Skip to content
November 9, 2026
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube

Daily CyberSecurity

Zero-hour alerts. Unmatched analysis.

Primary Menu
  • Home
  • CVE Data
    • CVE Watchtower
    • Top Exploited CVEs
    • CVE Stats by Vendor
    • Q2 2026 Report
    • CVE Alerts
    • CVE Alert Settings
    • Pricing
  • Cyber Criminals
  • Data Leak
  • Free Tools
    • CVSS 3.1 Calculator
    • Certificate Viewer
    • DNS Lookup
    • Encoder & Hash Generator
    • IP / Subnet Calculator
    • Whois Lookup
  • Linux
  • Malware
  • Vulnerability
  • Submit Press Release
Light/Dark Button
Kaspersky Report Reveals Growing Threat from Old Exploits and OS Vulnerabilities in Q1 2025 Cybersecurity, Vulnerabilities
  • Vulnerability Report

Kaspersky Report Reveals Growing Threat from Old Exploits and OS Vulnerabilities in Q1 2025

Do Son June 3, 2025 0

Kaspersky's Q1 2025 report highlights a surge in attacks on aging systems, unpatched flaws, and mismanaged updates, urging vigilance and prompt action.

Unmasking BtHoster: The Bulletproof Host Fueling Global Cyberattacks BtHoster, Bulletproof Hosting
  • Cybercriminals

Unmasking BtHoster: The Bulletproof Host Fueling Global Cyberattacks

Do Son June 3, 2025 0

Intrinsec exposes BtHoster, a bulletproof hosting provider behind widespread scanning and malware, revealing its network of shell companies and evasion tactics.

CISA Warns of Critical Unauthenticated Access Vulnerability in Instantel Micromate Devices Instantel Micromate, Critical Vulnerability
  • Vulnerability Report

CISA Warns of Critical Unauthenticated Access Vulnerability in Instantel Micromate Devices

Do Son June 3, 2025 0

CISA warns of a critical vulnerability (CVE-2025-1907) in Instantel Micromate devices, allowing unauthenticated remote command execution. Immediate action is advised.

CISA Adds 5 Actively Exploited Vulnerabilities to KEV Catalog: ASUS Routers, Craft CMS, and ConnectWise Targeted CISA KEV, Zero-Day Exploits
  • Vulnerability Report

CISA Adds 5 Actively Exploited Vulnerabilities to KEV Catalog: ASUS Routers, Craft CMS, and ConnectWise Targeted

Do Son June 3, 2025 0

CISA adds 5 new exploited vulnerabilities to KEV, including flaws in ASUS routers, Craft CMS, and ConnectWise. Urgent patching required!

Lyrix Ransomware: New Threat Emerges with Advanced Evasion Tactics Lyrix Ransomware, New Ransomware
  • Malware

Lyrix Ransomware: New Threat Emerges with Advanced Evasion Tactics

Do Son June 3, 2025 0

A new ransomware strain, Lyrix, targets Windows systems with strong encryption, anti-analysis, and data destruction techniques. Learn how to protect your data.

ModSecurity Alert: New DoS Vulnerability Discovered! ModSecurity, DoS Vulnerability
  • Vulnerability

ModSecurity Alert: New DoS Vulnerability Discovered!

Do Son June 2, 2025 0

A new DoS vulnerability (CVE-2025-48866) found in ModSecurity WAF can crash your web application. Update to 2.9.10 immediately!

Chrome Zero-Day Alert: CVE-2025-5419 Actively Exploited in the Wild CVE-2025-5419 Chrome Update, Zero-Day
  • Vulnerability Report

Chrome Zero-Day Alert: CVE-2025-5419 Actively Exploited in the Wild

Do Son June 2, 2025 0

Critical Chrome security update released! Patching an actively exploited zero-day vulnerability (CVE-2025-5419) and other flaws. Update now to stay safe!

INE Security Alert: $16.6 Billion in Cyber Losses Underscore Critical Need for Advanced Security Training Cyberwire_Logo_-_INE_Security_-_1200x720px_17486223588eOxWd2QJr
  • Press Release

INE Security Alert: $16.6 Billion in Cyber Losses Underscore Critical Need for Advanced Security Training

cybernewswire June 2, 2025 0
Cary, North Carolina, 2nd June 2025, CyberNewsWire
Read More Read more about INE Security Alert: $16.6 Billion in Cyber Losses Underscore Critical Need for Advanced Security Training
Samsung Eyes Perplexity AI for Galaxy S26, Less Google Reliance Samsung MagicInfo9 Vulnerability CVE-2026-25202 Galaxy S26 benchmarks Samsung HBM4 NVIDIA certification Samsung Bixby Perplexity integration, One UI 8.5 AI assistant Samsung Taylor 2nm mass production, TSMC 2nm capacity constraint 2026 Samsung SATA SSD Discontinuation, SSD Market Shift Samsung SATA SSD Discontinuation, M.2 Market Shift Samsung Foundry 4nm Yield Tsavorite OPU Chip Order Samsung Project Moohan, Android XR Samsung OpenAI Partnership, AI Infrastructure Samsung Exynos 2600, 2nm GAA Tesla AI Chips, Samsung Foundry Deal Samsung Foldables, Galaxy Unpacked 2025 Samsung AI, Perplexity AI Samsung data breach Q990D firmware US tariffs
  • Technology

Samsung Eyes Perplexity AI for Galaxy S26, Less Google Reliance

Do Son June 2, 2025 0

Samsung is reportedly in talks with Perplexity.ai for a major investment and AI integration into the Galaxy S26, aiming to reduce reliance on Google.

Google Fights Back: Appeals Order to Sell Chrome Browser Chrome 148 lazy loading Chrome for Linux ARM64 Chrome 145 Update Chrome Security Fixes Chrome Security Update CVE-2026-1220 Chrome 144 Security Update CVE-2026-0899 Chrome Memory Safety, WebGPU UAF Chrome V8 Type Confusion, Google Updater Flaw Chrome V8 Flaw, CVE-2025-13042 Chrome V8, Type Confusion, Chrome 142 Update Chrome V8 Flaw, CVE-2025-12036 Chrome 141, WebGPU Overflow Google Chrome preloading Chrome, V8 vulnerability CVE-2025-9132 Chrome Security Update, Use-After-Free Chrome V8, Type Confusion Chrome Telemetry, Windows 10 EOL Microsoft Family Safety, Chrome Blocking Chrome Security Update, High-Severity Google Chrome, Antitrust CVE-2024-10487 and CVE-2024-10488 Google Chrome Root Program Chrome Update, CVE-2025-3619 Chrome Acquisition, Perplexity.ai
  • Technology

Google Fights Back: Appeals Order to Sell Chrome Browser

Do Son June 2, 2025 0

Google appeals the DOJ order to divest its Chrome browser, calling it radical and harmful to consumers. OpenAI shows interest, while Mozilla warns of Firefox's end.

Qualcomm Reveals Active Exploitation of Multiple Zero-Days in Adreno GPU Qualcomm Zero-Days, Snapdragon Vulnerabilities
  • Vulnerability

Qualcomm Reveals Active Exploitation of Multiple Zero-Days in Adreno GPU

Do Son June 2, 2025 0

Qualcomm discloses critical zero-day vulnerabilities in Snapdragon chipsets, actively exploited in targeted attacks. Immediate patching is crucial for millions of devices.

Critical Security Flaws Found in AXIS OS: Patch Your Devices Now! AXIS OS Vulnerability, Privilege Escalation
  • Vulnerability

Critical Security Flaws Found in AXIS OS: Patch Your Devices Now!

Do Son June 2, 2025 0

Axis Communications releases critical patches for AXIS OS vulnerabilities, including privilege escalation flaws. Update your devices to stay protected.

CVE-2025-4010: ONEKEY Uncovers Critical Remote Code Execution Flaw in Netcomm/Lantronix 4G Gateways Netcomm Vulnerability, Remote Code Execution
  • Vulnerability Report

CVE-2025-4010: ONEKEY Uncovers Critical Remote Code Execution Flaw in Netcomm/Lantronix 4G Gateways

Do Son June 2, 2025 0

A critical vulnerability (CVE-2025-4010) in Netcomm Wireless devices allows remote code execution, impacting industrial and telecom networks.

Global Crackdown: DoJ Seizes Crypting Services in Major Cybercrime Bust Cybercrime, Domain Seizure
  • Cybercriminals

Global Crackdown: DoJ Seizes Crypting Services in Major Cybercrime Bust

Do Son June 2, 2025 0

The DOJ, with international partners, seized four domains providing crypting services to cybercriminals, hindering malware attacks in a global operation.

Red Hat Unveils llm-d: Scaling Generative AI for the Enterprise LLM Inference, Red Hat
  • Technology

Red Hat Unveils llm-d: Scaling Generative AI for the Enterprise

Do Son June 2, 2025 0

Red Hat's new llm-d project, with industry leaders, aims to revolutionize large-scale generative AI inference for enterprises using Kubernetes and vLLM.

Apple’s AI Race: Is the Tech Giant Falling Behind? Liquid Glass, iPhone 2027 Apple AI Apple Intelligence, China Market
  • Technology

Apple’s AI Race: Is the Tech Giant Falling Behind?

Do Son June 2, 2025 0

Explore concerns about Apple's AI progress amid competition from OpenAI and Google. Will WWDC 2025 reveal enough to keep Apple in the race?

MediaTek’s June 2025 Security Bulletin: High-Severity Flaw & Multiple Medium Risks Uncovered MediaTek Vulnerabilities, Chipset Security
  • Vulnerability Report

MediaTek’s June 2025 Security Bulletin: High-Severity Flaw & Multiple Medium Risks Uncovered

Do Son June 2, 2025 0

MediaTek's June 2025 Security Bulletin reveals a high-severity Bluetooth flaw & multiple medium risks across chipsets, affecting WLAN & IMS. Update your devices!

Critical RCE Flaw Patched in Roundcube Webmail: Update Immediately! Roundcube, RCE Vulnerability CVE-2025-49113
  • Vulnerability Report

Critical RCE Flaw Patched in Roundcube Webmail: Update Immediately!

Do Son June 2, 2025 0

Roundcube Webmail has patched a critical RCE vulnerability (CVE-2025-49113) allowing remote code execution post-authentication. Update to 1.6.2 or 1.5.10 immediately!

Meta’s Q1 2025 Report: Dismantling Covert Influence Campaigns from China, Iran, and Romania Covert Influence, Disinformation
  • Cyber Security

Meta’s Q1 2025 Report: Dismantling Covert Influence Campaigns from China, Iran, and Romania

Do Son June 2, 2025 0

Meta's Q1 2025 report details the takedown of covert influence campaigns from China, Iran, and Romania, utilizing AI and fake accounts to manipulate public discourse.

Google AI Edge Gallery: Unleash On-Device AI Power on Your Android (and Soon iOS!) EU AI Act, Google Compliance On-device AI, Mobile AI
  • Technology

Google AI Edge Gallery: Unleash On-Device AI Power on Your Android (and Soon iOS!)

Do Son June 2, 2025 0

Google AI Edge Gallery brings powerful, privacy-focused AI models to Android devices (iOS coming soon!). Run AI offline, protect your data, and explore features like Prompt Lab.

PoC Reveals Apple Audio Zero-Day Enabling Remote Code Execution via Malicious Media Files CoreAudio Vulnerability, Apple Zero-Day
  • Vulnerability

PoC Reveals Apple Audio Zero-Day Enabling Remote Code Execution via Malicious Media Files

Do Son June 2, 2025 0

Apple patches a CoreAudio flaw exploited in the wild via malicious media files, enabling remote code execution. PoC now on GitHub.

Critical SSRF Flaw in Esri Portal for ArcGIS Exposes Internal Networks Esri ArcGIS, SSRF Vulnerability
  • Vulnerability

Critical SSRF Flaw in Esri Portal for ArcGIS Exposes Internal Networks

Do Son June 2, 2025 0

Esri patches a critical SSRF vulnerability in Portal for ArcGIS, allowing unauthenticated remote attackers to bypass protections and access internal services.

❮ Prev Page
Next Page ❯

Search

CVE ALERTS
📈

EPSS Spike Alerts
Catch risk spikes before they make headlines.

🎯

Custom EPSS/CVSS
Set score thresholds to effectively filter noise.

🛡️

Exploit Intel
Real-world exploit signals beyond the KEV catalog.

🐙

GitHub Issues
Auto-create alert tickets without duplication.

📬

Weekly Digest
Clean summaries, eliminating email spam.

🏷️

Watchlist Groups
Tag vulnerabilities by team (Infra/AppSec/SOC).

🔀

Smart Routing
Route chat channels based on severity levels.

🚨

RBP Tracker
Early warning detection and tracking system.

Subscribe – $7/mo or try free for 14 days →

🚨 Active Exploits in the Wild

  • CVE-2026-123751
    The WP Duplicate WordPress plugin through 1.1.11 does not properly verify a request authentication value and does not...
    Watchtower Verified📅 Updated: Nov 9, 2026
  • CVE-2026-111793CVSS 4.3
    Openwave Webtop Media Transcoder does not enforce administrator-defined file type restrictions to restrict the file-types to be converted....
    Admin intel📅 Updated: Nov 9, 2026
  • CVE-2026-114713CVSS 8.6
    The labeled-response module in UnrealIRCd 6.0.0 before 6.2.7.1 does not escape the IRCv3 "label" message tag when echoing...
    Admin intel📅 Updated: Nov 9, 2026
  • CVE-2026-123158CVSS 8.1
    sshd in OpenSSH before 10.6p2 on Linux, when musl libc is used without PAM, lacks a workaround for...
    Admin intel📅 Updated: Nov 6, 2026
  • CVE-2026-19868CVSS 7.5
    An authentication enforcement vulnerability in SonicOS SSLVPN service may allow a user with valid credentials for an alternate...
    CISA KEV📅 Added to KEV: Nov 6, 2026
  • CVE-2026-120422CVSS 8.9
    Sogou Input Method for Windows contains a vulnerability in the configuration retrieval mechanism of its SGTool.exe component. The...
    Admin intel📅 Updated: Nov 5, 2026
  • CVE-2026-102895CVSS 9.8
    GPUStack is an open-source GPU cluster manager for AI model serving and GPU instance provisioning. Prior to 2.2.0,...
    Watchtower Verified📅 Updated: Nov 5, 2026
  • CVE-2026-115732CVSS 9.0
    Incorrect authorization in the certificate-name matching of trapperkeeper-authorization, as used by Puppet Server, in the affected products, allows...
    Admin intel📅 Updated: Nov 4, 2026
Powered by CVE Watchtower

Critical Vulnerabilities

  • CVE-2026-120459CVSS 9.1
    python-jose through 3.5.0 contains an authentication bypass vulnerability that allows unauthenticated attackers to forge JWTs because HMACKey and...
    📅 Updated: Nov 9, 2026
  • CVE-2026-123550CVSS 9.3
    OpenAM before 16.1.4 contains an authentication bypass vulnerability in its SAML v2.0 service provider that accepts unsigned assertions...
    📅 Updated: Nov 9, 2026
  • CVE-2026-115252CVSS 10.0
    The Confection WordPress Cable WordPress plugin from 0.4.0 to 0.4.7 does not perform any capability or nonce checks...
    📅 Updated: Nov 9, 2026
  • CVE-2026-124060CVSS 9.4
    A vulnerability was detected in TOTOLINK CA300-PoE 6.2c.884. Affected by this issue is the function UploadCustomModule of the...
    📅 Updated: Nov 9, 2026
  • CVE-2026-123961CVSS 9.4
    A security vulnerability has been detected in TOTOLINK CA300-PoE 6.2c.884. This impacts the function setWiFiBasicConfig of the file...
    📅 Updated: Nov 9, 2026
  • CVE-2026-123957CVSS 9.4
    A vulnerability was determined in TOTOLINK CA300-PoE 6.2c.884. Impacted is the function setIpQosRules of the file /cgi-bin/cstecgi.cgi. This...
    📅 Updated: Nov 9, 2026
  • CVE-2026-123614CVSS 9.3
    imgproxy from 4.0.0 before 4.0.16 contains an integer overflow in the ICO loader that allows remote attackers to...
    📅 Updated: Nov 9, 2026
  • CVE-2026-95731CVSS 9.8
    Hardcoded password vulnerabilities in the command-line interface of HPE Networking Fabric Composer could allow an unauthenticated remote attacker...
    📅 Updated: Nov 9, 2026
Powered by CVE Watchtower

Daily CyberSecurity

  • About SecurityOnline.info
  • Advertise with us
  • Announcement
  • Contact
  • Contributor Register
  • Login
  • Disclaimer
  • DCMA
  • Privacy Policy
  • About SecurityOnline.info
  • Advertise on SecurityOnline.info
  • Contact Us

When you purchase through links on our site, we may earn an affiliate commission. Here’s how it works

  • CVE Watchtower
  • CVE Statistics by Vendor 2026
  • Q3 2026 Report
  • Top Exploited CVEs
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube
© 2017 - 2026 Daily CyberSecurity. All Rights Reserved.