Skip to content
November 8, 2026
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube

Daily CyberSecurity

Zero-hour alerts. Unmatched analysis.

Primary Menu
  • Home
  • CVE Data
    • CVE Watchtower
    • Top Exploited CVEs
    • CVE Stats by Vendor
    • Q2 2026 Report
    • CVE Alerts
    • CVE Alert Settings
    • Pricing
  • Cyber Criminals
  • Data Leak
  • Free Tools
    • CVSS 3.1 Calculator
    • Certificate Viewer
    • DNS Lookup
    • Encoder & Hash Generator
    • IP / Subnet Calculator
    • Whois Lookup
  • Linux
  • Malware
  • Vulnerability
  • Submit Press Release
Light/Dark Button
FCC to Vote on Banning Chinese Tech in US Undersea Cables Amid National Security Concerns Undertow Vulnerability CVE-2025-12543 CVE-2025-0107: PoC Exploit Code Undersea Cable Security, China Tech Ban
  • Technology

FCC to Vote on Banning Chinese Tech in US Undersea Cables Amid National Security Concerns

Do Son July 17, 2025 0

The FCC will vote on August 7 to ban Chinese tech in US undersea cables, aiming to boost national security after the 2024 "Salt Typhoon" cyberattack and curb China's digital influence.

New Web3 Identification Standard: IT Expert launches an innovative decentralized platform without servers and KYC CVE-2025-20059
  • Technique

New Web3 Identification Standard: IT Expert launches an innovative decentralized platform without servers and KYC

Dan Agbo July 17, 2025 0
An international software engineer and IT expert Rassul Rakhimzhan has made a breakthrough and developed a solution...
Read More Read more about New Web3 Identification Standard: IT Expert launches an innovative decentralized platform without servers and KYC
AWS Unleashes Enterprise AI: Bedrock AgentCore & $100M Boost for AI Agent Development AWS AI Agents, Enterprise AI
  • Technology

AWS Unleashes Enterprise AI: Bedrock AgentCore & $100M Boost for AI Agent Development

Do Son July 17, 2025 0

AWS unveils Bedrock AgentCore, expands its Generative AI Innovation Center with $100M, and launches an "AI Agents and Tools" Marketplace category to accelerate enterprise AI adoption.

Elon Musk’s xAI Eyes Saudi Arabia: Seeking Gigawatts of AI Compute Power in New Global Expansion EU GDPR Grok investigation xAI crypto trader recruitment X open-source algorithm 2026, Elon Musk ad transparency X Chat Replacement X End-to-End Encryption xAI, open-source xAI Elon Musk xAI Infrastructure, Saudi AI
  • Technology

Elon Musk’s xAI Eyes Saudi Arabia: Seeking Gigawatts of AI Compute Power in New Global Expansion

Do Son July 17, 2025 0

Elon Musk's xAI is in talks with Saudi Arabian entities, including PIF-backed Humain, to lease vast data center capacity for its large-scale AI models, eyeing global expansion.

Operation Eastwood: Europol Leads Massive Global Crackdown on Pro-Russian Cybercrime Group NoName057(16) NoName057(16), DDoS Crackdown
  • Cybercriminals

Operation Eastwood: Europol Leads Massive Global Crackdown on Pro-Russian Cybercrime Group NoName057(16)

Do Son July 17, 2025 0

Operation Eastwood, a massive international effort led by Europol, has significantly disrupted the pro-Russian cybercrime group NoName057(16), known for DDoS attacks.

Google’s “AI Mode” Transforms Search with Gemini 2.5 Pro, Deep Search, and AI Calling Google AI Search, Gemini Integration
  • Technology

Google’s “AI Mode” Transforms Search with Gemini 2.5 Pro, Deep Search, and AI Calling

Do Son July 17, 2025 0

Google's "AI Mode" expands with Gemini 2.5 Pro, Deep Search, and AI-assisted calling for businesses, marking a significant shift to a conversational, proactive search experience.

OpenAI Expands Beyond Microsoft: Google Cloud Joins Forces to Power ChatGPT and AI Growth OpenAI Multi-Cloud, Google Cloud Partnership Office 365 Cloud Backup Services
  • Technology

OpenAI Expands Beyond Microsoft: Google Cloud Joins Forces to Power ChatGPT and AI Growth

Do Son July 17, 2025 0

OpenAI diversifies its cloud strategy, partnering with Google Cloud to meet massive AI computational demands for ChatGPT, signaling a shift from exclusive Microsoft Azure reliance.

Cloudflare’s 1.1.1.1 DNS Suffers Global Outage Due to Internal Configuration Error Cloudflare Outage, DNS Misconfiguration CloudFlare WARP attack
  • Technology

Cloudflare’s 1.1.1.1 DNS Suffers Global Outage Due to Internal Configuration Error

Do Son July 17, 2025 0

Cloudflare's 1.1.1.1 public DNS resolver experienced a global outage on July 14, 2025, confirmed as an internal configuration error, not a cyberattack or BGP hijack.

Nintendo Switch 2 User Banned for Second-Hand Game Linked to MIG Backup Tool Nintendo tariff lawsuit 2026 Nintendo Switch 2, MIG Tool Nintendo Switch 2, USB-C Restrictions Nintendo Switch 2, Vulnerability
  • Technology

Nintendo Switch 2 User Banned for Second-Hand Game Linked to MIG Backup Tool

Do Son July 17, 2025 0

A Nintendo Switch 2 user faced a console ban after playing a second-hand game previously duplicated with the MIG backup tool, highlighting risks of pre-owned games.

ChromeOS Isn’t Dying: Google Clarifies Android Integration for Enhanced Laptop Experience ChromeOS Evolution, Android Integration Chrome OS Android app
  • Technology

ChromeOS Isn’t Dying: Google Clarifies Android Integration for Enhanced Laptop Experience

Do Son July 17, 2025 0

Google clarifies that ChromeOS isn't being phased out. Instead, it's integrating Android's core technologies to enhance performance, speed iteration, and improve laptop-smartphone synergy.

Facebook’s Major Purge: 10 Million Accounts Removed in New Content Quality Push Facebook Content, Spam Crackdown
  • Technology

Facebook’s Major Purge: 10 Million Accounts Removed in New Content Quality Push

Do Son July 17, 2025 0

Facebook has removed over 10 million accounts and updated its algorithm to fight content theft and impersonation, boosting original creators and quality posts.

Made by Google 2025: Pixel 10, Pixel Watch 4, and More AI Innovations Revealed Made by Google, Pixel 10 Pixel 10, Qi2 Baseband Security - CVE-2024-39343 Google Tensor TSMC Pixel 10 processor
  • Technology

Made by Google 2025: Pixel 10, Pixel Watch 4, and More AI Innovations Revealed

Do Son July 17, 2025 0

Google confirms its Made by Google event on August 20 in NYC. Expect the Pixel 10 lineup, Pixel Watch 4, new Pixel Buds, and potential Android XR/Project Moohan reveals.

Critical Cisco ISE Flaw CVE-2025-20337 (CVSS 10.0) Allows Unauthenticated Root RCE – Patch Immediately Cisco ISE, RCE Vulnerability
  • Vulnerability Report

Critical Cisco ISE Flaw CVE-2025-20337 (CVSS 10.0) Allows Unauthenticated Root RCE – Patch Immediately

Do Son July 17, 2025 0
A critical vulnerability was found in Cisco Identity Services Engine (ISE) and Cisco ISE-PIC. Tracked as CVE-2025-20337,...
Read More Read more about Critical Cisco ISE Flaw CVE-2025-20337 (CVSS 10.0) Allows Unauthenticated Root RCE – Patch Immediately
SonicWall SMA Devices Under Attack: UNC6148 Deploys OVERSTEP Rootkit for Persistent Access SonicWall Hack, Rootkit
  • Cybercriminals

SonicWall SMA Devices Under Attack: UNC6148 Deploys OVERSTEP Rootkit for Persistent Access

Do Son July 17, 2025 0

Google's GTIG uncovers UNC6148 using stolen credentials and a new rootkit, OVERSTEP, to gain persistent access to end-of-life SonicWall SMA 100 series appliances.

PyPI Bans Inbox.ru After Massive Spam Campaign and 1,500+ Fake Project Uploads PyPI Spam, Package Impersonation
  • Cybercriminals

PyPI Bans Inbox.ru After Massive Spam Campaign and 1,500+ Fake Project Uploads

Do Son July 17, 2025 0

PyPI has banned inbox.ru registrations after a large-scale spam campaign created over 1,500 fake projects, exploiting name confusion and impersonation.

Critical Backdoors & RCE Found in Nexxt Solutions Mesh Routers: Unauthenticated Takeover Possible, PoC Published telnet-admin
  • Vulnerability

Critical Backdoors & RCE Found in Nexxt Solutions Mesh Routers: Unauthenticated Takeover Possible, PoC Published

Do Son July 17, 2025 0

Four critical flaws, including unauthenticated telnet access and RCE, discovered in Nexxt Solutions NCM-X1800 mesh routers allow full network compromise. Update or disable immediately.

Stealthy SquidLoader Malware Targets Hong Kong Financial Firms with Evasive Cobalt Strike Attacks hong
  • Malware

Stealthy SquidLoader Malware Targets Hong Kong Financial Firms with Evasive Cobalt Strike Attacks

Do Son July 17, 2025 0

Trellix has uncovered SquidLoader, a highly obfuscated malware targeting Hong Kong financial institutions to deploy Cobalt Strike beacons for persistent control.

Critical Flaws in Alcatel-Lucent OmniAccess Stellar WLAN APs Allow Full Remote Takeover, PoC Releases WLAN AP Vulnerabilities, Remote Code Execution
  • Vulnerability Report

Critical Flaws in Alcatel-Lucent OmniAccess Stellar WLAN APs Allow Full Remote Takeover, PoC Releases

Do Son July 17, 2025 0

Multiple critical vulnerabilities (CVSS up to 9.8) in Alcatel-Lucent OmniAccess Stellar WLAN APs enable unauthenticated remote code execution and full device takeover. Patch immediately!

Microsoft Unveils RedirectionGuard: A New Windows 11 Defense Against Privilege Escalation Attacks Mico
  • Vulnerability Report
  • Windows

Microsoft Unveils RedirectionGuard: A New Windows 11 Defense Against Privilege Escalation Attacks

Do Son July 17, 2025 0

Microsoft introduces RedirectionGuard for Windows 11, a new mitigation feature designed to block filesystem redirection attacks using junctions, preventing privilege escalation.

NVIDIA Plugs Critical Flaws in Container Toolkit and GPU Operator: CVE-2025-23266 & CVE-2025-23267 NVIDIA Security, Container Vulnerabilities
  • Vulnerability Report

NVIDIA Plugs Critical Flaws in Container Toolkit and GPU Operator: CVE-2025-23266 & CVE-2025-23267

Do Son July 17, 2025 0

NVIDIA patched critical vulnerabilities in its Container Toolkit and GPU Operator, allowing privilege escalation, data tampering, and DoS in containerized environments.

Hidden Protestware Found in 28+ npm Packages: Silently Targeting Russian Users npm Protestware, Supply Chain Attack
  • Malware

Hidden Protestware Found in 28+ npm Packages: Silently Targeting Russian Users

Do Son July 17, 2025 0

Socket researchers uncovered widespread "protestware" in 28+ npm packages, silently disabling mouse interactions and playing the Ukrainian anthem for Russian-language users.

Google’s Big Sleep AI Foils Live Zero-Day Exploit in SQLite (CVE-2025-6965) AI Cybersecurity, Vulnerability Hunting
  • Vulnerability Report

Google’s Big Sleep AI Foils Live Zero-Day Exploit in SQLite (CVE-2025-6965)

Do Son July 17, 2025 0

Google's Big Sleep AI agent successfully identified and neutralized a critical SQLite vulnerability (CVE-2025-6965) before it could be exploited in the wild, marking a new era in AI-powered proactive defense.

❮ Prev Page
Next Page ❯

Search

CVE ALERTS
📈

EPSS Spike Alerts
Catch risk spikes before they make headlines.

🎯

Custom EPSS/CVSS
Set score thresholds to effectively filter noise.

🛡️

Exploit Intel
Real-world exploit signals beyond the KEV catalog.

🐙

GitHub Issues
Auto-create alert tickets without duplication.

📬

Weekly Digest
Clean summaries, eliminating email spam.

🏷️

Watchlist Groups
Tag vulnerabilities by team (Infra/AppSec/SOC).

🔀

Smart Routing
Route chat channels based on severity levels.

🚨

RBP Tracker
Early warning detection and tracking system.

Subscribe – $7/mo or try free for 14 days →

🚨 Active Exploits in the Wild

  • CVE-2026-123158CVSS 8.1
    sshd in OpenSSH before 10.6p2 on Linux, when musl libc is used without PAM, lacks a workaround for...
    Admin intel📅 Updated: Nov 6, 2026
  • CVE-2026-19868CVSS 7.5
    An authentication enforcement vulnerability in SonicOS SSLVPN service may allow a user with valid credentials for an alternate...
    CISA KEV📅 Added to KEV: Nov 6, 2026
  • CVE-2026-120422CVSS 8.9
    Sogou Input Method for Windows contains a vulnerability in the configuration retrieval mechanism of its SGTool.exe component. The...
    Admin intel📅 Updated: Nov 5, 2026
  • CVE-2026-102895CVSS 9.8
    GPUStack is an open-source GPU cluster manager for AI model serving and GPU instance provisioning. Prior to 2.2.0,...
    Watchtower Verified📅 Updated: Nov 5, 2026
  • CVE-2026-115732CVSS 9.0
    Incorrect authorization in the certificate-name matching of trapperkeeper-authorization, as used by Puppet Server, in the affected products, allows...
    Admin intel📅 Updated: Nov 4, 2026
  • CVE-2026-98432CVSS 9.8
    In the Linux kernel, the following vulnerability has been resolved: ipv4: free inet_opt and ireq_opt after an RCU...
    Admin intel📅 Updated: Nov 4, 2026
  • CVE-2026-107441CVSS 8.8
    An out-of-bounds write vulnerability in the CGI program of Zyxel GS1900-24E firmware versions through 2.90(AAHK.2)C0 could allow an...
    Admin intel📅 Updated: Nov 4, 2026
  • CVE-2019-25779CVSS 7.5
    The Diarise theme for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.5.9....
    Watchtower Verified📅 Updated: Nov 4, 2026
Powered by CVE Watchtower

Critical Vulnerabilities

  • CVE-2026-112346CVSS 9.3
    OpenHands Software Agent SDK before 1.52.0 contains an unauthenticated remote code execution vulnerability where the DockerWorkspace and Apptainer...
    📅 Updated: Nov 8, 2026
  • CVE-2026-10042CVSS 9.2
    manga-image-translator contains a remote code execution vulnerability in the shared API server mode due to unsafe deserialization of...
    📅 Updated: Nov 8, 2026
  • CVE-2025-71325CVSS 9.3
    picklescan before 0.0.27 contains a parsing logic error in the _list_globals function when handling STACK_GLOBAL opcodes, failing to...
    📅 Updated: Nov 8, 2026
  • CVE-2025-71323CVSS 9.3
    picklescan before 0.0.33 fails to block the ctypes module, allowing attackers to achieve remote code execution by invoking...
    📅 Updated: Nov 8, 2026
  • CVE-2025-71320CVSS 9.3
    picklescan before 0.0.33 contains an incomplete deny-list that fails to block pydoc.locate and operator.methodcaller functions, allowing attackers to...
    📅 Updated: Nov 8, 2026
  • CVE-2025-71321CVSS 9.3
    picklescan before 0.0.33 contains an arbitrary file writing vulnerability that allows attackers to bypass the dangerous blocklist by...
    📅 Updated: Nov 8, 2026
  • CVE-2024-58351CVSS 9.3
    Flowise before 2.1.4 allows configuration to be injected into the Chainflow during execution via the overrideConfig option, supported...
    📅 Updated: Nov 8, 2026
  • CVE-2020-37282CVSS 9.3
    office-converter through 1.0.2 contains an OS command injection vulnerability that allows attackers to execute commands by supplying a...
    📅 Updated: Nov 8, 2026
Powered by CVE Watchtower

Daily CyberSecurity

  • About SecurityOnline.info
  • Advertise with us
  • Announcement
  • Contact
  • Contributor Register
  • Login
  • Disclaimer
  • DCMA
  • Privacy Policy
  • About SecurityOnline.info
  • Advertise on SecurityOnline.info
  • Contact Us

When you purchase through links on our site, we may earn an affiliate commission. Here’s how it works

  • CVE Watchtower
  • CVE Statistics by Vendor 2026
  • Q3 2026 Report
  • Top Exploited CVEs
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube
© 2017 - 2026 Daily CyberSecurity. All Rights Reserved.