Skip to content
November 8, 2026
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube

Daily CyberSecurity

Zero-hour alerts. Unmatched analysis.

Primary Menu
  • Home
  • CVE Data
    • CVE Watchtower
    • Top Exploited CVEs
    • CVE Stats by Vendor
    • Q2 2026 Report
    • CVE Alerts
    • CVE Alert Settings
    • Pricing
  • Cyber Criminals
  • Data Leak
  • Free Tools
    • CVSS 3.1 Calculator
    • Certificate Viewer
    • DNS Lookup
    • Encoder & Hash Generator
    • IP / Subnet Calculator
    • Whois Lookup
  • Linux
  • Malware
  • Vulnerability
  • Submit Press Release
Light/Dark Button
Leave Your Printers at Home: Starbucks Korea Cracks Down on Cafe Offices Starbucks Korea, "cagongjok"
  • Technology

Leave Your Printers at Home: Starbucks Korea Cracks Down on Cafe Offices

Do Son August 13, 2025 0

Starbucks Korea bans desktop computers and printers in its cafes to curb the "cagongjok" trend of turning shared spaces into personal offices.

Microsoft and Amazon Pull the Plug: Windows Subsystem for Android and Appstore to be Discontinued Motorola Smart Feed redirect Anthropic Amazon 5GW partnership Amazon Perplexity lawsuit AWS-LC Vulnerabilities Cryptographic Bypass AWS Middle East drone strikes Amazon layoffs 2026, Amazon AI restructuring Amazon Kindle DRM Policy, Publisher Control EPUB AWS Nova Forge AI Model Customization AWS Trainium3 EC2 Trn3 UltraServer Route 53 Accelerated Recovery AWS DNS Resilience AI Browser War, Amazon Comet Amazon layoffs, cost reduction AWS outage, DynamoDB DNS AWS outage, cloud dependency AWS VPN Client, Root Privilege Escalation WSA shutdown, Amazon Appstore Amazon Wondery, Podcast Restructuring Amazon Q2 2025 Generative AI AWS Client VPN, Privilege Escalation Amazon AI, Wearable AI
  • Windows

Microsoft and Amazon Pull the Plug: Windows Subsystem for Android and Appstore to be Discontinued

Do Son August 13, 2025 0

Microsoft and Amazon are ending support for the Windows Subsystem for Android and the Amazon Appstore. Learn what this means for your apps and devices.

Critical XZ Backdoor Still Lurks in Docker Images, Posing Supply Chain Risk XZ backdoor, Docker Hub MIFARE classic backdoor C++/CLI IIS Backdoor
  • Malware

Critical XZ Backdoor Still Lurks in Docker Images, Posing Supply Chain Risk

Do Son August 13, 2025 0

A year after its discovery, the XZ backdoor remains in multiple Docker Hub images, posing a risk to developers and the software supply chain.

Google’s Chrome Browser Faces an Uncertain Future: Perplexity AI Makes a Bid Chrome, Antitrust Browser Security, Local Network Access CVE-2022-3075 history-sniffing vulnerability
  • Technology

Google’s Chrome Browser Faces an Uncertain Future: Perplexity AI Makes a Bid

Do Son August 13, 2025 0

Antitrust pressure may force Google to sell Chrome. Perplexity AI has reportedly made a $34.5B bid for the browser, which has 3.5 billion users.

Google’s “Preferred Sources” Feature Is Here: Take Control of Your Search Results Digital Markets Act Google search data Google Search, Preferred Sources
  • Technology

Google’s “Preferred Sources” Feature Is Here: Take Control of Your Search Results

Do Son August 13, 2025 0

Google's new "Preferred Sources" feature lets you prioritize trusted websites in your search results. Now available in the U.S. and India.

Epic vs. Apple & Google: Australia Court Finds App Stores Lacked Fair Competition Vibe Coding apps Vibe Coding App Store surge Vibe Coding App Store Apple 50th Anniversary hardware Brazil CADE Apple settlement, iOS third-party app stores Brazil Tim Cook Succession Apple CEO Rumors App Store Mini Apps 15% Commission Fee iOS Japan Sideloading, Third-Party App Stores Web App Store, App Discovery Apple Age Verification, Texas SB2420 Apple AI acquisitions App Store, Antitrust Apple WebKit, Japan Regulations App Store Age Ratings, Parental Controls Apple App Store, Epic Games Lawsuit
  • Technology

Epic vs. Apple & Google: Australia Court Finds App Stores Lacked Fair Competition

Do Son August 13, 2025 0

An Australian court issues a preliminary ruling favoring Epic Games, finding that Apple and Google's app stores lack safeguards against anti-competitive conduct.

Apple Sues Apple Cinemas: The Legal Battle Over a Name Heats Up Apple Zero-Day CVE-2025-43529 WebKit Zero-Day, Targeted iOS Spyware Apple spyware alerts, zero-click attacks Apple, trademark lawsuit CVE-2024-54527 PoC exploit Apple, App Store
  • Technology

Apple Sues Apple Cinemas: The Legal Battle Over a Name Heats Up

Do Son August 13, 2025 0

Apple has sued Apple Cinemas for trademark infringement, alleging consumer confusion. The cinema chain argues its name has local roots, with no affiliation to Apple.

Microsoft’s August Patch Tuesday: Zero-Day Kerberos Flaw Threatens Domain Admins Windows Kernel Zero-Day, Patch Tuesday CVE-2022-34713 Patch Tuesday, Zero-day
  • Vulnerability Report

Microsoft’s August Patch Tuesday: Zero-Day Kerberos Flaw Threatens Domain Admins

Do Son August 13, 2025 0

Microsoft’s August Patch Tuesday fixes 119 flaws, including a publicly disclosed Kerberos zero-day (CVE-2025-53779) that could lead to domain admin privileges.

Zoom Patches Critical Flaw (CVE-2025-49457): Windows Users Face Privilege Escalation Risk Zoom Rooms LPE, Downgrade Protection Bypass Zoom High-Risk Flaws Zoom security updates
  • Vulnerability Report

Zoom Patches Critical Flaw (CVE-2025-49457): Windows Users Face Privilege Escalation Risk

Do Son August 13, 2025 0
Zoom has released security updates addressing two significant vulnerabilities in its Windows-based clients—CVE-2025-49456 and CVE-2025-49457—that could enable...
Read More Read more about Zoom Patches Critical Flaw (CVE-2025-49457): Windows Users Face Privilege Escalation Risk
Charon Ransomware Emerges: APT-Style Precision Meets Destructive Encryption Charon Ransomware, APT Tactics
  • Malware

Charon Ransomware Emerges: APT-Style Precision Meets Destructive Encryption

Do Son August 13, 2025 0

A new Charon ransomware campaign is targeting the Middle East's public sector and aviation with APT-level tactics, including DLL sideloading and anti-EDR.

Click-to-Compromise: PowerShell-Only RAT Campaign Targets Israeli Organizations PowerShell Phishing
  • Cybercriminals

Click-to-Compromise: PowerShell-Only RAT Campaign Targets Israeli Organizations

Do Son August 13, 2025 0

A targeted phishing campaign against Israeli organizations uses a PowerShell-based RAT and compromised internal emails for delivery, making detection difficult.

PoisonSeed’s MFA-Resistant Phishing Kit Exposed: A Deep Dive into Precision-Validated Credential Theft PoisonSeed, Phishing
  • Cybercriminals

PoisonSeed’s MFA-Resistant Phishing Kit Exposed: A Deep Dive into Precision-Validated Credential Theft

Do Son August 13, 2025 0

A new advanced phishing kit, PoisonSeed, bypasses MFA with AitM techniques to steal credentials and launch cryptocurrency scams. NVISO uncovers the tactics.

GitHub Malware Campaign: SmartLoader Poses as Game Cheats to Steal Data SmartLoader, Malware
  • Malware

GitHub Malware Campaign: SmartLoader Poses as Game Cheats to Steal Data

Do Son August 13, 2025 0

A new large-scale malware campaign is using GitHub repositories disguised as game cheats and software cracks to distribute SmartLoader and steal user data.

Chrome Stable Update 139 Blocks High-Severity Exploits in V8, libaom, and ANGLE Chrome Security Update Use After Free Chrome Security Update Critical Vulnerabilities Chrome Security Update CVE-2026-3062 Chrome Security Update V8 Engine Vulnerability Chrome Security Update CVE-2026-1862 CVE-2026-0628 Chrome 143 Update Chrome Safe Browsing UAF, CVE-2025-11756 Chrome Memory Flaws, CVE-2025-11460 Google Chrome, vulnerability CVE-2025-10200, CVE-2025-10201 Big Sleep CVE-2025-9478 Chrome Update, Security Vulnerabilities
  • Vulnerability Report

Chrome Stable Update 139 Blocks High-Severity Exploits in V8, libaom, and ANGLE

Do Son August 13, 2025 0

Chrome 139 fixes high-severity bugs in V8, libaom, and ANGLE that attackers could exploit. Update your browser now to stay protected.

FortiSIEM CVE-2025-25256 (CVSS 9.8): Remote Unauthenticated Command Injection with Exploit in the Wild FortiSIEM, Command Injection CVE-2025-25256
  • Vulnerability Report

FortiSIEM CVE-2025-25256 (CVSS 9.8): Remote Unauthenticated Command Injection with Exploit in the Wild

Do Son August 13, 2025 0

Critical FortiSIEM flaw (CVE-2025-25256) allows remote unauthenticated command injection. Exploit code active in the wild—patch immediately.

SAP Patch Day August 2025: Critical Code Injection Flaws Threaten Core ERP Systems SAP Code Injection
  • Vulnerability Report

SAP Patch Day August 2025: Critical Code Injection Flaws Threaten Core ERP Systems

Do Son August 12, 2025 0

SAP’s August 2025 Patch Day fixes critical code injection flaws in S/4HANA and SLT that could allow full ERP compromise via RFC exploits.

The Win-DDoS Epidemic: New Flaws Weaponize Windows Domain Controllers for Massive DoS Attacks, PoC Releases Windows DoS, Win-DDoS
  • Vulnerability Report

The Win-DDoS Epidemic: New Flaws Weaponize Windows Domain Controllers for Massive DoS Attacks, PoC Releases

Do Son August 12, 2025 0

SafeBreach Labs reveals Win-DDoS, a new DoS technique that weaponizes Windows domain controllers to launch large-scale attacks, exploiting flaws patched by Microsoft.

Critical Erlang/OTP Flaw (CVE-2025-32433) Under Active Exploitation, Allowing Unauthenticated RCE on OT Networks Quest KACE Vulnerability CVE-2025-32975 FortiGate SSO Bypass, Active Exploitation GoAnywhere RCE, Storm-1175 Cisco VPN RCE, ASA Zero-Day TinyColor Supply Chain Attack SK Telecom, data breach Erlang/OTP RCE, OT Network Security Ivanti CSA Attacks WordPress RCE, Theme Vulnerability
  • Vulnerability Report

Critical Erlang/OTP Flaw (CVE-2025-32433) Under Active Exploitation, Allowing Unauthenticated RCE on OT Networks

Do Son August 12, 2025 0

A critical vulnerability (CVE-2025-32433, CVSS 10.0) in Erlang/OTP’s SSH daemon allows unauthenticated RCE and is actively exploited, with a focus on operational technology (OT) networks.

Apache bRPC Flaw (CVE-2025-54472) Allows Remote Denial-of-Service Attack Apache bRPC Vulnerability CVE-2025-60021 Apache bRPC, CVE-2025-59789 Apache bRPC, Redis Vulnerability
  • Vulnerability Report

Apache bRPC Flaw (CVE-2025-54472) Allows Remote Denial-of-Service Attack

Do Son August 12, 2025 0

A critical flaw in Apache bRPC's Redis parser (CVE-2025-54472) allows unauthenticated remote attackers to crash services via a memory allocation bug. Update to 1.14.1 immediately!

Airbnb CEO on AI: ‘Not the New Google’ But a Key to Customer Service Airbnb Amazon of travel AI
  • Technology

Airbnb CEO on AI: ‘Not the New Google’ But a Key to Customer Service

Do Son August 12, 2025 0

Airbnb CEO Brian Chesky says AI won't replace Google Search but is key to personalizing customer service and attracting new users to the platform.

Microsoft Launches ‘Windows 365 Reserve’ for Cloud PC Disaster Recovery Windows 365 Cloud PC
  • Windows

Microsoft Launches ‘Windows 365 Reserve’ for Cloud PC Disaster Recovery

Do Son August 12, 2025 0

Microsoft's new Windows 365 Reserve service provides businesses with preconfigured cloud PCs for up to 10 days per year to ensure uninterrupted work during device failures.

Claude Gets a Memory: Anthropic Adds Long-Awaited Context Feature to Its AI Claude AI Memory Claude AI AI web search
  • Technology

Claude Gets a Memory: Anthropic Adds Long-Awaited Context Feature to Its AI

Do Son August 12, 2025 0

Anthropic is adding a memory feature to its Claude AI chatbot. It remembers past conversation context and user details to provide more tailored responses.

❮ Prev Page
Next Page ❯

Search

CVE ALERTS
📈

EPSS Spike Alerts
Catch risk spikes before they make headlines.

🎯

Custom EPSS/CVSS
Set score thresholds to effectively filter noise.

🛡️

Exploit Intel
Real-world exploit signals beyond the KEV catalog.

🐙

GitHub Issues
Auto-create alert tickets without duplication.

📬

Weekly Digest
Clean summaries, eliminating email spam.

🏷️

Watchlist Groups
Tag vulnerabilities by team (Infra/AppSec/SOC).

🔀

Smart Routing
Route chat channels based on severity levels.

🚨

RBP Tracker
Early warning detection and tracking system.

Subscribe – $7/mo or try free for 14 days →

🚨 Active Exploits in the Wild

  • CVE-2026-123158CVSS 8.1
    sshd in OpenSSH before 10.6p2 on Linux, when musl libc is used without PAM, lacks a workaround for...
    Admin intel📅 Updated: Nov 6, 2026
  • CVE-2026-19868CVSS 7.5
    An authentication enforcement vulnerability in SonicOS SSLVPN service may allow a user with valid credentials for an alternate...
    CISA KEV📅 Added to KEV: Nov 6, 2026
  • CVE-2026-120422CVSS 8.9
    Sogou Input Method for Windows contains a vulnerability in the configuration retrieval mechanism of its SGTool.exe component. The...
    Admin intel📅 Updated: Nov 5, 2026
  • CVE-2026-102895CVSS 9.8
    GPUStack is an open-source GPU cluster manager for AI model serving and GPU instance provisioning. Prior to 2.2.0,...
    Watchtower Verified📅 Updated: Nov 5, 2026
  • CVE-2026-115732CVSS 9.0
    Incorrect authorization in the certificate-name matching of trapperkeeper-authorization, as used by Puppet Server, in the affected products, allows...
    Admin intel📅 Updated: Nov 4, 2026
  • CVE-2026-98432CVSS 9.8
    In the Linux kernel, the following vulnerability has been resolved: ipv4: free inet_opt and ireq_opt after an RCU...
    Admin intel📅 Updated: Nov 4, 2026
  • CVE-2026-107441CVSS 8.8
    An out-of-bounds write vulnerability in the CGI program of Zyxel GS1900-24E firmware versions through 2.90(AAHK.2)C0 could allow an...
    Admin intel📅 Updated: Nov 4, 2026
  • CVE-2019-25779CVSS 7.5
    The Diarise theme for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.5.9....
    Watchtower Verified📅 Updated: Nov 4, 2026
Powered by CVE Watchtower

Critical Vulnerabilities

  • CVE-2026-18535CVSS 9.6
    IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 are vulnerable to a Regular Expression Denial of...
    📅 Updated: Nov 8, 2026
  • CVE-2026-17409CVSS 9.4
    IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote attacker to execute unauthorized...
    📅 Updated: Nov 8, 2026
  • CVE-2026-123614CVSS 9.3
    imgproxy from 4.0.0 before 4.0.16 contains an integer overflow in the ICO loader that allows remote attackers to...
    📅 Updated: Nov 8, 2026
  • CVE-2026-123550CVSS 9.3
    OpenAM before 16.1.4 contains an authentication bypass vulnerability in its SAML v2.0 service provider that accepts unsigned assertions...
    📅 Updated: Nov 8, 2026
  • CVE-2026-123551CVSS 10.0
    OpenAM from 14.0.0 before 16.1.4 contains an information disclosure vulnerability that allows unauthenticated attackers to read live session...
    📅 Updated: Nov 8, 2026
  • CVE-2026-123549CVSS 9.3
    OpenAM before 16.1.4 fails to enforce the Valid Creation Attributes list during self-registration, allowing anonymous attackers to set...
    📅 Updated: Nov 8, 2026
  • CVE-2025-57085CVSS 9.8
    Tenda W30E V16.01.0.19 (5037) was discovered to contain a stack overflow in the v17 parameter in the UploadCfg...
    📅 Updated: Nov 8, 2026
  • CVE-2025-59359CVSS 9.8
    The cleanTcs mutation in Chaos Controller Manager is vulnerable to OS command injection. In conjunction with CVE-2025-59358, this...
    📅 Updated: Nov 8, 2026
Powered by CVE Watchtower

Daily CyberSecurity

  • About SecurityOnline.info
  • Advertise with us
  • Announcement
  • Contact
  • Contributor Register
  • Login
  • Disclaimer
  • DCMA
  • Privacy Policy
  • About SecurityOnline.info
  • Advertise on SecurityOnline.info
  • Contact Us

When you purchase through links on our site, we may earn an affiliate commission. Here’s how it works

  • CVE Watchtower
  • CVE Statistics by Vendor 2026
  • Q3 2026 Report
  • Top Exploited CVEs
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube
© 2017 - 2026 Daily CyberSecurity. All Rights Reserved.