Skip to content
November 10, 2026
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube

Daily CyberSecurity

Zero-hour alerts. Unmatched analysis.

Primary Menu
  • Home
  • CVE Data
    • CVE Watchtower
    • Top Exploited CVEs
    • CVE Stats by Vendor
    • Q2 2026 Report
    • CVE Alerts
    • CVE Alert Settings
    • Pricing
  • Cyber Criminals
  • Data Leak
  • Free Tools
    • CVSS 3.1 Calculator
    • Certificate Viewer
    • DNS Lookup
    • Encoder & Hash Generator
    • IP / Subnet Calculator
    • Whois Lookup
  • Linux
  • Malware
  • Vulnerability
  • Submit Press Release
Light/Dark Button
Is the Ruko U11MINI 4K the Best Budget 4K Drone for Beginners? Ruko U11MINI 4K Review
  • Reviews
  • Technique

Is the Ruko U11MINI 4K the Best Budget 4K Drone for Beginners?

Do Son May 13, 2025 0

In-depth Ruko U11MINI 4K drone review. Explore its 8K photo, 96-min flight, <249g design & see if this budget 4K drone is for you!

PupkinStealer: Tiny Malware, Big Theft via Telegram Bot Exposed PupkinStealer, Telegram malware
  • Malware

PupkinStealer: Tiny Malware, Big Theft via Telegram Bot Exposed

Do Son May 13, 2025 0

New lightweight PupkinStealer malware silently steals browser data, messaging sessions, and desktop files, sending it all via Telegram.

CAPTCHA Trap: Fake Verification Unleashes Lumma Stealer on Unsuspecting Users captcha
  • Malware

CAPTCHA Trap: Fake Verification Unleashes Lumma Stealer on Unsuspecting Users

Do Son May 13, 2025 0

Beware! Cybercriminals are using fake CAPTCHA pages to trick you into running commands that install the dangerous Lumma Stealer malware.

API Security in 2025: Top Best Practices Every Security Team Must Know API security, best practices
  • How To

API Security in 2025: Top Best Practices Every Security Team Must Know

Do Son May 13, 2025 0

Stay ahead in 2025 with top API security best practices for security teams—covering auth, rate limiting, encryption, and threat detection.

Shadowy IoT Army: Decades-Old Proxy Botnet Exposed and Crippled IoT botnet, proxy network
  • Cybercriminals

Shadowy IoT Army: Decades-Old Proxy Botnet Exposed and Crippled

Do Son May 13, 2025 0

A massive, long-running proxy botnet using outdated IoT devices for criminal anonymity has been dismantled in a global law enforcement operation.

Stealth in Pixels: .NET Malware Hides Payloads in Bitmap Resources steganography malware, Agent Tesla
  • Malware

Stealth in Pixels: .NET Malware Hides Payloads in Bitmap Resources

Do Son May 13, 2025 0

Sophisticated malware hides inside image files within .NET apps to secretly infect systems, targeting finance in Türkiye and logistics in Asia.

Türkiye-Linked Hackers Exploit Output Messenger Zero-Day (CVE-2025-27920) in Espionage Campaign zero
  • Cyber Security
  • Vulnerability

Türkiye-Linked Hackers Exploit Output Messenger Zero-Day (CVE-2025-27920) in Espionage Campaign

Do Son May 12, 2025 0

A cyber-espionage campaign linked to Türkiye is exploiting a zero-day flaw in Output Messenger to target entities in Iraq. Learn about the attack.

VMware Tools Update Addresses Insecure File Handling Vulnerability VMware Aria Operations CVE-2026-22719 VMware Fusion - CVE-2024-38811 VMware security, CVE-2025-22247
  • Vulnerability

VMware Tools Update Addresses Insecure File Handling Vulnerability

Do Son May 12, 2025 0

Broadcom releases a VMware Tools update to fix a Moderate severity file handling vulnerability (CVE-2025-22247) affecting Windows and Linux.

Windows 11 BSOD Survival Guide: Microsoft’s “Help” May Not Save You Blue Screen of Death, Windows 11
  • Windows

Windows 11 BSOD Survival Guide: Microsoft’s “Help” May Not Save You

Do Son May 12, 2025 0

Facing the dreaded Blue Screen on Windows 11? Microsoft's new guide offers basic tips, but fixing it yourself can still be tough.

Blackout Mode: Microsoft Teams to Block Screenshots in Meetings Teams screenshot, meeting security
  • Technology

Blackout Mode: Microsoft Teams to Block Screenshots in Meetings

Do Son May 12, 2025 0

Microsoft Teams is adding a "Prevent Screen Capture" feature that will turn the meeting screen black if someone tries to take a capture. Rolling out July 2025.

Microsoft Extends Microsoft 365 Support on Windows 10 Until 2028 student discount Microsoft 365, Intelligent Services Microsoft 365 UWP, App Deprecation Microsoft 365, Startup Boost Windows 10 EOL, Microsoft 365 Support Protocol Deprecation Microsoft 365 Updates, IT Admin Alert Microsoft 365 VPN shut down Microsoft Authenticator, password manager Windows 10 Microsoft 365 Microsoft nonprofit policy, software donations
  • Technology

Microsoft Extends Microsoft 365 Support on Windows 10 Until 2028

Do Son May 12, 2025 0

Good news for Windows 10 users! Microsoft reverses course, extending Microsoft 365 support with security updates until October 2028.

PoC Released: CVE-2024-26809 Exploits nftables Double-Free to Achieve Root Shell CVE-2024-26581 PoC Exploit nftables, CVE-2024-26809
  • Linux
  • Vulnerability

PoC Released: CVE-2024-26809 Exploits nftables Double-Free to Achieve Root Shell

Do Son May 12, 2025 0

CVE-2024-26809 affects Linux nftables with a double-free bug in nft_pipapo_destroy, enabling kernel-level exploitation and potential root access.

Critical Security Flaws Found in ASUS DriverHub: Update Immediately ASUS DriverHub, vulnerability
  • Vulnerability

Critical Security Flaws Found in ASUS DriverHub: Update Immediately

Do Son May 12, 2025 0

CVE-2025-3462 and CVE-2025-3463 in ASUS DriverHub expose motherboards to remote system manipulation via crafted HTTP requests—update now.

Defendnot: New Tool Directly Disables Windows Defender Defendnot Windows Defende
  • Open Source Tool

Defendnot: New Tool Directly Disables Windows Defender

Do Son May 12, 2025 0

Defendnot disables Windows Defender using a novel method, directly interacting with the WSC. Learn how this new security tool works.

VS Code in the Browser at Risk: code-server Security Alert code-server, VS Code, security
  • Vulnerability

VS Code in the Browser at Risk: code-server Security Alert

Do Son May 12, 2025 0

A security flaw in code-server can expose your VS Code sessions. Learn how attackers can steal credentials and what to do.

WaterPlum’s OtterCookie Malware Upgrades to v4 with Credential Theft and Sandbox Detection Features North Korean Laptop Farm DPRK Insider Threat North Korea WMD Cyber Funding, Australia Sanctions Insider threat, North Korean hackers Kimsuky, cyber-espionage NPM Malware, North Korea Cyber-espionage North Korea, Remote IT Job Scam Laptop Farm - DriverEasy - Kimsuky Watering Hole Attack
  • Malware

WaterPlum’s OtterCookie Malware Upgrades to v4 with Credential Theft and Sandbox Detection Features

Do Son May 12, 2025 0

OtterCookie malware by North Korea-linked WaterPlum group evolves to target Chrome, MetaMask, and system files on both Windows and macOS platforms.

Malicious npm Packages Target BullX Crypto Traders via Telegram-Backdoored Payloads Crypto theft, npm malware
  • Malware

Malicious npm Packages Target BullX Crypto Traders via Telegram-Backdoored Payloads

Do Son May 12, 2025 0

Warning! Malicious npm packages pumptoolforvolumeandcomment & debugdogs steal crypto keys and trading data, sending it via Telegram. Stay safe!

FreeDrain: Silent Crypto Theft on Google? Massive Phishing Network Exposed Attack chain summary
  • Cybercriminals

FreeDrain: Silent Crypto Theft on Google? Massive Phishing Network Exposed

Do Son May 12, 2025 0

Massive FreeDrain crypto phishing campaign uses Google SEO and free hosting to steal wallets. Trezor, Ledger users beware!

Stack Overflow Alert! XML Flaw in libexpat Threatens Widespread Software libexpat, XML vulnerability
  • Vulnerability

Stack Overflow Alert! XML Flaw in libexpat Threatens Widespread Software

Do Son May 12, 2025 0

Critical stack overflow in libexpat (CVE-2024-8176) allows DoS and potential memory corruption via malicious XML. Update to 2.7.0 now!

Sneaky Email Attack Targets Spain, Italy, Portugal with RATty Trojan RATty Trojan, email phishing
  • Cybercriminals
  • Malware

Sneaky Email Attack Targets Spain, Italy, Portugal with RATty Trojan

Do Son May 12, 2025 0

New email campaign uses tricky tactics and legitimate services to deliver the RATty Trojan in Spain, Italy, and Portugal. Stay alert for invoice scams!

Fake Crypto Platforms on Facebook Steal Your Data! Beware Celebrity Endorsements Crypto malvertising, Facebook ads
  • Cybercriminals
  • Malware

Fake Crypto Platforms on Facebook Steal Your Data! Beware Celebrity Endorsements

Do Son May 12, 2025 0

Watch out! Sophisticated Facebook ads lure crypto users to download malware via fake platforms and celebrity endorsements. Bitdefender warns of data theft.

Legitimate Remote Tools Weaponized in Sophisticated Spam Campaign RMM abuse, Brazil spam
  • Cybercriminals

Legitimate Remote Tools Weaponized in Sophisticated Spam Campaign

Do Son May 12, 2025 0

Cisco Talos warns of a Brazil-focused spam campaign abusing legitimate remote access tools (N-able, PDQ) to gain full system control. Stay vigilant!

❮ Prev Page
Next Page ❯

Search

CVE ALERTS
📈

EPSS Spike Alerts
Catch risk spikes before they make headlines.

🎯

Custom EPSS/CVSS
Set score thresholds to effectively filter noise.

🛡️

Exploit Intel
Real-world exploit signals beyond the KEV catalog.

🐙

GitHub Issues
Auto-create alert tickets without duplication.

📬

Weekly Digest
Clean summaries, eliminating email spam.

🏷️

Watchlist Groups
Tag vulnerabilities by team (Infra/AppSec/SOC).

🔀

Smart Routing
Route chat channels based on severity levels.

🚨

RBP Tracker
Early warning detection and tracking system.

Subscribe – $7/mo or try free for 14 days →

🚨 Active Exploits in the Wild

  • CVE-2026-125350
    Use after free in XML. Reported by anonymous on 2026-11-06. Google is aware that an exploit for CVE-2026-125350...
    Admin intel📅 Updated: Nov 10, 2026
  • CVE-2026-123751CVSS 9.8
    The WP Duplicate WordPress plugin through 1.1.11 does not properly verify a request authentication value and does not...
    Watchtower Verified📅 Updated: Nov 9, 2026
  • CVE-2026-111793CVSS 4.3
    Openwave Webtop Media Transcoder does not enforce administrator-defined file type restrictions to restrict the file-types to be converted....
    Admin intel📅 Updated: Nov 9, 2026
  • CVE-2026-114713CVSS 8.6
    The labeled-response module in UnrealIRCd 6.0.0 before 6.2.7.1 does not escape the IRCv3 "label" message tag when echoing...
    Admin intel📅 Updated: Nov 9, 2026
  • CVE-2026-116779CVSS 9.8
    Summary `sofia_presence_handle_sip_i_message()` splits the To user of an inbound SIP MESSAGE on `+` and treats the left half...
    CISA KEV📅 Added to KEV: Nov 9, 2026
  • CVE-2026-102895CVSS 9.8
    GPUStack is an open-source GPU cluster manager for AI model serving and GPU instance provisioning. Prior to 2.2.0,...
    CISA KEV📅 Added to KEV: Nov 9, 2026
  • CVE-2026-123158CVSS 8.1
    sshd in OpenSSH before 10.6p2 on Linux, when musl libc is used without PAM, lacks a workaround for...
    CISA KEV📅 Added to KEV: Nov 9, 2026
  • CVE-2026-19868CVSS 7.5
    An authentication enforcement vulnerability in SonicOS SSLVPN service may allow a user with valid credentials for an alternate...
    CISA KEV📅 Added to KEV: Nov 6, 2026
Powered by CVE Watchtower

Critical Vulnerabilities

  • CVE-2026-115934CVSS 9.3
    An unauthenticated SQL injection can occur on the front end of any site that uses craft.search to perform a search,...
    📅 Updated: Nov 9, 2026
  • CVE-2026-119756CVSS 9.3
    Tasmota through 16.0.0, fixed in commit e97e1e4, contains a heap out-of-bounds write vulnerability in SendReceiveDeviceGroupMessage() that allows unauthenticated...
    📅 Updated: Nov 9, 2026
  • CVE-2026-123488CVSS 9.3
    Craft CMS 4.0.0 before 4.18.9 and 5.0.0 before 5.11.2 contains an unauthenticated SQL injection vulnerability in the element...
    📅 Updated: Nov 9, 2026
  • CVE-2026-102530CVSS 9.4
    JupyterLab Desktop is the cross-platform desktop application for JupyterLab. Prior to 4.6.2-1, remote-server URLs were inserted into the...
    📅 Updated: Nov 9, 2026
  • CVE-2026-123960CVSS 9.4
    A weakness has been identified in TOTOLINK CA300-PoE 6.2c.884. This affects the function setWanConfig of the file /cgi-bin/cstecgi.cgi....
    📅 Updated: Nov 9, 2026
  • CVE-2026-123966CVSS 10.0
    A vulnerability was determined in Tenda AC19 16.03.10.07. Affected by this issue is the function saveParentControlInfo of the...
    📅 Updated: Nov 9, 2026
  • CVE-2026-124059CVSS 9.4
    A security vulnerability has been detected in TOTOLINK CA300-PoE 6.2c.884. Affected by this vulnerability is the function setWiFiWdsAddConfig...
    📅 Updated: Nov 9, 2026
  • CVE-2026-100358CVSS 9.4
    SuiteCRM is an open-source, enterprise-ready Customer Relationship Management (CRM) software application. Prior to 7.15.2 and 8.10.2, the Studio...
    📅 Updated: Nov 9, 2026
Powered by CVE Watchtower

Daily CyberSecurity

  • About SecurityOnline.info
  • Advertise with us
  • Announcement
  • Contact
  • Contributor Register
  • Login
  • Disclaimer
  • DCMA
  • Privacy Policy
  • About SecurityOnline.info
  • Advertise on SecurityOnline.info
  • Contact Us

When you purchase through links on our site, we may earn an affiliate commission. Here’s how it works

  • CVE Watchtower
  • CVE Statistics by Vendor 2026
  • Q3 2026 Report
  • Top Exploited CVEs
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube
© 2017 - 2026 Daily CyberSecurity. All Rights Reserved.