Skip to content
November 9, 2026
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube

Daily CyberSecurity

Zero-hour alerts. Unmatched analysis.

Primary Menu
  • Home
  • CVE Data
    • CVE Watchtower
    • Top Exploited CVEs
    • CVE Stats by Vendor
    • Q2 2026 Report
    • CVE Alerts
    • CVE Alert Settings
    • Pricing
  • Cyber Criminals
  • Data Leak
  • Free Tools
    • CVSS 3.1 Calculator
    • Certificate Viewer
    • DNS Lookup
    • Encoder & Hash Generator
    • IP / Subnet Calculator
    • Whois Lookup
  • Linux
  • Malware
  • Vulnerability
  • Submit Press Release
Light/Dark Button
Microsoft’s “Edit” Text Editor Coming to Windows 11 Command Line Windows 11 Editor, Command Line Editor MS-DOS editor, Command-line editor
  • Windows

Microsoft’s “Edit” Text Editor Coming to Windows 11 Command Line

Do Son June 4, 2025 0

Microsoft's "Edit" command-line text editor is set to be pre-installed in Windows 11, offering simple text file manipulation.

Firefox Bolsters Security: New Scan Detects Crypto Wallet Thieves! Firefox Security, Crypto Wallets skidmap trojan
  • Technology

Firefox Bolsters Security: New Scan Detects Crypto Wallet Thieves!

Do Son June 4, 2025 0

Mozilla's Firefox Add-ons now auto-detects malicious crypto wallet extensions, enhancing user security and preventing theft.

No More Hidden Audio: Microsoft’s Fix for iframe Media Muting! Chrome 14-day update cycle Chromium JPEG-XL Image Format Debate Chromium DoS, document.title Browser Muting, iframe Media Supporters of Chromium-based Browsers
  • Technology

No More Hidden Audio: Microsoft’s Fix for iframe Media Muting!

Do Son June 4, 2025 0

Microsoft proposes a new browser policy to pause iframe media when hidden, preventing unexpected audio from unmuting.

WWDC 2025: Apple to Revamp SwiftUI for Richer App Experiences SwiftUI, Apple Development Swift on Android, Cross-Platform Development
  • Technology

WWDC 2025: Apple to Revamp SwiftUI for Richer App Experiences

Do Son June 4, 2025 0

Apple plans a major SwiftUI overhaul at WWDC 2025, simplifying rich text and web content integration for developers.

macOS 26 “Cheer” Debuts June 9: Is Your Mac Compatible? macOS 26, Apple Updates macOS Sequoia cybersecurity
  • Technology

macOS 26 “Cheer” Debuts June 9: Is Your Mac Compatible?

Do Son June 4, 2025 0

macOS 26 "Cheer" launches June 9. Find out if your older MacBook Pro or iMac will support Apple's next-gen OS.

Samsung Teases Galaxy Z Fold7 “Ultra”: AI, VR & Next-Gen Foldable Tech! Galaxy S26 Dimensions S26 Battery Upgrade Samsung Galaxy AI, AI Diversification Samsung Galaxy Z Flip7, Foldable Smartphone Samsung Foldable, Galaxy Z Fold7 Samsung Tri-Fold, Galaxy G Fold
  • Technology

Samsung Teases Galaxy Z Fold7 “Ultra”: AI, VR & Next-Gen Foldable Tech!

Do Son June 4, 2025 0

Samsung, Galaxy Z Fold7, Foldable Phone, Galaxy Ultra, AI, Virtual Reality, Project Moohan, Smartphone, Snapdragon 8 Elite

OpenAI Codex Unleashed: Internet Access & Pro Features for Developers OpenAI Codex, AI Coding
  • Technology

OpenAI Codex Unleashed: Internet Access & Pro Features for Developers

Do Son June 4, 2025 0

OpenAI upgrades Codex with internet access for dependency installation, package upgrades, and more. Free for ChatGPT Plus!

Broadcom’s Tomahawk 6: Unleashing 102.4 Tbps for AI’s Next Frontier VMware Telco Cloud Platform 9 Tesco, Broadcom, VMware Walmart Broadcom Jericho4, Distributed AI Infrastructure Broadcom VMware, Perpetual Licenses AI Data Centers, Network Switch Unix automation security, Broadcom vulnerability
  • Technology

Broadcom’s Tomahawk 6: Unleashing 102.4 Tbps for AI’s Next Frontier

Do Son June 4, 2025 0

Broadcom's Tomahawk 6, a 102.4 Tbps switch chip, revolutionizes AI data centers, boosting GPU utilization to 90% and cutting training costs.

ThreatBook Selected in the First-ever Gartner® Magic Quadrant™ for Network Detection and Response (NDR) Gartner_MQ_1748944436UiJKfzOSDl
  • Press Release

ThreatBook Selected in the First-ever Gartner® Magic Quadrant™ for Network Detection and Response (NDR)

cybernewswire June 4, 2025 0
Beijing, China, 4th June 2025, CyberNewsWire
Read More Read more about ThreatBook Selected in the First-ever Gartner® Magic Quadrant™ for Network Detection and Response (NDR)
Proxy vs VPN: What’s the Difference? CVE-2024-41992 exploit
  • Technique

Proxy vs VPN: What’s the Difference?

Do Son June 4, 2025 0
If you ask your friends to recommend a tool to bypass geo-restriction, two buddies will be mentioned:...
Read More Read more about Proxy vs VPN: What’s the Difference?
Actively Exploited Qualcomm GPU Zero-Days Added to CISA’s KEV Catalog qua
  • Vulnerability Report

Actively Exploited Qualcomm GPU Zero-Days Added to CISA’s KEV Catalog

Do Son June 4, 2025 0

CISA adds 3 actively exploited Qualcomm Adreno GPU flaws to KEV catalog. Android devices at risk from memory corruption and use-after-free bugs.

Unpatched Telecom Flaws (CVSS 9.8) Enable Remote Code Execution: Critical Buffer Overflows Expose Core Infrastructure Buffer Overflow Telecom Vulnerabilities
  • Vulnerability

Unpatched Telecom Flaws (CVSS 9.8) Enable Remote Code Execution: Critical Buffer Overflows Expose Core Infrastructure

Do Son June 4, 2025 2

Two unpatched CVSS 9.8 flaws in telecom gear enable remote code execution via buffer overflows, exposing critical infrastructure to attack.

Critical CVSS 9.6: IBM QRadar & Cloud Pak Security Flaws Exposed IBM QRadar CVE-2025-25022
  • Vulnerability Report

Critical CVSS 9.6: IBM QRadar & Cloud Pak Security Flaws Exposed

Do Son June 4, 2025 0

Critical CVSS 9.6 vulnerability in IBM QRadar & Cloud Pak for Security exposes systems to RCE & DoS. Patch immediately to secure your platforms.

PoC Unleashed: Linux vsock Flaw Enables Privilege Escalation to Root vsock privilege escalation
  • Vulnerability

PoC Unleashed: Linux vsock Flaw Enables Privilege Escalation to Root

Do Son June 4, 2025 0

PoC reveals how a Linux vsock driver flaw enables local users to escalate privileges to root via a dangerous Use-After-Free vulnerability.

Crocodilus Trojan Evolves: Android Malware Goes Global with New Seed Phrase Stealer and Contact Injection bank
  • Malware

Crocodilus Trojan Evolves: Android Malware Goes Global with New Seed Phrase Stealer and Contact Injection

Do Son June 4, 2025 0

Crocodilus, a rapidly evolving Android banking trojan, now targets global users, stealing crypto seed phrases and bypassing defenses.

Samba Security Alert: Stale Group Data Poses Risk in Kerberos SMB Sessions, No Patch! Samba Vulnerability, Kerberos Authentication
  • Vulnerability

Samba Security Alert: Stale Group Data Poses Risk in Kerberos SMB Sessions, No Patch!

Do Son June 4, 2025 0

Samba vulnerability (CVE-2025-0620) exposes stale group data in Kerberos SMB sessions. Learn how this impacts security and mitigation.

Alert: Malicious RubyGems Impersonate Fastlane Plugins, Steal CI/CD Data gem
  • Malware

Alert: Malicious RubyGems Impersonate Fastlane Plugins, Steal CI/CD Data

Do Son June 4, 2025 0

Socket uncovers malicious RubyGems impersonating Fastlane plugins, stealing sensitive CI/CD data by rerouting Telegram API calls. Beware of fastlane-plugin-telegram-proxy!

AI Interface Hijacked: Open WebUI Exploited for Cryptominers and Stealthy AI Malware Seedworm Espionage Campaign 2026 ChromElevator Stealer DLL Sideloading SIM Swapping Crypto Theft Lazarus Comebacker, Aerospace Espionage Delete PlugX Malware
  • Cybercriminals
  • Malware

AI Interface Hijacked: Open WebUI Exploited for Cryptominers and Stealthy AI Malware

Do Son June 4, 2025 0

Sysdig uncovers a campaign exploiting misconfigured Open WebUI instances to deploy AI-assisted cryptominers and infostealers, showcasing new threat vectors.

New WordPress Malware Masquerades as Legit Plugin with Data Exfiltration and RCE Capabilities WordPress Malware, Hidden Plugin
  • Malware

New WordPress Malware Masquerades as Legit Plugin with Data Exfiltration and RCE Capabilities

Do Son June 4, 2025 0

Wordfence uncovers a sophisticated WordPress malware disguised as a legitimate plugin, stealing admin credentials & enabling remote code execution.

New npm Packages Exposed: Crypto Drainers Targeting BSC & Ethereum Wallets npm security, crypto drainer
  • Malware

New npm Packages Exposed: Crypto Drainers Targeting BSC & Ethereum Wallets

Do Son June 4, 2025 0

Socket discovers 4 malicious npm packages designed to drain crypto wallets on BSC & Ethereum, downloaded over 2,100 times.

VulBinLLM: Using Large Language Models to Unlock Vulnerabilities Hidden in Stripped Binaries Binary Vulnerability, LLM
  • Vulnerability Report

VulBinLLM: Using Large Language Models to Unlock Vulnerabilities Hidden in Stripped Binaries

Do Son June 4, 2025 0

Discover VulBinLLM, a groundbreaking LLM-powered framework by UCLA & Cisco Research, revolutionizing binary vulnerability detection in stripped software.

Aembit Extends Workload IAM to Microsoft Ecosystem, Securing Hybrid Access for Non-Human Identities Aembit-Microsoft_1_1748894381cYwOGpRJ0g
  • Press Release

Aembit Extends Workload IAM to Microsoft Ecosystem, Securing Hybrid Access for Non-Human Identities

cybernewswire June 3, 2025 0
Silver Spring, Maryland, 3rd June 2025, CyberNewsWire
Read More Read more about Aembit Extends Workload IAM to Microsoft Ecosystem, Securing Hybrid Access for Non-Human Identities
❮ Prev Page
Next Page ❯

Search

CVE ALERTS
📈

EPSS Spike Alerts
Catch risk spikes before they make headlines.

🎯

Custom EPSS/CVSS
Set score thresholds to effectively filter noise.

🛡️

Exploit Intel
Real-world exploit signals beyond the KEV catalog.

🐙

GitHub Issues
Auto-create alert tickets without duplication.

📬

Weekly Digest
Clean summaries, eliminating email spam.

🏷️

Watchlist Groups
Tag vulnerabilities by team (Infra/AppSec/SOC).

🔀

Smart Routing
Route chat channels based on severity levels.

🚨

RBP Tracker
Early warning detection and tracking system.

Subscribe – $7/mo or try free for 14 days →

🚨 Active Exploits in the Wild

  • CVE-2026-123751
    The WP Duplicate WordPress plugin through 1.1.11 does not properly verify a request authentication value and does not...
    Watchtower Verified📅 Updated: Nov 9, 2026
  • CVE-2026-111793CVSS 4.3
    Openwave Webtop Media Transcoder does not enforce administrator-defined file type restrictions to restrict the file-types to be converted....
    Admin intel📅 Updated: Nov 9, 2026
  • CVE-2026-114713CVSS 8.6
    The labeled-response module in UnrealIRCd 6.0.0 before 6.2.7.1 does not escape the IRCv3 "label" message tag when echoing...
    Admin intel📅 Updated: Nov 9, 2026
  • CVE-2026-123158CVSS 8.1
    sshd in OpenSSH before 10.6p2 on Linux, when musl libc is used without PAM, lacks a workaround for...
    Admin intel📅 Updated: Nov 6, 2026
  • CVE-2026-19868CVSS 7.5
    An authentication enforcement vulnerability in SonicOS SSLVPN service may allow a user with valid credentials for an alternate...
    CISA KEV📅 Added to KEV: Nov 6, 2026
  • CVE-2026-120422CVSS 8.9
    Sogou Input Method for Windows contains a vulnerability in the configuration retrieval mechanism of its SGTool.exe component. The...
    Admin intel📅 Updated: Nov 5, 2026
  • CVE-2026-102895CVSS 9.8
    GPUStack is an open-source GPU cluster manager for AI model serving and GPU instance provisioning. Prior to 2.2.0,...
    Watchtower Verified📅 Updated: Nov 5, 2026
  • CVE-2026-115732CVSS 9.0
    Incorrect authorization in the certificate-name matching of trapperkeeper-authorization, as used by Puppet Server, in the affected products, allows...
    Admin intel📅 Updated: Nov 4, 2026
Powered by CVE Watchtower

Critical Vulnerabilities

  • CVE-2026-120459CVSS 9.1
    python-jose through 3.5.0 contains an authentication bypass vulnerability that allows unauthenticated attackers to forge JWTs because HMACKey and...
    📅 Updated: Nov 9, 2026
  • CVE-2026-123550CVSS 9.3
    OpenAM before 16.1.4 contains an authentication bypass vulnerability in its SAML v2.0 service provider that accepts unsigned assertions...
    📅 Updated: Nov 9, 2026
  • CVE-2026-115252CVSS 10.0
    The Confection WordPress Cable WordPress plugin from 0.4.0 to 0.4.7 does not perform any capability or nonce checks...
    📅 Updated: Nov 9, 2026
  • CVE-2026-124060CVSS 9.4
    A vulnerability was detected in TOTOLINK CA300-PoE 6.2c.884. Affected by this issue is the function UploadCustomModule of the...
    📅 Updated: Nov 9, 2026
  • CVE-2026-123961CVSS 9.4
    A security vulnerability has been detected in TOTOLINK CA300-PoE 6.2c.884. This impacts the function setWiFiBasicConfig of the file...
    📅 Updated: Nov 9, 2026
  • CVE-2026-123957CVSS 9.4
    A vulnerability was determined in TOTOLINK CA300-PoE 6.2c.884. Impacted is the function setIpQosRules of the file /cgi-bin/cstecgi.cgi. This...
    📅 Updated: Nov 9, 2026
  • CVE-2026-123614CVSS 9.3
    imgproxy from 4.0.0 before 4.0.16 contains an integer overflow in the ICO loader that allows remote attackers to...
    📅 Updated: Nov 9, 2026
  • CVE-2026-95731CVSS 9.8
    Hardcoded password vulnerabilities in the command-line interface of HPE Networking Fabric Composer could allow an unauthenticated remote attacker...
    📅 Updated: Nov 9, 2026
Powered by CVE Watchtower

Daily CyberSecurity

  • About SecurityOnline.info
  • Advertise with us
  • Announcement
  • Contact
  • Contributor Register
  • Login
  • Disclaimer
  • DCMA
  • Privacy Policy
  • About SecurityOnline.info
  • Advertise on SecurityOnline.info
  • Contact Us

When you purchase through links on our site, we may earn an affiliate commission. Here’s how it works

  • CVE Watchtower
  • CVE Statistics by Vendor 2026
  • Q3 2026 Report
  • Top Exploited CVEs
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube
© 2017 - 2026 Daily CyberSecurity. All Rights Reserved.