prioritization
Explosive ATM Attacks: Europol-Led Operation Dismantles Dutch-German Criminal Ring ATM attacks, Europol
  • Cybercriminals

Explosive ATM Attacks: Europol-Led Operation Dismantles Dutch-German Criminal Ring

Do Son August 25, 2025 0

A coordinated international operation led by Europol has dismantled a criminal network responsible for a string of explosive ATM attacks in Austria, Germany, and the Netherlands.

The End of an Era: Popular CA Buypass to Halt Free TLS/SSL Certificates TLS certificates, Buypass
  • Technology

The End of an Era: Popular CA Buypass to Halt Free TLS/SSL Certificates

Do Son August 25, 2025 0

Citing competition and rising costs, the popular Certificate Authority Buypass has announced it will stop issuing TLS/SSL certificates in October 2025.

Chrome Zero-Day: Exploit in the Wild and PoC Released Chrome security update exploit in the wild Chrome Zero-Day CVE-2026-3909 Chrome Zero-Day PoC CVE-2026-2441 Chrome Zero-Day CVE-2026-2441 Chrome Zero-Day, Active Exploitation CVE-2025-10585 Chrome vulnerability, zero-day exploit CVE-2025-6558 Chrome Zero-Day, V8 Vulnerability Chrome Zero-Day, Security Update
  • Vulnerability

Chrome Zero-Day: Exploit in the Wild and PoC Released

Do Son August 25, 2025 0

A critical zero-day vulnerability (CVE-2025-5419) in Chrome's V8 engine is being actively exploited. Users must update their browser immediately to prevent attacks.

SFTP vs FTPS: What’s the Real Difference and Which Should You Use? CVE-2024-31070 & CVE-2024-36491
  • Technique

SFTP vs FTPS: What’s the Real Difference and Which Should You Use?

Do Son August 25, 2025
SFTP and FTPS both secure file transfers, but they do it in very different ways. SFTP stands...
Read More Read more about SFTP vs FTPS: What’s the Real Difference and Which Should You Use?
AMD CPU Burnout: How Motherboard BIOS Settings Are Causing Critical Failures AMD security vulnerabilities, hardware security flaws, CVE-2025-54509, CVE-2025-10263 AMD GPU Price Hike GDDR Memory Costs CPU burnout, BIOS issues SQUIP AMD Ryzen AI vulnerability
  • Technology

AMD CPU Burnout: How Motherboard BIOS Settings Are Causing Critical Failures

Do Son August 25, 2025 0

A new report reveals that AMD Ryzen 7 9800X3D CPUs are burning out due to improper BIOS settings from motherboard manufacturers, causing widespread failures.

A $10 Billion Alliance: Meta and Google Cloud Partner on AI Infrastructure Google MCP Protocol, Agentic AI Managed Servers Google Cloud Meta Google Cloud UniSuper
  • Technology

A $10 Billion Alliance: Meta and Google Cloud Partner on AI Infrastructure

Do Son August 25, 2025 0

Google and Meta have signed a six-year, $10B cloud deal focused on AI infrastructure. The partnership highlights a new era of "coopetition" among tech rivals.

Beyond Convenience: Why a Standalone 2FA App Is Your Best Defense LastPass data breach
  • Vulnerability Report

Beyond Convenience: Why a Standalone 2FA App Is Your Best Defense

Do Son August 25, 2025 0
Earlier, encrypted email provider ProtonMail introduced a standalone two-factor authentication (2FA) tool. One might wonder why, given...
Read More Read more about Beyond Convenience: Why a Standalone 2FA App Is Your Best Defense
NVIDIA’s New Ethernet Tech Turns Distributed Data Centers Into a Single AI “Superfactory” NVIDIA AI networking
  • Technology

NVIDIA’s New Ethernet Tech Turns Distributed Data Centers Into a Single AI “Superfactory”

Do Son August 25, 2025 0

NVIDIA has unveiled Spectrum-XGS, a new Ethernet technology that links geographically distributed data centers, allowing them to function as a single AI superfactory.

CVE-2025-26496 (CVSS 9.6): Critical Flaw in Tableau Server Expose Enterprises to Code Execution Risks Tableau Vulnerability CVE-2025-26496
  • Vulnerability Report

CVE-2025-26496 (CVSS 9.6): Critical Flaw in Tableau Server Expose Enterprises to Code Execution Risks

Do Son August 25, 2025 0

Salesforce has patched several critical vulnerabilities in Tableau Server, including a Type Confusion flaw with a CVSS score of 9.6 that could allow for local code inclusion.

Ex-Programmer Davis Lu Jailed for Triggering Malicious “Kill Switch” at Eaton Davis Lu, Kill Switch
  • Cybercriminals

Ex-Programmer Davis Lu Jailed for Triggering Malicious “Kill Switch” at Eaton

Do Son August 25, 2025 0

Ex-Eaton programmer Davis Lu sentenced for planting a malicious “kill switch” that sabotaged company servers and caused massive financial losses.

Anthropic’s “Atomic Shield”: A New AI Classifier Blocks Nuclear Weapon Blueprints Anthropic Claude Lawsuit Claude Max limits, AI subscription lawsuit, Claude Pro vs Max Claude Mythos security audit Claude Identity Verification Anthropic DMCA GitHub takedown bugs Nuclear weapons Xcode, Claude AI Anthropic, Claude Sonnet 4 Claude AI, AI safety
  • Technology

Anthropic’s “Atomic Shield”: A New AI Classifier Blocks Nuclear Weapon Blueprints

Do Son August 25, 2025 0

Anthropic has partnered with the U.S. government to develop an AI classifier that can block attempts to use its Claude AI model for nuclear weapon construction.

Beyond the Breach: Coinbase Cracks Down on Remote Work to Stop Hackers North Korean Laptop Farm DPRK Insider Threat North Korea WMD Cyber Funding, Australia Sanctions Insider threat, North Korean hackers Kimsuky, cyber-espionage NPM Malware, North Korea Cyber-espionage North Korea, Remote IT Job Scam Laptop Farm - DriverEasy - Kimsuky Watering Hole Attack
  • Cybercriminals

Beyond the Breach: Coinbase Cracks Down on Remote Work to Stop Hackers

Do Son August 25, 2025 0

Following a breach tied to an insider, Coinbase is restricting remote work and requiring U.S. citizenship for key roles to combat infiltration by North Korean hackers.

A New Linux Malware Hides in Plain Sight by Weaponizing File Names Linux-filenames
  • Malware

A New Linux Malware Hides in Plain Sight by Weaponizing File Names

Do Son August 25, 2025 0

A new report reveals a dangerous Linux malware campaign that uses malicious filenames to execute a stealthy, fileless attack without the victim's knowledge.

Linux Under Attack: APT36 Launches New Cyber-Espionage Campaign on Indian Govt APT36
  • Cyber Security

Linux Under Attack: APT36 Launches New Cyber-Espionage Campaign on Indian Govt

Do Son August 25, 2025 0

A new report reveals that the Pakistan-based APT36 is targeting Indian government entities using spear-phishing and Linux-specific malware to steal sensitive data.

Anatsa Android Trojan Expands Its Global Reach and Targets 831 Financial Apps Android malware, Anatsa
  • Malware

Anatsa Android Trojan Expands Its Global Reach and Targets 831 Financial Apps

Do Son August 25, 2025 0

A new report reveals the Anatsa banking trojan is now targeting over 831 financial institutions worldwide. The malware is distributed via fake apps on Google Play.

Gayfemboy Botnet Resurfaces with Advanced Evasion and New Targets ahost.exe DLL Sideloading Signed Application Abuse PS1Bot, malware ransomware attacks bill
  • Malware

Gayfemboy Botnet Resurfaces with Advanced Evasion and New Targets

Do Son August 25, 2025 0

A new report reveals the return of Gayfemboy, a Mirai-based IoT malware strain. It now uses advanced evasion techniques and targets multiple vendors to launch attacks.

BQTLock: A New Ransomware-as-a-Service Operation Blending Marketing and Malware Ransomware-as-a-Service, BQTLock
  • Malware

BQTLock: A New Ransomware-as-a-Service Operation Blending Marketing and Malware

Do Son August 25, 2025 0

A new RaaS operation called BQTLock is targeting victims with sophisticated malware, aggressive ransom demands, and a tiered subscription model for affiliates.

❮ Prev Page
Next Page ❯

Search

CVE ALERTS
📈

EPSS Spike Alerts
Catch risk spikes before they make headlines.

🎯

Custom EPSS/CVSS
Set score thresholds to effectively filter noise.

🛡️

Exploit Intel
Real-world exploit signals beyond the KEV catalog.

🐙

GitHub Issues
Auto-create alert tickets without duplication.

📬

Weekly Digest
Clean summaries, eliminating email spam.

🏷️

Watchlist Groups
Tag vulnerabilities by team (Infra/AppSec/SOC).

🔀

Smart Routing
Route chat channels based on severity levels.

🚨

RBP Tracker
Early warning detection and tracking system.

Subscribe – $7/mo or try free for 14 days →

🚨 Active Exploits in the Wild

  • CVE-2026-123158CVSS 8.1
    sshd in OpenSSH before 10.6p2 on Linux, when musl libc is used without PAM, lacks a workaround for...
    Admin intel📅 Updated: Nov 6, 2026
  • CVE-2026-19868CVSS 7.5
    An authentication enforcement vulnerability in SonicOS SSLVPN service may allow a user with valid credentials for an alternate...
    CISA KEV📅 Added to KEV: Nov 6, 2026
  • CVE-2026-120422CVSS 8.9
    Sogou Input Method for Windows contains a vulnerability in the configuration retrieval mechanism of its SGTool.exe component. The...
    Admin intel📅 Updated: Nov 5, 2026
  • CVE-2026-102895CVSS 9.8
    GPUStack is an open-source GPU cluster manager for AI model serving and GPU instance provisioning. Prior to 2.2.0,...
    Watchtower Verified📅 Updated: Nov 5, 2026
  • CVE-2026-115732CVSS 9.0
    Incorrect authorization in the certificate-name matching of trapperkeeper-authorization, as used by Puppet Server, in the affected products, allows...
    Admin intel📅 Updated: Nov 4, 2026
  • CVE-2026-98432CVSS 9.8
    In the Linux kernel, the following vulnerability has been resolved: ipv4: free inet_opt and ireq_opt after an RCU...
    Admin intel📅 Updated: Nov 4, 2026
  • CVE-2026-107441CVSS 8.8
    An out-of-bounds write vulnerability in the CGI program of Zyxel GS1900-24E firmware versions through 2.90(AAHK.2)C0 could allow an...
    Admin intel📅 Updated: Nov 4, 2026
  • CVE-2019-25779CVSS 7.5
    The Diarise theme for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.5.9....
    Watchtower Verified📅 Updated: Nov 4, 2026
Powered by CVE Watchtower

Critical Vulnerabilities

  • CVE-2026-18535CVSS 9.6
    IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 are vulnerable to a Regular Expression Denial of...
    📅 Updated: Nov 8, 2026
  • CVE-2026-17409CVSS 9.4
    IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote attacker to execute unauthorized...
    📅 Updated: Nov 8, 2026
  • CVE-2026-123614CVSS 9.3
    imgproxy from 4.0.0 before 4.0.16 contains an integer overflow in the ICO loader that allows remote attackers to...
    📅 Updated: Nov 8, 2026
  • CVE-2026-123550CVSS 9.3
    OpenAM before 16.1.4 contains an authentication bypass vulnerability in its SAML v2.0 service provider that accepts unsigned assertions...
    📅 Updated: Nov 8, 2026
  • CVE-2026-123551CVSS 10.0
    OpenAM from 14.0.0 before 16.1.4 contains an information disclosure vulnerability that allows unauthenticated attackers to read live session...
    📅 Updated: Nov 8, 2026
  • CVE-2026-123549CVSS 9.3
    OpenAM before 16.1.4 fails to enforce the Valid Creation Attributes list during self-registration, allowing anonymous attackers to set...
    📅 Updated: Nov 8, 2026
  • CVE-2025-57085CVSS 9.8
    Tenda W30E V16.01.0.19 (5037) was discovered to contain a stack overflow in the v17 parameter in the UploadCfg...
    📅 Updated: Nov 8, 2026
  • CVE-2025-59359CVSS 9.8
    The cleanTcs mutation in Chaos Controller Manager is vulnerable to OS command injection. In conjunction with CVE-2025-59358, this...
    📅 Updated: Nov 8, 2026
Powered by CVE Watchtower

Daily CyberSecurity

  • About SecurityOnline.info
  • Advertise with us
  • Announcement
  • Contact
  • Contributor Register
  • Login
  • Disclaimer
  • DCMA
  • Privacy Policy
  • About SecurityOnline.info
  • Advertise on SecurityOnline.info
  • Contact Us

When you purchase through links on our site, we may earn an affiliate commission. Here’s how it works

  • CVE Watchtower
  • CVE Statistics by Vendor 2026
  • Q3 2026 Report
  • Top Exploited CVEs
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube
© 2017 - 2026 Daily CyberSecurity. All Rights Reserved.