Skip to content
November 9, 2026
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube

Daily CyberSecurity

Zero-hour alerts. Unmatched analysis.

Primary Menu
  • Home
  • CVE Data
    • CVE Watchtower
    • Top Exploited CVEs
    • CVE Stats by Vendor
    • Q2 2026 Report
    • CVE Alerts
    • CVE Alert Settings
    • Pricing
  • Cyber Criminals
  • Data Leak
  • Free Tools
    • CVSS 3.1 Calculator
    • Certificate Viewer
    • DNS Lookup
    • Encoder & Hash Generator
    • IP / Subnet Calculator
    • Whois Lookup
  • Linux
  • Malware
  • Vulnerability
  • Submit Press Release
Light/Dark Button
Operation DRAGONCLONE: China Mobile Tietong Hit by Advanced APT Attack dragon
  • Cyber Security
  • Malware

Operation DRAGONCLONE: China Mobile Tietong Hit by Advanced APT Attack

Do Son June 10, 2025 0

Seqrite Labs uncovers Operation DRAGONCLONE, a sophisticated APT campaign targeting China Mobile Tietong with VELETRIX and VShell malware.

CVE-2025-41646: Critical Authentication Bypass in RevPi Webstatus Threatens Industrial Systems RevPi Webstatus, Authentication Bypass
  • Vulnerability Report

CVE-2025-41646: Critical Authentication Bypass in RevPi Webstatus Threatens Industrial Systems

Do Son June 10, 2025 0

A critical authentication bypass (CVE-2025-41646) affects KUNBUS RevPi Webstatus. Exploiting implicit type conversion allows attackers full access.

APT41 Unleashes Stealthy Malware Using Google Calendar for Covert C2! chaos
  • Cyber Security

APT41 Unleashes Stealthy Malware Using Google Calendar for Covert C2!

Do Son June 10, 2025 0

APT41 is leveraging Google Calendar as a covert C2 channel in a new multi-stage malware campaign targeting a Taiwanese government website.

Behind the Followers: Malicious Python Package Harvests Instagram Credentials Instagram Malware, Credential Harvesting
  • Malware

Behind the Followers: Malicious Python Package Harvests Instagram Credentials

Do Son June 10, 2025 0

Beware 'imad213,' a fake Instagram booster stealing credentials via social engineering and bot services. Learn how to protect your account.

BladedFeline: Iran-Aligned APT Group Expands Arsenal With Whisper and PrimeCache BladedFeline, Cyberespionage
  • Cyber Security
  • Malware

BladedFeline: Iran-Aligned APT Group Expands Arsenal With Whisper and PrimeCache

Do Son June 10, 2025 0

ESET uncovers BladedFeline, an Iran-aligned APT group, targeting KRG, Iraq, and Uzbekistan in a sophisticated cyberespionage campaign.

SoraAI.lnk: Beware of This New Info-Stealer Hiding as OpenAI’s Sora SoraAI
  • Malware

SoraAI.lnk: Beware of This New Info-Stealer Hiding as OpenAI’s Sora

Do Son June 10, 2025 0

A new info-stealer, SoraAI.lnk, is leveraging OpenAI's Sora popularity to infect users. Learn how this sophisticated malware works and how to protect your data.

Apache Kafka Clients at Risk: File Reads, SSRF, and RCE Exploits Trigger Urgent Security Fixes Kafka RCE JAAS vulnerability
  • Vulnerability

Apache Kafka Clients at Risk: File Reads, SSRF, and RCE Exploits Trigger Urgent Security Fixes

Do Son June 9, 2025 0

Apache Kafka fixes CVEs exposing clients to RCE, SSRF, and file read attacks. Update to secure versions and review JAAS settings immediately.

Critical Wazuh RCE (CVE-2025-24016) Actively Exploited by Mirai Botnets Wazuh RCE, Mirai Botnets
  • Malware
  • Vulnerability Report

Critical Wazuh RCE (CVE-2025-24016) Actively Exploited by Mirai Botnets

Do Son June 9, 2025 0

Akamai reports active exploitation of critical Wazuh RCE (CVE-2025-24016) by multiple Mirai botnets, targeting IoT devices since March 2025.

Apple’s “Liquid Glass” Vision: iPhone 2027 & Unified OS 26 Liquid Glass, iPhone 2027 Apple AI Apple Intelligence, China Market
  • Technology

Apple’s “Liquid Glass” Vision: iPhone 2027 & Unified OS 26

Do Son June 9, 2025 0

Apple's WWDC 2025: Unified OS "26" and a glimpse of the "Liquid Glass" iPhone 2027. Will AI take a backseat to design?

Seraphic Security Unveils BrowserTotal™ – Free AI-Powered Browser Security Assessment for Enterprises dashboard1200x720_2_1749468214vL4nUEOAEX
  • Press Release

Seraphic Security Unveils BrowserTotal™ – Free AI-Powered Browser Security Assessment for Enterprises

cybernewswire June 9, 2025 0
Tel Aviv, Israel, 9th June 2025, CyberNewsWire
Read More Read more about Seraphic Security Unveils BrowserTotal™ – Free AI-Powered Browser Security Assessment for Enterprises
Critical 9.6 CVSS RCE: ManageEngine Exchange Reporter Plus Vulnerability Discovered! CVE-2025-3835, Exchange Reporter Plus
  • Vulnerability

Critical 9.6 CVSS RCE: ManageEngine Exchange Reporter Plus Vulnerability Discovered!

Do Son June 9, 2025 0

A critical RCE flaw (CVE-2025-3835) in ManageEngine Exchange Reporter Plus allows unauthenticated attackers to execute arbitrary commands. Update now!

Critical 9.8 CVSS Flaw: Unpatched PayU CommercePro Plugin Allows Admin Account Takeover! PayU CommercePro, Account Takeover
  • Vulnerability Report

Critical 9.8 CVSS Flaw: Unpatched PayU CommercePro Plugin Allows Admin Account Takeover!

Do Son June 9, 2025 0

A critical 9.8 CVSS vulnerability in PayU CommercePro for WordPress allows unauthenticated admin account takeover. No patch available, immediate removal advised.

Beyond the Recycle Bin: Is Stellar File Eraser the Ultimate Data Destruction Tool? Stellar File Eraser Review
  • Technique

Beyond the Recycle Bin: Is Stellar File Eraser the Ultimate Data Destruction Tool?

Do Son June 9, 2025 0

Don't just delete, destroy. Our Stellar File Eraser review covers its DoD-level security, features, and why you need it for total data privacy.

Google’s Secret Weapon? ‘Gemini Kingfall’ AI Briefly Appears, Creates Playable Minecraft from Text! Gemini Kingfall, Google AI
  • Technology

Google’s Secret Weapon? ‘Gemini Kingfall’ AI Briefly Appears, Creates Playable Minecraft from Text!

Do Son June 9, 2025 0

Google's new AI model, 'Gemini Kingfall,' briefly appeared in AI Studio, astonishing developers by generating a playable Minecraft game from text.

YouTube’s Ad Blocker Crackdown Intensifies: No More Free Rides! YouTube Ad Blockers
  • Technology

YouTube’s Ad Blocker Crackdown Intensifies: No More Free Rides!

Do Son June 9, 2025 0

YouTube escalates its war on ad blockers, particularly for Firefox users, as it prioritizes revenue for its massive AI investments.

Google Cloud Unveils Cloud Run GPU: Powering AI with NVIDIA L4 Cloud Run GPU, Google Cloud
  • Technology

Google Cloud Unveils Cloud Run GPU: Powering AI with NVIDIA L4

Do Son June 9, 2025 0

Google Cloud launches Cloud Run GPU, offering auto-scaling NVIDIA L4 GPUs for AI workloads with per-second billing and rapid cold start.

Google AI Studio Changes: Gemini 2.5 Pro No Longer Free Sundar Pichai ChatGPT, Generative AI Rivalry Google AI Pro, student verification AI Overview, Publishers Drug Discovery AI, Isomorphic Labs Google AI Overviews, Antitrust Complaint Google AI Studio Google One AI, student offer Google Samsung Antitrust Gemini Gemini AI, Child Safety
  • Technology

Google AI Studio Changes: Gemini 2.5 Pro No Longer Free

Do Son June 9, 2025 0

Google AI Studio discontinues free access to Gemini 2.5 Pro and shifts to API key-based access, impacting developers.

YouTube Music Free Tier: More Ads Are Coming – What You Need to Know YouTube Shorts, digital well-being YouTube AI doppelgängers Shorts, Gemini 3 Playables games
  • Technology

YouTube Music Free Tier: More Ads Are Coming – What You Need to Know

Do Son June 9, 2025 0

Google is increasing ads on YouTube Music's free tier, replacing album art and blocking skips. Learn what's changing and how to go ad-free.

Microsoft BFS Flaws Expose Windows to Privilege Escalation – PoC Code Released Race Condition Exploit
  • Vulnerability

Microsoft BFS Flaws Expose Windows to Privilege Escalation – PoC Code Released

Do Son June 9, 2025 0

Critical flaws in Microsoft's Brokering File System (BFS), including race conditions and UAF bugs, expose Windows to privilege escalation. PoC code available. Patch now!

From Cheats to Compromise: Blitz Malware Exploits Gamers via Backdoored Standoff 2 Cheats Blitz infection chain
  • Malware

From Cheats to Compromise: Blitz Malware Exploits Gamers via Backdoored Standoff 2 Cheats

Do Son June 9, 2025 0

Blitz malware infects gamers via backdoored Standoff 2 cheats, stealing data and cryptojacking. It uses Hugging Face for C2 and targets Windows users globally.

QNAP Fixes SQL Injection and Certificate Validation Flaws in Qsync Central and File Station 5 QNAP Vulnerabilities CVE-2025-52856
  • Vulnerability Report

QNAP Fixes SQL Injection and Certificate Validation Flaws in Qsync Central and File Station 5

Do Son June 9, 2025 0

QNAP releases urgent patches for high-severity flaws in Qsync Central and File Station 5, enabling RCE and data compromise. Update immediately!

Critical CVSS 10.0 Flaws in B. Braun OnlineSuite Threaten Healthcare Infrastructure Medical Devices Vulnerabilities
  • Vulnerability Report

Critical CVSS 10.0 Flaws in B. Braun OnlineSuite Threaten Healthcare Infrastructure

Do Son June 9, 2025 0

B. Braun's OnlineSuite AP 3.0 faces severe vulnerabilities, including a CVSS 10.0 RCE, risking hospital IT and data. Immediate patching is crucial.

❮ Prev Page
Next Page ❯

Search

CVE ALERTS
📈

EPSS Spike Alerts
Catch risk spikes before they make headlines.

🎯

Custom EPSS/CVSS
Set score thresholds to effectively filter noise.

🛡️

Exploit Intel
Real-world exploit signals beyond the KEV catalog.

🐙

GitHub Issues
Auto-create alert tickets without duplication.

📬

Weekly Digest
Clean summaries, eliminating email spam.

🏷️

Watchlist Groups
Tag vulnerabilities by team (Infra/AppSec/SOC).

🔀

Smart Routing
Route chat channels based on severity levels.

🚨

RBP Tracker
Early warning detection and tracking system.

Subscribe – $7/mo or try free for 14 days →

🚨 Active Exploits in the Wild

  • CVE-2026-123751
    The WP Duplicate WordPress plugin through 1.1.11 does not properly verify a request authentication value and does not...
    Watchtower Verified📅 Updated: Nov 9, 2026
  • CVE-2026-111793CVSS 4.3
    Openwave Webtop Media Transcoder does not enforce administrator-defined file type restrictions to restrict the file-types to be converted....
    Admin intel📅 Updated: Nov 9, 2026
  • CVE-2026-114713CVSS 8.6
    The labeled-response module in UnrealIRCd 6.0.0 before 6.2.7.1 does not escape the IRCv3 "label" message tag when echoing...
    Admin intel📅 Updated: Nov 9, 2026
  • CVE-2026-123158CVSS 8.1
    sshd in OpenSSH before 10.6p2 on Linux, when musl libc is used without PAM, lacks a workaround for...
    Admin intel📅 Updated: Nov 6, 2026
  • CVE-2026-19868CVSS 7.5
    An authentication enforcement vulnerability in SonicOS SSLVPN service may allow a user with valid credentials for an alternate...
    CISA KEV📅 Added to KEV: Nov 6, 2026
  • CVE-2026-120422CVSS 8.9
    Sogou Input Method for Windows contains a vulnerability in the configuration retrieval mechanism of its SGTool.exe component. The...
    Admin intel📅 Updated: Nov 5, 2026
  • CVE-2026-102895CVSS 9.8
    GPUStack is an open-source GPU cluster manager for AI model serving and GPU instance provisioning. Prior to 2.2.0,...
    Watchtower Verified📅 Updated: Nov 5, 2026
  • CVE-2026-115732CVSS 9.0
    Incorrect authorization in the certificate-name matching of trapperkeeper-authorization, as used by Puppet Server, in the affected products, allows...
    Admin intel📅 Updated: Nov 4, 2026
Powered by CVE Watchtower

Critical Vulnerabilities

  • CVE-2026-124585CVSS 9.4
    A vulnerability was found in Chengdu Feiyuxing Technology VW2100 and VEC10GP 1.0 B-MB3W202-210825-r11775. This issue affects the function...
    📅 Updated: Nov 9, 2026
  • CVE-2026-123870CVSS 9.5
    The otterdog webapp evaluates a format-string built from the incoming GitHub webhook JSON body using Python's eval(). When...
    📅 Updated: Nov 9, 2026
  • CVE-2026-124580CVSS 10.0
    A vulnerability was found in Chengdu Feiyuxing Technology VW2100 and VEC10GP 1.0 B-MB3W202-210825-r11775. This impacts the function handle_wechat_cn_wifi...
    📅 Updated: Nov 9, 2026
  • CVE-2026-124577CVSS 9.3
    A weakness has been identified in Intelbras SG 2404 PoE L2+ 1.00.70/1.00.72. The affected element is an unknown...
    📅 Updated: Nov 9, 2026
  • CVE-2026-17408CVSS 9.8
    IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote attacker to execute arbitrary...
    📅 Updated: Nov 9, 2026
  • CVE-2026-17399CVSS 9.9
    IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to execute...
    📅 Updated: Nov 9, 2026
  • CVE-2026-17340CVSS 9.8
    IBM API Connect 12.1.0.0 through 12.1.1.2 could allow a remote attacker to execute arbitrary code due to a...
    📅 Updated: Nov 9, 2026
  • CVE-2026-17342CVSS 9.9
    IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to execute...
    📅 Updated: Nov 9, 2026
Powered by CVE Watchtower

Daily CyberSecurity

  • About SecurityOnline.info
  • Advertise with us
  • Announcement
  • Contact
  • Contributor Register
  • Login
  • Disclaimer
  • DCMA
  • Privacy Policy
  • About SecurityOnline.info
  • Advertise on SecurityOnline.info
  • Contact Us

When you purchase through links on our site, we may earn an affiliate commission. Here’s how it works

  • CVE Watchtower
  • CVE Statistics by Vendor 2026
  • Q3 2026 Report
  • Top Exploited CVEs
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube
© 2017 - 2026 Daily CyberSecurity. All Rights Reserved.