Skip to content
November 9, 2026
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube

Daily CyberSecurity

Zero-hour alerts. Unmatched analysis.

Primary Menu
  • Home
  • CVE Data
    • CVE Watchtower
    • Top Exploited CVEs
    • CVE Stats by Vendor
    • Q2 2026 Report
    • CVE Alerts
    • CVE Alert Settings
    • Pricing
  • Cyber Criminals
  • Data Leak
  • Free Tools
    • CVSS 3.1 Calculator
    • Certificate Viewer
    • DNS Lookup
    • Encoder & Hash Generator
    • IP / Subnet Calculator
    • Whois Lookup
  • Linux
  • Malware
  • Vulnerability
  • Submit Press Release
Light/Dark Button
Android 15 Mandates 16KB Memory Pages for New Google Play Apps Android July 2024 security patches Android battery drain, wake locks Android 15, 16KB Pages
  • Android

Android 15 Mandates 16KB Memory Pages for New Google Play Apps

Do Son May 10, 2025 0

Starting Nov 1, 2025, new Android 15 apps on Google Play must support 16KB memory pages, improving performance but increasing memory use.

Chrome Crashing on Windows, Android, and macOS; iOS Unaffected Chrome Vulnerability CVE-2024-4761 - Google Sell Chrome CVE-2025-1920 Chrome Crash, Browser Issue
  • Technology

Chrome Crashing on Windows, Android, and macOS; iOS Unaffected

Do Son May 10, 2025 0

Users report widespread Chrome crashes on startup and during browsing on Windows, Android, and macOS. iOS is unaffected. Consider alternative browsers.

DOJ Cracks Down on Anyproxy & 5socks Botnets, Four Charged Botnet Takedown, Anyproxy
  • Cybercriminals

DOJ Cracks Down on Anyproxy & 5socks Botnets, Four Charged

Do Son May 10, 2025 0

The DOJ unsealed charges against four foreign nationals and the FBI seized domains for the Anyproxy and 5socks botnets, used to hijack routers globally.

German Police Shut Down Crypto Laundering Platform eXch, Seize Millions Crypto Laundering, eXch Shutdown
  • Cybercriminals

German Police Shut Down Crypto Laundering Platform eXch, Seize Millions

Do Son May 10, 2025 0

German authorities shut down the crypto-swapping platform eXch, a hub for laundering illicit funds, and seized €34 million in cryptocurrencies after tracing stolen Bybit funds.

Arista Patches Critical Vulnerability in CloudVision ZTP With CVSS 10 Score CloudVision ZTP, CVE-2025-0505
  • Vulnerability

Arista Patches Critical Vulnerability in CloudVision ZTP With CVSS 10 Score

Do Son May 10, 2025 0

Arista patches CVE-2025-0505, a CVSS 10 flaw in CloudVision ZTP that allows admin privilege escalation—on-premise users urged to upgrade.

Twitter Ad Loophole Exploited in iToken Crypto Scam Spoofing CNN and Apple Brands The Buy Tokens page
  • Cybercriminals

Twitter Ad Loophole Exploited in iToken Crypto Scam Spoofing CNN and Apple Brands

Do Son May 10, 2025 0

Silent Push uncovers crypto scam using Twitter ad loophole to spoof CNN and Apple, luring users into buying fake iTokens via misleading redirects.

Atomic Stealer Malware Targets macOS Users with Fake Evernote Crack Atomic Stealer, macOS Malware
  • Malware

Atomic Stealer Malware Targets macOS Users with Fake Evernote Crack

Do Son May 10, 2025 0

Atomic Stealer malware is targeting macOS users, disguised as a cracked Evernote download, stealing passwords and data.

Bluetooth 6.1 Enhances Privacy with Randomized Addresses Bluetooth 6.1, Privacy Update
  • Technology

Bluetooth 6.1 Enhances Privacy with Randomized Addresses

Do Son May 9, 2025 0

Bluetooth SIG announces version 6.1, focusing on enhanced privacy through randomized device addresses and improved energy efficiency.

Arista Fixes Critical CloudVision Portal Vulnerability with CVSS 10 Score Arista CloudVision, CVE-2024-11186
  • Vulnerability

Arista Fixes Critical CloudVision Portal Vulnerability with CVSS 10 Score

Do Son May 9, 2025 0

Critical CVE-2024-11186 in Arista CloudVision Portal allows authenticated users broader network actions. Patch or mitigate now.

Microsoft Patches Four Critical Azure and Power Apps Vulnerabilities, Including CVSS 10 Privilege Escalation Smart App Control blocking Armoury Crate, ROG Ally Defender false positive 2026 Microsoft Zero-Day, Cloud Files UAF Microsoft Access end of life CVE-2025-21298 Azure Vulnerabilities
  • Vulnerability

Microsoft Patches Four Critical Azure and Power Apps Vulnerabilities, Including CVSS 10 Privilege Escalation

Do Son May 9, 2025 0

Microsoft patched critical Azure & Power Apps security flaws before exploitation. No user action needed. Stay informed on cloud security.

Chrome 137 Uses On-Device Gemini Nano AI to Combat Tech Support Scams Tech Support Scams, Gemini Nano
  • Technology

Chrome 137 Uses On-Device Gemini Nano AI to Combat Tech Support Scams

Do Son May 9, 2025 0

Chrome 137 introduces on-device Gemini Nano AI to detect tech support scams in real time, enhancing protection through Safe Browsing.

Cisco SD-WAN Vulnerabilities: PoC Exists for XSS and Filter Bypass Cisco SD-WAN, vulnerabilities
  • Vulnerability

Cisco SD-WAN Vulnerabilities: PoC Exists for XSS and Filter Bypass

Do Son May 9, 2025 0

Cisco warns of SD-WAN flaws (CVE-2025-20147, CVE-2025-20221) with available proof-of-concept exploit code, posing risks of XSS and traffic bypass.

FBI Warns: End-of-Life Routers Hijacked to Power Cybercriminal Proxy Networks DrayTek Vigor RCE, CVE-2025-10547 Router security, TheMoon malware
  • Cybercriminals

FBI Warns: End-of-Life Routers Hijacked to Power Cybercriminal Proxy Networks

Do Son May 9, 2025 0

FBI warns cybercriminals are exploiting outdated routers with TheMoon malware to build anonymous proxy networks for illicit activities.

RedisRaider Worm Exploits Misconfigured Redis for Cryptojacking RedisRaider, cryptojacking
  • Malware

RedisRaider Worm Exploits Misconfigured Redis for Cryptojacking

Do Son May 9, 2025 0

RedisRaider malware exploits misconfigured Redis servers to deploy cryptominers via cron jobs, evading detection with obfuscation and anti-forensics.

Radware Cloud WAF Vulnerable to Filter Bypass via Crafted Requests Radware WAF, WAF bypass OWASP CRS Vulnerability CVE-2026-21876
  • Vulnerability

Radware Cloud WAF Vulnerable to Filter Bypass via Crafted Requests

Do Son May 9, 2025 0

Radware Cloud WAF has vulnerabilities (CVE-2024-56523, CVE-2024-56524) allowing attackers to bypass filtering via crafted HTTP requests and special characters.

Sophisticated IIS Malware Targets South Korean Web Servers IIS malware, South Korea cyberattack
  • Cybercriminals

Sophisticated IIS Malware Targets South Korean Web Servers

Do Son May 9, 2025 0

A sophisticated campaign deployed malicious IIS modules on South Korean web servers, enabling traffic control and backdoor access. Suspected Chinese actor.

New Phishing Tactic: Attackers Abuse Blob URIs to Bypass Email Security Blob URI phishing Phishing technique
  • Cybercriminals

New Phishing Tactic: Attackers Abuse Blob URIs to Bypass Email Security

Do Son May 9, 2025 0

Cofense Intelligence reports a new phishing tactic using blob URIs to bypass Secure Email Gateways. Attackers use these local URIs to hide phishing pages.

DOGE Big Balls Ransomware: New Tools and Tactics Uncovered DOGE Big Balls Ransomware Ransomware infection chain
  • Malware

DOGE Big Balls Ransomware: New Tools and Tactics Uncovered

Do Son May 9, 2025 0

Netskope Labs details a complex infection chain used by the DOGE Big Balls Ransomware, involving PowerShell scripts, exploits, and lateral movement tactics.

Oriental Gudgeon: Sophisticated Phishing Campaign Targets Japanese Companies Phishing campaign Oriental Gudgeon
  • Cybercriminals

Oriental Gudgeon: Sophisticated Phishing Campaign Targets Japanese Companies

Do Son May 9, 2025 0

A sophisticated phishing campaign, Oriental Gudgeon, has been targeting Japanese companies since October 2024. It uses advanced cloaking to steal user data.

DieNet Hacktivist Group Exploits DDoS-as-a-Service in Rapid Attacks DDoS-as-a-service DieNet
  • Cybercriminals

DieNet Hacktivist Group Exploits DDoS-as-a-Service in Rapid Attacks

Do Son May 9, 2025 0

DieNet, a new hacktivist group, is leveraging DDoS-as-a-service for rapid-fire attacks on critical infrastructure. NETSCOUT reports on their tactics and targets.

The Benefits Of Working With An Outsourcing Company Img_2025_05_08_06_41_32
  • Technique

The Benefits Of Working With An Outsourcing Company

Do Son May 8, 2025 0
There are many aspects that make up a business, from sales and production to even human relations...
Read More Read more about The Benefits Of Working With An Outsourcing Company
Microsoft Azure Supports Google’s A2A Protocol for Seamless AI Agent Communication AI interoperability, A2A protocol
  • Technology

Microsoft Azure Supports Google’s A2A Protocol for Seamless AI Agent Communication

Do Son May 8, 2025 0

Microsoft integrates Google's A2A protocol into Azure AI, enabling seamless communication between AI agents across different cloud platforms.

❮ Prev Page
Next Page ❯

Search

CVE ALERTS
📈

EPSS Spike Alerts
Catch risk spikes before they make headlines.

🎯

Custom EPSS/CVSS
Set score thresholds to effectively filter noise.

🛡️

Exploit Intel
Real-world exploit signals beyond the KEV catalog.

🐙

GitHub Issues
Auto-create alert tickets without duplication.

📬

Weekly Digest
Clean summaries, eliminating email spam.

🏷️

Watchlist Groups
Tag vulnerabilities by team (Infra/AppSec/SOC).

🔀

Smart Routing
Route chat channels based on severity levels.

🚨

RBP Tracker
Early warning detection and tracking system.

Subscribe – $7/mo or try free for 14 days →

🚨 Active Exploits in the Wild

  • CVE-2026-123751
    The WP Duplicate WordPress plugin through 1.1.11 does not properly verify a request authentication value and does not...
    Watchtower Verified📅 Updated: Nov 9, 2026
  • CVE-2026-111793CVSS 4.3
    Openwave Webtop Media Transcoder does not enforce administrator-defined file type restrictions to restrict the file-types to be converted....
    Admin intel📅 Updated: Nov 9, 2026
  • CVE-2026-114713CVSS 8.6
    The labeled-response module in UnrealIRCd 6.0.0 before 6.2.7.1 does not escape the IRCv3 "label" message tag when echoing...
    Admin intel📅 Updated: Nov 9, 2026
  • CVE-2026-123158CVSS 8.1
    sshd in OpenSSH before 10.6p2 on Linux, when musl libc is used without PAM, lacks a workaround for...
    Admin intel📅 Updated: Nov 6, 2026
  • CVE-2026-19868CVSS 7.5
    An authentication enforcement vulnerability in SonicOS SSLVPN service may allow a user with valid credentials for an alternate...
    CISA KEV📅 Added to KEV: Nov 6, 2026
  • CVE-2026-120422CVSS 8.9
    Sogou Input Method for Windows contains a vulnerability in the configuration retrieval mechanism of its SGTool.exe component. The...
    Admin intel📅 Updated: Nov 5, 2026
  • CVE-2026-102895CVSS 9.8
    GPUStack is an open-source GPU cluster manager for AI model serving and GPU instance provisioning. Prior to 2.2.0,...
    Watchtower Verified📅 Updated: Nov 5, 2026
  • CVE-2026-115732CVSS 9.0
    Incorrect authorization in the certificate-name matching of trapperkeeper-authorization, as used by Puppet Server, in the affected products, allows...
    Admin intel📅 Updated: Nov 4, 2026
Powered by CVE Watchtower

Critical Vulnerabilities

  • CVE-2026-120459CVSS 9.1
    python-jose through 3.5.0 contains an authentication bypass vulnerability that allows unauthenticated attackers to forge JWTs because HMACKey and...
    📅 Updated: Nov 9, 2026
  • CVE-2026-123550CVSS 9.3
    OpenAM before 16.1.4 contains an authentication bypass vulnerability in its SAML v2.0 service provider that accepts unsigned assertions...
    📅 Updated: Nov 9, 2026
  • CVE-2026-115252CVSS 10.0
    The Confection WordPress Cable WordPress plugin from 0.4.0 to 0.4.7 does not perform any capability or nonce checks...
    📅 Updated: Nov 9, 2026
  • CVE-2026-124060CVSS 9.4
    A vulnerability was detected in TOTOLINK CA300-PoE 6.2c.884. Affected by this issue is the function UploadCustomModule of the...
    📅 Updated: Nov 9, 2026
  • CVE-2026-123961CVSS 9.4
    A security vulnerability has been detected in TOTOLINK CA300-PoE 6.2c.884. This impacts the function setWiFiBasicConfig of the file...
    📅 Updated: Nov 9, 2026
  • CVE-2026-123957CVSS 9.4
    A vulnerability was determined in TOTOLINK CA300-PoE 6.2c.884. Impacted is the function setIpQosRules of the file /cgi-bin/cstecgi.cgi. This...
    📅 Updated: Nov 9, 2026
  • CVE-2026-123614CVSS 9.3
    imgproxy from 4.0.0 before 4.0.16 contains an integer overflow in the ICO loader that allows remote attackers to...
    📅 Updated: Nov 9, 2026
  • CVE-2026-95731CVSS 9.8
    Hardcoded password vulnerabilities in the command-line interface of HPE Networking Fabric Composer could allow an unauthenticated remote attacker...
    📅 Updated: Nov 9, 2026
Powered by CVE Watchtower

Daily CyberSecurity

  • About SecurityOnline.info
  • Advertise with us
  • Announcement
  • Contact
  • Contributor Register
  • Login
  • Disclaimer
  • DCMA
  • Privacy Policy
  • About SecurityOnline.info
  • Advertise on SecurityOnline.info
  • Contact Us

When you purchase through links on our site, we may earn an affiliate commission. Here’s how it works

  • CVE Watchtower
  • CVE Statistics by Vendor 2026
  • Q3 2026 Report
  • Top Exploited CVEs
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube
© 2017 - 2026 Daily CyberSecurity. All Rights Reserved.