Skip to content
November 10, 2026
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube

Daily CyberSecurity

Zero-hour alerts. Unmatched analysis.

Primary Menu
  • Home
  • CVE Data
    • CVE Watchtower
    • Top Exploited CVEs
    • CVE Stats by Vendor
    • Q2 2026 Report
    • CVE Alerts
    • CVE Alert Settings
    • Pricing
  • Cyber Criminals
  • Data Leak
  • Free Tools
    • CVSS 3.1 Calculator
    • Certificate Viewer
    • DNS Lookup
    • Encoder & Hash Generator
    • IP / Subnet Calculator
    • Whois Lookup
  • Linux
  • Malware
  • Vulnerability
  • Submit Press Release
Light/Dark Button
Russian Hackers Exploit Microsoft Device Code Authentication in Targeted Attacks Against M365 Accounts Device Code Authentication phishing
  • Cyber Security

Russian Hackers Exploit Microsoft Device Code Authentication in Targeted Attacks Against M365 Accounts

Do Son February 16, 2025 0

Explore the risks of Device Code Authentication phishing targeted at Microsoft 365 users by Russian threat actors.

Metasploit-Ready: CVE-2025-1094 SQLi in PostgreSQL Exposes Systems to Remote Attacks PostgreSQL Vulnerabilities CVE-2026-2006 PostgreSQL, security update CVE-2023-5869 - CVE-2025-1094
  • Vulnerability

Metasploit-Ready: CVE-2025-1094 SQLi in PostgreSQL Exposes Systems to Remote Attacks

Do Son February 16, 2025 0

Explore CVE-2025-1094, a high-severity SQL injection vulnerability in PostgreSQL's psql tool that can execute arbitrary code.

Astaroth Phishing Kit Bypasses 2FA, Steals Accounts Astaroth Phishing Kit
  • Cyber Security

Astaroth Phishing Kit Bypasses 2FA, Steals Accounts

Do Son February 16, 2025 0

Uncover the dangers of the Astaroth Phishing Kit, which bypasses two-factor authentication to steal sensitive credentials.

SPAWNCHIMERA: New Malware Exploits Ivanti Zero-Day Flaw (CVE-2025-0282) SPAWNCHIMERA malware
  • Malware
  • Vulnerability

SPAWNCHIMERA: New Malware Exploits Ivanti Zero-Day Flaw (CVE-2025-0282)

Do Son February 16, 2025 0

Uncover the dangers of SPAWNCHIMERA malware, an advanced cyber threat exploiting CVE-2025-0282 for stealthy attacks.

North Korea’s IT Worker Scam: How the Regime Infiltrates Global Tech Firms for Cyber Espionage North Korea’s IT Worker Scam
  • Cyber Security

North Korea’s IT Worker Scam: How the Regime Infiltrates Global Tech Firms for Cyber Espionage

Do Son February 16, 2025 0

Uncover the dangers of North Korea’s IT worker scam. Learn how it threatens global tech with espionage and fraud.

AMD Patches High-Severity SMM Callout Flaw (CVE-2024-21924) in EPYC and Ryzen Threadripper Processors CVE-2022-23829 - CVE-2024-21924
  • Vulnerability

AMD Patches High-Severity SMM Callout Flaw (CVE-2024-21924) in EPYC and Ryzen Threadripper Processors

Do Son February 16, 2025 0

Learn about CVE-2024-21924's impact on AMD processors and the high-severity vulnerabilities addressed by recent security patches.

Buffer Overflows Vulnerabilities: CISA & FBI Issue Urgent Warning Buffer Overflows Vulnerabilities
  • Vulnerability

Buffer Overflows Vulnerabilities: CISA & FBI Issue Urgent Warning

Do Son February 16, 2025 0

Learn about buffer overflows vulnerabilities and how they threaten software security and infrastructure. Stay informed today.

Mailcow Patches Password Reset Poisoning Vulnerability (CVE-2025-25198) CVE-2024-56529 - CVE-2025-25198
  • Vulnerability

Mailcow Patches Password Reset Poisoning Vulnerability (CVE-2025-25198)

Do Son February 16, 2025 0

Learn about CVE-2025-25198 and how it affects mailcow's password reset feature. Stay secure with the latest patch details.

FINALDRAFT Malware Exploits Outlook Drafts for Covert Communication FINALDRAFT Malware
  • Malware

FINALDRAFT Malware Exploits Outlook Drafts for Covert Communication

Do Son February 16, 2025 0

Explore FINALDRAFT Malware, a new threat using Microsoft Outlook drafts for stealthy communication and cyberespionage.

CVE-2024-1709 and CVE-2023-48788: Exploits Fueling Russia’s BadPilot Campaign Seashell Blizzard - BadPilot campaign
  • Cyber Security
  • Vulnerability

CVE-2024-1709 and CVE-2023-48788: Exploits Fueling Russia’s BadPilot Campaign

Do Son February 16, 2025 0

Uncover the threats posed by Seashell Blizzard, a cyber espionage group behind the BadPilot campaign targeting critical sectors.

Fake ‘Adobe Drive X’ App Sneaks Through Microsoft Login to Steal Credentials Adobe Drive X
  • Cyber Security

Fake ‘Adobe Drive X’ App Sneaks Through Microsoft Login to Steal Credentials

Do Son February 16, 2025 0

Uncover the dangers of Adobe Drive X in the new phishing campaign targeting Microsoft users. Stay informed and secure.

AMD Patches High-Severity SMM Vulnerabilities Affecting EPYC and Ryzen Processors CVE-2024-0179 and CVE-2024-21925
  • Vulnerability

AMD Patches High-Severity SMM Vulnerabilities Affecting EPYC and Ryzen Processors

Do Son February 15, 2025 0

Learn about CVE-2024-0179 & CVE-2024-21925, two high-severity vulnerabilities in AMD processors that could allow arbitrary code execution.

Magento Credit Card Skimmer Uses Tag to Evade Detection Magento Credit Card Stealer npm package reverse shell
  • Malware

Magento Credit Card Skimmer Uses Tag to Evade Detection

Do Son February 15, 2025 0

Uncover the Magento Credit Card Stealer attacking eCommerce sites. Learn how this stealthy malware hides in tags.

Critical CVE-2024-10960 Flaw in Brizy Plugin Puts 80,000 WordPress Sites at Risk CVE-2024-10960
  • Vulnerability

Critical CVE-2024-10960 Flaw in Brizy Plugin Puts 80,000 WordPress Sites at Risk

Do Son February 15, 2025 0

CVE-2024-10960 poses a severe risk for WordPress users. Discover how this vulnerability affects site security.

Instagram Tests “Dislike” Button for Comments Instagram dislike button
  • Technology

Instagram Tests “Dislike” Button for Comments

Do Son February 15, 2025 0

Discover the Instagram dislike button feature that lets users respond to inappropriate comments more effectively.

“Waterworth”: Meta’s Submarine Cable Revolutionizes Global Communication Meta Energy, Geothermal AI Waterworth project
  • Technology

“Waterworth”: Meta’s Submarine Cable Revolutionizes Global Communication

Do Son February 15, 2025 0

Discover the details of Waterworth, Meta's new submarine cable project connecting five continents and enhancing global network.

Severe nvJPEG2000 Vulnerabilities (CVSS 9.8) in NVIDIA’s GPU Library Could Lead to Code Execution NVIDIA FLARE Vulnerability Federated Learning Security NVIDIA Jetson Linux Edge AI Security BioNeMo Vulnerability Insecure Deserialization NVIDIA RTX 50 Super delay NVIDIA Nsight Vulnerability Merlin Transformers4Rec NVIDIA AI Bubble $57 Billion Revenue H20 AI chip NVIDIA earnings Blackwell AI Nvidia DGX-1 Vulnerabilities CVE-2024-0143 NVIDIA Linux Gaming, VKD3D Performance
  • Vulnerability

Severe nvJPEG2000 Vulnerabilities (CVSS 9.8) in NVIDIA’s GPU Library Could Lead to Code Execution

Do Son February 14, 2025 0

Learn about CVE-2024-0143 and other flaws in NVIDIA's nvJPEG2000 library and how it can lead to serious security issues.

Sam Altman Declines Musk’s OpenAI Bid, Considers $9.74B Twitter Acquisition Instead OpenAI token price reduction OpenAI Deployment Company DeployCo OpenAI IPO strategy OpenAI Privacy Filter 1.5B OpenAI $122 billion funding OpenAI GitHub alternative OpenAI military agreement 2026 OpenAI Stargate project collapse NVIDIA OpenAI investment stall ChatGPT Go $8 subscription, OpenAI GPT-5.2 Instant ads OpenAI Torch acquisition, Unified Medical Memory OpenAI Head of Preparedness 2025, Sam Altman AI safety lawsuits ChatGPT Advertising Speculation OpenAI Ad Code Denial OpenAI AI Confession Hallucination Mitigation ChatGPT Quality Focus OpenAI Gemini Red Alert ChatGPT Login, AI ecosystem OpenAI Mental Health, AI Well-Being Council ChatGPT Instant Checkout, Agentic Commerce OpenAI cloud computing OpenAI, startup incubator OpenAI chips, NVIDIA competition AI competition, antitrust lawsuit GPT-5, OpenAI Livestream OpenAI Open-Weight, AI Models OpenAI Infrastructure, AI Data Centers ChatGPT Business, Office Productivity OpenAI Open-Weight Model, WindSurf Acquisition OpenAI AI Browser, ChatGPT Integration Mattel AI, OpenAI Partnership OpenAI o3, Price Cut OpenAI's Next-Gen AI: O3-Pro's Enhanced Reasoning PowerOpenAI profit OpenAI Bid OpenAI Social Network ChatGPT Social OpenAI Non-profit OpenAI UAE ChatGPT Plus free
  • Technology

Sam Altman Declines Musk’s OpenAI Bid, Considers $9.74B Twitter Acquisition Instead

Do Son February 14, 2025 0

Get insights on Elon Musk's OpenAI Bid, the conditions of the offer, and OpenAI's formal rejection of the proposal.

Sophisticated Phishing Campaign Abuses Webflow CDN to Steal Credit Card Data Sophisticated Phishing Campaign
  • Cyber Security

Sophisticated Phishing Campaign Abuses Webflow CDN to Steal Credit Card Data

Do Son February 14, 2025 0

Uncover the alarming details of a sophisticated phishing campaign targeting users through fake CAPTCHA images on Webflow CDN.

Airbnb’s Bold Move: Brian Chesky Aims to Build the ‘Amazon of Travel’ with $250M Investment Airbnb Amazon of travel AI
  • Technology

Airbnb’s Bold Move: Brian Chesky Aims to Build the ‘Amazon of Travel’ with $250M Investment

Do Son February 14, 2025 0

Discover how Airbnb aims to become the Airbnb Amazon of travel and expand its service offerings significantly.

AMD Patches High-Risk Vulnerabilities in EPYC Server Processors EPYC Server Processors Vulnerabilities
  • Vulnerability

AMD Patches High-Risk Vulnerabilities in EPYC Server Processors

Do Son February 14, 2025 0

Learn about the significant EPYC server processors vulnerabilities that could allow privileged access to sensitive data and code.

TikTok Ban Postponed: App Back on US App Stores and Play Store TikTok addictive design breach TikTok, ByteDance TikTok Zero-Day - TikTok Play Store Trump Extends TikTok
  • Technology

TikTok Ban Postponed: App Back on US App Stores and Play Store

Do Son February 14, 2025 0

Explore the revival of TikTok as it returns to the Play Store and App Store, following the delay of the U.S. ban. Discover more now.

❮ Prev Page
Next Page ❯

Search

CVE ALERTS
📈

EPSS Spike Alerts
Catch risk spikes before they make headlines.

🎯

Custom EPSS/CVSS
Set score thresholds to effectively filter noise.

🛡️

Exploit Intel
Real-world exploit signals beyond the KEV catalog.

🐙

GitHub Issues
Auto-create alert tickets without duplication.

📬

Weekly Digest
Clean summaries, eliminating email spam.

🏷️

Watchlist Groups
Tag vulnerabilities by team (Infra/AppSec/SOC).

🔀

Smart Routing
Route chat channels based on severity levels.

🚨

RBP Tracker
Early warning detection and tracking system.

Subscribe – $7/mo or try free for 14 days →

🚨 Active Exploits in the Wild

  • CVE-2026-116606CVSS 9.3
    An authentication bypass in Barracuda Email Security Gateway versions earlier than 9.4.0.030 allows an unauthenticated remote attacker to...
    Admin intel📅 Updated: Nov 10, 2026
  • CVE-2026-125350
    Use after free in XML. Reported by anonymous on 2026-11-06. Google is aware that an exploit for CVE-2026-125350...
    Admin intel📅 Updated: Nov 10, 2026
  • CVE-2026-123751CVSS 9.8
    The WP Duplicate WordPress plugin through 1.1.11 does not properly verify a request authentication value and does not...
    Watchtower Verified📅 Updated: Nov 9, 2026
  • CVE-2026-111793CVSS 4.3
    Openwave Webtop Media Transcoder does not enforce administrator-defined file type restrictions to restrict the file-types to be converted....
    Admin intel📅 Updated: Nov 9, 2026
  • CVE-2026-114713CVSS 8.6
    The labeled-response module in UnrealIRCd 6.0.0 before 6.2.7.1 does not escape the IRCv3 "label" message tag when echoing...
    Admin intel📅 Updated: Nov 9, 2026
  • CVE-2026-116779CVSS 9.8
    Summary `sofia_presence_handle_sip_i_message()` splits the To user of an inbound SIP MESSAGE on `+` and treats the left half...
    CISA KEV📅 Added to KEV: Nov 9, 2026
  • CVE-2026-102895CVSS 9.8
    GPUStack is an open-source GPU cluster manager for AI model serving and GPU instance provisioning. Prior to 2.2.0,...
    CISA KEV📅 Added to KEV: Nov 9, 2026
  • CVE-2026-123158CVSS 8.1
    sshd in OpenSSH before 10.6p2 on Linux, when musl libc is used without PAM, lacks a workaround for...
    CISA KEV📅 Added to KEV: Nov 9, 2026
Powered by CVE Watchtower

Critical Vulnerabilities

  • CVE-2026-61949CVSS 9.3
    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Bookly Bookly bookly-responsive-appointment-booking-tool allows...
    📅 Updated: Nov 10, 2026
  • CVE-2026-13312CVSS 9.9
    A vulnerability that could allow an attacker to compromise a system.
    📅 Updated: Nov 10, 2026
  • CVE-2026-72868CVSS 9.9
    Dokploy is a free, self-hostable Platform as a Service (PaaS). Prior to 0.29.13, apps/dokploy/server/api/routers/destination.ts interpolates the accessKey, secretAccessKey,...
    📅 Updated: Nov 10, 2026
  • CVE-2026-6715CVSS 9.8
    IBM Concert 1.0 through 3.0.1.1 allows an attacker can supply crafted input that is incorporated into an operating...
    📅 Updated: Nov 10, 2026
  • CVE-2026-17403CVSS 9.0
    IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote attacker to gain full...
    📅 Updated: Nov 10, 2026
  • CVE-2026-17409CVSS 9.4
    IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote attacker to execute unauthorized...
    📅 Updated: Nov 10, 2026
  • CVE-2026-17402CVSS 9.9
    IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to execute...
    📅 Updated: Nov 10, 2026
  • CVE-2026-17392CVSS 9.9
    IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to gain...
    📅 Updated: Nov 10, 2026
Powered by CVE Watchtower

Daily CyberSecurity

  • About SecurityOnline.info
  • Advertise with us
  • Announcement
  • Contact
  • Contributor Register
  • Login
  • Disclaimer
  • DCMA
  • Privacy Policy
  • About SecurityOnline.info
  • Advertise on SecurityOnline.info
  • Contact Us

When you purchase through links on our site, we may earn an affiliate commission. Here’s how it works

  • CVE Watchtower
  • CVE Statistics by Vendor 2026
  • Q3 2026 Report
  • Top Exploited CVEs
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube
© 2017 - 2026 Daily CyberSecurity. All Rights Reserved.