Skip to content
November 10, 2026
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube

Daily CyberSecurity

Zero-hour alerts. Unmatched analysis.

Primary Menu
  • Home
  • CVE Data
    • CVE Watchtower
    • Top Exploited CVEs
    • CVE Stats by Vendor
    • Q2 2026 Report
    • CVE Alerts
    • CVE Alert Settings
    • Pricing
  • Cyber Criminals
  • Data Leak
  • Free Tools
    • CVSS 3.1 Calculator
    • Certificate Viewer
    • DNS Lookup
    • Encoder & Hash Generator
    • IP / Subnet Calculator
    • Whois Lookup
  • Linux
  • Malware
  • Vulnerability
  • Submit Press Release
Light/Dark Button
Microsoft Releases Final Cumulative Update for Exchange Server 2019 – Here’s What’s New in CU15 Exchange Server EOL, ESU Program Cumulative Update for Exchange Server 2019
  • Technology

Microsoft Releases Final Cumulative Update for Exchange Server 2019 – Here’s What’s New in CU15

Do Son February 11, 2025 0

Discover the latest update for Exchange Server 2019. CU15 introduces new features and fixes while laying the groundwork for Exchange Server Subscription Edition.

US Treasury Sanctions Russian Bulletproof Hosting Provider Zservers for Supporting LockBit Ransomware Attacks CVE-2024-3393 - Zservers sanctions
  • Cyber Security

US Treasury Sanctions Russian Bulletproof Hosting Provider Zservers for Supporting LockBit Ransomware Attacks

Do Son February 11, 2025 0

Learn about the recent U.S. Treasury sanctions against Zservers, a Russian bulletproof hosting provider accused of facilitating LockBit ransomware attacks.

Microsoft Patches Actively Exploited Zero-Day Flaws – CVE-2025-21418 & CVE-2025-21391 Microsoft Patch Tuesday fixes disclosed zero day vulnerabilities Windows Wormable Exploit April 2026 Patch Tuesday Microsoft Patch Tuesday Zero-Day Vulnerabilities Microsoft, Patch Tuesday CVE-2025-55234 CVE-2024-43573 and CVE-2024-43572 Microsoft Patch Tuesday Security Vulnerabilities
  • Vulnerability

Microsoft Patches Actively Exploited Zero-Day Flaws – CVE-2025-21418 & CVE-2025-21391

Do Son February 11, 2025 0

Stay protected with the latest Microsoft security updates. Learn about the fixes for CVE-2025-21391 and other critical vulnerabilities in the February 2025 Patch Tuesday.

CVE-2024-12797 – High-Severity OpenSSL Flaw: Update Now to Prevent MITM Attacks OpenSSL Vulnerability RSA Memory Leak OpenSSL Vulnerability CVE-2025-15467 CVE-2022-2274 OpenSSL Vulnerabilities, Timing Side-Channel
  • Vulnerability

CVE-2024-12797 – High-Severity OpenSSL Flaw: Update Now to Prevent MITM Attacks

Do Son February 11, 2025 0

Discover the high-severity vulnerability in OpenSSL (CVE-2024-12797) that could allow man-in-the-middle attacks. Learn about the potential consequences and ways to mitigate the risk.

CVE-2024-47908 (CVSS 9.1): Critical Ivanti CSA Flaw Enables Attackers to Run Arbitrary Code CVE-2023-39335 - CVE-2024-47908 - CVE-2024-11771
  • Vulnerability

CVE-2024-47908 (CVSS 9.1): Critical Ivanti CSA Flaw Enables Attackers to Run Arbitrary Code

Do Son February 11, 2025 0

Take immediate action to secure your Ivanti Cloud Services Application (CSA) against critical vulnerabilities including CVE-2024-47908 and CVE-2024-11771.

SAP Security Patch Day February 2025: Multi Vulnerabilities Addressed CVE-2024-33006 - CVE-2025-0064 SAP Critical Patch, RMI-P4 RCE
  • Vulnerability

SAP Security Patch Day February 2025: Multi Vulnerabilities Addressed

Do Son February 11, 2025 0

Discover the critical security vulnerabilities addressed in the latest SAP Patch Day. Take action to protect your SAP systems from CVE-2025-0064 and other high-severity flaws.

Robust Open Online Safety Tools (ROOST): Tech Giants Unite to Build AI-Era Security Infrastructure "ROOST" Robust Open Online Safety Tools
  • Technology

Robust Open Online Safety Tools (ROOST): Tech Giants Unite to Build AI-Era Security Infrastructure

Do Son February 11, 2025 0

Learn about ROOST, the non-profit organization formed by Roblox, Discord, OpenAI, and Google to develop advanced open-source security tools for a safer online environment, particularly for children.

$16 Million Ransomware Operation Shut Down: 8Base Masterminds Apprehended 8Base ransomware down
  • Cyber Security

$16 Million Ransomware Operation Shut Down: 8Base Masterminds Apprehended

Do Son February 10, 2025 0

Discover the recent takedown of the 8Base ransomware syndicate by international law enforcement. Learn about their notorious history and the global impact of their activities.

Google Chrome Tests AI-Driven Auto Password Change for Breached Accounts Chrome Automated password change
  • Technology

Google Chrome Tests AI-Driven Auto Password Change for Breached Accounts

Do Son February 10, 2025 0

Enhancing password security with Automated password change feature in Google Chrome. Learn how AI generates secure passwords and syncs them with Chrome's password manager.

Google’s reCAPTCHA Fails to Stop Bots—But It’s Great at Harvesting Your Data reCAPTCHA hand gesture verification scanning process and biometric CAPTCHA security reCAPTCHA Data
  • Data Leak

Google’s reCAPTCHA Fails to Stop Bots—But It’s Great at Harvesting Your Data

Do Son February 10, 2025 0

The controversy surrounding reCAPTCHA Data. Explore how the system collects user information and its impact on privacy and user tracking.

GitHub Enterprise SAML Bypass Flaw (CVE-2025-23369) Exposed – Technical Analysis and Exploit PoC CVE-2024-9487 - CVE-2025-23369 PoC
  • Vulnerability

GitHub Enterprise SAML Bypass Flaw (CVE-2025-23369) Exposed – Technical Analysis and Exploit PoC

Do Son February 10, 2025 0

Discover the details of the SAML authentication flaw in GitHub Enterprise (CVE-2025-23369) that allows attackers to bypass security measures.

Multiple Security and Privacy Flaws Found in DeepSeek iOS App DeepSeek V3 App Store
  • Data Leak
  • Vulnerability

Multiple Security and Privacy Flaws Found in DeepSeek iOS App

Do Son February 10, 2025 0

Learn about the alarming security vulnerabilities found in the popular DeepSeek iOS app. Find out why several governments have banned its use.

Alabama Man Pleads Guilty in Bitcoin Price Manipulation Scheme Involving Hacked SEC X Account X Account Hack
  • Cyber Security

Alabama Man Pleads Guilty in Bitcoin Price Manipulation Scheme Involving Hacked SEC X Account

Do Son February 10, 2025 0

Learn about the shocking hack of the SEC's X account and its impact on the cryptocurrency market. Find out the role of Eric Council Jr. in the fraudulent Bitcoin ETF announcement.

Malicious Models on Hugging Face: A New Threat to AI Development nullifAI
  • Malware

Malicious Models on Hugging Face: A New Threat to AI Development

Do Son February 10, 2025 0

Learn about the latest malware distribution technique, nullifAI, targeting the Hugging Face platform and exploiting vulnerabilities in Pickle file serialization.

The Rise of Phishing-as-a-Service: How Cybercriminals are Outsourcing Attacks DocuSign-Themed Phishing Email
  • Cyber Security

The Rise of Phishing-as-a-Service: How Cybercriminals are Outsourcing Attacks

Do Son February 10, 2025 0

Explore the dangerous world of Phishing-as-a-Service (PhaaS). Learn about the rise of subscription-based platforms that enable cybercriminals to launch sophisticated phishing campaigns.

LegionLoader Malware Downloader Resurfaces with 2,000+ New Samples maps
  • Malware

LegionLoader Malware Downloader Resurfaces with 2,000+ New Samples

Do Son February 10, 2025 0

Discover the resurgence of LegionLoader, a sophisticated malware downloader. Learn how it spreads and the impact it has on global cybersecurity.

CVE-2025-1077 (CVSSv4 9.5): Critical RCE Vulnerability Found in Visual Weather Products CVE-2025-1077
  • Vulnerability

CVE-2025-1077 (CVSSv4 9.5): Critical RCE Vulnerability Found in Visual Weather Products

Do Son February 10, 2025 0

Stay informed about the critical RCE vulnerability (CVE-2025-1077) affecting IBL Software Engineering's Visual Weather and derived products. Learn how to protect your servers.

BadIIS Malware Hijacks Asian Websites for SEO Fraud BadIIS malware
  • Malware

BadIIS Malware Hijacks Asian Websites for SEO Fraud

Do Son February 10, 2025 0

Discover the malicious BadIIS malware campaign targeting organizations in Asia. Find out how vulnerabilities in IIS are exploited for SEO manipulation.

Progress LoadMaster Security Update: Multiple Vulnerabilities Addressed CVE-2024-6327 - CVE-2024-56131
  • Vulnerability

Progress LoadMaster Security Update: Multiple Vulnerabilities Addressed

Do Son February 10, 2025 0

Take action against CVE-2024-56131 and other vulnerabilities affecting LoadMaster. Upgrade now to protect your system from potential attacks.

Misconfigured APIs Expose Sensitive Medical Data in Major Diagnostic Chain Misconfigured API
  • Data Leak
  • Vulnerability

Misconfigured APIs Expose Sensitive Medical Data in Major Diagnostic Chain

Do Son February 10, 2025 0

Discover the critical vulnerabilities in the API infrastructure of a well-known diagnostic chain, exposing sensitive personal and medical data.

768 CVEs Exploited in 2024: VulnCheck Warns of Rising Threat WhatsApp Worm, Brazilian Banking Trojan LAPSUS$ Alliance, Scattered Spider Ransomware, Cybercrime RedCurl APT group Russian Cyberespionage, ApolloShadow Malware
  • Vulnerability

768 CVEs Exploited in 2024: VulnCheck Warns of Rising Threat

Do Son February 10, 2025 0

Discover the concerning rise in vulnerability exploitation and its impact on cyber threats. Learn about the key findings from the VulnCheck report.

Apple Issues Emergency Updates to Patch Actively Exploited Zero-Day Vulnerability – CVE-2025-24200 DarkSword exploit kit iOS 18.7.7 security update CVE-2024-44308 & CVE-2024-44309 Apple appeal, Epic Games lawsuit
  • Vulnerability

Apple Issues Emergency Updates to Patch Actively Exploited Zero-Day Vulnerability – CVE-2025-24200

Do Son February 10, 2025 0

Urgent security update: Apple patches zero-day vulnerability (CVE-2025-24200) actively exploited in targeted attacks.

❮ Prev Page
Next Page ❯

Search

CVE ALERTS
📈

EPSS Spike Alerts
Catch risk spikes before they make headlines.

🎯

Custom EPSS/CVSS
Set score thresholds to effectively filter noise.

🛡️

Exploit Intel
Real-world exploit signals beyond the KEV catalog.

🐙

GitHub Issues
Auto-create alert tickets without duplication.

📬

Weekly Digest
Clean summaries, eliminating email spam.

🏷️

Watchlist Groups
Tag vulnerabilities by team (Infra/AppSec/SOC).

🔀

Smart Routing
Route chat channels based on severity levels.

🚨

RBP Tracker
Early warning detection and tracking system.

Subscribe – $7/mo or try free for 14 days →

🚨 Active Exploits in the Wild

  • CVE-2026-116606CVSS 9.3
    An authentication bypass in Barracuda Email Security Gateway versions earlier than 9.4.0.030 allows an unauthenticated remote attacker to...
    Admin intel📅 Updated: Nov 10, 2026
  • CVE-2026-125350
    Use after free in XML. Reported by anonymous on 2026-11-06. Google is aware that an exploit for CVE-2026-125350...
    Admin intel📅 Updated: Nov 10, 2026
  • CVE-2026-123751CVSS 9.8
    The WP Duplicate WordPress plugin through 1.1.11 does not properly verify a request authentication value and does not...
    Watchtower Verified📅 Updated: Nov 9, 2026
  • CVE-2026-111793CVSS 4.3
    Openwave Webtop Media Transcoder does not enforce administrator-defined file type restrictions to restrict the file-types to be converted....
    Admin intel📅 Updated: Nov 9, 2026
  • CVE-2026-114713CVSS 8.6
    The labeled-response module in UnrealIRCd 6.0.0 before 6.2.7.1 does not escape the IRCv3 "label" message tag when echoing...
    Admin intel📅 Updated: Nov 9, 2026
  • CVE-2026-116779CVSS 9.8
    Summary `sofia_presence_handle_sip_i_message()` splits the To user of an inbound SIP MESSAGE on `+` and treats the left half...
    CISA KEV📅 Added to KEV: Nov 9, 2026
  • CVE-2026-102895CVSS 9.8
    GPUStack is an open-source GPU cluster manager for AI model serving and GPU instance provisioning. Prior to 2.2.0,...
    CISA KEV📅 Added to KEV: Nov 9, 2026
  • CVE-2026-123158CVSS 8.1
    sshd in OpenSSH before 10.6p2 on Linux, when musl libc is used without PAM, lacks a workaround for...
    CISA KEV📅 Added to KEV: Nov 9, 2026
Powered by CVE Watchtower

Critical Vulnerabilities

  • CVE-2026-61949CVSS 9.3
    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Bookly Bookly bookly-responsive-appointment-booking-tool allows...
    📅 Updated: Nov 10, 2026
  • CVE-2026-13312CVSS 9.9
    A vulnerability that could allow an attacker to compromise a system.
    📅 Updated: Nov 10, 2026
  • CVE-2026-72868CVSS 9.9
    Dokploy is a free, self-hostable Platform as a Service (PaaS). Prior to 0.29.13, apps/dokploy/server/api/routers/destination.ts interpolates the accessKey, secretAccessKey,...
    📅 Updated: Nov 10, 2026
  • CVE-2026-6715CVSS 9.8
    IBM Concert 1.0 through 3.0.1.1 allows an attacker can supply crafted input that is incorporated into an operating...
    📅 Updated: Nov 10, 2026
  • CVE-2026-17403CVSS 9.0
    IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote attacker to gain full...
    📅 Updated: Nov 10, 2026
  • CVE-2026-17409CVSS 9.4
    IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote attacker to execute unauthorized...
    📅 Updated: Nov 10, 2026
  • CVE-2026-17402CVSS 9.9
    IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to execute...
    📅 Updated: Nov 10, 2026
  • CVE-2026-17392CVSS 9.9
    IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to gain...
    📅 Updated: Nov 10, 2026
Powered by CVE Watchtower

Daily CyberSecurity

  • About SecurityOnline.info
  • Advertise with us
  • Announcement
  • Contact
  • Contributor Register
  • Login
  • Disclaimer
  • DCMA
  • Privacy Policy
  • About SecurityOnline.info
  • Advertise on SecurityOnline.info
  • Contact Us

When you purchase through links on our site, we may earn an affiliate commission. Here’s how it works

  • CVE Watchtower
  • CVE Statistics by Vendor 2026
  • Q3 2026 Report
  • Top Exploited CVEs
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube
© 2017 - 2026 Daily CyberSecurity. All Rights Reserved.