Skip to content
November 10, 2026
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube

Daily CyberSecurity

Zero-hour alerts. Unmatched analysis.

Primary Menu
  • Home
  • CVE Data
    • CVE Watchtower
    • Top Exploited CVEs
    • CVE Stats by Vendor
    • Q2 2026 Report
    • CVE Alerts
    • CVE Alert Settings
    • Pricing
  • Cyber Criminals
  • Data Leak
  • Free Tools
    • CVSS 3.1 Calculator
    • Certificate Viewer
    • DNS Lookup
    • Encoder & Hash Generator
    • IP / Subnet Calculator
    • Whois Lookup
  • Linux
  • Malware
  • Vulnerability
  • Submit Press Release
Light/Dark Button
CVE-2024-52320 and More: Planet Switches Expose Networks to Attack Screenshot 2025-01-20 161709
  • Vulnerability

CVE-2024-52320 and More: Planet Switches Expose Networks to Attack

Do Son January 21, 2025 0

Discover the critical vulnerabilities in Planet WGS-804HPT switches and the impact of CVE-2024-52320. Learn about the importance of firmware security.

From Dream Jobs to Dangerous Passwords: Lazarus Group’s LinkedIn Attacks Operation Dream Job
  • Cyber Security

From Dream Jobs to Dangerous Passwords: Lazarus Group’s LinkedIn Attacks

Do Son January 21, 2025 0

Beware of LinkedIn as an initial infection vector for cybercriminals. Learn about Lazarus Group's Operation Dream Job and how they exploit legitimate accounts.

Black Myth: Wukong DDoS Attackers Return with New AIRASHI Botnet AISURU botnet, known as AIRASHI
  • Malware

Black Myth: Wukong DDoS Attackers Return with New AIRASHI Botnet

Do Son January 21, 2025 0

Uncover the dangerous world of botnets with the emergence of the AIRASHI botnet. Explore its relentless evolution and the 0-day vulnerability it exploits.

NTLMv1 Group Policy Bypass Discovered: A Wake-Up Call for Active Directory Administrators Screenshot 2025-01-18 164933
  • Vulnerability

NTLMv1 Group Policy Bypass Discovered: A Wake-Up Call for Active Directory Administrators

Do Son January 21, 2025 0

Discover the security risks of NTLMv1 authentication protocol and how attackers can bypass Active Directory policies.

DLL Sideloading & Proxying: New Campaign Delivers Sliver Implants to German Targets exfiltrating AWS credentials - fabrice package
  • Cyber Security

DLL Sideloading & Proxying: New Campaign Delivers Sliver Implants to German Targets

Do Son January 21, 2025 0

Learn about the ongoing cyber campaign targeting German organizations. Explore the advanced tactics, including DLL proxying, used by the attackers.

Meta’s Advertising System Exploited by Russian Propaganda Network Meta Horizon Worlds Quest shutdown Meta AI, Child Safety Meta Robotics, Android of Robotics Meta AI, Llama 4.X Meta, AI regulation Meta AI, Data Center Impact Meta AI, Superintelligence Meta Copyrighted Data AI chatbot
  • Cyber Security

Meta’s Advertising System Exploited by Russian Propaganda Network

Do Son January 21, 2025 0

Unveiling the exploitation of Meta's advertising infrastructure by a sanctioned Russian IT firm. Learn about the Doppelgänger operation and its tactics to manipulate public opinion.

ModiLoader Malware Leveraging CAB Header Batch Files to Evade Detection SonicWall Reconnaissance Akira Ransomware residential proxy malware TraderTraitor BreachForums Honeypot, French Interior Ministry Leak
  • Malware

ModiLoader Malware Leveraging CAB Header Batch Files to Evade Detection

Do Son January 21, 2025 0

Learn about the ModiLoader malware distribution tactic: how it evades email security and targets victims through phishing emails.

TikTok’s U.S. Ban Postponed: ByteDance Scrambles for a Long-Term Solution TikTok's U.S. Ban Postponed
  • Technology

TikTok’s U.S. Ban Postponed: ByteDance Scrambles for a Long-Term Solution

Do Son January 21, 2025 0

Trump's executive order postpones TikTok ban in the U.S. for at least 75 days, allowing the platform to resume services. Read more about the latest developments.

Homebrew Phishing Site Appears in Google Search, Raising Concerns Homebrew Phishing Site
  • Malware

Homebrew Phishing Site Appears in Google Search, Raising Concerns

Do Son January 21, 2025 0

Beware of a recent phishing website targeting Homebrew, a popular macOS package manager. Learn how this incident exposes flaws in Google's ad system.

KB5052819: Fixing Boot Issues on Windows Server 2022 Windows 10 extended support Windows 10 MSMQ Bug, KB5071546 Write Permissions Windows 10 EOL, LTSB Support Windows User Base, Active Devices KB5052819
  • Windows

KB5052819: Fixing Boot Issues on Windows Server 2022

Do Son January 21, 2025 0

Learn about the latest Windows Server 2022 update, KB5052819, addressing booting issues related to NUMA architecture. Improve system performance in enterprise environments.

Google Requires JavaScript for Search: Bots and Crawlers Impacted Google Search JavaScript
  • Technology

Google Requires JavaScript for Search: Bots and Crawlers Impacted

Do Son January 21, 2025 0

Discover the new security measures implemented by Google for its search engine. Find out why enabling JavaScript is crucial for accessing Google Search.

Top 3 Malware Targeting Businesses in the Last 12 Months Top Malware
  • Malware

Top 3 Malware Targeting Businesses in the Last 12 Months

Do Son January 21, 2025 0

Discover the top three malware families that caused havoc in the cybersecurity landscape in 2024. Learn how to defend against Lumma, Agent Tesla, and AsyncRAT.

CVE-2025-0411: 7-Zip Security Vulnerability Enables Code Execution – Update Now 7-Zip heap buffer overflow CVE-2025-0411 7-Zip path traversal
  • Vulnerability

CVE-2025-0411: 7-Zip Security Vulnerability Enables Code Execution – Update Now

Do Son January 20, 2025 0

Find out how a flaw in 7-Zip could have exposed Windows to malware attacks. Learn about the high-risk CVE-2025-0411 vulnerability.

TP-Link Vulnerability: PoC Exploit for CVE-2024-54887 Reveals Remote Code Execution Risks CVE-2024-54887 PoC exploit
  • Vulnerability

TP-Link Vulnerability: PoC Exploit for CVE-2024-54887 Reveals Remote Code Execution Risks

Do Son January 20, 2025 0

Critical vulnerability in TP-Link TL-WR940N routers: learn about CVE-2024-54887 and the risk it poses for your network security.

CVE-2025-22146 (CVSS 9.1): Critical Sentry Vulnerability Allowed Account Takeovers CVE-2025-22146
  • Vulnerability

CVE-2025-22146 (CVSS 9.1): Critical Sentry Vulnerability Allowed Account Takeovers

Do Son January 20, 2025 0

Learn about the CVE-2025-22146 vulnerability in Sentry's SAML SSO implementation that could have allowed attackers to hijack user accounts.

IntelBroker’s Digital Trail: OSINT Analysis Exposes Cybercriminal’s Operations TanStack Typosquatting npm Supply Chain Attack Axios Supply Chain Attack npm Poisoning eScan Supply Chain Attack Antivirus Compromise APT-36, NCERT WhatsApp Advisory FBI alert, Salesforce Salt Typhoon, APT group ConnectWise ScreenConnect hack Nation-state cyberattack FortiGate Leak - zkLend vulnerability - TRIPLESTRENGTH Threat Actor Group Dark Storm
  • Cyber Security
  • Data Leak

IntelBroker’s Digital Trail: OSINT Analysis Exposes Cybercriminal’s Operations

Do Son January 20, 2025 0

Uncover the operations and tactics of IntelBroker, a notorious figure in the cybercrime world, known for high-profile data breaches and ransomware attacks.

Bluesky Launches Trending Videos to Compete with TikTok’s Short-Video Market Bluesky Trending Videos
  • Technology

Bluesky Launches Trending Videos to Compete with TikTok’s Short-Video Market

Do Son January 20, 2025 0

Learn about Bluesky's new Trending Videos feature, offering TikTok-style short videos. Explore the world of vertically formatted content.

IBM Sterling Secure Proxy Faces Multiple Critical Vulnerabilities: A Call for Immediate Action CVE-2024-41783 & CVE-2024-38337
  • Vulnerability

IBM Sterling Secure Proxy Faces Multiple Critical Vulnerabilities: A Call for Immediate Action

Do Son January 20, 2025 0

Discover the critical vulnerabilities affecting IBM Sterling Secure Proxy. Learn about CVE-2024-41783 and CVE-2024-38337 and their potential impact on data security.

Gootloader Malware Expands Its Reach with Advanced Social Engineering and SEO Poisoning SloppyLemming
  • Malware

Gootloader Malware Expands Its Reach with Advanced Social Engineering and SEO Poisoning

Do Son January 20, 2025 0

Uncover the secrets of Gootloader malware. Explore its use of poisoned SEO and compromised WordPress websites to deliver malicious payloads.

OWASP Unveils Top 10 Smart Contract Vulnerabilities for 2025 O
  • Vulnerability

OWASP Unveils Top 10 Smart Contract Vulnerabilities for 2025

Do Son January 20, 2025 0

Discover the top 10 vulnerabilities affecting smart contracts in 2025 according to OWASP. Learn how to mitigate risks and secure your decentralized ecosystem.

MintsLoader Campaign Targets Critical Sectors with Sophisticated Malware Delivery StealC operator panel
  • Malware

MintsLoader Campaign Targets Critical Sectors with Sophisticated Malware Delivery

Do Son January 20, 2025 0

Stay informed about the MintsLoader malware campaign and its impact on the Electricity, Oil & Gas, and Law Firms & Legal Services industries.

US Sanctions Chinese Hackers for Cyber Espionage Campaign IARPA Research Security Data Abyss Report Telecom threat, Secret Service cybersecurity news - Cyber Espionage Campaign
  • Cyber Security

US Sanctions Chinese Hackers for Cyber Espionage Campaign

Do Son January 20, 2025 0

Learn about the cyber espionage campaign targeting U.S. government systems and critical infrastructure. Sanctions imposed on Chinese entities.

❮ Prev Page
Next Page ❯

Search

CVE ALERTS
📈

EPSS Spike Alerts
Catch risk spikes before they make headlines.

🎯

Custom EPSS/CVSS
Set score thresholds to effectively filter noise.

🛡️

Exploit Intel
Real-world exploit signals beyond the KEV catalog.

🐙

GitHub Issues
Auto-create alert tickets without duplication.

📬

Weekly Digest
Clean summaries, eliminating email spam.

🏷️

Watchlist Groups
Tag vulnerabilities by team (Infra/AppSec/SOC).

🔀

Smart Routing
Route chat channels based on severity levels.

🚨

RBP Tracker
Early warning detection and tracking system.

Subscribe – $7/mo or try free for 14 days →

🚨 Active Exploits in the Wild

  • CVE-2026-116606CVSS 9.3
    An authentication bypass in Barracuda Email Security Gateway versions earlier than 9.4.0.030 allows an unauthenticated remote attacker to...
    Admin intel📅 Updated: Nov 10, 2026
  • CVE-2026-125350
    Use after free in XML. Reported by anonymous on 2026-11-06. Google is aware that an exploit for CVE-2026-125350...
    Admin intel📅 Updated: Nov 10, 2026
  • CVE-2026-123751CVSS 9.8
    The WP Duplicate WordPress plugin through 1.1.11 does not properly verify a request authentication value and does not...
    Watchtower Verified📅 Updated: Nov 9, 2026
  • CVE-2026-111793CVSS 4.3
    Openwave Webtop Media Transcoder does not enforce administrator-defined file type restrictions to restrict the file-types to be converted....
    Admin intel📅 Updated: Nov 9, 2026
  • CVE-2026-114713CVSS 8.6
    The labeled-response module in UnrealIRCd 6.0.0 before 6.2.7.1 does not escape the IRCv3 "label" message tag when echoing...
    Admin intel📅 Updated: Nov 9, 2026
  • CVE-2026-116779CVSS 9.8
    Summary `sofia_presence_handle_sip_i_message()` splits the To user of an inbound SIP MESSAGE on `+` and treats the left half...
    CISA KEV📅 Added to KEV: Nov 9, 2026
  • CVE-2026-102895CVSS 9.8
    GPUStack is an open-source GPU cluster manager for AI model serving and GPU instance provisioning. Prior to 2.2.0,...
    CISA KEV📅 Added to KEV: Nov 9, 2026
  • CVE-2026-123158CVSS 8.1
    sshd in OpenSSH before 10.6p2 on Linux, when musl libc is used without PAM, lacks a workaround for...
    CISA KEV📅 Added to KEV: Nov 9, 2026
Powered by CVE Watchtower

Critical Vulnerabilities

  • CVE-2026-119446CVSS 9.4
    Session Fixation vulnerability in the CLI login flow in nerves-hub nerves_hub_web allows an unauthenticated attacker to obtain an...
    📅 Updated: Nov 10, 2026
  • CVE-2026-61949CVSS 9.3
    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Bookly Bookly bookly-responsive-appointment-booking-tool allows...
    📅 Updated: Nov 10, 2026
  • CVE-2026-13312CVSS 9.9
    A vulnerability that could allow an attacker to compromise a system.
    📅 Updated: Nov 10, 2026
  • CVE-2026-72868CVSS 9.9
    Dokploy is a free, self-hostable Platform as a Service (PaaS). Prior to 0.29.13, apps/dokploy/server/api/routers/destination.ts interpolates the accessKey, secretAccessKey,...
    📅 Updated: Nov 10, 2026
  • CVE-2026-6715CVSS 9.8
    IBM Concert 1.0 through 3.0.1.1 allows an attacker can supply crafted input that is incorporated into an operating...
    📅 Updated: Nov 10, 2026
  • CVE-2026-17403CVSS 9.0
    IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote attacker to gain full...
    📅 Updated: Nov 10, 2026
  • CVE-2026-17409CVSS 9.4
    IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote attacker to execute unauthorized...
    📅 Updated: Nov 10, 2026
  • CVE-2026-17402CVSS 9.9
    IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to execute...
    📅 Updated: Nov 10, 2026
Powered by CVE Watchtower

Daily CyberSecurity

  • About SecurityOnline.info
  • Advertise with us
  • Announcement
  • Contact
  • Contributor Register
  • Login
  • Disclaimer
  • DCMA
  • Privacy Policy
  • About SecurityOnline.info
  • Advertise on SecurityOnline.info
  • Contact Us

When you purchase through links on our site, we may earn an affiliate commission. Here’s how it works

  • CVE Watchtower
  • CVE Statistics by Vendor 2026
  • Q3 2026 Report
  • Top Exploited CVEs
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube
© 2017 - 2026 Daily CyberSecurity. All Rights Reserved.