Skip to content
November 10, 2026
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube

Daily CyberSecurity

Zero-hour alerts. Unmatched analysis.

Primary Menu
  • Home
  • CVE Data
    • CVE Watchtower
    • Top Exploited CVEs
    • CVE Stats by Vendor
    • Q2 2026 Report
    • CVE Alerts
    • CVE Alert Settings
    • Pricing
  • Cyber Criminals
  • Data Leak
  • Free Tools
    • CVSS 3.1 Calculator
    • Certificate Viewer
    • DNS Lookup
    • Encoder & Hash Generator
    • IP / Subnet Calculator
    • Whois Lookup
  • Linux
  • Malware
  • Vulnerability
  • Submit Press Release
Light/Dark Button
Perplexity Plans AI-Powered Browser with Personalized Ads, Eyes Chrome Perplexity Comet, Chrome antitrust
  • Technology

Perplexity Plans AI-Powered Browser with Personalized Ads, Eyes Chrome

Do Son April 25, 2025 0

Perplexity.ai reveals "Comet" browser with AI integration and personalized ads. Exec expresses interest in Chrome amid Google antitrust case.

EU to Introduce Repairability Labels for Smartphones and Tablets AI Continent Action Plan European Commission EU repairability label, smartphone labeling
  • Technology

EU to Introduce Repairability Labels for Smartphones and Tablets

Do Son April 25, 2025 0

Starting June 20, the EU will require smartphones & tablets to display repairability, energy, & durability labels, aiding consumer decisions.

Google Offers Free Repairs for Swollen Pixel 7a Batteries Google Self-Preferencing Fine Idealo Antitrust Damages Anthropic, Google TPUs Google DMA Compliance, Search Self-Preferencing Google Play Store Ruling, Epic Games Victory Google fine, ad tech Google lawsuit, privacy violation Gmail security, false alarm Google Play EU regulation Google Security, Phone Number Leak Google 2025 - Google China’s Anti-Monopoly Law Google monopoly, ad tech Pixel 7a battery, battery swelling
  • Android

Google Offers Free Repairs for Swollen Pixel 7a Batteries

Do Son April 25, 2025 0

Google acknowledges Pixel 7a battery swelling issue, offers free repairs in many countries. Check eligibility and available compensation options.

Google Ends Remote Work for Many: Return to Office or Leave Google Arkansas Investment, AI Data Center Google, privacy fine Ecosia Google Chrome Alphabet Earnings, AI Growth Google Hydropower, AI Data Centers Google Breakup Antitrust Workspace Flows Google Workspace Google remote work, return to office
  • Technology

Google Ends Remote Work for Many: Return to Office or Leave

Do Son April 25, 2025 0

Google is tightening its remote work policy, requiring many employees to return to the office or face consequences. Learn about the new mandates.

Critical AMI BMC Vulnerability: Patch Your ASUS Workstation Now ASUS CVE-2025-13348 File Shredder Removal ASUS LPE Flaw CVE-2025-59373 ASUS Armoury Crate vulnerability Asus CVE Numbering Authority - CVE-2024-12912 and CVE-2024-13062 AMI BMC vulnerability, CVE-2024-54085
  • Vulnerability

Critical AMI BMC Vulnerability: Patch Your ASUS Workstation Now

Do Son April 25, 2025 0

Critical security flaw (CVE-2024-54085) in AMI BMC software threatens PCs. ASUS releases urgent firmware updates for workstation motherboards. Update now!

CVE-2025-31324 (CVSS 10): Zero-Day in SAP NetWeaver Exploited in the Wild to Deploy Webshells and C2 Frameworks CVE-2025-31324, SAP NetWeaver
  • Vulnerability

CVE-2025-31324 (CVSS 10): Zero-Day in SAP NetWeaver Exploited in the Wild to Deploy Webshells and C2 Frameworks

Do Son April 25, 2025 0

CVE-2025-31324 lets attackers exploit SAP NetWeaver to upload webshells and deploy C2 tools like Brute Ratel, affecting patched enterprise systems.

OpenAI Increases ChatGPT Plus Quotas, Doubling Limits for o3 and o4-mini Models o3-mini GPT-5 GPT-4 retirement, GPT-4o ChatGPT quota, OpenAI update
  • Technology

OpenAI Increases ChatGPT Plus Quotas, Doubling Limits for o3 and o4-mini Models

Do Son April 25, 2025 0

OpenAI boosts ChatGPT Plus quotas—o3 model now allows 100 messages/week, o4-mini 300/day—giving paid users more access while free-tier limits remain.

Microsoft’s Patch for Symlink Exploit Introduces New Windows Update DoS Flaw inetpub vulnerability, Windows Update
  • Vulnerability

Microsoft’s Patch for Symlink Exploit Introduces New Windows Update DoS Flaw

Do Son April 25, 2025 0

A flaw in Windows tied to the inetpub folder (CVE-2025-21204) allows attackers to block updates without admin rights, exposing systems to future threats.

Perplexity Eyes Chrome as DOJ Pressures Google Over Antitrust Chrome 148 lazy loading Chrome for Linux ARM64 Chrome 145 Update Chrome Security Fixes Chrome Security Update CVE-2026-1220 Chrome 144 Security Update CVE-2026-0899 Chrome Memory Safety, WebGPU UAF Chrome V8 Type Confusion, Google Updater Flaw Chrome V8 Flaw, CVE-2025-13042 Chrome V8, Type Confusion, Chrome 142 Update Chrome V8 Flaw, CVE-2025-12036 Chrome 141, WebGPU Overflow Google Chrome preloading Chrome, V8 vulnerability CVE-2025-9132 Chrome Security Update, Use-After-Free Chrome V8, Type Confusion Chrome Telemetry, Windows 10 EOL Microsoft Family Safety, Chrome Blocking Chrome Security Update, High-Severity Google Chrome, Antitrust CVE-2024-10487 and CVE-2024-10488 Google Chrome Root Program Chrome Update, CVE-2025-3619 Chrome Acquisition, Perplexity.ai
  • Technology

Perplexity Eyes Chrome as DOJ Pressures Google Over Antitrust

Do Son April 25, 2025 0

Perplexity.ai shows interest in acquiring Chrome amid DOJ antitrust case, raising concerns about OpenAI's stewardship and Google's Android restrictions.

EU Fines Apple and Meta €700 Million for Digital Markets Act Violations Apple Google EU alliance DMA European Commission Breach Trivy Supply Chain Attack Europa.eu Breach EU Cloud Infrastructure EU Cyber Sanctions State-Sponsored Hacking EU 2040 Emissions Target, Europe Climate Leadership AWS Azure DMA Cloud Gatekeeper DSA violation, illegal content Apple DMA Delay, iPhone Mirroring EU EU Age Verification, Google Play Integrity Corning Antitrust, EU Competition Apple EU Digital Markets Act App Store commission European Union cyberattacks - InvestAI EU Targets Musk’s X Digital Markets Act, EU fines
  • Technology

EU Fines Apple and Meta €700 Million for Digital Markets Act Violations

Do Son April 25, 2025 0

The EU fines Apple €500M and Meta €200M for violating the Digital Markets Act, citing user rights restrictions and coercive data-for-service models.

Russian IP Networks Fuel North Korea’s Global Cybercrime and Espionage Campaigns North Korea, Russian infrastructure
  • Cybercriminals

Russian IP Networks Fuel North Korea’s Global Cybercrime and Espionage Campaigns

Do Son April 25, 2025 0

Trend Micro reveals how Russian IP networks support North Korea’s cybercrime—from crypto theft to malware-laced fake job interviews and potential espionage.

CVE-2024-2787: Apple Archive Flaw Enables Arbitrary File Write and Gatekeeper Bypass, PoC Releases CVE-2024-27876, Apple Archive Gatekeeper bypass
  • Vulnerability

CVE-2024-2787: Apple Archive Flaw Enables Arbitrary File Write and Gatekeeper Bypass, PoC Releases

Do Son April 25, 2025 0

A vulnerability (CVE-2024-27876) in Apple's libAppleArchive allows arbitrary file writes and can bypass Gatekeeper on macOS and iOS. Patches are available.

Power Parasites: Scam Campaign Targets Global Energy Brands Power Parasites, phishing
  • Cybercriminals

Power Parasites: Scam Campaign Targets Global Energy Brands

Do Son April 25, 2025 0

Power Parasites targets users with job and investment scams using fake domains mimicking Siemens, Repsol, Netflix, and more, Silent Push reports.

WooCommerce Phishing Attack: Fake Vulnerability Exploits Store Owners Patchstack
  • Cybercriminals

WooCommerce Phishing Attack: Fake Vulnerability Exploits Store Owners

Do Son April 25, 2025 0

A new phishing campaign targets WooCommerce users with fake security alerts. Learn how attackers use IDN homographs and malicious plugins to compromise stores.

Lumma Stealer: Advanced Obfuscation and Evasion Techniques Analysis Lumma Stealer InfoStealer
  • Malware

Lumma Stealer: Advanced Obfuscation and Evasion Techniques Analysis

Do Son April 25, 2025 0

Trellix analysis reveals Lumma Stealer's latest tactics: code obfuscation, API hashing, ETW evasion, anti-VM. Learn how this InfoStealer avoids detection.

Kimsuky’s PebbleDash Campaign: PowerShell Attacks & RDP Bypass Tactics Kimsuky Group PebbleDash Malware
  • Cybercriminals
  • Malware

Kimsuky’s PebbleDash Campaign: PowerShell Attacks & RDP Bypass Tactics

Do Son April 25, 2025 0

Kimsuky revives PebbleDash malware using spear-phishing and patched RDP DLLs for stealthy access and control, warns new ASEC March 2025 report.

ToyMaker’s Playbook: Cisco Talos Exposes IAB Tactics Leading to Cactus Ransomware ToyMaker Initial Access Broker Ransomware
  • Cybercriminals
  • Malware

ToyMaker’s Playbook: Cisco Talos Exposes IAB Tactics Leading to Cactus Ransomware

Do Son April 25, 2025 0

Cisco Talos uncovers ToyMaker's IAB activity, paving the way for Cactus ransomware. Learn how LAGTOY backdoor & credential theft led to a major breach.

CISA Clarifies CVE Program’s Stability Amid Funding Concerns Img_2025_04_24_22_04_18
  • Vulnerability

CISA Clarifies CVE Program’s Stability Amid Funding Concerns

Do Son April 24, 2025 0

CISA confirms stability of the CVE Program, dispelling funding concerns and reaffirming its commitment to cybersecurity and vulnerability management.

Redis Vulnerability Exposes Servers to Denial-of-Service Attacks Redis vulnerability, CVE-2025-21605
  • Vulnerability

Redis Vulnerability Exposes Servers to Denial-of-Service Attacks

Do Son April 24, 2025 0

High-severity Redis vulnerability (CVE-2025-21605) allows unauthenticated users to cause DoS. Upgrade to patched versions or apply mitigations to protect your server.

GitLab Releases Security Update to Patch XSS and Account Takeover Flaws GitLab security, GitLab vulnerability
  • Vulnerability

GitLab Releases Security Update to Patch XSS and Account Takeover Flaws

Do Son April 24, 2025 0

GitLab releases critical security updates 17.11.1, 17.10.5, 17.9.7 to fix high-severity XSS, account takeover risks. Upgrade now to protect your GitLab instance.

High-Severity SonicWall SSLVPN Vulnerability Allows Firewall Crashing SonicWall vulnerability, CVE-2025-32818
  • Vulnerability

High-Severity SonicWall SSLVPN Vulnerability Allows Firewall Crashing

Do Son April 24, 2025 0

Critical SonicWall flaw (CVE-2025-32818) in SSLVPN can crash firewalls, leading to DoS. Update your Gen7 devices now!

CVE-2025-32965: Backdoor in xrpl.js SDK Puts Crypto Wallets at Risk xrpl.js Backdoor Crypto Supply Chain Attack CVE-2025-32965
  • Vulnerability

CVE-2025-32965: Backdoor in xrpl.js SDK Puts Crypto Wallets at Risk

Do Son April 24, 2025 0

CVE-2025-32965: A backdoor in xrpl.js SDK allows theft of crypto wallet keys. Users must upgrade and rotate compromised credentials immediately.

❮ Prev Page
Next Page ❯

Search

CVE ALERTS
📈

EPSS Spike Alerts
Catch risk spikes before they make headlines.

🎯

Custom EPSS/CVSS
Set score thresholds to effectively filter noise.

🛡️

Exploit Intel
Real-world exploit signals beyond the KEV catalog.

🐙

GitHub Issues
Auto-create alert tickets without duplication.

📬

Weekly Digest
Clean summaries, eliminating email spam.

🏷️

Watchlist Groups
Tag vulnerabilities by team (Infra/AppSec/SOC).

🔀

Smart Routing
Route chat channels based on severity levels.

🚨

RBP Tracker
Early warning detection and tracking system.

Subscribe – $7/mo or try free for 14 days →

🚨 Active Exploits in the Wild

  • CVE-2026-125350
    Use after free in XML. Reported by anonymous on 2026-11-06. Google is aware that an exploit for CVE-2026-125350...
    Admin intel📅 Updated: Nov 10, 2026
  • CVE-2026-123751CVSS 9.8
    The WP Duplicate WordPress plugin through 1.1.11 does not properly verify a request authentication value and does not...
    Watchtower Verified📅 Updated: Nov 9, 2026
  • CVE-2026-111793CVSS 4.3
    Openwave Webtop Media Transcoder does not enforce administrator-defined file type restrictions to restrict the file-types to be converted....
    Admin intel📅 Updated: Nov 9, 2026
  • CVE-2026-114713CVSS 8.6
    The labeled-response module in UnrealIRCd 6.0.0 before 6.2.7.1 does not escape the IRCv3 "label" message tag when echoing...
    Admin intel📅 Updated: Nov 9, 2026
  • CVE-2026-116779CVSS 9.8
    Summary `sofia_presence_handle_sip_i_message()` splits the To user of an inbound SIP MESSAGE on `+` and treats the left half...
    CISA KEV📅 Added to KEV: Nov 9, 2026
  • CVE-2026-102895CVSS 9.8
    GPUStack is an open-source GPU cluster manager for AI model serving and GPU instance provisioning. Prior to 2.2.0,...
    CISA KEV📅 Added to KEV: Nov 9, 2026
  • CVE-2026-123158CVSS 8.1
    sshd in OpenSSH before 10.6p2 on Linux, when musl libc is used without PAM, lacks a workaround for...
    CISA KEV📅 Added to KEV: Nov 9, 2026
  • CVE-2026-19868CVSS 7.5
    An authentication enforcement vulnerability in SonicOS SSLVPN service may allow a user with valid credentials for an alternate...
    CISA KEV📅 Added to KEV: Nov 6, 2026
Powered by CVE Watchtower

Critical Vulnerabilities

  • CVE-2026-125086CVSS 10.0
    A vulnerability has been found in D-Link M60 1.12.B01. Impacted is the function system of the file /etc/emDaemon/mosquitto.conf...
    📅 Updated: Nov 10, 2026
  • CVE-2026-120017CVSS 10.0
    SAP NetWeaver AS ABAP and ABAP Platform does not perform sufficient verification of incoming authentication assertions under certain...
    📅 Updated: Nov 10, 2026
  • CVE-2026-109803CVSS 9.9
    SAP NetWeaver Knowledge Management (XML Forms) does not sufficiently restrict the selection of XSL transformations processed by the...
    📅 Updated: Nov 10, 2026
  • CVE-2026-109798CVSS 9.1
    SAP BusinessObjects Business Intelligence Platform (Web Intelligence) does not properly restrict external entity resolution when processing OLAP connection...
    📅 Updated: Nov 10, 2026
  • CVE-2026-109795CVSS 9.9
    SAP NetWeaver does not perform necessary authorization checks and lacks sufficient input validation in certain remote-enabled functionality. An...
    📅 Updated: Nov 10, 2026
  • CVE-2026-89126CVSS 10.0
    SAP Web Dispatcher does not sufficiently validate certain network input processed by an internal component. An unauthenticated attacker...
    📅 Updated: Nov 10, 2026
  • CVE-2026-89119CVSS 9.6
    SAP Web Dispatcher and SAP NetWeaver Application Server ABAP (Internet Communication Manager) do not perform sufficient request validation...
    📅 Updated: Nov 10, 2026
  • CVE-2026-107246CVSS 9.2
    The Plesk extension "Site Import" before 1.13.2 does not properly validate domain and session identifiers, allowing path traversal....
    📅 Updated: Nov 10, 2026
Powered by CVE Watchtower

Daily CyberSecurity

  • About SecurityOnline.info
  • Advertise with us
  • Announcement
  • Contact
  • Contributor Register
  • Login
  • Disclaimer
  • DCMA
  • Privacy Policy
  • About SecurityOnline.info
  • Advertise on SecurityOnline.info
  • Contact Us

When you purchase through links on our site, we may earn an affiliate commission. Here’s how it works

  • CVE Watchtower
  • CVE Statistics by Vendor 2026
  • Q3 2026 Report
  • Top Exploited CVEs
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube
© 2017 - 2026 Daily CyberSecurity. All Rights Reserved.