Skip to content
November 10, 2026
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube

Daily CyberSecurity

Zero-hour alerts. Unmatched analysis.

Primary Menu
  • Home
  • CVE Data
    • CVE Watchtower
    • Top Exploited CVEs
    • CVE Stats by Vendor
    • Q2 2026 Report
    • CVE Alerts
    • CVE Alert Settings
    • Pricing
  • Cyber Criminals
  • Data Leak
  • Free Tools
    • CVSS 3.1 Calculator
    • Certificate Viewer
    • DNS Lookup
    • Encoder & Hash Generator
    • IP / Subnet Calculator
    • Whois Lookup
  • Linux
  • Malware
  • Vulnerability
  • Submit Press Release
Light/Dark Button
The Rise of Quishing: QR Codes as a Gateway to Phishing Attacks QR-Code-Phishing
  • Cyber Security

The Rise of Quishing: QR Codes as a Gateway to Phishing Attacks

Do Son April 3, 2025 0

Learn about QR code phishing and how attackers are using QR codes to steal credentials through sophisticated scams.

Qilin Ransomware Attack Exploits MSP Vulnerability to Target Downstream Customers sopho
  • Malware

Qilin Ransomware Attack Exploits MSP Vulnerability to Target Downstream Customers

Do Son April 3, 2025 0

Learn about the Qilin ransomware attack that compromised an MSP and affected numerous customers through a phishing campaign.

CVE-2025-0676: High-Severity Vulnerability Threatens Moxa Network Devices CVE-2025-0676
  • Vulnerability

CVE-2025-0676: High-Severity Vulnerability Threatens Moxa Network Devices

Do Son April 2, 2025 0

Learn about CVE-2025-0676 and the security risks posed by Moxa routers. Protect your network from potential exploits.

Mozilla Monetizes Thunderbird: Thundermail and Pro Features Launch Thundermail Thunderbird Pro
  • Technology

Mozilla Monetizes Thunderbird: Thundermail and Pro Features Launch

Do Son April 2, 2025 0

Explore Thundermail, Mozilla's new email service, and see how it enhances Thunderbird with subscription-based features.

No Consent, No Choice: Microsoft Copilot’s Surprise Windows 11 LTSC Arrival Windows 11 26H1, Copilot+ PC AI content, monetization AI Code Review, Microsoft Engineering Microsoft Copilot Studio Uninstall Copilot AI Windows 11 LTSC
  • Windows

No Consent, No Choice: Microsoft Copilot’s Surprise Windows 11 LTSC Arrival

Do Son April 2, 2025 0

Discover the implications of Windows 11 LTSC Copilot installations without user consent and what it means for stability.

Nova Act Unveiled: Amazon’s AI Web Assistant Arrives Amazon Nova Act
  • Technology

Nova Act Unveiled: Amazon’s AI Web Assistant Arrives

Do Son April 2, 2025 0

Explore Nova Act, Amazon's AI-powered browser assistant designed to enhance web interactions and boost developer creativity.

€150M Fine: Apple’s Ad Dominance Under French Scrutiny Apple Spring Event 2026 Apple Intel 14A iPhone 2028, Intel Foundry Apple Silicon iPhone 18 glass cloth shortage, Nittobo T-glass Apple crisis Apple UK App Store lawsuit appeal, Apple tax £1.5bn damages Apple AI Leadership Shakeup Giannandrea Subramanya Touchscreen MacBook Pro Apple 2026 Roadmap Apple Smart Home, Desktop Robot Apple H3 Chip, AirPods Camera Apple chips, on-device AI Apple AI, retail chatbot MacBook, Affordable Foldable iPhone, Apple Strategy Apple COO, Leadership Transition DOJ Lawsuit Apple EU Policy, App Store Fees CVE-2024-23222 Apple French antitrust fine
  • Technology

€150M Fine: Apple’s Ad Dominance Under French Scrutiny

Do Son April 2, 2025 0

Learn about the €150 million Apple French antitrust fine for abusing its advertising dominance in targeted ads.

CISA Flags Apache Tomcat CVE-2025-24813 as Actively Exploited with 9.8 CVSS CVE-2025-24813 exploit
  • Vulnerability

CISA Flags Apache Tomcat CVE-2025-24813 as Actively Exploited with 9.8 CVSS

Do Son April 2, 2025 0

CVE-2025-24813 vulnerability in Apache Tomcat, now actively exploited in the wild, has landed in the CISA Known Exploited Vulnerabilities Catalog

Chrome 135: 14 Security Fixes, High-Severity CVE-2025-3066 Flaw Patched Chrome 135 CVE-2025-3066
  • Vulnerability

Chrome 135: 14 Security Fixes, High-Severity CVE-2025-3066 Flaw Patched

Do Son April 2, 2025 0

Explore the latest features in Chrome 135 including security fixes and enhancements for Windows, macOS, and Linux users.

VyOS and Debian Systems Vulnerable to Man-in-the-Middle Attacks (CVE-2025-30095) CVE-2025-30095
  • Vulnerability

VyOS and Debian Systems Vulnerable to Man-in-the-Middle Attacks (CVE-2025-30095)

Do Son April 2, 2025 0

Learn about CVE-2025-30095, a critical vulnerability in VyOS that allows man-in-the-middle attacks through SSH key misuse.

MongoDB Patches: DoS & Bypass Risks Addressed MongoDB Server vulnerability use-after-free vulnerability, CVE-2026-11933, CVE-2026-9740, CVE-2026-9750 MongoDB DoS, Pre-Authentication Vulnerability CVE-2024-7553 - MongoDB Server CVE-2025-3083, CVE-2025-3084, and CVE-2025-3085
  • Vulnerability

MongoDB Patches: DoS & Bypass Risks Addressed

Do Son April 2, 2025 0

MongoDB has released patches addressing three newly disclosed vulnerabilities that could expose deployments to DoS & authentication bypass attacks

CVE-2025-30223 (CVSS 9.3): Critical XSS Vulnerability Discovered in Beego Framework CVE-2025-30223
  • Vulnerability

CVE-2025-30223 (CVSS 9.3): Critical XSS Vulnerability Discovered in Beego Framework

Do Son April 2, 2025 0

Explore the details of CVE-2025-30223, a critical XSS vulnerability in the Beego framework impacting web applications.

Gootloader Returns with Fake Legal Document Lure via Google Ads Everon OCPP Vulnerability CVE-2026-26288 ASUSTOR ADM Vulnerability CVE-2026-24936 PrismX MX100 Vulnerability Hard-Coded Credentials Advantech Vulnerability CVE-2025-52694 Eaton UPS Companion, CVE-2025-59887 ASUS Router, Authentication Bypass ASUSTOR DLL Hijacking, Privilege Escalation OpenShift AI, Privilege Escalation GoAnywhere vulnerability CVE-2025-10035 LangChainGo, template injection DeepDiff, class pollution ToolShell Sunshine, CSRF Vulnerability KACE SMA, Critical Vulnerabilities Oracle Zero-Days - PDQ Deploy vulnerability
  • Malware

Gootloader Returns with Fake Legal Document Lure via Google Ads

Do Son April 2, 2025 0

Explore the new Gootloader tactics using Google Ads to spread malware through legal document searches and social engineering.

HijackLoader Evolves: New Modules Bring Stealth, Persistence, and Advanced VM Evasion HijackLoader Evasion Tactics
  • Malware

HijackLoader Evolves: New Modules Bring Stealth, Persistence, and Advanced VM Evasion

Do Son April 2, 2025 0

Explore the latest updates on HijackLoader malware and its stealthy modules designed to evade detection and expand capabilities.

8 Zero-Day Vulnerabilities Uncovered in Netgear WNR854T Router Netgear WNR854T vulnerability Vulnerabilities
  • Vulnerability

8 Zero-Day Vulnerabilities Uncovered in Netgear WNR854T Router

Do Son April 2, 2025 0

Explore the Netgear WNR854T vulnerability report detailing eight zero-day flaws that threaten network security.

PostgreSQL Servers Hacked: 1,500+ Cloud Systems Mining Crypto via CPU_HU Exploit Jupyter Notebooks
  • Malware

PostgreSQL Servers Hacked: 1,500+ Cloud Systems Mining Crypto via CPU_HU

Do Son April 2, 2025 0

Uncover the dangers of fileless cryptominers that exploit PostgreSQL servers. Learn how JINX-0126 stealthily operates.

CVE-2025-30065 (CVSS 10): Critical Vulnerability Discovered in Apache Parquet Java CVE-2025-30065 Apache Parquet, CVE-2025-46762
  • Vulnerability

CVE-2025-30065 (CVSS 10): Critical Vulnerability Discovered in Apache Parquet Java

Do Son April 2, 2025 0

Learn about CVE-2025-30065, a critical vulnerability in Apache Parquet that poses risks to Java library users.

SmokeLoader Malware Deployed in Stealthy Campaign Targeting Major Banks SmokeLoader campaign
  • Malware

SmokeLoader Malware Deployed in Stealthy Campaign Targeting Major Banks

Do Son April 2, 2025 0

Explore the dangers of SmokeLoader malware and its stealthy techniques in recent cyber attacks targeting major banks.

Critical Vulnerabilities Threaten IBM App Connect Enterprise IBM API Connect, CVE-2025-13915 IBM Privilege Escalation, CVE-2025-36356 IBM Power Systems - CVE-2024-45656 CVE-2024-49814 and CVE-2024-51450 CVE-2024-56346 and CVE-2024-56347 CVE-2025-1302
  • Vulnerability

Critical Vulnerabilities Threaten IBM App Connect Enterprise

Do Son April 2, 2025 0

Learn about CVE-2025-1302 vulnerability in IBM App Connect Enterprise and its implications for remote code execution.

Google Patches ImageRunner: Fixing Critical Cloud Run Container Access Flaw Railway app Google Cloud suspension Google Cloud CDN Interconnect pricing 2026, GCP data transfer cost increase Google Cloud Disrupted ImageRunner Alphabet earnings, Google AI
  • Vulnerability

Google Patches ImageRunner: Fixing Critical Cloud Run Container Access Flaw

Do Son April 1, 2025 0

Explore the ImageRunner vulnerability in Google Cloud Platform and its implications for cloud security. Learn more about permissions.

VMware Addresses Local Privilege Escalation Vulnerability (CVE-2025-22231) VMware Fusion and Workstation Now Free CVE-2025-22231
  • Vulnerability

VMware Addresses Local Privilege Escalation Vulnerability (CVE-2025-22231)

Do Son April 1, 2025 0

Learn about CVE-2025-22231 and how VMware patches address this local privilege escalation vulnerability affecting multiple products.

Windows 11 OOBE: Registry Hack Bypasses Microsoft Account bypass Windows OOBE
  • Technology
  • Windows

Windows 11 OOBE: Registry Hack Bypasses Microsoft Account

Do Son April 1, 2025 0

Explore effective techniques to bypass Windows OOBE despite the recent changes to the Microsoft account requirements.

❮ Prev Page
Next Page ❯

Search

CVE ALERTS
📈

EPSS Spike Alerts
Catch risk spikes before they make headlines.

🎯

Custom EPSS/CVSS
Set score thresholds to effectively filter noise.

🛡️

Exploit Intel
Real-world exploit signals beyond the KEV catalog.

🐙

GitHub Issues
Auto-create alert tickets without duplication.

📬

Weekly Digest
Clean summaries, eliminating email spam.

🏷️

Watchlist Groups
Tag vulnerabilities by team (Infra/AppSec/SOC).

🔀

Smart Routing
Route chat channels based on severity levels.

🚨

RBP Tracker
Early warning detection and tracking system.

Subscribe – $7/mo or try free for 14 days →

🚨 Active Exploits in the Wild

  • CVE-2026-116606CVSS 9.3
    An authentication bypass in Barracuda Email Security Gateway versions earlier than 9.4.0.030 allows an unauthenticated remote attacker to...
    Admin intel📅 Updated: Nov 10, 2026
  • CVE-2026-125350
    Use after free in XML. Reported by anonymous on 2026-11-06. Google is aware that an exploit for CVE-2026-125350...
    Admin intel📅 Updated: Nov 10, 2026
  • CVE-2026-123751CVSS 9.8
    The WP Duplicate WordPress plugin through 1.1.11 does not properly verify a request authentication value and does not...
    Watchtower Verified📅 Updated: Nov 9, 2026
  • CVE-2026-111793CVSS 4.3
    Openwave Webtop Media Transcoder does not enforce administrator-defined file type restrictions to restrict the file-types to be converted....
    Admin intel📅 Updated: Nov 9, 2026
  • CVE-2026-114713CVSS 8.6
    The labeled-response module in UnrealIRCd 6.0.0 before 6.2.7.1 does not escape the IRCv3 "label" message tag when echoing...
    Admin intel📅 Updated: Nov 9, 2026
  • CVE-2026-116779CVSS 9.8
    Summary `sofia_presence_handle_sip_i_message()` splits the To user of an inbound SIP MESSAGE on `+` and treats the left half...
    CISA KEV📅 Added to KEV: Nov 9, 2026
  • CVE-2026-102895CVSS 9.8
    GPUStack is an open-source GPU cluster manager for AI model serving and GPU instance provisioning. Prior to 2.2.0,...
    CISA KEV📅 Added to KEV: Nov 9, 2026
  • CVE-2026-123158CVSS 8.1
    sshd in OpenSSH before 10.6p2 on Linux, when musl libc is used without PAM, lacks a workaround for...
    CISA KEV📅 Added to KEV: Nov 9, 2026
Powered by CVE Watchtower

Critical Vulnerabilities

  • CVE-2026-123218CVSS 9.8
    IBM Aspera Faspex 5.0.0 through 5.0.19 could allow an authorized user to craft a specific message to bypass...
    CISA KEV📅 Added to KEV: Nov 9, 2026📅 Updated: Nov 10, 2026
  • CVE-2026-116606CVSS 9.3
    An authentication bypass in Barracuda Email Security Gateway versions earlier than 9.4.0.030 allows an unauthenticated remote attacker to...
    Admin intel📅 Updated: Nov 10, 2026
  • CVE-2026-89126CVSS 10.0
    SAP Web Dispatcher does not sufficiently validate certain network input processed by an internal component. An unauthenticated attacker...
    📅 Updated: Nov 10, 2026
  • CVE-2026-89119CVSS 9.6
    SAP Web Dispatcher and SAP NetWeaver Application Server ABAP (Internet Communication Manager) do not perform sufficient request validation...
    📅 Updated: Nov 10, 2026
  • CVE-2026-89103CVSS 10.0
    SAP Gateway activates the default Access Control List with high privileges allowing categorization of external attacker as internal...
    📅 Updated: Nov 10, 2026
  • CVE-2026-76964CVSS 10.0
    SAP NetWeaver Application Server ABAP does not sufficiently validate certain network input processed by an internal component. An...
    📅 Updated: Nov 10, 2026
  • CVE-2026-76965CVSS 9.9
    SAP NetWeaver Application Server ABAP and ABAP Platform does not perform necessary authorization checks for certain internal functionality....
    📅 Updated: Nov 10, 2026
  • CVE-2026-120017CVSS 10.0
    SAP NetWeaver AS ABAP and ABAP Platform does not perform sufficient verification of incoming authentication assertions under certain...
    📅 Updated: Nov 10, 2026
Powered by CVE Watchtower

Daily CyberSecurity

  • About SecurityOnline.info
  • Advertise with us
  • Announcement
  • Contact
  • Contributor Register
  • Login
  • Disclaimer
  • DCMA
  • Privacy Policy
  • About SecurityOnline.info
  • Advertise on SecurityOnline.info
  • Contact Us

When you purchase through links on our site, we may earn an affiliate commission. Here’s how it works

  • CVE Watchtower
  • CVE Statistics by Vendor 2026
  • Q3 2026 Report
  • Top Exploited CVEs
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube
© 2017 - 2026 Daily CyberSecurity. All Rights Reserved.