Skip to content
November 8, 2026
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube

Daily CyberSecurity

Zero-hour alerts. Unmatched analysis.

Primary Menu
  • Home
  • CVE Data
    • CVE Watchtower
    • Top Exploited CVEs
    • CVE Stats by Vendor
    • Q2 2026 Report
    • CVE Alerts
    • CVE Alert Settings
    • Pricing
  • Cyber Criminals
  • Data Leak
  • Free Tools
    • CVSS 3.1 Calculator
    • Certificate Viewer
    • DNS Lookup
    • Encoder & Hash Generator
    • IP / Subnet Calculator
    • Whois Lookup
  • Linux
  • Malware
  • Vulnerability
  • Submit Press Release
Light/Dark Button
The Telecom Threat: Liminal Panda’s Covert Campaign Targets Southwest Asian Critical Infrastructure Telecom Cyberespionage, Liminal Panda
  • Cyber Security

The Telecom Threat: Liminal Panda’s Covert Campaign Targets Southwest Asian Critical Infrastructure

Do Son August 4, 2025 0

Palo Alto's Unit 42 reveals a sophisticated cyberespionage campaign by Liminal Panda (CL-STA-0969) targeting Southwest Asian telecom infrastructure with custom backdoors.

Prompt Injection to Code Execution: Cursor Code Editor Hit by Critical MCP Vulnerabilities (CVE-2025-54135 & CVE-2025-54136) Cursor Vulnerability, MCP Security
  • Vulnerability Report

Prompt Injection to Code Execution: Cursor Code Editor Hit by Critical MCP Vulnerabilities (CVE-2025-54135 & CVE-2025-54136)

Do Son August 4, 2025 0

Cursor, the AI code editor, has patched two severe vulnerabilities (CVE-2025-54135, CVE-2025-54136) that allowed remote code execution via prompt injection and MCP trust bypass.

Storm-2603: Chinese APT Deploys Warlock & LockBit with AK47C2 Framework Antivirus Terminator supported arguments when run without parameters
  • Cybercriminals

Storm-2603: Chinese APT Deploys Warlock & LockBit with AK47C2 Framework

Do Son August 4, 2025 0

Check Point Research uncovers Storm-2603, a China-linked APT using a custom AK47C2 framework and BYOVD tactics to deploy multiple ransomware strains simultaneously.

Critical Squid Vulnerability (CVE-2025-54574) Allows Remote Code Execution & Data Leakage CVE-2024-45802 Squid Vulnerability, Remote Code Execution CVE-2025-54574
  • Vulnerability Report

Critical Squid Vulnerability (CVE-2025-54574) Allows Remote Code Execution & Data Leakage

Do Son August 4, 2025 0

A critical heap buffer overflow (CVE-2025-54574, CVSS 9.3) in Squid allows unauthenticated RCE and information leakage when processing URN requests.

Google Reverses goo.gl Shutdown, Grants “Second Life” to Active Links Google, antitrust Google URL Shortener, goo.gl Alphabet Acquire Wiz Third-Party Cookies Privacy Sandbox
  • Technology

Google Reverses goo.gl Shutdown, Grants “Second Life” to Active Links

Do Son August 4, 2025 0

Google reverses its decision to shut down goo.gl, opting to preserve a subset of actively used links to prevent widespread disruption after user backlash.

T-Mobile Acquires UScellular for $4.3B, Dumps DEI Programs for FCC Approval T-Mobile, UScellular Acquisition
  • Technology

T-Mobile Acquires UScellular for $4.3B, Dumps DEI Programs for FCC Approval

Do Son August 4, 2025 0

T-Mobile has acquired UScellular for $4.3B, but only after reportedly agreeing to end its DEI programs to secure FCC approval. The deal expands T-Mobile’s 5G network.

APT36 Escalates Cyber-Espionage on India: Poseidon Backdoor Targets Railways, Oil & Government APT36, Poseidon Backdoor
  • Cyber Security

APT36 Escalates Cyber-Espionage on India: Poseidon Backdoor Targets Railways, Oil & Government

Do Son August 4, 2025 0

A new report reveals APT36 (Transparent Tribe) is escalating cyber-espionage against India, using phishing and .desktop files to deploy the Poseidon backdoor for long-term access.

The AI Cold War: Anthropic Revokes OpenAI’s Claude API Access Over Terms of Service Dispute Claude Code Security Claude Opus 4.1, AI Model Update Anthropic OpenAI, API Access Revocation Claude AI, Rate Limits Claude Memory, AI Personalization Claude 4 whistleblowing, AI ethical risks
  • Technology

The AI Cold War: Anthropic Revokes OpenAI’s Claude API Access Over Terms of Service Dispute

Do Son August 4, 2025 0

Anthropic has revoked OpenAI's Claude API access, citing a terms of service violation. OpenAI, preparing to launch GPT-5, denies the accusation, calling the move "disappointing."

Critical HashiCorp Vault Flaw (CVE-2025-6000) Allows Code Execution for Privileged Users CVE-2025-6000 CVE-2024-2048 HashiCorp Vault, RCE Vulnerability
  • Vulnerability Report

Critical HashiCorp Vault Flaw (CVE-2025-6000) Allows Code Execution for Privileged Users

Do Son August 4, 2025 0

A critical flaw (CVE-2025-6000) in HashiCorp Vault allows privileged operators to achieve remote code execution on the host via misconfigured plugin directories.

Amazon Q2 2025: Generative AI Fuels $167.7B Revenue Surge and Alexa+ Ad Monetization Motorola Smart Feed redirect Anthropic Amazon 5GW partnership Amazon Perplexity lawsuit AWS-LC Vulnerabilities Cryptographic Bypass AWS Middle East drone strikes Amazon layoffs 2026, Amazon AI restructuring Amazon Kindle DRM Policy, Publisher Control EPUB AWS Nova Forge AI Model Customization AWS Trainium3 EC2 Trn3 UltraServer Route 53 Accelerated Recovery AWS DNS Resilience AI Browser War, Amazon Comet Amazon layoffs, cost reduction AWS outage, DynamoDB DNS AWS outage, cloud dependency AWS VPN Client, Root Privilege Escalation WSA shutdown, Amazon Appstore Amazon Wondery, Podcast Restructuring Amazon Q2 2025 Generative AI AWS Client VPN, Privilege Escalation Amazon AI, Wearable AI
  • Technology

Amazon Q2 2025: Generative AI Fuels $167.7B Revenue Surge and Alexa+ Ad Monetization

Do Son August 2, 2025 0

Amazon's Q2 2025 earnings hit $167.7B as generative AI powers growth in AWS, Alexa+, and retail—Alexa+ to launch conversational ad monetization soon.

Microsoft Retires Windows 11 SE: End of Support Set for October 2026, Ceding Education Market to Chrome OS KB5083769 Update Windows 11 24H2 end of support File Explorer White Flash Windows 11 Dark Mode Bug Windows 11 SE, End of Support Windows Update, Automatic Upgrade CVE-2023-38146 Windows 10
  • Windows

Microsoft Retires Windows 11 SE: End of Support Set for October 2026, Ceding Education Market to Chrome OS

Do Son August 2, 2025 0

Microsoft will end support for Windows 11 SE in October 2026, signaling the quiet retirement of its cloud-first education OS and a continued struggle against Google's Chrome OS dominance.

Google Gemini’s “Deep Think” is Here: Parallel Reasoning Mode for AI Ultra Subscribers Google Deep Think, Gemini AI
  • Technology

Google Gemini’s “Deep Think” is Here: Parallel Reasoning Mode for AI Ultra Subscribers

Do Son August 2, 2025 0

Google has launched "Deep Think" for Gemini 2.5 Pro, an advanced reasoning mode that uses parallel thinking to deliver more accurate and creative responses, available now for Google AI Ultra subscribers.

SEC Launches “Project Crypto”: A Sweeping Overhaul of US Digital Asset Regulation to Modernize and Reshore the Industry SEC Crypto Regulation, Project Crypto Stablecoin Regulation, GENIUS Act Cryptocurrency Fraud Report Garantex, stablecoin
  • Technology

SEC Launches “Project Crypto”: A Sweeping Overhaul of US Digital Asset Regulation to Modernize and Reshore the Industry

Do Son August 2, 2025 0

In response to the GENIUS Act, the SEC launches "Project Crypto," an initiative to modernize US crypto regulation, reclassify digital assets, and bring crypto innovation onshore.

The Ultimate Insider Threat: How North Korean IT Workers Infiltrated the Global Remote Economy North Korea Espionage, Disguised IT Workers
  • Cybercriminals

The Ultimate Insider Threat: How North Korean IT Workers Infiltrated the Global Remote Economy

Do Son August 2, 2025 0

A DomainTools report exposes how North Korean IT workers use fake IDs, AI, and shell companies to infiltrate remote tech jobs globally, funding the regime's military and compromising corporate infrastructure.

Interlock Ransomware Strikes: eSentire Exposes Multi-Stage Payload and ClickFix Social Engineering Interlock Ransomware, ClickFix Technique
  • Malware

Interlock Ransomware Strikes: eSentire Exposes Multi-Stage Payload and ClickFix Social Engineering

Do Son August 2, 2025 0

eSentire exposes Interlock, a new ransomware group using multi-stage payloads and the ClickFix social engineering technique to deploy ransomware and backdoors via compromised websites.

The OAuth Phishing Trap: Proofpoint Exposes AiTM Attacks That Bypass MFA to Hijack Cloud Accounts Fake Microsoft landing page, capturing MFA
  • Cybercriminals

The OAuth Phishing Trap: Proofpoint Exposes AiTM Attacks That Bypass MFA to Hijack Cloud Accounts

Do Son August 2, 2025 0

Proofpoint reveals an AiTM phishing campaign using fake OAuth apps and the Tycoon platform to bypass MFA, hijack Microsoft 365 accounts, and steal credentials.

Comp AI secures $2.6M pre-seed to disrupt SOC 2 market 26M_1_1754051998rPAjsKrwgn
  • Press Release

Comp AI secures $2.6M pre-seed to disrupt SOC 2 market

cybernewswire August 1, 2025 0
San Francisco, California, 1st August 2025, CyberNewsWire
Read More Read more about Comp AI secures $2.6M pre-seed to disrupt SOC 2 market
NVIDIA Extends Windows 10 Driver Support to October 2026, Offering Gamers a One-Year Reprieve NVIDIA acquisition rumors NVIDIA AI Security AI Framework Vulnerabilities Nvidia 595.76 Hotfix NVIDIA Megatron Bridge vulnerability GPU vs ASIC AI battle NVIDIA Driver Vulnerability CVE-2025-33217 NVIDIA biggest TSMC customer 2026, NVIDIA vs Apple TSMC revenue share NVIDIA CUDA Toolkit CVE-2025-33228 Groq NVIDIA licensing deal, Jonathan Ross acquihire 2025 NeMo Code Injection, AI Framework RCE NVIDIA App Privilege Escalation, CVE-2025-23358 NVIDIA Security Update, DLS Vulnerability CVE-2025-23316 NVIDIA NVDebug, vulnerabilities NVIDIA Driver Vulnerabilities, vGPU Security Nvidia Jetson, UEFI Vulnerabilities CVE-2024-0130 - CVE-2024-0136 CVE-2024-0148 NVIDIA Driver Support, Windows 10 EOL
  • Technology

NVIDIA Extends Windows 10 Driver Support to October 2026, Offering Gamers a One-Year Reprieve

Do Son August 1, 2025 0

NVIDIA will extend Game Ready driver support for Windows 10 until October 2026, a year beyond Microsoft's EOL, but only Windows 11 users will receive new feature and optimization updates after that date.

Apple’s Q2 Results Soar: $94B Revenue Fueled by iPhone & Mac Sales, AI Investment Surges iOS 27 Liquid Glass slider iPhone Flip rumors 2026 Setapp Mobile iOS shutdown, Apple DMA political delay tactics Apple AI pin wearable 2027, Siri Campos Gemini integration Apple AI strategy 2026, Liquid Glass interface Apple Intelligence Mac Pro Cancelled Mac Studio Future App Store antitrust, UK lawsuit iPhone Fold Hinge, Cost Optimization MacBook Pro, OLED display Apple supply chain, manufacturing automation Apple home security, smart camera Apple Earnings, AI Investment Apple EU Fine, DMA Appeal CVE-2023-23529
  • Technology

Apple’s Q2 Results Soar: $94B Revenue Fueled by iPhone & Mac Sales, AI Investment Surges

Do Son August 1, 2025 0

Apple reports strong Q2 2025 earnings with $94B in revenue. iPhone and Mac sales drove growth, and CEO Tim Cook confirmed a significant surge in AI investments.

ChatGPT Exposed: OpenAI’s Sharing Feature Leaks Private Conversations to Google Search ChatGPT Privacy, Data Leak
  • Data Leak

ChatGPT Exposed: OpenAI’s Sharing Feature Leaks Private Conversations to Google Search

Do Son August 1, 2025 0

OpenAI has disabled a ChatGPT feature that leaked private conversations to Google Search after users unknowingly enabled indexing, exposing sensitive data and resumes.

NVIDIA Ends Feature Support for GTX 7XX, 9XX, 10XX GPUs, Capping Driver Updates in October NVIDIA Legacy GPUs, Driver Support CVE-2024-0087 exploit
  • Technology

NVIDIA Ends Feature Support for GTX 7XX, 9XX, 10XX GPUs, Capping Driver Updates in October

Do Son August 1, 2025 0

NVIDIA will end feature and game optimization updates for Maxwell and Pascal GPUs (GTX 7XX, 9XX, 10XX series) in October, transitioning to security-only updates for three years.

Predicting the imminent BTC bull run, Goldenmining launches BTC contracts, generating $7,700 in daily profits Bitc
  • Technique

Predicting the imminent BTC bull run, Goldenmining launches BTC contracts, generating $7,700 in daily profits

Do Son August 1, 2025 0
Bitcoin’s price has reached around $116,000, entering the final 90-day window of its projected bull market cycle....
Read More Read more about Predicting the imminent BTC bull run, Goldenmining launches BTC contracts, generating $7,700 in daily profits
❮ Prev Page
Next Page ❯

Search

CVE ALERTS
📈

EPSS Spike Alerts
Catch risk spikes before they make headlines.

🎯

Custom EPSS/CVSS
Set score thresholds to effectively filter noise.

🛡️

Exploit Intel
Real-world exploit signals beyond the KEV catalog.

🐙

GitHub Issues
Auto-create alert tickets without duplication.

📬

Weekly Digest
Clean summaries, eliminating email spam.

🏷️

Watchlist Groups
Tag vulnerabilities by team (Infra/AppSec/SOC).

🔀

Smart Routing
Route chat channels based on severity levels.

🚨

RBP Tracker
Early warning detection and tracking system.

Subscribe – $7/mo or try free for 14 days →

🚨 Active Exploits in the Wild

  • CVE-2026-123158CVSS 8.1
    sshd in OpenSSH before 10.6p2 on Linux, when musl libc is used without PAM, lacks a workaround for...
    Admin intel📅 Updated: Nov 6, 2026
  • CVE-2026-19868CVSS 7.5
    An authentication enforcement vulnerability in SonicOS SSLVPN service may allow a user with valid credentials for an alternate...
    CISA KEV📅 Added to KEV: Nov 6, 2026
  • CVE-2026-120422CVSS 8.9
    Sogou Input Method for Windows contains a vulnerability in the configuration retrieval mechanism of its SGTool.exe component. The...
    Admin intel📅 Updated: Nov 5, 2026
  • CVE-2026-102895CVSS 9.8
    GPUStack is an open-source GPU cluster manager for AI model serving and GPU instance provisioning. Prior to 2.2.0,...
    Watchtower Verified📅 Updated: Nov 5, 2026
  • CVE-2026-115732CVSS 9.0
    Incorrect authorization in the certificate-name matching of trapperkeeper-authorization, as used by Puppet Server, in the affected products, allows...
    Admin intel📅 Updated: Nov 4, 2026
  • CVE-2026-98432CVSS 9.8
    In the Linux kernel, the following vulnerability has been resolved: ipv4: free inet_opt and ireq_opt after an RCU...
    Admin intel📅 Updated: Nov 4, 2026
  • CVE-2026-107441CVSS 8.8
    An out-of-bounds write vulnerability in the CGI program of Zyxel GS1900-24E firmware versions through 2.90(AAHK.2)C0 could allow an...
    Admin intel📅 Updated: Nov 4, 2026
  • CVE-2019-25779CVSS 7.5
    The Diarise theme for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.5.9....
    Watchtower Verified📅 Updated: Nov 4, 2026
Powered by CVE Watchtower

Critical Vulnerabilities

  • CVE-2026-18535CVSS 9.6
    IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 are vulnerable to a Regular Expression Denial of...
    📅 Updated: Nov 8, 2026
  • CVE-2026-17409CVSS 9.4
    IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote attacker to execute unauthorized...
    📅 Updated: Nov 8, 2026
  • CVE-2026-123614CVSS 9.3
    imgproxy from 4.0.0 before 4.0.16 contains an integer overflow in the ICO loader that allows remote attackers to...
    📅 Updated: Nov 8, 2026
  • CVE-2026-123550CVSS 9.3
    OpenAM before 16.1.4 contains an authentication bypass vulnerability in its SAML v2.0 service provider that accepts unsigned assertions...
    📅 Updated: Nov 8, 2026
  • CVE-2026-123551CVSS 10.0
    OpenAM from 14.0.0 before 16.1.4 contains an information disclosure vulnerability that allows unauthenticated attackers to read live session...
    📅 Updated: Nov 8, 2026
  • CVE-2026-123549CVSS 9.3
    OpenAM before 16.1.4 fails to enforce the Valid Creation Attributes list during self-registration, allowing anonymous attackers to set...
    📅 Updated: Nov 8, 2026
  • CVE-2025-57085CVSS 9.8
    Tenda W30E V16.01.0.19 (5037) was discovered to contain a stack overflow in the v17 parameter in the UploadCfg...
    📅 Updated: Nov 8, 2026
  • CVE-2025-59359CVSS 9.8
    The cleanTcs mutation in Chaos Controller Manager is vulnerable to OS command injection. In conjunction with CVE-2025-59358, this...
    📅 Updated: Nov 8, 2026
Powered by CVE Watchtower

Daily CyberSecurity

  • About SecurityOnline.info
  • Advertise with us
  • Announcement
  • Contact
  • Contributor Register
  • Login
  • Disclaimer
  • DCMA
  • Privacy Policy
  • About SecurityOnline.info
  • Advertise on SecurityOnline.info
  • Contact Us

When you purchase through links on our site, we may earn an affiliate commission. Here’s how it works

  • CVE Watchtower
  • CVE Statistics by Vendor 2026
  • Q3 2026 Report
  • Top Exploited CVEs
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube
© 2017 - 2026 Daily CyberSecurity. All Rights Reserved.