Skip to content
November 10, 2026
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube

Daily CyberSecurity

Zero-hour alerts. Unmatched analysis.

Primary Menu
  • Home
  • CVE Data
    • CVE Watchtower
    • Top Exploited CVEs
    • CVE Stats by Vendor
    • Q2 2026 Report
    • CVE Alerts
    • CVE Alert Settings
    • Pricing
  • Cyber Criminals
  • Data Leak
  • Free Tools
    • CVSS 3.1 Calculator
    • Certificate Viewer
    • DNS Lookup
    • Encoder & Hash Generator
    • IP / Subnet Calculator
    • Whois Lookup
  • Linux
  • Malware
  • Vulnerability
  • Submit Press Release
Light/Dark Button
Critical Security Flaw in ArcGIS Enterprise Exposes Admin Accounts to Remote Takeover Ollama Heap Leak CVE-2026-5757 Anritsu Vulnerability Authentication Bypass Gootloader Malware Malformed ZIP Evasion Blender Malware, StealC V2 Lectora, XSS CVE-2025-9125 HFS RCE, Template Injection Arch Linux Malware, CHAOS RAT CVE-2024-56404 - CVE-2024-39327 CVE-2025-2538
  • Vulnerability

Critical Security Flaw in ArcGIS Enterprise Exposes Admin Accounts to Remote Takeover

Do Son March 22, 2025 0

Explore the critical CVE-2025-2538 vulnerability in ArcGIS Enterprise, risking unauthorized admin access and data control.

Dragon RaaS: Pro-Russian Hacktivist Group Walks the Razor’s Edge Between Cybercrime and Propaganda Dragon Team ransom note
  • Malware

Dragon RaaS: Pro-Russian Hacktivist Group Walks the Razor’s Edge Between Cybercrime and Propaganda

Do Son March 22, 2025 0

Explore the rise of Dragon RaaS, a new player in ransomware blending hacktivism with opportunistic cybercrime.

CVE-2024-10442: Synology Replication Service Vulnerability Scores Maximum CVSS Rating Synology Chat Server vulnerabilities Synology security update Synology DSM Update NAS Security Vulnerability Synology VPN Update SSL VPN Vulnerability Synology Telnet Flaw DSM Security Update Synology DSM Telnet vulnerability BeeStation Zero-Day, Pwn2Own RCE CVE-2024-11131 & CVE-2024-10442 CVE-2025-2848 Synology, NAS
  • Vulnerability

CVE-2024-10442: Synology Replication Service Vulnerability Scores Maximum CVSS Rating

Do Son March 20, 2025 0

Learn about CVE-2024-10442, a critical vulnerability in Synology's Replication Service that allows remote command execution.

Spring Security Updates Address Authorization Bypass and Password Length Vulnerabilities CVE-2024-38821 - CVE-2025-22223 and CVE-2025-22228 Spring Framework vulnerability, Spring Security
  • Vulnerability

Spring Security Updates Address Authorization Bypass and Password Length Vulnerabilities

Do Son March 20, 2025 0

Learn about the implications of CVE-2025-22223 & CVE-2025-22228 for Spring Security and how it affects method-level security enforcement.

Web Shell to Ransomware: New VMware Attack Vector Exposed by Sygnia Weaver E-cology RCE CVE-2026-22679 CVE-2026-20127 Cisco SD-WAN Exploitation AI-Driven Cyberattack ARXON Malware React Server Components Vulnerability CVE-2025-55182 FortiWeb Auth Bypass, Unauthenticated Admin Takeover RayInitiator Bootkit, LINE VIPER CVE-2025-59689 Department of the Treasury cybersecurity - CVE-2025-0108 PoC CVE-2025-31103 Dior Data Breach SK Telecom data breach, long-term intrusion
  • Vulnerability

Web Shell to Ransomware: New VMware Attack Vector Exposed by Sygnia

Do Son March 20, 2025 0

Explore the latest VMware attack methods exploiting vulnerabilities, leading to potential network-wide ransomware infections.

Critical WordPress Plugin Vulnerability Exposes Over 40,000 Websites to Code Execution Attacks CVE-2025-2505
  • Vulnerability

Critical WordPress Plugin Vulnerability Exposes Over 40,000 Websites to Code Execution Attacks

Do Son March 20, 2025 0

Learn about CVE-2025-2505, a critical vulnerability in the Age Gate plugin for WordPress that allows remote code execution.

New “Arcane Stealer” Malware Targets Gamers Through YouTube Cheats Arcane Stealer
  • Malware

New “Arcane Stealer” Malware Targets Gamers Through YouTube Cheats

Do Son March 20, 2025 0

Discover how Arcane Stealer exploits gamers by distributing malware via fake game cheat videos on YouTube.

Rust Beacon Deploys Cobalt Strike in South Korean Cyber Intrusion Campaign
  • Malware

Rust Beacon Deploys Cobalt Strike in South Korean Cyber Intrusion Campaign

Do Son March 20, 2025 0

The campaign involves the deployment of a modified version of the Cobalt Strike penetration testing tool, delivered via a Rust-compiled loader

IBM AIX Security Breach: CVE-2024-56346 (CVSS 10) & CVE-2024-56347 Explained IBM API Connect, CVE-2025-13915 IBM Privilege Escalation, CVE-2025-36356 IBM Power Systems - CVE-2024-45656 CVE-2024-49814 and CVE-2024-51450 CVE-2024-56346 and CVE-2024-56347 CVE-2025-1302
  • Vulnerability

IBM AIX Security Breach: CVE-2024-56346 (CVSS 10) & CVE-2024-56347 Explained

Do Son March 20, 2025 0

Explore the critical vulnerabilities CVE-2024-56346 and CVE-2024-56347 in IBM AIX that pose significant security risks.

VenomRAT Malware Delivered via Virtual Hard Disk Images VenomRAT Malware
  • Malware

VenomRAT Malware Delivered via Virtual Hard Disk Images

Do Son March 20, 2025 0

Explore how VenomRAT malware uses advanced techniques to bypass security and compromise systems through a virtual hard disk.

CVE-2024-23943 (CVSS 9.1): Critical Flaw Found in Industrial Communication Devices Energy Meter RCE CVE-2025-41709 ICS Exposure, Power Grid Security CVE-2025-1393 & CVE-2024-23943
  • Vulnerability

CVE-2024-23943 (CVSS 9.1): Critical Flaw Found in Industrial Communication Devices

Do Son March 20, 2025 0

Learn about CVE-2024-23943 and the critical vulnerabilities in industrial communication devices that pose major cybersecurity threats.

PoC Released: Windows Explorer CVE-2025-24071 Vulnerability Exposes NTLM Hashes CVE-2025-24071 PoC
  • Vulnerability

PoC Released: Windows Explorer CVE-2025-24071 Vulnerability Exposes NTLM Hashes

Do Son March 19, 2025 0

A proof-of-concept (PoC) for the CVE-2025-24071 vulnerability is available on GitHub, and a Metasploit module for this flaw is also available

CVE-2025-23120 (CVSS 9.9): Critical RCE Vulnerability Discovered in Veeam Backup & Replication CVE-2024-29855 CVE-2025-23120
  • Vulnerability

CVE-2025-23120 (CVSS 9.9): Critical RCE Vulnerability Discovered in Veeam Backup & Replication

Do Son March 19, 2025 0

Learn about CVE-2025-23120, a critical vulnerability in Veeam Backup & Replication with severe implications for enterprises.

ClearFake Malware Variant Exploits Web3 in New Attacks Mercenary Akula European Financial Targeting AI-Generated Malware React2Shell Exploit UAT-8837 Critical Infrastructure Attack APT36, BOSS Linux BRICKSTORM Malware, China Espionage Curly COMrades, MucorAgent Chinese APT - HTTP Client Tools Shuckworm Cyber Espionage
  • Malware

ClearFake Malware Variant Exploits Web3 in New Attacks

Do Son March 19, 2025 0

Uncover the latest variant of ClearFake malware, EtherHiding, exploiting Web3 features for advanced malicious tactics.

CISA Warns of Three Actively Exploited Security Vulnerabilities in IoT, Backup, and Enterprise Systems CVE-2024-48248
  • Vulnerability

CISA Warns of Three Actively Exploited Security Vulnerabilities in IoT, Backup, and Enterprise Systems

Do Son March 19, 2025 0

Explore the details of CVE-2024-48248 in CISA's catalog of exploited vulnerabilities and protect your systems effectively.

Microsoft Uncovers Sophisticated StilachiRAT Malware GuLoader Malware CloudEye Obfuscation npm, malware Ethereum, npm supply chain OAST techniques StilachiRAT macOS Malware PasivRobber
  • Malware

Microsoft Uncovers Sophisticated StilachiRAT Malware

Do Son March 19, 2025 0

Uncover the severe impact of StilachiRAT, a new remote access trojan targeting systems and cryptocurrency wallets.

Multiple Vulnerabilities Patched in Dell SmartFabric OS10 Software Dell DD OS Vulnerability, Authentication Bypass Dell SmartFabric OS10 Vulnerabilities
  • Vulnerability

Multiple Vulnerabilities Patched in Dell SmartFabric OS10 Software

Do Son March 19, 2025 0

Learn about Dell SmartFabric OS10 vulnerabilities and the importance of the latest security update for version 10.5.6.x.

JPHP Interpreter Used to Distribute Downloader Malware JPHP Malware
  • Malware

JPHP Interpreter Used to Distribute Downloader Malware

Do Son March 19, 2025 0

Uncover the risks associated with JPHP and how it exploits the JPHP interpreter for malicious activities.

Steganographic Campaign Distributes Multiple Malware Variants, Including Remcos and AsyncRAT Steganographic Campaign
  • Malware

Steganographic Campaign Distributes Multiple Malware Variants, Including Remcos and AsyncRAT

Do Son March 19, 2025 0

Uncover the ongoing steganographic campaign that distributes malware like Remcos RAT. Learn how it operates.

Web3 Laundering Fears: OKX Suspends Platform Amidst Scrutiny OKX Suspends Fined US market
  • Cyber Security

Web3 Laundering Fears: OKX Suspends Platform Amidst Scrutiny

Do Son March 19, 2025 0

OKX suspends operations amid allegations of facilitating money laundering for North Korean hackers. Read more about this situation.

Google Chrome Patches Critical ‘Use-After-Free’ Vulnerability in Lens (CVE-2025-2476) Amazon Ads Blocker Affiliate Link Hijacking Malicious browser extensions
  • Vulnerability

Google Chrome Patches Critical ‘Use-After-Free’ Vulnerability in Lens (CVE-2025-2476)

Do Son March 19, 2025 0

Understand the security update for CVE-2025-2476 in Google Chrome, addressing a critical vulnerability in the Lens feature.

SecPod launches Saner Cloud: A Revolutionary CNAPP For Preventive Cybersecurity DSC07167_1_17423842189imlMarwRN
  • Press Release

SecPod launches Saner Cloud: A Revolutionary CNAPP For Preventive Cybersecurity

cybernewswire March 19, 2025 0
Bengaluru, India, 19th March 2025, CyberNewsWire
Read More Read more about SecPod launches Saner Cloud: A Revolutionary CNAPP For Preventive Cybersecurity
❮ Prev Page
Next Page ❯

Search

CVE ALERTS
📈

EPSS Spike Alerts
Catch risk spikes before they make headlines.

🎯

Custom EPSS/CVSS
Set score thresholds to effectively filter noise.

🛡️

Exploit Intel
Real-world exploit signals beyond the KEV catalog.

🐙

GitHub Issues
Auto-create alert tickets without duplication.

📬

Weekly Digest
Clean summaries, eliminating email spam.

🏷️

Watchlist Groups
Tag vulnerabilities by team (Infra/AppSec/SOC).

🔀

Smart Routing
Route chat channels based on severity levels.

🚨

RBP Tracker
Early warning detection and tracking system.

Subscribe – $7/mo or try free for 14 days →

🚨 Active Exploits in the Wild

  • CVE-2026-116606CVSS 9.3
    An authentication bypass in Barracuda Email Security Gateway versions earlier than 9.4.0.030 allows an unauthenticated remote attacker to...
    Admin intel📅 Updated: Nov 10, 2026
  • CVE-2026-125350
    Use after free in XML. Reported by anonymous on 2026-11-06. Google is aware that an exploit for CVE-2026-125350...
    Admin intel📅 Updated: Nov 10, 2026
  • CVE-2026-123751CVSS 9.8
    The WP Duplicate WordPress plugin through 1.1.11 does not properly verify a request authentication value and does not...
    Watchtower Verified📅 Updated: Nov 9, 2026
  • CVE-2026-111793CVSS 4.3
    Openwave Webtop Media Transcoder does not enforce administrator-defined file type restrictions to restrict the file-types to be converted....
    Admin intel📅 Updated: Nov 9, 2026
  • CVE-2026-114713CVSS 8.6
    The labeled-response module in UnrealIRCd 6.0.0 before 6.2.7.1 does not escape the IRCv3 "label" message tag when echoing...
    Admin intel📅 Updated: Nov 9, 2026
  • CVE-2026-116779CVSS 9.8
    Summary `sofia_presence_handle_sip_i_message()` splits the To user of an inbound SIP MESSAGE on `+` and treats the left half...
    CISA KEV📅 Added to KEV: Nov 9, 2026
  • CVE-2026-102895CVSS 9.8
    GPUStack is an open-source GPU cluster manager for AI model serving and GPU instance provisioning. Prior to 2.2.0,...
    CISA KEV📅 Added to KEV: Nov 9, 2026
  • CVE-2026-123158CVSS 8.1
    sshd in OpenSSH before 10.6p2 on Linux, when musl libc is used without PAM, lacks a workaround for...
    CISA KEV📅 Added to KEV: Nov 9, 2026
Powered by CVE Watchtower

Critical Vulnerabilities

  • CVE-2026-123218CVSS 9.8
    IBM Aspera Faspex 5.0.0 through 5.0.19 could allow an authorized user to craft a specific message to bypass...
    CISA KEV📅 Added to KEV: Nov 9, 2026📅 Updated: Nov 10, 2026
  • CVE-2026-116606CVSS 9.3
    An authentication bypass in Barracuda Email Security Gateway versions earlier than 9.4.0.030 allows an unauthenticated remote attacker to...
    Admin intel📅 Updated: Nov 10, 2026
  • CVE-2026-89126CVSS 10.0
    SAP Web Dispatcher does not sufficiently validate certain network input processed by an internal component. An unauthenticated attacker...
    📅 Updated: Nov 10, 2026
  • CVE-2026-89119CVSS 9.6
    SAP Web Dispatcher and SAP NetWeaver Application Server ABAP (Internet Communication Manager) do not perform sufficient request validation...
    📅 Updated: Nov 10, 2026
  • CVE-2026-89103CVSS 10.0
    SAP Gateway activates the default Access Control List with high privileges allowing categorization of external attacker as internal...
    📅 Updated: Nov 10, 2026
  • CVE-2026-76964CVSS 10.0
    SAP NetWeaver Application Server ABAP does not sufficiently validate certain network input processed by an internal component. An...
    📅 Updated: Nov 10, 2026
  • CVE-2026-76965CVSS 9.9
    SAP NetWeaver Application Server ABAP and ABAP Platform does not perform necessary authorization checks for certain internal functionality....
    📅 Updated: Nov 10, 2026
  • CVE-2026-120017CVSS 10.0
    SAP NetWeaver AS ABAP and ABAP Platform does not perform sufficient verification of incoming authentication assertions under certain...
    📅 Updated: Nov 10, 2026
Powered by CVE Watchtower

Daily CyberSecurity

  • About SecurityOnline.info
  • Advertise with us
  • Announcement
  • Contact
  • Contributor Register
  • Login
  • Disclaimer
  • DCMA
  • Privacy Policy
  • About SecurityOnline.info
  • Advertise on SecurityOnline.info
  • Contact Us

When you purchase through links on our site, we may earn an affiliate commission. Here’s how it works

  • CVE Watchtower
  • CVE Statistics by Vendor 2026
  • Q3 2026 Report
  • Top Exploited CVEs
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube
© 2017 - 2026 Daily CyberSecurity. All Rights Reserved.