Skip to content
November 10, 2026
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube

Daily CyberSecurity

Zero-hour alerts. Unmatched analysis.

Primary Menu
  • Home
  • CVE Data
    • CVE Watchtower
    • Top Exploited CVEs
    • CVE Stats by Vendor
    • Q2 2026 Report
    • CVE Alerts
    • CVE Alert Settings
    • Pricing
  • Cyber Criminals
  • Data Leak
  • Free Tools
    • CVSS 3.1 Calculator
    • Certificate Viewer
    • DNS Lookup
    • Encoder & Hash Generator
    • IP / Subnet Calculator
    • Whois Lookup
  • Linux
  • Malware
  • Vulnerability
  • Submit Press Release
Light/Dark Button
Silver Fox APT Targets Organizations with PNGPlug and ValleyRAT Malware WHILL Wheelchair Hijacking, CVE-2025-14346 MAS typosquatting malware, get.activate.win vs get.activated.win OpenShift GitOps RCE, Cluster Takeover Flaw Twonky Server, CVE-2025-13315 AI agents CVE-2024-52875 PoC
  • Cyber Security
  • Malware

Silver Fox APT Targets Organizations with PNGPlug and ValleyRAT Malware

Do Son January 20, 2025 0

Discover the ValleyRAT malware and how the Silver Fox APT group utilizes the PNGPlug loader to execute their cyber-espionage attacks.

Exploring the AI-Powered Windows Search Copilot+ PCs Feature Task Manager Ghost Process WinRE Input Fix Windows Search Copilot+ PCs
  • Windows

Exploring the AI-Powered Windows Search Copilot+ PCs Feature

Do Son January 20, 2025 0

Discover the power of AI-driven Windows search on Copilot+ PCs. Microsoft's experimental feature enhances search functionality with AI capabilities.

Oracle’s January 2025 Critical Patch Update: Addressing 320 Security Vulnerabilities Oracle Critical Patch Update 2025
  • Vulnerability

Oracle’s January 2025 Critical Patch Update: Addressing 320 Security Vulnerabilities

Do Son January 20, 2025 0

Stay informed about Oracle's upcoming Critical Patch Update for January 2025. Learn about the security patches and vulnerabilities across Oracle's product portfolio.

ChatGPT Crawler Vulnerability: DDoS Attacks via HTTP Requests ChatGPT Crawler Vulnerability
  • Vulnerability

ChatGPT Crawler Vulnerability: DDoS Attacks via HTTP Requests

Do Son January 20, 2025 0

Learn about a discovered vulnerability in ChatGPT's web crawler that allows for potential DDoS attacks on websites. Understand the implications of this flaw.

o3-mini: OpenAI’s New AI Model Coming Soon o3-mini GPT-5 GPT-4 retirement, GPT-4o ChatGPT quota, OpenAI update
  • Technology

o3-mini: OpenAI’s New AI Model Coming Soon

Do Son January 20, 2025 0

Introducing the o3-mini AI model by OpenAI. Experience improved performance and cost-efficiency with adjustable reasoning time.

TikTok Ban Extended as Trump Pushes for U.S. Equity in Joint Venture TikTok acquisition TikTok, U.S.-China deal TikTok M2, US DivestmentTrump saves TikTok
  • Technology

TikTok Ban Extended as Trump Pushes for U.S. Equity in Joint Venture

Do Son January 19, 2025 0

Learn about the recent developments regarding the TikTok ban in the U.S. and how the Trump administration has facilitated a solution.

Zero-Day Vulnerability in Windows Exploited: CVE-2024-49138 PoC Code Released CVE-2024-49138 PoC
  • Vulnerability
  • Windows

Zero-Day Vulnerability in Windows Exploited: CVE-2024-49138 PoC Code Released

Do Son January 19, 2025 0

Adding to the urgency, security researcher MrAle_98 released a proof-of-concept (PoC) exploit for CVE-2024-49138 on GitHub

Star Blizzard Shifts Tactics: Spear-Phishing Campaign Targets WhatsApp Accounts AccountDumpling Phishing Google AppSheet Abuse AI-Generated Malware PureRAT Campaign RondoDoX Botnet, Next.js React2Shell EchoGather, Paper Werewolf Salt Typhoon, Telecom Espionage BreachForums, Conor Fitzpatrick Ransomware Negotiation, DOJ Investigation MirrorFace group - Earth Kasha Emperor Dragonfly
  • Cyber Security

Star Blizzard Shifts Tactics: Spear-Phishing Campaign Targets WhatsApp Accounts

Do Son January 19, 2025 0

Uncover the latest spear-phishing campaign by the Russian threat actor Star Blizzard targeting WhatsApp accounts.

CVE-2025-2306 (CVSS 9.0): Mongoose Flaw Leaves Millions of Downloads Exposed to Search Injection CVE-2025-23061
  • Vulnerability

CVE-2025-2306 (CVSS 9.0): Mongoose Flaw Leaves Millions of Downloads Exposed to Search Injection

Do Son January 19, 2025 0

Discover the details of CVE-2025-23061, a critical vulnerability in Mongoose. Understand the potential risks it poses to MongoDB database interactions and how to protect your application.

Malicious PyPI Package Targets Discord Developers with Token Theft and Backdoor Exploit Malicious Discord PyPI Package
  • Malware

Malicious PyPI Package Targets Discord Developers with Token Theft and Backdoor Exploit

Do Son January 19, 2025 0

Beware of the malicious PyPI package targeting Discord developers. Learn how typosquatting can lead to token theft and backdoor installation.

Sneaky 2FA: A New Adversary-in-the-Middle Phishing-as-a-Service Threat micro
  • Cyber Security

Sneaky 2FA: A New Adversary-in-the-Middle Phishing-as-a-Service Threat

Do Son January 19, 2025 0

Discover the Sneaky 2FA phishing kit, a sophisticated tool that bypasses MFA to exploit Microsoft 365 accounts. Stay informed about the latest threats.

Black Basta Exploits Microsoft Teams for Phishing Attacks SloppyLemming
  • Cyber Security
  • Malware

Black Basta Exploits Microsoft Teams for Phishing Attacks

Do Son January 19, 2025 0

NVISO Labs uncovers a new phishing campaign by Black Basta. See how they employ Microsoft Teams as a tool for social engineering attacks.

Critical Vulnerabilities in QNX Software Development Platform Image Codecs Expose Systems to Attacks CVE-2024-48856
  • Vulnerability

Critical Vulnerabilities in QNX Software Development Platform Image Codecs Expose Systems to Attacks

Do Son January 19, 2025 0

Stay informed about the latest security advisory for BlackBerry's QNX Software Development Platform (SDP) and the vulnerabilities it poses.

Scammers Exploit Truth Social to Launch Phishing and Fraud Campaigns Truth Social Fraud
  • Cyber Security

Scammers Exploit Truth Social to Launch Phishing and Fraud Campaigns

Do Son January 19, 2025 0

Discover the dark side of Truth Social: scammers exploiting user trust for phishing links, investment fraud, and cyberattacks.

IoT Botnet Fuels Large-Scale DDoS Attacks Targeting Global Organizations IoT Botnet
  • Malware

IoT Botnet Fuels Large-Scale DDoS Attacks Targeting Global Organizations

Do Son January 19, 2025 0

Discover how a newly discovered IoT botnet is targeting organizations globally with large-scale DDoS attacks.

State Management Architecture. Part 2. From RTK Query to Zustand CVE-2024-31070 & CVE-2024-36491
  • Technique

State Management Architecture. Part 2. From RTK Query to Zustand

Dan Agbo January 19, 2025
This article is the second part of a series of publications by Hiveon’s leading frontend engineer Anton...
Read More Read more about State Management Architecture. Part 2. From RTK Query to Zustand
Cyber Security Services: Protecting Your Business in the Digital Age web-8989999_1280
  • Technique

Cyber Security Services: Protecting Your Business in the Digital Age

Do Son January 19, 2025 0
As the digital revolution advances, so do cyber threats to new levels. As companies adopt new digital...
Read More Read more about Cyber Security Services: Protecting Your Business in the Digital Age
CVE-2024-12297 (CVSS 9.2): Critical Authorization Vulnerability in Moxa EDS-508A Series Moxa Hard-Coded Credentials, Critical JWT Bypass CVE-2024-9137 and CVE-2024-9139 - CVE-2024-12297 CVE-2024-7695 CVE-2024-9404 CVE-2024-12297 CVE-2025-0415
  • Vulnerability

CVE-2024-12297 (CVSS 9.2): Critical Authorization Vulnerability in Moxa EDS-508A Series

Do Son January 18, 2025 0

Learn about the critical vulnerability CVE-2024-12297 affecting Moxa's EDS-508A Series Ethernet switches. Discover the potential risks and how to mitigate them.

Lazarus APT Targets Job Seekers with “Contagious Interview” Campaign Using ClickFix Technique Mercenary Akula European Financial Targeting AI-Generated Malware React2Shell Exploit UAT-8837 Critical Infrastructure Attack APT36, BOSS Linux BRICKSTORM Malware, China Espionage Curly COMrades, MucorAgent Chinese APT - HTTP Client Tools Shuckworm Cyber Espionage
  • Malware

Lazarus APT Targets Job Seekers with “Contagious Interview” Campaign Using ClickFix Technique

Do Son January 18, 2025 0

Uncover the ClickFix Technique and its use by North Korea's Lazarus APT group. Learn how this advanced social engineering method targets job seekers.

CL-UNK-0979 Exploit Zero-Day Flaw in Ivanti Connect Secure to Gain Access to Networks PAN-OS Root RCE CL-STA-1132 Exploitation Tianxin RCE CVE-2021-4473 React Native Supply Chain Attack AstrOOnauta Malware Gladinet Zero-Day, LFI RCE Chain WordPress Theme, Account Takeover CVE-2024-50623 - European Space Agency cyberattack
  • Cyber Security
  • Vulnerability

CL-UNK-0979 Exploit Zero-Day Flaw in Ivanti Connect Secure to Gain Access to Networks

Do Son January 18, 2025 0

Stay informed about the latest vulnerabilities in Ivanti products. CVE-2025-0282 and CVE-2025-0283 can allow attackers to remotely execute code and escalate privileges.

CVE-2025-0107: PoC Exploit Code Released for Palo Alto Expedition RCE Flaw Undertow Vulnerability CVE-2025-12543 CVE-2025-0107: PoC Exploit Code Undersea Cable Security, China Tech Ban
  • Vulnerability

CVE-2025-0107: PoC Exploit Code Released for Palo Alto Expedition RCE Flaw

Do Son January 17, 2025 0

Learn about the recently published technical details and PoC exploit code for CVE-2025-0107, a serious vulnerability in Palo Alto Networks' Expedition migration tool.

Real Estate Scams on the Rise in the Middle East TASPEN, mobile malware North Korean IT Worker Fraud
  • Cyber Security

Real Estate Scams on the Rise in the Middle East

Do Son January 17, 2025 0

Beware of real estate scams in the Middle East. Learn how fraudsters exploit online listings, targeting expats and newcomers.

❮ Prev Page
Next Page ❯

Search

CVE ALERTS
📈

EPSS Spike Alerts
Catch risk spikes before they make headlines.

🎯

Custom EPSS/CVSS
Set score thresholds to effectively filter noise.

🛡️

Exploit Intel
Real-world exploit signals beyond the KEV catalog.

🐙

GitHub Issues
Auto-create alert tickets without duplication.

📬

Weekly Digest
Clean summaries, eliminating email spam.

🏷️

Watchlist Groups
Tag vulnerabilities by team (Infra/AppSec/SOC).

🔀

Smart Routing
Route chat channels based on severity levels.

🚨

RBP Tracker
Early warning detection and tracking system.

Subscribe – $7/mo or try free for 14 days →

🚨 Active Exploits in the Wild

  • CVE-2026-116606CVSS 9.3
    An authentication bypass in Barracuda Email Security Gateway versions earlier than 9.4.0.030 allows an unauthenticated remote attacker to...
    Admin intel📅 Updated: Nov 10, 2026
  • CVE-2026-125350
    Use after free in XML. Reported by anonymous on 2026-11-06. Google is aware that an exploit for CVE-2026-125350...
    Admin intel📅 Updated: Nov 10, 2026
  • CVE-2026-123751CVSS 9.8
    The WP Duplicate WordPress plugin through 1.1.11 does not properly verify a request authentication value and does not...
    Watchtower Verified📅 Updated: Nov 9, 2026
  • CVE-2026-111793CVSS 4.3
    Openwave Webtop Media Transcoder does not enforce administrator-defined file type restrictions to restrict the file-types to be converted....
    Admin intel📅 Updated: Nov 9, 2026
  • CVE-2026-114713CVSS 8.6
    The labeled-response module in UnrealIRCd 6.0.0 before 6.2.7.1 does not escape the IRCv3 "label" message tag when echoing...
    Admin intel📅 Updated: Nov 9, 2026
  • CVE-2026-116779CVSS 9.8
    Summary `sofia_presence_handle_sip_i_message()` splits the To user of an inbound SIP MESSAGE on `+` and treats the left half...
    CISA KEV📅 Added to KEV: Nov 9, 2026
  • CVE-2026-102895CVSS 9.8
    GPUStack is an open-source GPU cluster manager for AI model serving and GPU instance provisioning. Prior to 2.2.0,...
    CISA KEV📅 Added to KEV: Nov 9, 2026
  • CVE-2026-123158CVSS 8.1
    sshd in OpenSSH before 10.6p2 on Linux, when musl libc is used without PAM, lacks a workaround for...
    CISA KEV📅 Added to KEV: Nov 9, 2026
Powered by CVE Watchtower

Critical Vulnerabilities

  • CVE-2026-119446CVSS 9.4
    Session Fixation vulnerability in the CLI login flow in nerves-hub nerves_hub_web allows an unauthenticated attacker to obtain an...
    📅 Updated: Nov 10, 2026
  • CVE-2026-61949CVSS 9.3
    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Bookly Bookly bookly-responsive-appointment-booking-tool allows...
    📅 Updated: Nov 10, 2026
  • CVE-2026-13312CVSS 9.9
    A vulnerability that could allow an attacker to compromise a system.
    📅 Updated: Nov 10, 2026
  • CVE-2026-72868CVSS 9.9
    Dokploy is a free, self-hostable Platform as a Service (PaaS). Prior to 0.29.13, apps/dokploy/server/api/routers/destination.ts interpolates the accessKey, secretAccessKey,...
    📅 Updated: Nov 10, 2026
  • CVE-2026-6715CVSS 9.8
    IBM Concert 1.0 through 3.0.1.1 allows an attacker can supply crafted input that is incorporated into an operating...
    📅 Updated: Nov 10, 2026
  • CVE-2026-17403CVSS 9.0
    IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote attacker to gain full...
    📅 Updated: Nov 10, 2026
  • CVE-2026-17409CVSS 9.4
    IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote attacker to execute unauthorized...
    📅 Updated: Nov 10, 2026
  • CVE-2026-17402CVSS 9.9
    IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote authenticated attacker to execute...
    📅 Updated: Nov 10, 2026
Powered by CVE Watchtower

Daily CyberSecurity

  • About SecurityOnline.info
  • Advertise with us
  • Announcement
  • Contact
  • Contributor Register
  • Login
  • Disclaimer
  • DCMA
  • Privacy Policy
  • About SecurityOnline.info
  • Advertise on SecurityOnline.info
  • Contact Us

When you purchase through links on our site, we may earn an affiliate commission. Here’s how it works

  • CVE Watchtower
  • CVE Statistics by Vendor 2026
  • Q3 2026 Report
  • Top Exploited CVEs
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube
© 2017 - 2026 Daily CyberSecurity. All Rights Reserved.