Skip to content
November 10, 2026
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube

Daily CyberSecurity

Zero-hour alerts. Unmatched analysis.

Primary Menu
  • Home
  • CVE Data
    • CVE Watchtower
    • Top Exploited CVEs
    • CVE Stats by Vendor
    • Q2 2026 Report
    • CVE Alerts
    • CVE Alert Settings
    • Pricing
  • Cyber Criminals
  • Data Leak
  • Free Tools
    • CVSS 3.1 Calculator
    • Certificate Viewer
    • DNS Lookup
    • Encoder & Hash Generator
    • IP / Subnet Calculator
    • Whois Lookup
  • Linux
  • Malware
  • Vulnerability
  • Submit Press Release
Light/Dark Button
SHELBY Malware Abuses GitHub for Control and Data Theft SHELBY Malware
  • Malware

SHELBY Malware Abuses GitHub for Control and Data Theft

Do Son March 31, 2025 0

Uncover the SHELBY Malware, a sophisticated threat using GitHub for command-and-control in targeted enterprise attacks.

Mitel Addresses High Severity XSS Vulnerability in MiContact Center Business CVE-2024-41714 - CVE-2025-23092
  • Vulnerability

Mitel Addresses High Severity XSS Vulnerability in MiContact Center Business

Do Son March 31, 2025 0

Mitel warns of CVE-2025-23092, a reflected cross-site scripting vulnerability in MiContact Center Business. Learn more.

Warning: Discord’s API Exploited for Malicious Takeover Discord RAT
  • Malware

Warning: Discord’s API Exploited for Malicious Takeover

Do Son March 31, 2025 0

Explore the dangers of RAT, a Python-based Discord Trojan exploited by cybercriminals on popular gaming platforms.

Ubuntu Security Alert: Three Ways to Bypass User Namespace Restrictions Ubuntu 26.10 Stonking Stingray Ubuntu Security Alert: Three Ways to Bypass User Namespace Restrictions
  • Linux
  • Vulnerability

Ubuntu Security Alert: Three Ways to Bypass User Namespace Restrictions

Do Son March 31, 2025 0

Explore the Ubuntu Security issues revealed by Qualys, highlighting three bypass methods for unprivileged user namespace restrictions.

Russian Intelligence Impersonates CIA in Phishing Attacks Russian Intelligence
  • Cyber Security

Russian Intelligence Impersonates CIA in Phishing Attacks

Do Son March 31, 2025 0

Uncover the threats posed by Russian Intelligence through a phishing campaign that targets pro-Ukraine citizens and defectors.

Python-Powered Triton RAT Exfiltrates Data via Telegram and Evades Analysis Triton RAT
  • Malware

Python-Powered Triton RAT Exfiltrates Data via Telegram and Evades Analysis

Do Son March 31, 2025 0

Explore the Triton RAT, a Python-based remote access tool with powerful malicious capabilities and control via Telegram.

GPU-Powered Evasion: Unpacking the Sophisticated CoffeeLoader Malware KTLVdoor backdoor - CoffeeLoader Malware
  • Malware

GPU-Powered Evasion: Unpacking the Sophisticated CoffeeLoader Malware

Do Son March 31, 2025 0

Uncover the nature of CoffeeLoader, a sophisticated malware that uses advanced techniques to bypass endpoint security.

Why Home Battery Backup and Solar Generators Are Essential in Today’s World ISO 27001
  • Technique

Why Home Battery Backup and Solar Generators Are Essential in Today’s World

Do Son March 30, 2025 0
Electricity is something most people depend on without thinking—until it’s gone. From sudden power outages to remote...
Read More Read more about Why Home Battery Backup and Solar Generators Are Essential in Today’s World
Lucid: The Rising Threat of Phishing-as-a-Service Lucid PhAAS platform XinXin
  • Cyber Security

Lucid: The Rising Threat of Phishing-as-a-Service

Do Son March 30, 2025 0

Explore Lucid, a Phishing-as-a-Service platform enabling cybercriminals to launch large-scale phishing campaigns.

CVE-2025-2294 Targets WordPress Plugin with 90,000+ Active Installs CVE-2025-2294
  • Vulnerability

CVE-2025-2294 Targets WordPress Plugin with 90,000+ Active Installs

Do Son March 30, 2025 0

Learn about CVE-2025-2294, a severe local file inclusion vulnerability in the Kubio AI Page Builder for WordPress.

PJobRAT’s Evolution: New Campaign Steals Data from Android Screenshots from the interface of the malicious SaangalLite app
  • Malware

PJobRAT’s Evolution: New Campaign Steals Data from Android

Do Son March 30, 2025 0

Explore the dangers of PJobRAT, an Android Remote Access Trojan targeting military personnel and stealing sensitive information.

Minimalist BSOD: Windows 11 Changes Crash Screen Design Windows BOSD
  • Windows

Minimalist BSOD: Windows 11 Changes Crash Screen Design

Do Son March 29, 2025 0

Explore the new design of the Windows BOSD in the latest Windows 11 update, featuring a minimalist aesthetic and error codes.

Google Changes Android: What It Means for Developers Android Zero-Click RCE CVE-2026-0073 Android sideloading CVE-2024-43096, CVE-2024-43770, CVE-2024-43771, CVE-2024-49747 and, CVE-2024-49748
  • Android
  • Technology

Google Changes Android: What It Means for Developers

Do Son March 29, 2025 0

Learn about Google's shift to a single internal development approach for Android, impacting future updates and releases.

Microsoft’s “Startup Boost”: Faster Office, Higher Memory Use Office 2019 Mac read only Microsoft Office Startup Boost Office 2016 update KB5002700
  • Technology

Microsoft’s “Startup Boost”: Faster Office, Higher Memory Use

Do Son March 29, 2025 0

Discover the Microsoft Office Startup Boost and how it accelerates application launches while consuming additional memory.

CISA Warns of RESURGE Malware: Exploiting Ivanti Vulnerability NTLM Vulnerabilities, CVE-2024-43451 CVE-2024-37361 - RESURGE Malware
  • Malware
  • Vulnerability

CISA Warns of RESURGE Malware: Exploiting Ivanti Vulnerability

Do Son March 29, 2025 0

Discover the implications of RESURGE malware as described by CISA, including its methods of escalating permissions and web shell usage.

VMware Sues Siemens: Unlicensed Software Use Alleged VMware Lawsuit Siemens
  • Technology

VMware Sues Siemens: Unlicensed Software Use Alleged

Do Son March 29, 2025 0

VMware has filed a lawsuit against Siemens for unauthorized use of its software products. Discover the details of the case.

SquareX Discloses Browser-Native Ransomware that Puts Millions at Risk SquareX_Browser-Native_Ransomware_1200x720px_CN_17429575245ugV3DPkdm
  • Press Release

SquareX Discloses Browser-Native Ransomware that Puts Millions at Risk

cybernewswire March 28, 2025 0
Palo Alto, USA, 28th March 2025, CyberNewsWire
Read More Read more about SquareX Discloses Browser-Native Ransomware that Puts Millions at Risk
5 Common Ways to Find Hidden Spy Apps on Android (and How to Remove Them) Img_2025_03_28_17_08_08
  • Technique

5 Common Ways to Find Hidden Spy Apps on Android (and How to Remove Them)

Do Son March 28, 2025 0
One of our biggest fears is that our phone gets hacked or that someone is spying on...
Read More Read more about 5 Common Ways to Find Hidden Spy Apps on Android (and How to Remove Them)
JAMining launches free BTC cloud mining service to create a new model of passive income in cryptocurrency Img_2025_03_28_14_08_30
  • Technique

JAMining launches free BTC cloud mining service to create a new model of passive income in cryptocurrency

Do Son March 28, 2025 0
JAMining’s revolutionary free BTC cloud mining service provides users with a simple and efficient way to earn...
Read More Read more about JAMining launches free BTC cloud mining service to create a new model of passive income in cryptocurrency
CVE-2025-31103: Zero-Day Vulnerability Discovered in a-blog cms, Act Now to Protect Your Web Server Weaver E-cology RCE CVE-2026-22679 CVE-2026-20127 Cisco SD-WAN Exploitation AI-Driven Cyberattack ARXON Malware React Server Components Vulnerability CVE-2025-55182 FortiWeb Auth Bypass, Unauthenticated Admin Takeover RayInitiator Bootkit, LINE VIPER CVE-2025-59689 Department of the Treasury cybersecurity - CVE-2025-0108 PoC CVE-2025-31103 Dior Data Breach SK Telecom data breach, long-term intrusion
  • Vulnerability

CVE-2025-31103: Zero-Day Vulnerability Discovered in a-blog cms, Act Now to Protect Your Web Server

Do Son March 28, 2025 0

Learn about CVE-2025-31103 and its impact on a-blog cms, highlighting the severe risks of untrusted data deserialization.

Critical Vulnerability Discovered in Apache Pinot: Authentication Bypass Exposes Systems to Severe Risk CVE-2024-56325 Apache Pinot vulnerability
  • Vulnerability

Critical Vulnerability Discovered in Apache Pinot: Authentication Bypass Exposes Systems to Severe Risk

Do Son March 28, 2025 0

Learn about CVE-2024-56325, a critical authentication bypass vulnerability in Apache Pinot that poses serious security risks.

Securing the Web: Chrome’s Push for a More Robust PKI Chrome 148 lazy loading Chrome for Linux ARM64 Chrome 145 Update Chrome Security Fixes Chrome Security Update CVE-2026-1220 Chrome 144 Security Update CVE-2026-0899 Chrome Memory Safety, WebGPU UAF Chrome V8 Type Confusion, Google Updater Flaw Chrome V8 Flaw, CVE-2025-13042 Chrome V8, Type Confusion, Chrome 142 Update Chrome V8 Flaw, CVE-2025-12036 Chrome 141, WebGPU Overflow Google Chrome preloading Chrome, V8 vulnerability CVE-2025-9132 Chrome Security Update, Use-After-Free Chrome V8, Type Confusion Chrome Telemetry, Windows 10 EOL Microsoft Family Safety, Chrome Blocking Chrome Security Update, High-Severity Google Chrome, Antitrust CVE-2024-10487 and CVE-2024-10488 Google Chrome Root Program Chrome Update, CVE-2025-3619 Chrome Acquisition, Perplexity.ai
  • Technology

Securing the Web: Chrome’s Push for a More Robust PKI

Do Son March 28, 2025 0

Learn how the Google Chrome Root Program strengthens the Public Key Infrastructure and boosts online security practices.

❮ Prev Page
Next Page ❯

Search

CVE ALERTS
📈

EPSS Spike Alerts
Catch risk spikes before they make headlines.

🎯

Custom EPSS/CVSS
Set score thresholds to effectively filter noise.

🛡️

Exploit Intel
Real-world exploit signals beyond the KEV catalog.

🐙

GitHub Issues
Auto-create alert tickets without duplication.

📬

Weekly Digest
Clean summaries, eliminating email spam.

🏷️

Watchlist Groups
Tag vulnerabilities by team (Infra/AppSec/SOC).

🔀

Smart Routing
Route chat channels based on severity levels.

🚨

RBP Tracker
Early warning detection and tracking system.

Subscribe – $7/mo or try free for 14 days →

🚨 Active Exploits in the Wild

  • CVE-2026-116606CVSS 9.3
    An authentication bypass in Barracuda Email Security Gateway versions earlier than 9.4.0.030 allows an unauthenticated remote attacker to...
    Admin intel📅 Updated: Nov 10, 2026
  • CVE-2026-125350
    Use after free in XML. Reported by anonymous on 2026-11-06. Google is aware that an exploit for CVE-2026-125350...
    Admin intel📅 Updated: Nov 10, 2026
  • CVE-2026-123751CVSS 9.8
    The WP Duplicate WordPress plugin through 1.1.11 does not properly verify a request authentication value and does not...
    Watchtower Verified📅 Updated: Nov 9, 2026
  • CVE-2026-111793CVSS 4.3
    Openwave Webtop Media Transcoder does not enforce administrator-defined file type restrictions to restrict the file-types to be converted....
    Admin intel📅 Updated: Nov 9, 2026
  • CVE-2026-114713CVSS 8.6
    The labeled-response module in UnrealIRCd 6.0.0 before 6.2.7.1 does not escape the IRCv3 "label" message tag when echoing...
    Admin intel📅 Updated: Nov 9, 2026
  • CVE-2026-116779CVSS 9.8
    Summary `sofia_presence_handle_sip_i_message()` splits the To user of an inbound SIP MESSAGE on `+` and treats the left half...
    CISA KEV📅 Added to KEV: Nov 9, 2026
  • CVE-2026-102895CVSS 9.8
    GPUStack is an open-source GPU cluster manager for AI model serving and GPU instance provisioning. Prior to 2.2.0,...
    CISA KEV📅 Added to KEV: Nov 9, 2026
  • CVE-2026-123158CVSS 8.1
    sshd in OpenSSH before 10.6p2 on Linux, when musl libc is used without PAM, lacks a workaround for...
    CISA KEV📅 Added to KEV: Nov 9, 2026
Powered by CVE Watchtower

Critical Vulnerabilities

  • CVE-2026-123218CVSS 9.8
    IBM Aspera Faspex 5.0.0 through 5.0.19 could allow an authorized user to craft a specific message to bypass...
    CISA KEV📅 Added to KEV: Nov 9, 2026📅 Updated: Nov 10, 2026
  • CVE-2026-116606CVSS 9.3
    An authentication bypass in Barracuda Email Security Gateway versions earlier than 9.4.0.030 allows an unauthenticated remote attacker to...
    Admin intel📅 Updated: Nov 10, 2026
  • CVE-2026-89126CVSS 10.0
    SAP Web Dispatcher does not sufficiently validate certain network input processed by an internal component. An unauthenticated attacker...
    📅 Updated: Nov 10, 2026
  • CVE-2026-89119CVSS 9.6
    SAP Web Dispatcher and SAP NetWeaver Application Server ABAP (Internet Communication Manager) do not perform sufficient request validation...
    📅 Updated: Nov 10, 2026
  • CVE-2026-89103CVSS 10.0
    SAP Gateway activates the default Access Control List with high privileges allowing categorization of external attacker as internal...
    📅 Updated: Nov 10, 2026
  • CVE-2026-76964CVSS 10.0
    SAP NetWeaver Application Server ABAP does not sufficiently validate certain network input processed by an internal component. An...
    📅 Updated: Nov 10, 2026
  • CVE-2026-76965CVSS 9.9
    SAP NetWeaver Application Server ABAP and ABAP Platform does not perform necessary authorization checks for certain internal functionality....
    📅 Updated: Nov 10, 2026
  • CVE-2026-120017CVSS 10.0
    SAP NetWeaver AS ABAP and ABAP Platform does not perform sufficient verification of incoming authentication assertions under certain...
    📅 Updated: Nov 10, 2026
Powered by CVE Watchtower

Daily CyberSecurity

  • About SecurityOnline.info
  • Advertise with us
  • Announcement
  • Contact
  • Contributor Register
  • Login
  • Disclaimer
  • DCMA
  • Privacy Policy
  • About SecurityOnline.info
  • Advertise on SecurityOnline.info
  • Contact Us

When you purchase through links on our site, we may earn an affiliate commission. Here’s how it works

  • CVE Watchtower
  • CVE Statistics by Vendor 2026
  • Q3 2026 Report
  • Top Exploited CVEs
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube
© 2017 - 2026 Daily CyberSecurity. All Rights Reserved.