Skip to content
November 10, 2026
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube

Daily CyberSecurity

Zero-hour alerts. Unmatched analysis.

Primary Menu
  • Home
  • CVE Data
    • CVE Watchtower
    • Top Exploited CVEs
    • CVE Stats by Vendor
    • Q2 2026 Report
    • CVE Alerts
    • CVE Alert Settings
    • Pricing
  • Cyber Criminals
  • Data Leak
  • Free Tools
    • CVSS 3.1 Calculator
    • Certificate Viewer
    • DNS Lookup
    • Encoder & Hash Generator
    • IP / Subnet Calculator
    • Whois Lookup
  • Linux
  • Malware
  • Vulnerability
  • Submit Press Release
Light/Dark Button
F5 Warns of TLS Session Resumption Vulnerability in NGINX (CVE-2025-23419) NGINX JavaScript Module Vulnerability CVE-2026-8711 NGINX 1.30.1 Security Update CVE-2026-42945 RCE NGINX Vulnerability CVE-2026-1642 NGINX Github - CVE-2025-23419
  • Vulnerability

F5 Warns of TLS Session Resumption Vulnerability in NGINX (CVE-2025-23419)

Do Son February 5, 2025 0

Understanding the latest security advisory from F5. Learn about CVE-2025-23419 and how it could potentially allow unauthorized access to sensitive resources in NGINX.

XE Group Exploits Zero-Day Vulnerabilities in VeraCore – CVE-2024-57968 & CVE-2025-25181 Winos 4.0 Malware Silver Fox APT RapperBot BVIEC cyberattack - CNC group DAMASCENED PEACOCK, malware analysis
  • Cyber Security
  • Vulnerability

XE Group Exploits Zero-Day Vulnerabilities in VeraCore – CVE-2024-57968 & CVE-2025-25181

Do Son February 5, 2025 0

Discover the evolving threat of XE Group: from credit card skimming to zero-day vulnerabilities, this notorious cybercriminal organization is targeting organizations across industries.

Malicious Go Package Exploits Caching for Stealthy Persistence Malicious Go Package Exploits Caching for Stealthy Persistence
  • Malware

Malicious Go Package Exploits Caching for Stealthy Persistence

Do Son February 5, 2025 0

Unveiling a malicious Go package discovered in the Go ecosystem. Learn how a typosquatting package exploits the Go Module Proxy's caching mechanism.

Zyxel Routers Under Attack: Default Credentials (CVE-2025-0890) and Code Injection (CVE-2024-40891), No Patch! CVE-2025-0890
  • Vulnerability

Zyxel Routers Under Attack: Default Credentials (CVE-2025-0890) and Code Injection (CVE-2024-40891), No Patch!

Do Son February 5, 2025 0

Critical vulnerabilities found in Zyxel routers! Learn how CVE-2025-0890 allows attackers to execute code and gain full control over devices.

Kubernetes Policy Enforcement at Risk: OPA Gatekeeper Bypass Exposes Security Flaws Ingress-Nginx Vulnerability Kubernetes RCE Vulnerability CVE-2025-9708 Kubernetes Security, Image Builder Vulnerability CVE-2024-10220 - OPA Gatekeeper Bypass
  • Vulnerability

Kubernetes Policy Enforcement at Risk: OPA Gatekeeper Bypass Exposes Security Flaws

Do Son February 5, 2025 0

Learn about the security risks in OPA Gatekeeper for Kubernetes policy enforcement and how attackers can exploit common misconfigurations and policy weaknesses.

Google Security Team Uncovers AMD Microcode Vulnerability (CVE-2024-56161) AMD Microcode Vulnerability - CVE-2024-56161
  • Vulnerability

Google Security Team Uncovers AMD Microcode Vulnerability (CVE-2024-56161)

Do Son February 5, 2025 0

Uncover the high-severity AMD CPU vulnerability (CVE-2024-56161) disclosed by Google Security Team. Learn about the associated risks and impacts on secure computing environments.

$50 for Your Data: NOVA Stealer Sold as Malware-as-a-Service Oracle EBS Zero-Day, GRACEFUL SPIDER Cracked Software, Supply Chain Attack Black Basta - NOVA stealer
  • Malware

$50 for Your Data: NOVA Stealer Sold as Malware-as-a-Service

Do Son February 5, 2025 0

Discover the NOVA stealer, a new commercial variant of the SnakeLogger malware. Learn how this campaign is targeting Russian organizations.

Security Flaws Discovered in Apache Cassandra: Unauthorized Access, Privilege Escalation, and JMX Credential Theft CVE-2025-24860
  • Vulnerability

Security Flaws Discovered in Apache Cassandra: Unauthorized Access, Privilege Escalation, and JMX Credential Theft

Do Son February 5, 2025 0

Critical security vulnerabilities in Apache Cassandra pose a threat to sensitive data. Learn about CVE-2025-24860 and other flaws impacting the open-source NoSQL database.

SmartApeSG Campaign Uncovered: A Deep Dive into NetSupport RAT Distribution and Suspected Threat Actor Connections CRussian Market, "Fly" (Flyded) hange Healthcare Cyberattack - CVE-2024-50603 Exploit
  • Cyber Security
  • Malware

SmartApeSG Campaign Uncovered: A Deep Dive into NetSupport RAT Distribution and Suspected Threat Actor Connections

Do Son February 5, 2025 0

Uncover the intricate web of the SmartApeSG FakeUpdate campaign and its connections to NetSupport RAT and other malicious threats.

North Korean-Linked Malware ‘FlexibleFerret’ Expands macOS Attack Surface North Korean Laptop Farm DPRK Insider Threat North Korea WMD Cyber Funding, Australia Sanctions Insider threat, North Korean hackers Kimsuky, cyber-espionage NPM Malware, North Korea Cyber-espionage North Korea, Remote IT Job Scam Laptop Farm - DriverEasy - Kimsuky Watering Hole Attack
  • Malware

North Korean-Linked Malware ‘FlexibleFerret’ Expands macOS Attack Surface

Do Son February 5, 2025 0

Uncover the new 'FlexibleFerret' macOS malware attributed to North Korean threat actors. Learn about the evolving tactics and job interview schemes used in these espionage campaigns.

Symantec PAM Patches Critical Security Flaw – CVE-2025-24503 (CVSSv4 9.3) CVE-2025-24503
  • Vulnerability

Symantec PAM Patches Critical Security Flaw – CVE-2025-24503 (CVSSv4 9.3)

Do Son February 5, 2025 0

Keep your sensitive information safe with Symantec PAM 4.2.1. Find out how the latest release fixes vulnerabilities that could be exploited by attackers.

SparkCat Malware: Sneaky Crypto Stealer Found in Google Play and App Store Apps SparkCat malware
  • Malware

SparkCat Malware: Sneaky Crypto Stealer Found in Google Play and App Store Apps

Do Son February 5, 2025 0

Beware of the SparkCat malware campaign that steals cryptocurrency recovery phrases using optical character recognition (OCR) technology on Android and iOS devices.

Microsoft Releases PowerShell Script for UEFI Certificate Update Windows Secure Lock Screen Clock Lag Windows 11 KB5079391 error Windows 11 Kernel Driver Trust Microslop Windows 11 Windows 11 modem driver removal 2026, CVE-2025-24052 Agere driver exploit Windows 11 Password Icon Bug Lock Screen Glitch Windows 11 26H1 ARM Snapdragon X2 Windows 11 Reboot-Free, Insider Build Windows Update Error, 0x80070103 File Explorer, NTLM leak Windows bug, WinRE Windows Update, UAC prompts Secure Boot Certificate, Windows Security Windows 11 22H2 Installation security updates Windows UEFI CA 2023 Windows 11 25H2
  • Technology
  • Windows

Microsoft Releases PowerShell Script for UEFI Certificate Update

Do Son February 5, 2025 0

Find out why Microsoft is updating Windows UEFI CA certificates and how it impacts the security of your Windows 11 system.

Meta Unveils “Frontier AI Framework” to Address High-Risk AI Frontier AI Framework
  • Technology

Meta Unveils “Frontier AI Framework” to Address High-Risk AI

Do Son February 5, 2025 0

Explore Meta's Frontier AI Framework white paper, defining high-risk and critical-risk AI systems and their potential cybersecurity and weaponry implications.

New in Windows 11: Lock Screen Widget Customization Windows 11 lock screen widget
  • Windows

New in Windows 11: Lock Screen Widget Customization

Do Son February 5, 2025 0

Discover the new customizable lock screen widgets in Windows 11 Beta. Learn how to enable and curate your preferred widgets for a personalized lock screen experience.

Google Under Investigation in China Amidst Trade Tensions Google Self-Preferencing Fine Idealo Antitrust Damages Anthropic, Google TPUs Google DMA Compliance, Search Self-Preferencing Google Play Store Ruling, Epic Games Victory Google fine, ad tech Google lawsuit, privacy violation Gmail security, false alarm Google Play EU regulation Google Security, Phone Number Leak Google 2025 - Google China’s Anti-Monopoly Law Google monopoly, ad tech Pixel 7a battery, battery swelling
  • Technology

Google Under Investigation in China Amidst Trade Tensions

Do Son February 5, 2025 0

Explore the impact of China's Anti-Monopoly Law on Google. Learn about the investigation and potential ramifications of alleged violations.

PoC Releases for Linux Kernel Flaw CVE-2024-36972: Double Free Flaw Enables Privilege Escalation and Container Escape CVE-2024-36972 PoC exploit
  • Linux
  • Vulnerability

PoC Releases for Linux Kernel Flaw CVE-2024-36972: Double Free Flaw Enables Privilege Escalation and Container Escape

Do Son February 4, 2025 0

Discover the technical details of CVE-2024-36972 PoC exploit in the Linux kernel's af_unix component and learn how to protect your system.

CVE-2025-23114 (CVSS 9.0): Critical Veeam Backup Vulnerability Enables Remote Code Execution CVE-2024-29849 - CVE-2025-23114
  • Vulnerability

CVE-2025-23114 (CVSS 9.0): Critical Veeam Backup Vulnerability Enables Remote Code Execution

Do Son February 4, 2025 0

Stay vigilant against the critical vulnerability (CVE-2025-23114) affecting Veeam backup and replication products. Learn how to secure your data and prevent potential attacks.

Google Fixes High-Severity Chrome Vulnerabilities (CVE-2025-0444 & CVE-2025-0445) Chrome 133 - CVE-2025-0444 & CVE-2025-0445
  • Vulnerability

Google Fixes High-Severity Chrome Vulnerabilities (CVE-2025-0444 & CVE-2025-0445)

Do Son February 4, 2025 0

Ensure your online safety with Chrome version 133. This release focuses on patching vulnerabilities, including high-severity CVE-2025-0444 & CVE-2025-0445.

Coyote Banking Trojan: A Multi-Stage Financial Cyber Threat Targeting Brazil Coyote Banking Trojan
  • Malware

Coyote Banking Trojan: A Multi-Stage Financial Cyber Threat Targeting Brazil

Do Son February 4, 2025 0

Learn about the Coyote Banking Trojan, a stealthy malware campaign targeting online banking users. Protect yourself from this sophisticated threat

Cybercriminals Exploit Big Tech Cloud IPs in Infrastructure Laundering Scheme infrastructure laundering
  • Cyber Security

Cybercriminals Exploit Big Tech Cloud IPs in Infrastructure Laundering Scheme

Do Son February 4, 2025 0

Silent Push report uncovers how FUNNULL utilizes infrastructure laundering to evade detection on major cloud providers like AWS and Azure.

CISA Flags Four Actively Exploited Security Vulnerabilities in KEV Catalog CISA KEV Update, Cisco Zero-Day KEV Vulnerabilities
  • Vulnerability

CISA Flags Four Actively Exploited Security Vulnerabilities in KEV Catalog

Do Son February 4, 2025 0

Discover the latest critical security vulnerabilities in Apache OFBiz, Microsoft .NET Framework, and Paessler PRTG Network Monitor.

❮ Prev Page
Next Page ❯

Search

CVE ALERTS
📈

EPSS Spike Alerts
Catch risk spikes before they make headlines.

🎯

Custom EPSS/CVSS
Set score thresholds to effectively filter noise.

🛡️

Exploit Intel
Real-world exploit signals beyond the KEV catalog.

🐙

GitHub Issues
Auto-create alert tickets without duplication.

📬

Weekly Digest
Clean summaries, eliminating email spam.

🏷️

Watchlist Groups
Tag vulnerabilities by team (Infra/AppSec/SOC).

🔀

Smart Routing
Route chat channels based on severity levels.

🚨

RBP Tracker
Early warning detection and tracking system.

Subscribe – $7/mo or try free for 14 days →

🚨 Active Exploits in the Wild

  • CVE-2026-116606CVSS 9.3
    An authentication bypass in Barracuda Email Security Gateway versions earlier than 9.4.0.030 allows an unauthenticated remote attacker to...
    Admin intel📅 Updated: Nov 10, 2026
  • CVE-2026-125350
    Use after free in XML. Reported by anonymous on 2026-11-06. Google is aware that an exploit for CVE-2026-125350...
    Admin intel📅 Updated: Nov 10, 2026
  • CVE-2026-123751CVSS 9.8
    The WP Duplicate WordPress plugin through 1.1.11 does not properly verify a request authentication value and does not...
    Watchtower Verified📅 Updated: Nov 9, 2026
  • CVE-2026-111793CVSS 4.3
    Openwave Webtop Media Transcoder does not enforce administrator-defined file type restrictions to restrict the file-types to be converted....
    Admin intel📅 Updated: Nov 9, 2026
  • CVE-2026-114713CVSS 8.6
    The labeled-response module in UnrealIRCd 6.0.0 before 6.2.7.1 does not escape the IRCv3 "label" message tag when echoing...
    Admin intel📅 Updated: Nov 9, 2026
  • CVE-2026-116779CVSS 9.8
    Summary `sofia_presence_handle_sip_i_message()` splits the To user of an inbound SIP MESSAGE on `+` and treats the left half...
    CISA KEV📅 Added to KEV: Nov 9, 2026
  • CVE-2026-102895CVSS 9.8
    GPUStack is an open-source GPU cluster manager for AI model serving and GPU instance provisioning. Prior to 2.2.0,...
    CISA KEV📅 Added to KEV: Nov 9, 2026
  • CVE-2026-123158CVSS 8.1
    sshd in OpenSSH before 10.6p2 on Linux, when musl libc is used without PAM, lacks a workaround for...
    CISA KEV📅 Added to KEV: Nov 9, 2026
Powered by CVE Watchtower

Critical Vulnerabilities

  • CVE-2026-61949CVSS 9.3
    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Bookly Bookly bookly-responsive-appointment-booking-tool allows...
    📅 Updated: Nov 10, 2026
  • CVE-2026-13312CVSS 9.9
    A vulnerability that could allow an attacker to compromise a system.
    📅 Updated: Nov 10, 2026
  • CVE-2026-72868CVSS 9.9
    Dokploy is a free, self-hostable Platform as a Service (PaaS). Prior to 0.29.13, apps/dokploy/server/api/routers/destination.ts interpolates the accessKey, secretAccessKey,...
    📅 Updated: Nov 10, 2026
  • CVE-2026-6715CVSS 9.8
    IBM Concert 1.0 through 3.0.1.1 allows an attacker can supply crafted input that is incorporated into an operating...
    📅 Updated: Nov 10, 2026
  • CVE-2026-17403CVSS 9.0
    IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote attacker to gain full...
    📅 Updated: Nov 10, 2026
  • CVE-2026-17409CVSS 9.4
    IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote attacker to execute unauthorized...
    📅 Updated: Nov 10, 2026
  • CVE-2026-17402CVSS 9.9
    IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to execute...
    📅 Updated: Nov 10, 2026
  • CVE-2026-17392CVSS 9.9
    IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to gain...
    📅 Updated: Nov 10, 2026
Powered by CVE Watchtower

Daily CyberSecurity

  • About SecurityOnline.info
  • Advertise with us
  • Announcement
  • Contact
  • Contributor Register
  • Login
  • Disclaimer
  • DCMA
  • Privacy Policy
  • About SecurityOnline.info
  • Advertise on SecurityOnline.info
  • Contact Us

When you purchase through links on our site, we may earn an affiliate commission. Here’s how it works

  • CVE Watchtower
  • CVE Statistics by Vendor 2026
  • Q3 2026 Report
  • Top Exploited CVEs
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube
© 2017 - 2026 Daily CyberSecurity. All Rights Reserved.