Skip to content
November 9, 2026
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube

Daily CyberSecurity

Zero-hour alerts. Unmatched analysis.

Primary Menu
  • Home
  • CVE Data
    • CVE Watchtower
    • Top Exploited CVEs
    • CVE Stats by Vendor
    • Q2 2026 Report
    • CVE Alerts
    • CVE Alert Settings
    • Pricing
  • Cyber Criminals
  • Data Leak
  • Free Tools
    • CVSS 3.1 Calculator
    • Certificate Viewer
    • DNS Lookup
    • Encoder & Hash Generator
    • IP / Subnet Calculator
    • Whois Lookup
  • Linux
  • Malware
  • Vulnerability
  • Submit Press Release
Light/Dark Button
Apple Is Reportedly Launching a $599 MacBook to Take On Chromebooks Apple Spring Event 2026 Apple Intel 14A iPhone 2028, Intel Foundry Apple Silicon iPhone 18 glass cloth shortage, Nittobo T-glass Apple crisis Apple UK App Store lawsuit appeal, Apple tax £1.5bn damages Apple AI Leadership Shakeup Giannandrea Subramanya Touchscreen MacBook Pro Apple 2026 Roadmap Apple Smart Home, Desktop Robot Apple H3 Chip, AirPods Camera Apple chips, on-device AI Apple AI, retail chatbot MacBook, Affordable Foldable iPhone, Apple Strategy Apple COO, Leadership Transition DOJ Lawsuit Apple EU Policy, App Store Fees CVE-2024-23222 Apple French antitrust fine
  • Technology

Apple Is Reportedly Launching a $599 MacBook to Take On Chromebooks

Do Son August 11, 2025 0

Apple is rumored to be launching a new, more affordable MacBook with an A18 Pro chip to compete with Chromebooks in the education market.

The New Price of AI Chips for China: NVIDIA and AMD Will Give 15% of Revenue to U.S. Governmen NVIDIA DGX Cloud restructuring, Dwight Diercks engineering shift NVIDIA Isaac Launchable, Hard-coded Credentials NVIDIA Merlin Deserialization, AI Pipeline RCE Triton DoS Flaws, AI Inference Server Security NVIDIA AI programming AI Chips China 800VDC Data Center, AI Power Architecture CVE-2024-0114 NVIDIA Container Toolkit vulnerability Container escape
  • Technology

The New Price of AI Chips for China: NVIDIA and AMD Will Give 15% of Revenue to U.S. Governmen

Do Son August 11, 2025 0

NVIDIA and AMD have a new deal to sell AI chips in China: they will pay 15% of the revenue to the U.S. government to get export licenses.

INE Named to Training Industry’s 2025 Top 20 Online Learning Library List Cyberwire_Logo_-_INE_Security_-_1200x720px_1754877603LhIAf9B4K9
  • Press Release

INE Named to Training Industry’s 2025 Top 20 Online Learning Library List

cybernewswire August 11, 2025 0
Cary, United States, 11th August 2025, CyberNewsWire
Read More Read more about INE Named to Training Industry’s 2025 Top 20 Online Learning Library List
You’ve Got Mail, for the Last Time: AOL Is Finally Killing Dial-Up AOL Dial-up
  • Technology

You’ve Got Mail, for the Last Time: AOL Is Finally Killing Dial-Up

Do Son August 11, 2025 0

After 34 years, AOL is officially shutting down its iconic dial-up internet service on September 30, 2025, marking the end of a digital era.

Your HBO Max Password Is a Ticking Clock: New Crackdown Is Coming HBO Max Password Sharing
  • Technology

Your HBO Max Password Is a Ticking Clock: New Crackdown Is Coming

Do Son August 11, 2025 0

HBO Max is intensifying its crackdown on password sharing, with plans to use more aggressive technology to identify and block unauthorized users by late 2025.

Dashlane Ends Free Plan, Forcing Users to Pay or Switch Dashlane Free Plan
  • Technology

Dashlane Ends Free Plan, Forcing Users to Pay or Switch

Do Son August 11, 2025 0

Dashlane is ending its free plan on Sept. 16. Free users are being moved to a trial and must upgrade to a paid plan or switch to an alternative.

Grok 4 Is Now Free to All, But There’s a Catch Grok 4, xAI Grok, AI Advertising Grok 4 Free AI
  • Technology

Grok 4 Is Now Free to All, But There’s a Catch

Do Son August 11, 2025 0

Elon Musk announces that the Grok 4 AI model is now available to all users for free, with a limit of five queries per 12 hours for non-subscribers.

Linus Torvalds Slams Google Engineer’s Code as ‘Garbage’ and Rejects It for Linux 6.17 CVE-2022-34918 Linus Torvalds, Linux Kernel
  • Linux

Linus Torvalds Slams Google Engineer’s Code as ‘Garbage’ and Rejects It for Linux 6.17

Do Son August 11, 2025 0

Linus Torvalds rejected a late code submission from a Google engineer for Linux 6.17, calling it "garbage" and criticizing its timing during the merge window.

Firefox’s New AI Feature Is Causing Major CPU Spikes and Draining Batteries Firefox AI
  • Technology

Firefox’s New AI Feature Is Causing Major CPU Spikes and Draining Batteries

Do Son August 11, 2025 0

Firefox's new AI tab grouping feature, while private, is causing major CPU spikes and battery drain on laptops, leading to a sluggish user experience.

CISA Alert: Critical Flaw (CVE-2025-8284) in Packet Power Devices Allows Unauthenticated Remote Takeover Packet Power, CISA Alert
  • Vulnerability Report

CISA Alert: Critical Flaw (CVE-2025-8284) in Packet Power Devices Allows Unauthenticated Remote Takeover

Do Son August 11, 2025 0

CISA warns of a critical authentication bypass flaw (CVE-2025-8284, CVSS 9.8) in Packet Power devices, allowing unauthenticated remote attackers to gain full access.

MacBook Pro with OLED Display Is Delayed, but a New Design Is Coming Budget MacBook aluminum Apple MacBook, A18 Pro Chip MacBook Pro OLED
  • Technology

MacBook Pro with OLED Display Is Delayed, but a New Design Is Coming

Do Son August 11, 2025 0

The OLED MacBook Pro is reportedly delayed until late 2026 or 2027. It's expected to feature a new design, an M6 chip, and a Dynamic Island.

CVE-2025-55188: 7-Zip Arbitrary File Write Flaw Could Lead to Code Execution 7-Zip Vulnerability, Arbitrary File Write
  • Vulnerability Report

CVE-2025-55188: 7-Zip Arbitrary File Write Flaw Could Lead to Code Execution

Do Son August 11, 2025 0

A critical vulnerability (CVE-2025-55188, CVSS 2.7) in 7-Zip allows remote attackers to perform arbitrary file writes via a crafted archive, potentially leading to code execution.

“Voice-First” Revolution: Apple Integrates Uber, Amazon, & YouTube with App Intents Framework iOS 27 Apple Intelligence Apple AI Extensions bazaar Siri iOS 27 Gemini integration Apple AI server Baltra Siri AI delay iOS 26.4 Apple Google Gemini Siri partnership, Siri powered by Google Gemini 2026 Siri Gemini, Apple Intelligence Siri, Apple AI Apple "Veritas", Siri AI Siri Gemini Supercharged Siri, AI assistant Siri Integration, App Intents Apple Siri Apple AI Strategy, ChatGPT Rival
  • Technology

“Voice-First” Revolution: Apple Integrates Uber, Amazon, & YouTube with App Intents Framework

Do Son August 11, 2025 0

Apple is testing an updated App Intents framework to deepen Siri's integration with major apps like Uber and Amazon, aiming for a "voice-first" interaction experience.

Japan’s New Law to Force Apple to Allow Non-WebKit Browsers on iPhones Vibe Coding apps Vibe Coding App Store surge Vibe Coding App Store Apple 50th Anniversary hardware Brazil CADE Apple settlement, iOS third-party app stores Brazil Tim Cook Succession Apple CEO Rumors App Store Mini Apps 15% Commission Fee iOS Japan Sideloading, Third-Party App Stores Web App Store, App Discovery Apple Age Verification, Texas SB2420 Apple AI acquisitions App Store, Antitrust Apple WebKit, Japan Regulations App Store Age Ratings, Parental Controls Apple App Store, Epic Games Lawsuit
  • Technology

Japan’s New Law to Force Apple to Allow Non-WebKit Browsers on iPhones

Do Son August 11, 2025 0

A new Japanese law will force Apple to allow third-party browsers like Chrome and Firefox to use their own rendering engines on iOS, mirroring and expanding on the EU’s Digital Markets Act.

Urgent Xerox FreeFlow Core Patch: Critical Flaws (CVSS 9.8) Allow RCE and SSRF Xerox RCE, FreeFlow Core Vulnerabilities
  • Vulnerability Report

Urgent Xerox FreeFlow Core Patch: Critical Flaws (CVSS 9.8) Allow RCE and SSRF

Do Son August 11, 2025 0

Xerox has patched two critical vulnerabilities (CVE-2025-8355, CVE-2025-8356) in FreeFlow Core 8.0.4, allowing attackers to exploit XML and path traversal flaws to achieve RCE and SSRF.

CVE-2025-5095 (CVSS 9.8): Critical Flaw in ARC Solo Broadcasting Devices Allows Unauthenticated Takeover ARC Solo, CISA Alert
  • Vulnerability Report

CVE-2025-5095 (CVSS 9.8): Critical Flaw in ARC Solo Broadcasting Devices Allows Unauthenticated Takeover

Do Son August 11, 2025 0

CISA warns of a critical authentication bypass flaw (CVE-2025-5095, CVSS 9.8) in ARC Solo devices, allowing attackers to change passwords and take full remote control without authentication.

Efimer Trojan: New Crypto-Stealer Hijacks Wallets via Fake Legal Threats & Malicious Torrents Efimer Trojan, Crypto Hijacking
  • Malware

Efimer Trojan: New Crypto-Stealer Hijacks Wallets via Fake Legal Threats & Malicious Torrents

Do Son August 11, 2025 0

Kaspersky exposes Efimer, a new crypto-stealer using fake legal threats and malicious torrents from compromised WordPress sites to hijack wallets and brute-force other sites.

CastleBot: The New MaaS Framework Fueling Info-Stealer & Ransomware Attacks CastleBot, Malware-as-a-Service
  • Malware

CastleBot: The New MaaS Framework Fueling Info-Stealer & Ransomware Attacks

Do Son August 11, 2025 0

IBM X-Force exposes CastleBot, a new MaaS framework that deploys infostealers and backdoors like NetSupport and WarmCookie via trojanized installers and phishing.

Linux Kernel Flaw (CVE-2025-38236): Privilege Escalation Risk, PoC Code Available Linux Kernel Exploit, Privilege Escalation
  • Vulnerability Report

Linux Kernel Flaw (CVE-2025-38236): Privilege Escalation Risk, PoC Code Available

Do Son August 11, 2025 0

A critical UAF flaw in the Linux kernel (CVE-2025-38236) allows for privilege escalation. A PoC exploit is now public, demonstrating how to escape the Chrome sandbox and gain kernel control.

GreedyBear Unmasked: How Stealthy Firefox Extensions and Fake Sites Stole $1M in Crypto GreedyBear, Cryptocurrency Theft
  • Cybercriminals

GreedyBear Unmasked: How Stealthy Firefox Extensions and Fake Sites Stole $1M in Crypto

Do Son August 11, 2025 0

A coordinated campaign by GreedyBear used 150+ malicious Firefox extensions and fake sites to steal over $1M in crypto. They are now using a new technique called Extension Hollowing to evade detection.

ScarCruft APT Deploys VCD Ransomware, Uses PubNub & New Malware in Espionage Campaign North Korea APT, PubNub Abuse
  • Cybercriminals

ScarCruft APT Deploys VCD Ransomware, Uses PubNub & New Malware in Espionage Campaign

Do Son August 11, 2025 0

S2W TALON exposes ScarCruft (APT37), a North Korean APT using a new campaign disguised as a postal notice, deploying NubSpy and VCD ransomware via PubNub C2.

WinRAR Update: Zero-Day Path Traversal Flaw (CVE-2025-8088) Actively Exploited to Deliver Malware WinRAR Zero-Day, Path Traversal CVE-2025-8088
  • Vulnerability Report

WinRAR Update: Zero-Day Path Traversal Flaw (CVE-2025-8088) Actively Exploited to Deliver Malware

Do Son August 11, 2025 0

ESET warns of an actively exploited WinRAR zero-day (CVE-2025-8088). The path traversal flaw allows attackers to execute code by crafting malicious archives.

❮ Prev Page
Next Page ❯

Search

CVE ALERTS
📈

EPSS Spike Alerts
Catch risk spikes before they make headlines.

🎯

Custom EPSS/CVSS
Set score thresholds to effectively filter noise.

🛡️

Exploit Intel
Real-world exploit signals beyond the KEV catalog.

🐙

GitHub Issues
Auto-create alert tickets without duplication.

📬

Weekly Digest
Clean summaries, eliminating email spam.

🏷️

Watchlist Groups
Tag vulnerabilities by team (Infra/AppSec/SOC).

🔀

Smart Routing
Route chat channels based on severity levels.

🚨

RBP Tracker
Early warning detection and tracking system.

Subscribe – $7/mo or try free for 14 days →

🚨 Active Exploits in the Wild

  • CVE-2026-111793CVSS 4.3
    Openwave Webtop Media Transcoder does not enforce administrator-defined file type restrictions to restrict the file-types to be converted....
    Admin intel📅 Updated: Nov 9, 2026
  • CVE-2026-114713CVSS 8.6
    The labeled-response module in UnrealIRCd 6.0.0 before 6.2.7.1 does not escape the IRCv3 "label" message tag when echoing...
    Admin intel📅 Updated: Nov 9, 2026
  • CVE-2026-123158CVSS 8.1
    sshd in OpenSSH before 10.6p2 on Linux, when musl libc is used without PAM, lacks a workaround for...
    Admin intel📅 Updated: Nov 6, 2026
  • CVE-2026-19868CVSS 7.5
    An authentication enforcement vulnerability in SonicOS SSLVPN service may allow a user with valid credentials for an alternate...
    CISA KEV📅 Added to KEV: Nov 6, 2026
  • CVE-2026-120422CVSS 8.9
    Sogou Input Method for Windows contains a vulnerability in the configuration retrieval mechanism of its SGTool.exe component. The...
    Admin intel📅 Updated: Nov 5, 2026
  • CVE-2026-102895CVSS 9.8
    GPUStack is an open-source GPU cluster manager for AI model serving and GPU instance provisioning. Prior to 2.2.0,...
    Watchtower Verified📅 Updated: Nov 5, 2026
  • CVE-2026-115732CVSS 9.0
    Incorrect authorization in the certificate-name matching of trapperkeeper-authorization, as used by Puppet Server, in the affected products, allows...
    Admin intel📅 Updated: Nov 4, 2026
  • CVE-2026-98432CVSS 9.8
    In the Linux kernel, the following vulnerability has been resolved: ipv4: free inet_opt and ireq_opt after an RCU...
    Admin intel📅 Updated: Nov 4, 2026
Powered by CVE Watchtower

Critical Vulnerabilities

  • CVE-2026-124560CVSS 9.3
    A vulnerability was found in D-Link DIR-878 1.20B05. This affects the function GetCAPTCHAsetting of the file bin/prog.cgi of...
    📅 Updated: Nov 9, 2026
  • CVE-2026-82418CVSS 9.8
    IBM Watson Speech Services Cartridge 4.0.0 through 5.4.0 could allow a remote attacker to execute arbitrary code due...
    📅 Updated: Nov 9, 2026
  • CVE-2026-119506CVSS 9.1
    Incorrect Privilege Assignment vulnerability in DynamiApps Frontend Admin by DynamiApps acf-frontend-form-element allows Privilege Escalation.This issue affects Frontend Admin...
    📅 Updated: Nov 9, 2026
  • CVE-2024-47856CVSS 9.8
    In RSA Authentication Agent before 7.4.7, service paths and shortcut paths may be vulnerable to path interception if...
    📅 Updated: Nov 8, 2026
  • CVE-2024-36057CVSS 9.8
    Koha Library before 23.05.10 fails to sanitize user-controllable filenames prior to unzipping, leading to remote code execution. The...
    📅 Updated: Nov 8, 2026
  • CVE-2024-36058CVSS 9.8
    The Send Basket functionality in Koha Library before 23.05.10 is susceptible to Time-Based SQL Injection because it fails...
    📅 Updated: Nov 8, 2026
  • CVE-2024-46636CVSS 9.4
    NASA Earth Observing System Data and Information System (EOSDIS) MODAPS v8.1 was discovered to contain a SQL injection...
    📅 Updated: Nov 8, 2026
  • CVE-2026-64232CVSS 9.8
    In the Linux kernel, the following vulnerability has been resolved: block: recompute nr_integrity_segments in blk_insert_cloned_request blk_insert_cloned_request() already recomputes...
    📅 Updated: Nov 8, 2026
Powered by CVE Watchtower

Daily CyberSecurity

  • About SecurityOnline.info
  • Advertise with us
  • Announcement
  • Contact
  • Contributor Register
  • Login
  • Disclaimer
  • DCMA
  • Privacy Policy
  • About SecurityOnline.info
  • Advertise on SecurityOnline.info
  • Contact Us

When you purchase through links on our site, we may earn an affiliate commission. Here’s how it works

  • CVE Watchtower
  • CVE Statistics by Vendor 2026
  • Q3 2026 Report
  • Top Exploited CVEs
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube
© 2017 - 2026 Daily CyberSecurity. All Rights Reserved.