Skip to content
November 8, 2026
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube

Daily CyberSecurity

Zero-hour alerts. Unmatched analysis.

Primary Menu
  • Home
  • CVE Data
    • CVE Watchtower
    • Top Exploited CVEs
    • CVE Stats by Vendor
    • Q2 2026 Report
    • CVE Alerts
    • CVE Alert Settings
    • Pricing
  • Cyber Criminals
  • Data Leak
  • Free Tools
    • CVSS 3.1 Calculator
    • Certificate Viewer
    • DNS Lookup
    • Encoder & Hash Generator
    • IP / Subnet Calculator
    • Whois Lookup
  • Linux
  • Malware
  • Vulnerability
  • Submit Press Release
Light/Dark Button
Meet Gemma 3 270M: Google’s Most Lightweight AI Model Yet Pichai Quantum Forecast Lightweight AI, on-device AI
  • Technology

Meet Gemma 3 270M: Google’s Most Lightweight AI Model Yet

Do Son August 18, 2025 0

Google’s new Gemma 3 270M model packs powerful performance into a tiny 270M-parameter size, perfect for on-device AI and edge computing.

Critical RCE Flaws Found in Flowise AI Platform, Allowing Remote Code Execution Flowise vulnerabilities, RCE flaws
  • Vulnerability Report

Critical RCE Flaws Found in Flowise AI Platform, Allowing Remote Code Execution

Do Son August 16, 2025 0

Two critical remote code execution (RCE) vulnerabilities with CVSS scores of 9.8 were found in the open-source Flowise AI platform.

Phishing Attack on Popular npm Package Triggers Supply Chain Compromise npm supply chain, phishing attack
  • Cybercriminals

Phishing Attack on Popular npm Package Triggers Supply Chain Compromise

Do Son August 16, 2025 0

A phishing attack compromised the maintainer of a popular npm package, eslint-config-prettier, leading to the spread of malware to thousands of projects.

Sony Ends 18-Year Presence in Russia, Completing its Market Withdrawal PlayStation Network outage Sony Russia, business exit
  • Technology

Sony Ends 18-Year Presence in Russia, Completing its Market Withdrawal

Do Son August 15, 2025 0

After an 18-year presence, Sony has officially completed its withdrawal from the Russian market, ceasing all local operations and customer support.

Microsoft Fixes Bug That Caused Windows Server Clusters to Fail Windows Server 2025 Accidental Upgrade Windows Server 2008 final support 2026, Premium Assurance expiration Windows Server, update bug Windows Server PPTP Vulnerability KB5051987 Hotpatching
  • Windows

Microsoft Fixes Bug That Caused Windows Server Clusters to Fail

Do Son August 15, 2025 0

Microsoft has released an update to fix a bug in Windows Server 2019 that caused cluster disruptions and virtual machine reboots with BitLocker and CSV.

ChatGPT May Soon Introduce Ads to Monetize Its Free User Base ChatGPT advertising US only OpenAI GPT-5.4 launch OpenAI Responses API file support ChatGPT Ads pricing ChatGPT conversational advertising, OpenAI monetization strategy 2026 OpenAI Code Red, ChatGPT Sycophancy Crisis AI music ChatGPT memory, targeted ads ChatGPT User Milestone, Generative AI Adoption ChatGPT ads, AI monetization GPT-5, OpenAI
  • Technology

ChatGPT May Soon Introduce Ads to Monetize Its Free User Base

Do Son August 15, 2025 0

ChatGPT is reportedly considering ads as a way to monetize its massive free user base, with executives stating they don't rule out the possibility.

Apple Restores Blood Oxygen Feature to Apple Watch in U.S. After Patent Dispute Apple lawsuit Apple Watch, blood oxygen monitoring CVE-2022-22675
  • Technology

Apple Restores Blood Oxygen Feature to Apple Watch in U.S. After Patent Dispute

Do Son August 15, 2025 0

Apple has reinstated the blood oxygen monitoring feature on Apple Watch models in the U.S. following a legal win, using a software update to work around a patent dispute.

U.S. Government Considers Taking Equity Stake in Intel to Boost “America First” Chip Strategy Intel Eric Demers GPU Chief Architect Intel, CHIPS Act Trump Intel, semiconductor investment Intel CHIPS Act
  • Technology

U.S. Government Considers Taking Equity Stake in Intel to Boost “America First” Chip Strategy

Do Son August 15, 2025 0

The Trump administration is reportedly in talks to take an equity stake in Intel, a move that would financially support its Ohio campus and advance U.S. tech manufacturing.

Google Flights’ New AI Tool Simplifies Travel Planning and Finds The Cheapest Flights Google Flights, AI travel
  • Technology

Google Flights’ New AI Tool Simplifies Travel Planning and Finds The Cheapest Flights

Do Son August 15, 2025 0

Google Flights introduces "Flight Deals," a new AI-powered search feature that uses natural language to find the best airfare for flexible travelers.

Apple to Challenge Ring and Nest with AI-Powered Home Security System iOS 27 Liquid Glass slider iPhone Flip rumors 2026 Setapp Mobile iOS shutdown, Apple DMA political delay tactics Apple AI pin wearable 2027, Siri Campos Gemini integration Apple AI strategy 2026, Liquid Glass interface Apple Intelligence Mac Pro Cancelled Mac Studio Future App Store antitrust, UK lawsuit iPhone Fold Hinge, Cost Optimization MacBook Pro, OLED display Apple supply chain, manufacturing automation Apple home security, smart camera Apple Earnings, AI Investment Apple EU Fine, DMA Appeal CVE-2023-23529
  • Technology

Apple to Challenge Ring and Nest with AI-Powered Home Security System

Do Son August 15, 2025 0

Apple is reportedly developing a high-end, AI-powered smart camera and doorbell to compete with Amazon's Ring and Google Nest in the home security market.

CVE-2025-7972: Rockwell Automation Patches Critical Security Bypass in FactoryTalk Linx Rockwell Automation Warning OT Security Rockwell SQLi, Industrial Safety DoS Verve Asset Manager API OT Privilege Escalation Rockwell NAT Router, Critical Auth Bypass Rockwell ICS Privilege Escalation, MSI Repair Attack CVE-2025-7353 Critical vulnerability, industrial control systems Rockwell vulnerability, ICS security Rockwell Arena, Memory Abuse Rockwell Automation, RCE Vulnerability CVE-2025-24479 and CVE-2025-24480 - CVE-2025-0477
  • Vulnerability Report

CVE-2025-7972: Rockwell Automation Patches Critical Security Bypass in FactoryTalk Linx

Do Son August 15, 2025 0

A critical vulnerability (CVE-2025-7972) in Rockwell Automation's FactoryTalk Linx software allows attackers to bypass authentication and alter industrial networks.

ImageMagick Patches Multiple Flaws: High-Severity Memory Bugs Fixed ImageMagick Vulnerability CVE-2026-23876 ImageMagick TIM Overflow, Memory Disclosure Flaw ImageMagick vulnerabilities, memory corruption CVE-2023-34152
  • Vulnerability Report

ImageMagick Patches Multiple Flaws: High-Severity Memory Bugs Fixed

Do Son August 15, 2025 0

ImageMagick has patched four security vulnerabilities, including high-severity memory corruption bugs, that could affect applications using the toolkit.

Critical Cisco RCE Flaw (CVE-2025-20265, CVSS 10): Unauthenticated Attackers Can Hijack Firewalls Cisco ISE Root Escalation * Read-Only Admin Exploit Cisco Secure FMC Vulnerability CVE-2026-20131 Cisco Meeting Management Vulnerability CVE-2026-20098 Cisco vulnerability, RCE flaw CVE-2025-20265 Cisco Meraki, VPN Vulnerability Cisco Nexus Dashboard - CVE-2024-20424 CVE-2025-20115 Cisco Vulnerability CVE-2018-0171 Privilege Escalation Cisco Unified Intelligence Center
  • Vulnerability Report

Critical Cisco RCE Flaw (CVE-2025-20265, CVSS 10): Unauthenticated Attackers Can Hijack Firewalls

Do Son August 15, 2025 0

A critical vulnerability (CVE-2025-20265) in Cisco Secure Firewall Management Center allows unauthenticated attackers to execute commands with high privilege.

PhantomCard: The New Android Trojan That Steals Your Contactless Payments PhantomCard, NFC Attack
  • Malware

PhantomCard: The New Android Trojan That Steals Your Contactless Payments

Do Son August 15, 2025 0

ThreatFabric researchers have uncovered PhantomCard, an Android Trojan that uses an NFC relay attack to steal contactless card data and enable fraudulent payments.

A New Threat: Unmasking Crypto24 Ransomware’s Stealthy Toolkit INC Ransom Pacific Cyber Threats OysterLoader Malware Rhysida Ransomware Black Basta Ransomware BYOVD Technique Velociraptor Abuse, Storm-2603 Ransomware Crypto24, Ransomware Ransomware Payments, UK Legislation ZACROS data breach
  • Malware

A New Threat: Unmasking Crypto24 Ransomware’s Stealthy Toolkit

Do Son August 15, 2025 0

Trend Micro research exposes Crypto24, a coordinated ransomware operation that uses legitimate tools, custom malware, and advanced evasion tactics to breach and extort victims.

Patch Now: Apache Tomcat Fixes Session Fixation and ‘MadeYouReset’ Flaws CVE-2024-50379 & CVE-2024-54677 Apache Tomcat Vulnerabilities
  • Vulnerability Report

Patch Now: Apache Tomcat Fixes Session Fixation and ‘MadeYouReset’ Flaws

Do Son August 15, 2025 0

Apache Tomcat has released updates for two serious flaws: a session fixation vulnerability and a "MadeYouReset" DoS vulnerability affecting multiple versions.

MadeYouReset: New HTTP/2 Flaw Threatens to Cripple Servers with DDoS Attacks MadeYouReset, HTTP/2 vulnerability FSF, AI Scraping Attacks OracleIV botnet
  • Vulnerability Report

MadeYouReset: New HTTP/2 Flaw Threatens to Cripple Servers with DDoS Attacks

Do Son August 15, 2025 0

A new vulnerability, "MadeYouReset," has been discovered in HTTP/2, allowing attackers to exploit stream resets to launch devastating denial-of-service attacks.

Google Play Cracks Down: New Policy Requires Licenses for Crypto Wallet Apps Google Play, Crypto Wallets Cryptocurrency Thefts
  • Technology

Google Play Cracks Down: New Policy Requires Licenses for Crypto Wallet Apps

Do Son August 15, 2025 0

Google Play now requires custodial crypto wallet providers in 15+ jurisdictions to obtain licenses. Non-custodial wallets are exempt from the new rules.

A Farewell to PowerShell 2.0: Microsoft’s Legacy Tool Is Gone from Windows 11 PowerShell 2.0, Windows 11 Removal
  • Windows

A Farewell to PowerShell 2.0: Microsoft’s Legacy Tool Is Gone from Windows 11

Do Son August 15, 2025 0

Microsoft has permanently removed the outdated and insecure PowerShell 2.0 from Windows 11, a move that enhances security but may affect some enterprise scripts.

An Ethereum Dev’s Wallet Drained by a Fake AI Extension Crypto Drain Conspiracy, Malicious MobileConfig phone phishing Cryptocurrency Phishing
  • Cybercriminals

An Ethereum Dev’s Wallet Drained by a Fake AI Extension

Do Son August 15, 2025 0

An Ethereum developer lost funds to a fake AI extension that stole his private key, highlighting how even experts can fall victim to sophisticated phishing attacks.

A Blast from the Past: Why a 2017 Office Flaw Still Haunts Enterprises Today Microsoft Office, CVE-2017-11882
  • Vulnerability Report

A Blast from the Past: Why a 2017 Office Flaw Still Haunts Enterprises Today

Do Son August 15, 2025 0

A 2017 Microsoft Office flaw, CVE-2017-11882, is still being exploited by attackers, proving that outdated software remains a major security risk.

Secure Your Print Jobs: Microsoft Rolls Out Universal Print Anywhere for Everyone Universal Print, Cloud Printing
  • Technology

Secure Your Print Jobs: Microsoft Rolls Out Universal Print Anywhere for Everyone

Do Son August 15, 2025 0

Microsoft's Universal Print Anywhere is now available to all users, offering a secure cloud printing solution with QR code authentication to prevent data leakage.

❮ Prev Page
Next Page ❯

Search

CVE ALERTS
📈

EPSS Spike Alerts
Catch risk spikes before they make headlines.

🎯

Custom EPSS/CVSS
Set score thresholds to effectively filter noise.

🛡️

Exploit Intel
Real-world exploit signals beyond the KEV catalog.

🐙

GitHub Issues
Auto-create alert tickets without duplication.

📬

Weekly Digest
Clean summaries, eliminating email spam.

🏷️

Watchlist Groups
Tag vulnerabilities by team (Infra/AppSec/SOC).

🔀

Smart Routing
Route chat channels based on severity levels.

🚨

RBP Tracker
Early warning detection and tracking system.

Subscribe – $7/mo or try free for 14 days →

🚨 Active Exploits in the Wild

  • CVE-2026-123158CVSS 8.1
    sshd in OpenSSH before 10.6p2 on Linux, when musl libc is used without PAM, lacks a workaround for...
    Admin intel📅 Updated: Nov 6, 2026
  • CVE-2026-19868CVSS 7.5
    An authentication enforcement vulnerability in SonicOS SSLVPN service may allow a user with valid credentials for an alternate...
    CISA KEV📅 Added to KEV: Nov 6, 2026
  • CVE-2026-120422CVSS 8.9
    Sogou Input Method for Windows contains a vulnerability in the configuration retrieval mechanism of its SGTool.exe component. The...
    Admin intel📅 Updated: Nov 5, 2026
  • CVE-2026-102895CVSS 9.8
    GPUStack is an open-source GPU cluster manager for AI model serving and GPU instance provisioning. Prior to 2.2.0,...
    Watchtower Verified📅 Updated: Nov 5, 2026
  • CVE-2026-115732CVSS 9.0
    Incorrect authorization in the certificate-name matching of trapperkeeper-authorization, as used by Puppet Server, in the affected products, allows...
    Admin intel📅 Updated: Nov 4, 2026
  • CVE-2026-98432CVSS 9.8
    In the Linux kernel, the following vulnerability has been resolved: ipv4: free inet_opt and ireq_opt after an RCU...
    Admin intel📅 Updated: Nov 4, 2026
  • CVE-2026-107441CVSS 8.8
    An out-of-bounds write vulnerability in the CGI program of Zyxel GS1900-24E firmware versions through 2.90(AAHK.2)C0 could allow an...
    Admin intel📅 Updated: Nov 4, 2026
  • CVE-2019-25779CVSS 7.5
    The Diarise theme for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.5.9....
    Watchtower Verified📅 Updated: Nov 4, 2026
Powered by CVE Watchtower

Critical Vulnerabilities

  • CVE-2026-18535CVSS 9.6
    IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 are vulnerable to a Regular Expression Denial of...
    📅 Updated: Nov 8, 2026
  • CVE-2026-17409CVSS 9.4
    IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote attacker to execute unauthorized...
    📅 Updated: Nov 8, 2026
  • CVE-2026-123614CVSS 9.3
    imgproxy from 4.0.0 before 4.0.16 contains an integer overflow in the ICO loader that allows remote attackers to...
    📅 Updated: Nov 8, 2026
  • CVE-2026-123550CVSS 9.3
    OpenAM before 16.1.4 contains an authentication bypass vulnerability in its SAML v2.0 service provider that accepts unsigned assertions...
    📅 Updated: Nov 8, 2026
  • CVE-2026-123551CVSS 10.0
    OpenAM from 14.0.0 before 16.1.4 contains an information disclosure vulnerability that allows unauthenticated attackers to read live session...
    📅 Updated: Nov 8, 2026
  • CVE-2026-123549CVSS 9.3
    OpenAM before 16.1.4 fails to enforce the Valid Creation Attributes list during self-registration, allowing anonymous attackers to set...
    📅 Updated: Nov 8, 2026
  • CVE-2025-57085CVSS 9.8
    Tenda W30E V16.01.0.19 (5037) was discovered to contain a stack overflow in the v17 parameter in the UploadCfg...
    📅 Updated: Nov 8, 2026
  • CVE-2025-59359CVSS 9.8
    The cleanTcs mutation in Chaos Controller Manager is vulnerable to OS command injection. In conjunction with CVE-2025-59358, this...
    📅 Updated: Nov 8, 2026
Powered by CVE Watchtower

Daily CyberSecurity

  • About SecurityOnline.info
  • Advertise with us
  • Announcement
  • Contact
  • Contributor Register
  • Login
  • Disclaimer
  • DCMA
  • Privacy Policy
  • About SecurityOnline.info
  • Advertise on SecurityOnline.info
  • Contact Us

When you purchase through links on our site, we may earn an affiliate commission. Here’s how it works

  • CVE Watchtower
  • CVE Statistics by Vendor 2026
  • Q3 2026 Report
  • Top Exploited CVEs
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube
© 2017 - 2026 Daily CyberSecurity. All Rights Reserved.