Skip to content
November 10, 2026
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube

Daily CyberSecurity

Zero-hour alerts. Unmatched analysis.

Primary Menu
  • Home
  • CVE Data
    • CVE Watchtower
    • Top Exploited CVEs
    • CVE Stats by Vendor
    • Q2 2026 Report
    • CVE Alerts
    • CVE Alert Settings
    • Pricing
  • Cyber Criminals
  • Data Leak
  • Free Tools
    • CVSS 3.1 Calculator
    • Certificate Viewer
    • DNS Lookup
    • Encoder & Hash Generator
    • IP / Subnet Calculator
    • Whois Lookup
  • Linux
  • Malware
  • Vulnerability
  • Submit Press Release
Light/Dark Button
Retaining Your Talent: Building a Development Plan That Works build
  • Technique

Retaining Your Talent: Building a Development Plan That Works

Do Son March 14, 2025 0
What’s the secret to keeping your best employees? How do you ensure that the talented individuals who...
Read More Read more about Retaining Your Talent: Building a Development Plan That Works
Google, Apple, and Microsoft Rush to Patch Actively Exploited Zero-Day Vulnerability Google Zero-Day Vulnerability
  • Vulnerability

Google, Apple, and Microsoft Rush to Patch Actively Exploited Zero-Day Vulnerability

Do Son March 13, 2025 0

Learn how the Google Zero-Day Vulnerability is actively exploited, prompting critical updates from Google, Apple, and Microsoft.

Juniper Issues Urgent Fix for Actively Exploited Junos OS Flaw – CVE-2025-21590 GUARDIANWALL MailSuite Exploit CVE-2026-32661 FileZen Vulnerability CVE-2026-25108 Ivanti EPMM Vulnerability Dormant Backdoor Fortinet Authentication Bypass CVE-2026-24858 VMware vCenter Server Flaw CVE-2025-21590
  • Vulnerability

Juniper Issues Urgent Fix for Actively Exploited Junos OS Flaw – CVE-2025-21590

Do Son March 13, 2025 0

Learn about CVE-2025-21590, an actively exploited vulnerability in Junos OS that allows local code execution for attackers.

JSPSpy Webshells Found with Custom File Management Tool JSPSpy web shell
  • Malware

JSPSpy Webshells Found with Custom File Management Tool

Do Son March 13, 2025 0

Explore the JSPSpy web shell discovery, revealing a rebranded File Browser that raises security concerns for compromised servers.

Bitdefender BOX v1 Vulnerabilities Expose Smart Homes to Remote Attacks CVE-2024-13871 & CVE-2024-13872
  • Vulnerability

Bitdefender BOX v1 Vulnerabilities Expose Smart Homes to Remote Attacks

Do Son March 13, 2025 0

Learn about CVE-2024-13871 & CVE-2024-13872 and critical vulnerabilities in Bitdefender BOX v1 that affect household security devices.

Ramadan Scam Alert: Crypto Traps, Fake Giveaways Explode Crypto Drain Conspiracy, Malicious MobileConfig phone phishing Cryptocurrency Phishing
  • Cyber Security

Ramadan Scam Alert: Crypto Traps, Fake Giveaways Explode

Do Son March 13, 2025 0

Beware of the Ramadan scam trend. Learn how cybercriminals exploit generosity with fake donations and giveaways.

Cisco Alerts on Public Disclosure of CVE-2025-20115 – BGP Flaw Puts Networks at Risk Cisco ISE Root Escalation * Read-Only Admin Exploit Cisco Secure FMC Vulnerability CVE-2026-20131 Cisco Meeting Management Vulnerability CVE-2026-20098 Cisco vulnerability, RCE flaw CVE-2025-20265 Cisco Meraki, VPN Vulnerability Cisco Nexus Dashboard - CVE-2024-20424 CVE-2025-20115 Cisco Vulnerability CVE-2018-0171 Privilege Escalation Cisco Unified Intelligence Center
  • Vulnerability

Cisco Alerts on Public Disclosure of CVE-2025-20115 – BGP Flaw Puts Networks at Risk

Do Son March 13, 2025 0

Learn about CVE-2025-20115: a Cisco security advisory on a denial-of-service vulnerability in BGP implementation.

New Sobolan Malware Campaign Targets Jupyter Notebooks and Cloud-Native Environments Sobolan malware
  • Malware

New Sobolan Malware Campaign Targets Jupyter Notebooks and Cloud-Native Environments

Do Son March 13, 2025 0

Discover the dangers of Sobolan Malware targeting Jupyter Notebooks and compromising cloud-native infrastructure.

RMM Tools: The New Weapon of Choice for Cybercriminals Weapon RMM Tools
  • Cyber Security

RMM Tools: The New Weapon of Choice for Cybercriminals

Do Son March 13, 2025 0

Explore how RMM tools are increasingly used by cybercriminals in email attacks to gain initial system access.

Lazarus Breaches IIS: Web Shells & Evolving C2 Tactics Unveiled RedHat Hacker web shell
  • Cyber Security

Lazarus Breaches IIS: Web Shells & Evolving C2 Tactics Unveiled

Do Son March 13, 2025 0

Explore the RedHat Hacker and the Lazarus Group’s recent attack strategies on Windows web servers for command-and-control infrastructure.

Keras Deep Learning Framework Hit by Arbitrary Code Execution Vulnerability (CVE-2025-1550) CVE-2025-1550
  • Vulnerability

Keras Deep Learning Framework Hit by Arbitrary Code Execution Vulnerability (CVE-2025-1550)

Do Son March 13, 2025 0

Explore the implications of CVE-2025-1550 affecting Keras, including details on the security vulnerability and its impacts.

XCSSET Malware Returns with Enhanced Obfuscation and Persistence Techniques XCSSET macOS malware
  • Malware

XCSSET Malware Returns with Enhanced Obfuscation and Persistence Techniques

Do Son March 13, 2025 0

Learn about the new XCSSET macOS malware variant targeting developers. Discover its risks and advanced infection methods.

Aleksej Besciokov, Garantex Co-founder, Faces Extradition After Arrest Aleksej Besciokov
  • Cyber Security

Aleksej Besciokov, Garantex Co-founder, Faces Extradition After Arrest

Do Son March 13, 2025 0

Aleksej Besciokov arrested in India, accused of aiding ransomware groups through his crypto exchange Garantex. Learn more.

Microsoft Patches 2-Year-Old Windows Kernel Flaw CVE-2025-24983 After Exploitation Cisco SD-WAN Vulnerability CVE-2026-20133 FortiGate Compromise Ivanti EPMM Zero-Day CVE-2026-1281 SmarterMail Vulnerability Storm-2603 WatchGuard Zero-Day, IKEv2 Out-of-Bounds Write Cisco Zero-Day, UAT-9686 Chinese APT FortiWeb RCE Exploitation CVE-2025-58034 VMware Zero-Day, Privilege Escalation Sitecore, remote code execution CVE-2025-53690 Windows CLFS, Privilege Escalation CVE-2024-47575 & CVE-2024-11120 CVE-2025-24983 vulnerability
  • Vulnerability

Microsoft Patches 2-Year-Old Windows Kernel Flaw CVE-2025-24983 After Exploitation

Do Son March 13, 2025 0

Learn how Microsoft tackled CVE-2025-24983 flaw after two years of exploitation in Windows NT kernel. Essential cybersecurity info.

Windows 11 Printing Problems: Microsoft Confirms Spontaneous Printing Bug Windows 11 app updates Windows Insider preview build, Calculator app update, built-in Windows apps Windows 11 KB5089549 network lag Windows 11 Home to Pro Education upgrade Windows 11 Start menu update Windows 11 update KB5079391 Windows 11 KB5085516 OOB update Windows 11 C drive permission error Windows 11 C drive access denied Windows native NVMe driver UEFI Secure Boot certificate rotation Windows 11 printer driver policy Windows 11 printer driver deprecation Windows 11 Build 26300 Sysmon Windows 11 Storage settings restriction Windows 11 Build 26300.7674, Windows Insider channel migration 2026 Windows 11 Update Fix KB5073455 shutdown bug, Secure Launch restart loop Windows 11 File Explorer search performance, Search Indexer RAM usage fix Windows 11 Gaming PC Specs, NVMe DirectStorage Windows 10 End of Support Windows 11 Slow Adoption Windows 11 Crash Loop KB5062553 Bug Update and Shut Down, KB5067036 Windows authentication, Kerberos bug Windows 11 fix, localhost bug Windows 11 Update Restart, Update and Shut Down Windows SMBv1 Windows 11 Arm, Easy Anti-Cheat Windows 11 error, Pluton Windows 11 24H2, Easy Anti-Cheat Windows Firewall Bug, Microsoft Update Error Windows 11, JScript9Legacy Windows Activation, TSforge Windows 11 Update, Firewall Error Windows 11 25H2, Annual Update Windows Resiliency Initiative, Kernel Security Windows 11 Upgrade, ESU Program Windows 11 Recall, Data Export Windows 11 Easy Anti-Cheat Windows 11 Update, Cumulative Update Windows Update, ACPI.sys Windows Updates, Enterprise Software Windows 11 Start Data Encryption Standard Printing Problems Windows 11 updates Estimated installation time Smart App Control, Windows 11 security
  • Windows

Windows 11 Printing Problems: Microsoft Confirms Spontaneous Printing Bug

Do Son March 12, 2025 0

Discover solutions for Windows 11 printing problems, including unexpected print jobs in affected versions and printer types.

Cisco Issues High-Severity Security Alert for IOS XR Software (CVE-2025-20138) CVE-2022-20923 CVE-2025-20138
  • Vulnerability

Cisco Issues High-Severity Security Alert for IOS XR Software (CVE-2025-20138)

Do Son March 12, 2025 0

Explore CVE-2025-20138, a high-severity vulnerability in Cisco IOS XR Software with a CVSS score of 8.8 that allows root access.

GitLab Urgently Patches Critical Authentication Bypass Flaws – CVE-2025-25291 & CVE-2025-25292 GitLab security CVE-2025-25291 and CVE-2025-25292
  • Vulnerability

GitLab Urgently Patches Critical Authentication Bypass Flaws – CVE-2025-25291 & CVE-2025-25292

Do Son March 12, 2025 0

Two of the most severe issues, tracked as CVE-2025-25291 and CVE-2025-25292, reside in the ruby-saml library, which GitLab uses for SAML SSO authentication

FBI, CISA, and MS-ISAC Warn Organizations About Medusa Ransomware Attacks Fortinet EMS - CVE-2023-48788 Medusa Ransomware TTPs
  • Malware

FBI, CISA, and MS-ISAC Warn Organizations About Medusa Ransomware Attacks

Do Son March 12, 2025 0

Understand the Medusa ransomware TTPs and protect your organization from this evolving cybersecurity threat.

CVE-2024-54085: AMI SPx Vulnerability Scores Critical CVSS 10 CVE-2024-54085
  • Vulnerability

CVE-2024-54085: AMI SPx Vulnerability Scores Critical CVSS 10

Do Son March 12, 2025 0

Learn about CVE-2024-54085 and its impact on AMI firmware. Discover the security risks posed by this critical vulnerability.

AI-Powered Deception: Fake GitHub Repositories Spread SmartLoader and Lumma Stealer SmartLoader
  • Malware

AI-Powered Deception: Fake GitHub Repositories Spread SmartLoader and Lumma Stealer

Do Son March 12, 2025 0

Learn how SmartLoader is being spread through deceptive GitHub repositories, targeting users with gaming and software tools.

CVE-2025-27017: Apache NiFi Vulnerability Exposes MongoDB Credentials Apache NiFi RCE CVE-2026-39816 Apache NiFi Vulnerability CVE-2026-25903 Apache NiFi Deserialization, GetAsanaObject Vulnerability CVE-2024-52067 - CVE-2024-56512 CVE-2025-27017
  • Vulnerability

CVE-2025-27017: Apache NiFi Vulnerability Exposes MongoDB Credentials

Do Son March 12, 2025 0

The newly discovered CVE-2025-27017 impacts Apache NiFi versions and reveals risks to sensitive MongoDB credentials.

Elysium Ransomware: A New Variant of the Ghost Family Targeting Critical Infrastructure Elysium ransomware
  • Malware

Elysium Ransomware: A New Variant of the Ghost Family Targeting Critical Infrastructure

Do Son March 12, 2025 0

Explore the Elysium ransomware, a new variant linked to Ghost attacks. Learn how it targets critical sectors like healthcare.

❮ Prev Page
Next Page ❯

Search

CVE ALERTS
📈

EPSS Spike Alerts
Catch risk spikes before they make headlines.

🎯

Custom EPSS/CVSS
Set score thresholds to effectively filter noise.

🛡️

Exploit Intel
Real-world exploit signals beyond the KEV catalog.

🐙

GitHub Issues
Auto-create alert tickets without duplication.

📬

Weekly Digest
Clean summaries, eliminating email spam.

🏷️

Watchlist Groups
Tag vulnerabilities by team (Infra/AppSec/SOC).

🔀

Smart Routing
Route chat channels based on severity levels.

🚨

RBP Tracker
Early warning detection and tracking system.

Subscribe – $7/mo or try free for 14 days →

🚨 Active Exploits in the Wild

  • CVE-2026-116606CVSS 9.3
    An authentication bypass in Barracuda Email Security Gateway versions earlier than 9.4.0.030 allows an unauthenticated remote attacker to...
    Admin intel📅 Updated: Nov 10, 2026
  • CVE-2026-125350
    Use after free in XML. Reported by anonymous on 2026-11-06. Google is aware that an exploit for CVE-2026-125350...
    Admin intel📅 Updated: Nov 10, 2026
  • CVE-2026-123751CVSS 9.8
    The WP Duplicate WordPress plugin through 1.1.11 does not properly verify a request authentication value and does not...
    Watchtower Verified📅 Updated: Nov 9, 2026
  • CVE-2026-111793CVSS 4.3
    Openwave Webtop Media Transcoder does not enforce administrator-defined file type restrictions to restrict the file-types to be converted....
    Admin intel📅 Updated: Nov 9, 2026
  • CVE-2026-114713CVSS 8.6
    The labeled-response module in UnrealIRCd 6.0.0 before 6.2.7.1 does not escape the IRCv3 "label" message tag when echoing...
    Admin intel📅 Updated: Nov 9, 2026
  • CVE-2026-116779CVSS 9.8
    Summary `sofia_presence_handle_sip_i_message()` splits the To user of an inbound SIP MESSAGE on `+` and treats the left half...
    CISA KEV📅 Added to KEV: Nov 9, 2026
  • CVE-2026-102895CVSS 9.8
    GPUStack is an open-source GPU cluster manager for AI model serving and GPU instance provisioning. Prior to 2.2.0,...
    CISA KEV📅 Added to KEV: Nov 9, 2026
  • CVE-2026-123158CVSS 8.1
    sshd in OpenSSH before 10.6p2 on Linux, when musl libc is used without PAM, lacks a workaround for...
    CISA KEV📅 Added to KEV: Nov 9, 2026
Powered by CVE Watchtower

Critical Vulnerabilities

  • CVE-2026-13312CVSS 9.9
    A vulnerability that could allow an attacker to compromise a system.
    📅 Updated: Nov 10, 2026
  • CVE-2026-72868CVSS 9.9
    Dokploy is a free, self-hostable Platform as a Service (PaaS). Prior to 0.29.13, apps/dokploy/server/api/routers/destination.ts interpolates the accessKey, secretAccessKey,...
    📅 Updated: Nov 10, 2026
  • CVE-2026-6715CVSS 9.8
    IBM Concert 1.0 through 3.0.1.1 allows an attacker can supply crafted input that is incorporated into an operating...
    📅 Updated: Nov 10, 2026
  • CVE-2026-17403CVSS 9.0
    IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote attacker to gain full...
    📅 Updated: Nov 10, 2026
  • CVE-2026-17409CVSS 9.4
    IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote attacker to execute unauthorized...
    📅 Updated: Nov 10, 2026
  • CVE-2026-17402CVSS 9.9
    IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to execute...
    📅 Updated: Nov 10, 2026
  • CVE-2026-17392CVSS 9.9
    IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to gain...
    📅 Updated: Nov 10, 2026
  • CVE-2026-17158CVSS 9.9
    IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to gain...
    📅 Updated: Nov 10, 2026
Powered by CVE Watchtower

Daily CyberSecurity

  • About SecurityOnline.info
  • Advertise with us
  • Announcement
  • Contact
  • Contributor Register
  • Login
  • Disclaimer
  • DCMA
  • Privacy Policy
  • About SecurityOnline.info
  • Advertise on SecurityOnline.info
  • Contact Us

When you purchase through links on our site, we may earn an affiliate commission. Here’s how it works

  • CVE Watchtower
  • CVE Statistics by Vendor 2026
  • Q3 2026 Report
  • Top Exploited CVEs
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube
© 2017 - 2026 Daily CyberSecurity. All Rights Reserved.