Skip to content
November 10, 2026
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube

Daily CyberSecurity

Zero-hour alerts. Unmatched analysis.

Primary Menu
  • Home
  • CVE Data
    • CVE Watchtower
    • Top Exploited CVEs
    • CVE Stats by Vendor
    • Q2 2026 Report
    • CVE Alerts
    • CVE Alert Settings
    • Pricing
  • Cyber Criminals
  • Data Leak
  • Free Tools
    • CVSS 3.1 Calculator
    • Certificate Viewer
    • DNS Lookup
    • Encoder & Hash Generator
    • IP / Subnet Calculator
    • Whois Lookup
  • Linux
  • Malware
  • Vulnerability
  • Submit Press Release
Light/Dark Button
European Commission Launches “AI Continent Action Plan” to Compete with US and China AI Continent Action Plan European Commission EU repairability label, smartphone labeling
  • Technology

European Commission Launches “AI Continent Action Plan” to Compete with US and China

Do Son April 10, 2025 0

The European Commission launches the "AI Continent Action Plan" to close the AI gap with the US and China, investing in infrastructure and talent to boost EU's AI competitiveness.

WordPress.com Launches AI Website Builder for Easy Site Creation AI Website Builder WordPress.com
  • Technology

WordPress.com Launches AI Website Builder for Easy Site Creation

Do Son April 10, 2025 0

WordPress.com introduces an AI Website Builder, enabling users to create websites using natural language prompts. Free users get 30 prompts, while paid users get unlimited.

Anthropic Launches Claude Max Subscription with Higher Usage Tiers Claude Max Anthropic
  • Technology

Anthropic Launches Claude Max Subscription with Higher Usage Tiers

Do Son April 10, 2025 0

Anthropic introduces Claude Max, a new subscription tier with increased usage quotas, offering $100 and $200 monthly plans for enhanced AI access and early feature access.

KB5055523 Update Creates Unnecessary inetpub Folder in Windows 11 24H2 inetpub Folder KB5055523
  • Windows

KB5055523 Update Creates Unnecessary inetpub Folder in Windows 11 24H2

Do Son April 10, 2025 0

The KB5055523 update in Windows 11 24H2 is causing an unexpected inetpub folder to appear. This is not malware and can be safely deleted.

Google Gemini to Support Anthropic’s Model Context Protocol (MCP) Agentic AI Foundation, MCP Protocol Open-Source Chrome DevTools AI, MCP Protocol Model Context Protocol (MCP) Gemini AI Windows AI future, AI interoperability
  • Technology

Google Gemini to Support Anthropic’s Model Context Protocol (MCP)

Do Son April 10, 2025 0

Google announces Gemini AI support for Anthropic's Model Context Protocol (MCP), aiming to standardize AI model integration with external tools and data, enhancing interoperability.

Google Firebase Studio Launches as AI-Powered IDE Rival to Cursor AI Cursor AI Google Firebase Studio
  • Technology

Google Firebase Studio Launches as AI-Powered IDE Rival to Cursor AI

Do Son April 10, 2025 0

Google launches Firebase Studio, an AI-powered cloud IDE rivaling Cursor AI, enabling code generation from natural language and images. Users need a Gemini API key.

KB5002700 Update Causing Office 2016 Crashes on Windows 10/11 Office 2021 End of Life CVE-2024-21413 KB5002700 Office 2016 Update
  • Windows

KB5002700 Update Causing Office 2016 Crashes on Windows 10/11

Do Son April 10, 2025 0

Microsoft's KB5002700 security update is causing widespread crashes in Office 2016 on Windows 10/11. Users are advised to await a Microsoft rollback or follow complex removal instructions.

SonicWall Patches Multi Vulnerabilities in NetExtender VPN Client SonicWall Zero-Day, SMA1000 Exploit Chain SonicWall, firewall configuration CVE-2024-29010 & CVE-2024-29011 SonicWall NetExtender VPN Vulnerability
  • Vulnerability

SonicWall Patches Multi Vulnerabilities in NetExtender VPN Client

Do Son April 10, 2025 0

SonicWall has patched three vulnerabilities (CVE-2025-23008, CVE-2025-23009, CVE-2025-23010) in its NetExtender VPN client. Update to version 10.3.2 or later to prevent privilege escalation and unauthorized access.

CISA Warns of Actively Exploited Linux Kernel Vulnerabilities (CVE-2024-53197, CVE-2024-53150) CVE-2024-28986 exploitation SolarWinds Web Help Desk Linux Vulnerability CVE-2024-53197
  • Vulnerability

CISA Warns of Actively Exploited Linux Kernel Vulnerabilities (CVE-2024-53197, CVE-2024-53150)

Do Son April 10, 2025 0

CISA has added Linux kernel vulnerabilities CVE-2024-53197 and CVE-2024-53150 to its KEV catalog, warning of active exploitation. Learn how these flaws are used in Android device exploits and what steps to take.

Seven Years Later: Cisco CVE-2018-0171 Still Exposes Thousands to RCE Cisco ISE Root Escalation * Read-Only Admin Exploit Cisco Secure FMC Vulnerability CVE-2026-20131 Cisco Meeting Management Vulnerability CVE-2026-20098 Cisco vulnerability, RCE flaw CVE-2025-20265 Cisco Meraki, VPN Vulnerability Cisco Nexus Dashboard - CVE-2024-20424 CVE-2025-20115 Cisco Vulnerability CVE-2018-0171 Privilege Escalation Cisco Unified Intelligence Center
  • Vulnerability

Seven Years Later: Cisco CVE-2018-0171 Still Exposes Thousands to RCE

Do Son April 10, 2025 0

Research reveals Cisco CVE-2018-0171, a 7-year-old Smart Install RCE vulnerability, remains active, exposing over 1,200 devices. Learn how attackers exploit it and how to protect your network.

SureTriggers Vulnerability Exposes 100,000+ WordPress Sites to Admin Takeover WordPress Vulnerability SureTriggers
  • Vulnerability

SureTriggers Vulnerability Exposes 100,000+ WordPress Sites to Admin Takeover

Do Son April 10, 2025 0

A critical vulnerability (CVE-2025-3102) in the SureTriggers WordPress plugin allows unauthenticated admin account creation, potentially exposing over 100,000 sites to full takeover. Update to version 1.0.79 immediately.

Dell Addresses Security Vulnerabilities in PowerScale OneFS CVE-2024-37143 & CVE-2024-37144 Dell PowerScale OneFS vulnerability
  • Vulnerability

Dell Addresses Security Vulnerabilities in PowerScale OneFS

Do Son April 10, 2025 0

Dell has released a security advisory addressing vulnerabilities in PowerScale OneFS, including potential for takeover of privileged accounts and denial of service. Upgrade information and workarounds are provided.

Scattered Spider Evolving: New Tactics and Spectre RAT Scattered Spider Tactics Phishing kits
  • Cybercriminals
  • Malware

Scattered Spider Evolving: New Tactics and Spectre RAT

Do Son April 10, 2025 0

A Silent Push report details the evolving tactics of the Scattered Spider hacker collective, including new phishing kits, the Spectre RAT, and targeting of major brands in 2025.

NATS Server Vulnerability: Missing Access Controls in JetStream API NATS security JetStream API vulnerability
  • Vulnerability

NATS Server Vulnerability: Missing Access Controls in JetStream API

Do Son April 10, 2025 0

A security vulnerability (CVE-2025-30215) in NATS Server allows unauthorized actions on JetStream assets due to missing access controls.

Critical SSRF Vulnerability Patched in LNbits Lightning Wallet Server LNbits SSRF LNURL Vulnerability
  • Vulnerability

Critical SSRF Vulnerability Patched in LNbits Lightning Wallet Server

Do Son April 10, 2025 0

A critical SSRF vulnerability (CVE-2025-32013) has been patched in LNbits, the Lightning Network wallet server. Learn how attackers could exploit LNURL authentication to access internal services and how to protect your systems.

Spyware Alert: BADBAZAAR and MOONSHINE Target Civil Society and Ethnic Groups BADBAZAAR, MOONSHINE
  • Malware

Spyware Alert: BADBAZAAR and MOONSHINE Target Civil Society and Ethnic Groups

Do Son April 10, 2025 0

The NCSC UK warns of BADBAZAAR and MOONSHINE spyware targeting Uyghur, Tibetan, and Taiwanese individuals. These sophisticated trojans collect sensitive data via fake apps. Learn how to protect your devices.

High-Severity XXE Vulnerability Found in NAKIVO Backup & Replication NAKIVO XXE vulnerability CVE-2025-32406
  • Vulnerability

High-Severity XXE Vulnerability Found in NAKIVO Backup & Replication

Do Son April 10, 2025 0

A high-severity XXE vulnerability (CVE-2025-32406) has been discovered in NAKIVO Backup & Replication, allowing potential unauthorized access to sensitive data. Users are urged to upgrade to the latest version.

“Pick Your Poison” Phishing Attack: Credentials or Malware? Phishing Attack Double-edged phishing
  • Cybercriminals
  • Malware

“Pick Your Poison” Phishing Attack: Credentials or Malware?

Do Son April 10, 2025 0

A new "Pick Your Poison" phishing campaign tricks users into choosing between having their credentials stolen or infecting their systems with malware. Cofense analysis reveals how this double-edged attack uses files.fm to deliver malicious payloads.

Evolving Cybercrime: Inside the Russian-Speaking Underground Russian cybercriminal underground Cybercrime trends
  • Cybercriminals

Evolving Cybercrime: Inside the Russian-Speaking Underground

Do Son April 10, 2025 0

A Trend Micro report explores the evolving tactics of the Russian-speaking cybercriminal underground, including phishing innovations, Web3 scams, the role of ransomware, and the convergence of cyber and physical crime

Tool Poisoning Attacks: Critical Vulnerability Discovered in Model Context Protocol (MCP) Tool Poisoning Attack MCP Vulnerability
  • Vulnerability

Tool Poisoning Attacks: Critical Vulnerability Discovered in Model Context Protocol (MCP)

Do Son April 10, 2025 0

Invariant Labs reveals a critical vulnerability in the Model Context Protocol (MCP) enabling Tool Poisoning Attacks. Learn how this threat can lead to data exfiltration and AI hijacking

Google Launches Unified Security Powered by Gemini AI, Enhances Enterprise Protection Google Unified Security Gemini AI Security
  • Technology

Google Launches Unified Security Powered by Gemini AI, Enhances Enterprise Protection

Do Son April 9, 2025 0

Google introduces Unified Security, powered by Gemini AI, to streamline enterprise cybersecurity. Discover new AI security agents, enhanced threat detection, and data protection tools for comprehensive security management.

Google Launches Cloud WAN for Secure, High-Performance Enterprise Networking Cloud WAN Google Cloud
  • Technology

Google Launches Cloud WAN for Secure, High-Performance Enterprise Networking

Do Son April 9, 2025 0

Google introduces Cloud WAN, a fully managed backbone network service, providing secure and reliable connectivity for enterprises. Learn how it leverages Google's global infrastructure for enhanced performance and reduced costs.

❮ Prev Page
Next Page ❯

Search

CVE ALERTS
📈

EPSS Spike Alerts
Catch risk spikes before they make headlines.

🎯

Custom EPSS/CVSS
Set score thresholds to effectively filter noise.

🛡️

Exploit Intel
Real-world exploit signals beyond the KEV catalog.

🐙

GitHub Issues
Auto-create alert tickets without duplication.

📬

Weekly Digest
Clean summaries, eliminating email spam.

🏷️

Watchlist Groups
Tag vulnerabilities by team (Infra/AppSec/SOC).

🔀

Smart Routing
Route chat channels based on severity levels.

🚨

RBP Tracker
Early warning detection and tracking system.

Subscribe – $7/mo or try free for 14 days →

🚨 Active Exploits in the Wild

  • CVE-2026-116606CVSS 9.3
    An authentication bypass in Barracuda Email Security Gateway versions earlier than 9.4.0.030 allows an unauthenticated remote attacker to...
    Admin intel📅 Updated: Nov 10, 2026
  • CVE-2026-125350
    Use after free in XML. Reported by anonymous on 2026-11-06. Google is aware that an exploit for CVE-2026-125350...
    Admin intel📅 Updated: Nov 10, 2026
  • CVE-2026-123751CVSS 9.8
    The WP Duplicate WordPress plugin through 1.1.11 does not properly verify a request authentication value and does not...
    Watchtower Verified📅 Updated: Nov 9, 2026
  • CVE-2026-111793CVSS 4.3
    Openwave Webtop Media Transcoder does not enforce administrator-defined file type restrictions to restrict the file-types to be converted....
    Admin intel📅 Updated: Nov 9, 2026
  • CVE-2026-114713CVSS 8.6
    The labeled-response module in UnrealIRCd 6.0.0 before 6.2.7.1 does not escape the IRCv3 "label" message tag when echoing...
    Admin intel📅 Updated: Nov 9, 2026
  • CVE-2026-116779CVSS 9.8
    Summary `sofia_presence_handle_sip_i_message()` splits the To user of an inbound SIP MESSAGE on `+` and treats the left half...
    CISA KEV📅 Added to KEV: Nov 9, 2026
  • CVE-2026-102895CVSS 9.8
    GPUStack is an open-source GPU cluster manager for AI model serving and GPU instance provisioning. Prior to 2.2.0,...
    CISA KEV📅 Added to KEV: Nov 9, 2026
  • CVE-2026-123158CVSS 8.1
    sshd in OpenSSH before 10.6p2 on Linux, when musl libc is used without PAM, lacks a workaround for...
    CISA KEV📅 Added to KEV: Nov 9, 2026
Powered by CVE Watchtower

Critical Vulnerabilities

  • CVE-2026-123218CVSS 9.8
    IBM Aspera Faspex 5.0.0 through 5.0.19 could allow an authorized user to craft a specific message to bypass...
    CISA KEV📅 Added to KEV: Nov 9, 2026📅 Updated: Nov 10, 2026
  • CVE-2026-116606CVSS 9.3
    An authentication bypass in Barracuda Email Security Gateway versions earlier than 9.4.0.030 allows an unauthenticated remote attacker to...
    Admin intel📅 Updated: Nov 10, 2026
  • CVE-2026-89126CVSS 10.0
    SAP Web Dispatcher does not sufficiently validate certain network input processed by an internal component. An unauthenticated attacker...
    📅 Updated: Nov 10, 2026
  • CVE-2026-89119CVSS 9.6
    SAP Web Dispatcher and SAP NetWeaver Application Server ABAP (Internet Communication Manager) do not perform sufficient request validation...
    📅 Updated: Nov 10, 2026
  • CVE-2026-89103CVSS 10.0
    SAP Gateway activates the default Access Control List with high privileges allowing categorization of external attacker as internal...
    📅 Updated: Nov 10, 2026
  • CVE-2026-76964CVSS 10.0
    SAP NetWeaver Application Server ABAP does not sufficiently validate certain network input processed by an internal component. An...
    📅 Updated: Nov 10, 2026
  • CVE-2026-76965CVSS 9.9
    SAP NetWeaver Application Server ABAP and ABAP Platform does not perform necessary authorization checks for certain internal functionality....
    📅 Updated: Nov 10, 2026
  • CVE-2026-120017CVSS 10.0
    SAP NetWeaver AS ABAP and ABAP Platform does not perform sufficient verification of incoming authentication assertions under certain...
    📅 Updated: Nov 10, 2026
Powered by CVE Watchtower

Daily CyberSecurity

  • About SecurityOnline.info
  • Advertise with us
  • Announcement
  • Contact
  • Contributor Register
  • Login
  • Disclaimer
  • DCMA
  • Privacy Policy
  • About SecurityOnline.info
  • Advertise on SecurityOnline.info
  • Contact Us

When you purchase through links on our site, we may earn an affiliate commission. Here’s how it works

  • CVE Watchtower
  • CVE Statistics by Vendor 2026
  • Q3 2026 Report
  • Top Exploited CVEs
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube
© 2017 - 2026 Daily CyberSecurity. All Rights Reserved.