Skip to content
November 10, 2026
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube

Daily CyberSecurity

Zero-hour alerts. Unmatched analysis.

Primary Menu
  • Home
  • CVE Data
    • CVE Watchtower
    • Top Exploited CVEs
    • CVE Stats by Vendor
    • Q2 2026 Report
    • CVE Alerts
    • CVE Alert Settings
    • Pricing
  • Cyber Criminals
  • Data Leak
  • Free Tools
    • CVSS 3.1 Calculator
    • Certificate Viewer
    • DNS Lookup
    • Encoder & Hash Generator
    • IP / Subnet Calculator
    • Whois Lookup
  • Linux
  • Malware
  • Vulnerability
  • Submit Press Release
Light/Dark Button
PoC Exploit Released for macOS Kernel Vulnerability CVE-2025-24118 (CVSS 9.8) Apple Background Security CVE-2026-20643 Apple Background Security Improvement Apple Backdoor Apple Lawsuit, Data Exfiltration CVE-2024-44131 - CVE-2025-24118 PoC
  • Vulnerability

PoC Exploit Released for macOS Kernel Vulnerability CVE-2025-24118 (CVSS 9.8)

Do Son February 2, 2025 0

Uncover the details of CVE-2025-24118, a critical vulnerability in Apple's MacOS. Understand the risks and the patched versions.

North Korean APT Lazarus Uses Malicious npm Package to Target Developers North Korean APT Lazarus
  • Malware

North Korean APT Lazarus Uses Malicious npm Package to Target Developers

Do Son February 2, 2025 0

Discover the latest supply chain attack orchestrated by the North Korean APT Lazarus Group. Learn how the BeaverTail malware infiltrates developer environments.

CVE-2024-57376: End-of-Life D-Link Routers Vulnerable to Unauthenticated RCE CVE-2024-57376 - DSL-3788 Router Vulnerability
  • Vulnerability

CVE-2024-57376: End-of-Life D-Link Routers Vulnerable to Unauthenticated RCE

Do Son February 2, 2025 0

Critical buffer overflow vulnerability found in end-of-life D-Link routers! CVE-2024-57376 could allow attackers to execute arbitrary code. Learn more.

Devil-Traff: The New SMS Phishing Platform Exploited by Cybercriminals Devil-Traff
  • Cyber Security

Devil-Traff: The New SMS Phishing Platform Exploited by Cybercriminals

Do Son February 2, 2025 0

Discover the threat of Devil-Traff: a bulk SMS platform used by cybercriminals for phishing attacks. Learn how attackers exploit its features and tricks to deceive unsuspecting victims.

CVE-2025-0477 (CVSS 9.8): Critical Security Flaw in Rockwell Automation’s FactoryTalk AssetCentre Rockwell Automation Warning OT Security Rockwell SQLi, Industrial Safety DoS Verve Asset Manager API OT Privilege Escalation Rockwell NAT Router, Critical Auth Bypass Rockwell ICS Privilege Escalation, MSI Repair Attack CVE-2025-7353 Critical vulnerability, industrial control systems Rockwell vulnerability, ICS security Rockwell Arena, Memory Abuse Rockwell Automation, RCE Vulnerability CVE-2025-24479 and CVE-2025-24480 - CVE-2025-0477
  • Vulnerability

CVE-2025-0477 (CVSS 9.8): Critical Security Flaw in Rockwell Automation’s FactoryTalk AssetCentre

Do Son February 2, 2025 0

Rockwell Automation's FactoryTalk AssetCentre software has critical vulnerabilities (CVE-2025-0477) that pose severe risks to industrial control systems. Stay informed and protect your ICS.

The Hidden Cyber Trap: How Compromised Websites and Malicious AdTech Manipulate Users Malicious AdTech
  • Cyber Security

The Hidden Cyber Trap: How Compromised Websites and Malicious AdTech Manipulate Users

Do Son February 2, 2025 0

Unveiling the dark side of malicious AdTech: Explore the impact of deceptive ads, fake alerts, and manipulated news content on compromised websites.

CVE-2025-0851 (CVSS 9.8): Deep Java Library Vulnerability Allows Path Traversal Exploits CVE-2025-0851
  • Vulnerability

CVE-2025-0851 (CVSS 9.8): Deep Java Library Vulnerability Allows Path Traversal Exploits

Do Son February 2, 2025 0

Learn about CVE-2025-0851, a newly discovered vulnerability in DJL, and how it can leave systems open to potential attacks.

SparkRAT: A Persistent Cross-Platform Cyber Threat Targeting macOS and Beyond Mercenary Akula European Financial Targeting AI-Generated Malware React2Shell Exploit UAT-8837 Critical Infrastructure Attack APT36, BOSS Linux BRICKSTORM Malware, China Espionage Curly COMrades, MucorAgent Chinese APT - HTTP Client Tools Shuckworm Cyber Espionage
  • Cyber Security
  • Malware

SparkRAT: A Persistent Cross-Platform Cyber Threat Targeting macOS and Beyond

Do Son February 2, 2025 0

Explore the evolution of SparkRAT, a powerful tool for cybercriminals. Learn about its modular design, web-based interface, and cross-platform support.

.Gov No More: Government Domains Weaponized in Phishing Surge Layoff Phishing Scam Remcos RAT Malware Aruba Phishing, Phishing-as-a-Service PyPI, phishing CVE-2024-25608 PyPI Phishing, Credential Theft
  • Cyber Security
  • Vulnerability

.Gov No More: Government Domains Weaponized in Phishing Surge

Do Son February 2, 2025 0

Learn how threat actors are weaponizing .gov domains for phishing. Explore the vulnerabilities they exploit and the impact on security measures.

Unrestricted Access: A Simple Web Misconfiguration Exposes Critical Data Web Misconfiguration
  • Data Leak

Unrestricted Access: A Simple Web Misconfiguration Exposes Critical Data

Do Son February 2, 2025 0

Discover the risks of web misconfiguration and the severe data exposure incidents it can cause. Learn how to protect your sensitive files from unauthorized access.

CISA Warns of Hidden Backdoor in Contec CMS8000 Patient Monitors Contec CMS8000 backdoor - CVE-2025-0626 ,CVE-2025-0683
  • Vulnerability

CISA Warns of Hidden Backdoor in Contec CMS8000 Patient Monitors

Do Son February 2, 2025 0

Learn about the critical security alert issued by CISA regarding the Contec CMS8000 backdoor vulnerability in patient monitors.

Adversarial Misuse of Generative AI: How APTs Are Experimenting with AI for Cyber Operations illegal streaming networks complex criminal enterprises UAT-7290 China-nexus Espionage Adversarial Misuse of Generative AI
  • Cyber Security

Adversarial Misuse of Generative AI: How APTs Are Experimenting with AI for Cyber Operations

Do Son February 1, 2025 0

Explore the GTIG report on the adversarial misuse of generative AI by nation-state cyber actors. Learn how AI tools are being used in offensive cyber operations.

CVE-2024-56529: mailcow Patches Session Fixation Vulnerability in Web Panel CVE-2024-56529 - CVE-2025-25198
  • Vulnerability

CVE-2024-56529: mailcow Patches Session Fixation Vulnerability in Web Panel

Do Son February 1, 2025 0

Discover the CVE-2024-56529 vulnerability in mailcow and its potential impact on user sessions. Take steps to protect your account.

Fake Game Hacks on YouTube Target Kids with Malware Fake Game Hacks
  • Malware

Fake Game Hacks on YouTube Target Kids with Malware

Do Son February 1, 2025 0

Beware of fake game hacks! McAfee Labs warns about malware spread through YouTube videos offering cheats for popular games like Minecraft, Roblox, and Fortnite.

CVE-2025-24480 (CVSS 9.8): Rockwell Automation Addresses Critical Flaw in FactoryTalk View ME Rockwell Automation Warning OT Security Rockwell SQLi, Industrial Safety DoS Verve Asset Manager API OT Privilege Escalation Rockwell NAT Router, Critical Auth Bypass Rockwell ICS Privilege Escalation, MSI Repair Attack CVE-2025-7353 Critical vulnerability, industrial control systems Rockwell vulnerability, ICS security Rockwell Arena, Memory Abuse Rockwell Automation, RCE Vulnerability CVE-2025-24479 and CVE-2025-24480 - CVE-2025-0477
  • Vulnerability

CVE-2025-24480 (CVSS 9.8): Rockwell Automation Addresses Critical Flaw in FactoryTalk View ME

Do Son February 1, 2025 0

CVE-2025-24479 and CVE-2025-24480 could potentially allow attackers to execute malicious code and compromise affected systems.

Best Cloud Mining Platform in 2025, Easily Earn $30,000 Daily CVE-2024-55563 - transaction-relay jamming attack
  • Technique

Best Cloud Mining Platform in 2025, Easily Earn $30,000 Daily

Do Son February 1, 2025 0
The world of cryptocurrency mining has always been complex, requiring significant investment, technical expertise, and time. But...
Read More Read more about Best Cloud Mining Platform in 2025, Easily Earn $30,000 Daily
CVE-2024-55417: One-Click RCE Vulnerability in Voyager Admin Panel, No Patch CVE-2024-55417
  • Vulnerability

CVE-2024-55417: One-Click RCE Vulnerability in Voyager Admin Panel, No Patch

Do Son January 31, 2025 0

Critical vulnerabilities discovered in Voyager, an open-source Laravel admin panel. Learn about the CVE-2024-55417 flaws and their impact on website security.

Cyber Espionage and Influence: Unmasking APT28’s Tactics Sources and related content APT28 report
  • Cyber Security

Cyber Espionage and Influence: Unmasking APT28’s Tactics Sources and related content

Do Son January 31, 2025 0

Explore the Maverits Special Report on APT28, a notorious Russian cyber espionage group. Learn about their tactics, targets, and impact on government institutions.

CVE-2024-7695: Moxa Patches Critical Denial-of-Service Vulnerability in PT Switches Moxa Hard-Coded Credentials, Critical JWT Bypass CVE-2024-9137 and CVE-2024-9139 - CVE-2024-12297 CVE-2024-7695 CVE-2024-9404 CVE-2024-12297 CVE-2025-0415
  • Vulnerability

CVE-2024-7695: Moxa Patches Critical Denial-of-Service Vulnerability in PT Switches

Do Son January 31, 2025 0

Learn about the critical out-of-bounds write vulnerability affecting Moxa PT switches (CVE-2024-7695) and the potential impact on industrial infrastructure operations.

CVE-2024-53704 – Authentication Bypass in SonicOS: PoC Published CVE-2024-53704 PoC exploit
  • Vulnerability

CVE-2024-53704 – Authentication Bypass in SonicOS: PoC Published

Do Son January 30, 2025 0

To extract the victim's session, researchers release a Ruby proof-of-concept (PoC) exploit code for CVE-2024-53704 , which is available here.

D-Link Patches Critical Remote Code Execution Vulnerability in DSL-3788 Router CVE-2024-57376 - DSL-3788 Router Vulnerability
  • Vulnerability

D-Link Patches Critical Remote Code Execution Vulnerability in DSL-3788 Router

Do Son January 30, 2025 0

Learn about the critical vulnerability affecting D-Link DSL-3788 router and how it can allow attackers to take complete control of affected devices.

Google Play Protect: Safeguarding Billions of Users in 2024 Google Play Protect
  • Android
  • Technology

Google Play Protect: Safeguarding Billions of Users in 2024

Do Son January 30, 2025 0

Explore the strong security measures implemented by Google to protect the Android ecosystem. Discover how Google Play Protect uses AI to block malicious apps.

❮ Prev Page
Next Page ❯

Search

CVE ALERTS
📈

EPSS Spike Alerts
Catch risk spikes before they make headlines.

🎯

Custom EPSS/CVSS
Set score thresholds to effectively filter noise.

🛡️

Exploit Intel
Real-world exploit signals beyond the KEV catalog.

🐙

GitHub Issues
Auto-create alert tickets without duplication.

📬

Weekly Digest
Clean summaries, eliminating email spam.

🏷️

Watchlist Groups
Tag vulnerabilities by team (Infra/AppSec/SOC).

🔀

Smart Routing
Route chat channels based on severity levels.

🚨

RBP Tracker
Early warning detection and tracking system.

Subscribe – $7/mo or try free for 14 days →

🚨 Active Exploits in the Wild

  • CVE-2026-116606CVSS 9.3
    An authentication bypass in Barracuda Email Security Gateway versions earlier than 9.4.0.030 allows an unauthenticated remote attacker to...
    Admin intel📅 Updated: Nov 10, 2026
  • CVE-2026-125350
    Use after free in XML. Reported by anonymous on 2026-11-06. Google is aware that an exploit for CVE-2026-125350...
    Admin intel📅 Updated: Nov 10, 2026
  • CVE-2026-123751CVSS 9.8
    The WP Duplicate WordPress plugin through 1.1.11 does not properly verify a request authentication value and does not...
    Watchtower Verified📅 Updated: Nov 9, 2026
  • CVE-2026-111793CVSS 4.3
    Openwave Webtop Media Transcoder does not enforce administrator-defined file type restrictions to restrict the file-types to be converted....
    Admin intel📅 Updated: Nov 9, 2026
  • CVE-2026-114713CVSS 8.6
    The labeled-response module in UnrealIRCd 6.0.0 before 6.2.7.1 does not escape the IRCv3 "label" message tag when echoing...
    Admin intel📅 Updated: Nov 9, 2026
  • CVE-2026-116779CVSS 9.8
    Summary `sofia_presence_handle_sip_i_message()` splits the To user of an inbound SIP MESSAGE on `+` and treats the left half...
    CISA KEV📅 Added to KEV: Nov 9, 2026
  • CVE-2026-102895CVSS 9.8
    GPUStack is an open-source GPU cluster manager for AI model serving and GPU instance provisioning. Prior to 2.2.0,...
    CISA KEV📅 Added to KEV: Nov 9, 2026
  • CVE-2026-123158CVSS 8.1
    sshd in OpenSSH before 10.6p2 on Linux, when musl libc is used without PAM, lacks a workaround for...
    CISA KEV📅 Added to KEV: Nov 9, 2026
Powered by CVE Watchtower

Critical Vulnerabilities

  • CVE-2026-61949CVSS 9.3
    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Bookly Bookly bookly-responsive-appointment-booking-tool allows...
    📅 Updated: Nov 10, 2026
  • CVE-2026-13312CVSS 9.9
    A vulnerability that could allow an attacker to compromise a system.
    📅 Updated: Nov 10, 2026
  • CVE-2026-72868CVSS 9.9
    Dokploy is a free, self-hostable Platform as a Service (PaaS). Prior to 0.29.13, apps/dokploy/server/api/routers/destination.ts interpolates the accessKey, secretAccessKey,...
    📅 Updated: Nov 10, 2026
  • CVE-2026-6715CVSS 9.8
    IBM Concert 1.0 through 3.0.1.1 allows an attacker can supply crafted input that is incorporated into an operating...
    📅 Updated: Nov 10, 2026
  • CVE-2026-17403CVSS 9.0
    IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote attacker to gain full...
    📅 Updated: Nov 10, 2026
  • CVE-2026-17409CVSS 9.4
    IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote attacker to execute unauthorized...
    📅 Updated: Nov 10, 2026
  • CVE-2026-17402CVSS 9.9
    IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to execute...
    📅 Updated: Nov 10, 2026
  • CVE-2026-17392CVSS 9.9
    IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to gain...
    📅 Updated: Nov 10, 2026
Powered by CVE Watchtower

Daily CyberSecurity

  • About SecurityOnline.info
  • Advertise with us
  • Announcement
  • Contact
  • Contributor Register
  • Login
  • Disclaimer
  • DCMA
  • Privacy Policy
  • About SecurityOnline.info
  • Advertise on SecurityOnline.info
  • Contact Us

When you purchase through links on our site, we may earn an affiliate commission. Here’s how it works

  • CVE Watchtower
  • CVE Statistics by Vendor 2026
  • Q3 2026 Report
  • Top Exploited CVEs
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube
© 2017 - 2026 Daily CyberSecurity. All Rights Reserved.