Skip to content
November 10, 2026
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube

Daily CyberSecurity

Zero-hour alerts. Unmatched analysis.

Primary Menu
  • Home
  • CVE Data
    • CVE Watchtower
    • Top Exploited CVEs
    • CVE Stats by Vendor
    • Q2 2026 Report
    • CVE Alerts
    • CVE Alert Settings
    • Pricing
  • Cyber Criminals
  • Data Leak
  • Free Tools
    • CVSS 3.1 Calculator
    • Certificate Viewer
    • DNS Lookup
    • Encoder & Hash Generator
    • IP / Subnet Calculator
    • Whois Lookup
  • Linux
  • Malware
  • Vulnerability
  • Submit Press Release
Light/Dark Button
Kali Linux Users Urged to Manually Install New Repository Signing Key After Key Loss Kali Linux, repository signing key macOS Linux Containers
  • Linux

Kali Linux Users Urged to Manually Install New Repository Signing Key After Key Loss

Do Son April 29, 2025 0

Kali Linux warns users to manually install a new repository signing key after key loss to prevent update failures and potential security risks.

Android Show: Google to Unveil OS Future Before I/O 2025 Android 16 adoption rate Android 16KB Page, .NET MAUI 9 Android Security, Fast Charging Android Canary, Developer Program Android Updates, EU Regulation Android 16 Google Android Terminal Cloud Compilation Android, Google I/O
  • Android

Android Show: Google to Unveil OS Future Before I/O 2025

Do Son April 29, 2025 0

Google announces a special "Android Show" on May 13th to reveal the future of Android ahead of the Google I/O 2025 conference.

ChatGPT’s Flattery Problem: OpenAI Responds OpenAI Major Outage - Time Bandit GPT-4.5 Phase-Out
  • Technology

ChatGPT’s Flattery Problem: OpenAI Responds

Do Son April 29, 2025 0

Users find ChatGPT overly flattering after GPT-4o updates. OpenAI acknowledges the issue and is rolling out fixes to balance its AI's demeanor.

0-Click NTLM Authentication Bypass Hits Microsoft Telnet Server, PoC Releases, No Patch Telnet Bypass Authentication Vulnerability
  • Vulnerability

0-Click NTLM Authentication Bypass Hits Microsoft Telnet Server, PoC Releases, No Patch

Do Son April 29, 2025 0

Critical 0-click flaw in Microsoft Telnet Server allows attackers to bypass authentication & gain admin access. Learn about the MS-TNAP vulnerability & how to mitigate

Apache Tomcat Security Update Fixes DoS and Rewrite Rule Bypass Flaws Apache Tomcat CVE-2025-31650
  • Vulnerability

Apache Tomcat Security Update Fixes DoS and Rewrite Rule Bypass Flaws

Do Son April 29, 2025 0

Apache Tomcat patches CVE-2025-31650 and CVE-2025-31651 to fix denial of service and rewrite rule bypass issues. Upgrade now to stay secure.

CVE-2025-21756: How a Tiny Linux Kernel Bug Led to a Full Root Exploit, PoC Releases root-linux
  • Linux
  • Vulnerability

CVE-2025-21756: How a Tiny Linux Kernel Bug Led to a Full Root Exploit, PoC Releases

Do Son April 29, 2025 0

CVE-2025-21756 exploited a tiny Linux vsock bug to achieve root access via UAF and ROP chains. Michael Hoefler reveals the full exploitation path.

Weaponized Uyghur Language Software: Citizen Lab Uncovers Targeted Malware Campaign Microsoft Office, CVE-2017-11882
  • Cyber Security
  • Malware

Weaponized Uyghur Language Software: Citizen Lab Uncovers Targeted Malware Campaign

Do Son April 29, 2025 0

Citizen Lab reveals a malware campaign targeting Uyghur exiles by hijacking trusted language software, exposing new digital transnational repression tactics.

Fog Ransomware Group Exposed: Inside the Tools, Tactics, and Victims of a Stealthy Threat Fog Ransomware, Sliver C2
  • Malware

Fog Ransomware Group Exposed: Inside the Tools, Tactics, and Victims of a Stealthy Threat

Do Son April 29, 2025 0

DFIR Report exposes the Fog ransomware group's sophisticated use of SonicWall exploits, Sliver C2, and credential theft across tech, retail, and education sectors.

Quantum Issues Critical Patch for StorNext GUI RCE Vulnerabilities (CVE-2025-46616, CVE-2025-46617) StorNext Vulnerabilities, Remote Code Execution
  • Vulnerability

Quantum Issues Critical Patch for StorNext GUI RCE Vulnerabilities (CVE-2025-46616, CVE-2025-46617)

Do Son April 29, 2025 0

Quantum warns of critical RCE vulnerabilities in StorNext GUI (CVE-2025-46616, CVE-2025-46617). Users must upgrade or patch immediately to prevent exploitation.

CVE-2025-3200: Wiesemann & Theis Com-Server Devices Exposed by Deprecated TLS Protocols CVE-2025-3200, Wiesemann & Theis Vulnerability
  • Vulnerability

CVE-2025-3200: Wiesemann & Theis Com-Server Devices Exposed by Deprecated TLS Protocols

Do Son April 29, 2025 0

CERT@VDE reveals CVE-2025-3200 in Wiesemann & Theis devices: outdated TLS protocols expose Com-Server models to interception and man-in-the-middle attacks.

Fake GIF and Reverse Proxy Used in Sophisticated Card Skimming Attack on Magento Reverse Proxy Skimming, Fake GIF Malware
  • Malware

Fake GIF and Reverse Proxy Used in Sophisticated Card Skimming Attack on Magento

Do Son April 29, 2025 0

A fake GIF and malicious reverse proxy server enabled a multi-stage card skimming attack on a Magento site, exposing customer credit card data and credentials.

Triada Trojan Evolves: Pre-Installed Android Malware Now Embedded in Device Firmware Troj
  • Malware

Triada Trojan Evolves: Pre-Installed Android Malware Now Embedded in Device Firmware

Do Son April 29, 2025 0

Kaspersky warns that Triada Trojan now comes pre-installed in counterfeit Android device firmware, making it nearly impossible to remove without reinstallation.

Critical Vulnerabilities in Quick Agent Software Expose Ricoh MFPs to Remote Attacks Quick Agent Vulnerability, Ricoh MFP Security
  • Vulnerability

Critical Vulnerabilities in Quick Agent Software Expose Ricoh MFPs to Remote Attacks

Do Son April 29, 2025 0

Quick Agent vulnerabilities could let attackers execute code or steal files from Ricoh MFPs. Update now to secure systems from critical remote attacks.

Earth Kurma APT Targets Southeast Asia with Stealthy Cyberespionage Earth Kurma, Southeast Asia APT
  • Cyber Security
  • Malware

Earth Kurma APT Targets Southeast Asia with Stealthy Cyberespionage

Do Son April 29, 2025 0

Earth Kurma APT campaign targets Southeast Asian governments and telecoms using rootkits, loaders, and cloud services to steal sensitive data.

Discord Used as C2 for Stealthy Python-Based RAT Discord RAT, Python malware
  • Malware

Discord Used as C2 for Stealthy Python-Based RAT

Do Son April 29, 2025 0

Cyfirma uncovers a Python-based RAT using Discord for command and control. It can lock screens, simulate BSOD, move the mouse, and steal data.

Court Dismisses Criminal Charges Against VPN Executive, Affirms No-Log Policy Logo_b_1745526419ZBR8YudcM5
  • Press Release

Court Dismisses Criminal Charges Against VPN Executive, Affirms No-Log Policy

cybernewswire April 28, 2025 0
Toronto, Canada, 28th April 2025, CyberNewsWire
Read More Read more about Court Dismisses Criminal Charges Against VPN Executive, Affirms No-Log Policy
Elon Musk’s xAI Aims for $20 Billion Fundraising EU GDPR Grok investigation xAI crypto trader recruitment X open-source algorithm 2026, Elon Musk ad transparency X Chat Replacement X End-to-End Encryption xAI, open-source xAI Elon Musk xAI Infrastructure, Saudi AI
  • Technology

Elon Musk’s xAI Aims for $20 Billion Fundraising

Do Son April 28, 2025 0

Elon Musk's xAI Holdings, parent of X and xAI, plans a $20 billion fundraising round, potentially the second largest ever, valuing the combined entities.

Microsoft Fixes Outlook Lag Issue: Update Timeline Exfil Out&Look Microsoft 365 Logging Gap Outlook Classic KB5074109 freeze, January 2026 POP3 PST bug Outlook Classic POP3 freeze, KB5074109 Windows 11 bug Outlook, CPU Usage Outlook lag Outlook Lite discontinued
  • Technology

Microsoft Fixes Outlook Lag Issue: Update Timeline

Do Son April 28, 2025 0

Microsoft has a fix for the Outlook lag issue causing high CPU usage. See the timeline for updates on Beta, Current, and Semi-Annual Channels.

YouTube Tests AI Overviews for Video Summaries with Gemini YouTube End Screens, User Experience YouTube ad blocker YouTube Age Detection, AI Content Restrictions Youtube page load YouTube AI Overviews
  • Technology

YouTube Tests AI Overviews for Video Summaries with Gemini

Do Son April 28, 2025 0

YouTube is testing an "AI Overviews" feature powered by Gemini for Premium users in the US to summarize videos and highlight key moments.

Microsoft to Remove Built-in Maps App from Windows 11 in July 2025 Windows 11 Maps app
  • Windows

Microsoft to Remove Built-in Maps App from Windows 11 in July 2025

Do Son April 28, 2025 0

Microsoft is removing the built-in Maps app from Windows 11 in July 2025, with no new features and eventual inoperability. Developers should migrate to Azure Maps.

Linux Considers Dropping Support for Ancient i486 and i586 CPUs Linux Kernel 6.19 AMDGPU update, GCN 1.0 1.1 performance boost Linux Sanctions Risk Linux i486
  • Linux

Linux Considers Dropping Support for Ancient i486 and i586 CPUs

Do Son April 28, 2025 0

The Linux kernel community is discussing ending support for the aging Intel i486 and i586 processors to simplify code and reduce maintenance.

Windows 11 25H2 Update: Minor Changes Expected in October 2025 Windows Secure Lock Screen Clock Lag Windows 11 KB5079391 error Windows 11 Kernel Driver Trust Microslop Windows 11 Windows 11 modem driver removal 2026, CVE-2025-24052 Agere driver exploit Windows 11 Password Icon Bug Lock Screen Glitch Windows 11 26H1 ARM Snapdragon X2 Windows 11 Reboot-Free, Insider Build Windows Update Error, 0x80070103 File Explorer, NTLM leak Windows bug, WinRE Windows Update, UAC prompts Secure Boot Certificate, Windows Security Windows 11 22H2 Installation security updates Windows UEFI CA 2023 Windows 11 25H2
  • Windows

Windows 11 25H2 Update: Minor Changes Expected in October 2025

Do Son April 28, 2025 0

Microsoft is gearing up for the Windows 11 25H2 update in October 2025. Early signs suggest it will be a minor release, focusing on stability and support.

❮ Prev Page
Next Page ❯

Search

CVE ALERTS
📈

EPSS Spike Alerts
Catch risk spikes before they make headlines.

🎯

Custom EPSS/CVSS
Set score thresholds to effectively filter noise.

🛡️

Exploit Intel
Real-world exploit signals beyond the KEV catalog.

🐙

GitHub Issues
Auto-create alert tickets without duplication.

📬

Weekly Digest
Clean summaries, eliminating email spam.

🏷️

Watchlist Groups
Tag vulnerabilities by team (Infra/AppSec/SOC).

🔀

Smart Routing
Route chat channels based on severity levels.

🚨

RBP Tracker
Early warning detection and tracking system.

Subscribe – $7/mo or try free for 14 days →

🚨 Active Exploits in the Wild

  • CVE-2026-125350
    Use after free in XML. Reported by anonymous on 2026-11-06. Google is aware that an exploit for CVE-2026-125350...
    Admin intel📅 Updated: Nov 10, 2026
  • CVE-2026-123751CVSS 9.8
    The WP Duplicate WordPress plugin through 1.1.11 does not properly verify a request authentication value and does not...
    Watchtower Verified📅 Updated: Nov 9, 2026
  • CVE-2026-111793CVSS 4.3
    Openwave Webtop Media Transcoder does not enforce administrator-defined file type restrictions to restrict the file-types to be converted....
    Admin intel📅 Updated: Nov 9, 2026
  • CVE-2026-114713CVSS 8.6
    The labeled-response module in UnrealIRCd 6.0.0 before 6.2.7.1 does not escape the IRCv3 "label" message tag when echoing...
    Admin intel📅 Updated: Nov 9, 2026
  • CVE-2026-116779CVSS 9.8
    Summary `sofia_presence_handle_sip_i_message()` splits the To user of an inbound SIP MESSAGE on `+` and treats the left half...
    CISA KEV📅 Added to KEV: Nov 9, 2026
  • CVE-2026-102895CVSS 9.8
    GPUStack is an open-source GPU cluster manager for AI model serving and GPU instance provisioning. Prior to 2.2.0,...
    CISA KEV📅 Added to KEV: Nov 9, 2026
  • CVE-2026-123158CVSS 8.1
    sshd in OpenSSH before 10.6p2 on Linux, when musl libc is used without PAM, lacks a workaround for...
    CISA KEV📅 Added to KEV: Nov 9, 2026
  • CVE-2026-19868CVSS 7.5
    An authentication enforcement vulnerability in SonicOS SSLVPN service may allow a user with valid credentials for an alternate...
    CISA KEV📅 Added to KEV: Nov 6, 2026
Powered by CVE Watchtower

Critical Vulnerabilities

  • CVE-2026-125086CVSS 10.0
    A vulnerability has been found in D-Link M60 1.12.B01. Impacted is the function system of the file /etc/emDaemon/mosquitto.conf...
    📅 Updated: Nov 10, 2026
  • CVE-2026-120017CVSS 10.0
    SAP NetWeaver AS ABAP and ABAP Platform does not perform sufficient verification of incoming authentication assertions under certain...
    📅 Updated: Nov 10, 2026
  • CVE-2026-109803CVSS 9.9
    SAP NetWeaver Knowledge Management (XML Forms) does not sufficiently restrict the selection of XSL transformations processed by the...
    📅 Updated: Nov 10, 2026
  • CVE-2026-109798CVSS 9.1
    SAP BusinessObjects Business Intelligence Platform (Web Intelligence) does not properly restrict external entity resolution when processing OLAP connection...
    📅 Updated: Nov 10, 2026
  • CVE-2026-109795CVSS 9.9
    SAP NetWeaver does not perform necessary authorization checks and lacks sufficient input validation in certain remote-enabled functionality. An...
    📅 Updated: Nov 10, 2026
  • CVE-2026-89126CVSS 10.0
    SAP Web Dispatcher does not sufficiently validate certain network input processed by an internal component. An unauthenticated attacker...
    📅 Updated: Nov 10, 2026
  • CVE-2026-89119CVSS 9.6
    SAP Web Dispatcher and SAP NetWeaver Application Server ABAP (Internet Communication Manager) do not perform sufficient request validation...
    📅 Updated: Nov 10, 2026
  • CVE-2026-107246CVSS 9.2
    The Plesk extension "Site Import" before 1.13.2 does not properly validate domain and session identifiers, allowing path traversal....
    📅 Updated: Nov 10, 2026
Powered by CVE Watchtower

Daily CyberSecurity

  • About SecurityOnline.info
  • Advertise with us
  • Announcement
  • Contact
  • Contributor Register
  • Login
  • Disclaimer
  • DCMA
  • Privacy Policy
  • About SecurityOnline.info
  • Advertise on SecurityOnline.info
  • Contact Us

When you purchase through links on our site, we may earn an affiliate commission. Here’s how it works

  • CVE Watchtower
  • CVE Statistics by Vendor 2026
  • Q3 2026 Report
  • Top Exploited CVEs
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube
© 2017 - 2026 Daily CyberSecurity. All Rights Reserved.