Skip to content
November 10, 2026
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube

Daily CyberSecurity

Zero-hour alerts. Unmatched analysis.

Primary Menu
  • Home
  • CVE Data
    • CVE Watchtower
    • Top Exploited CVEs
    • CVE Stats by Vendor
    • Q2 2026 Report
    • CVE Alerts
    • CVE Alert Settings
    • Pricing
  • Cyber Criminals
  • Data Leak
  • Free Tools
    • CVSS 3.1 Calculator
    • Certificate Viewer
    • DNS Lookup
    • Encoder & Hash Generator
    • IP / Subnet Calculator
    • Whois Lookup
  • Linux
  • Malware
  • Vulnerability
  • Submit Press Release
Light/Dark Button
Lazarus Group’s Evolving Arsenal: New Malware and Infection Chains Unveiled CookiePlus
  • Cyber Security
  • Malware

Lazarus Group’s Evolving Arsenal: New Malware and Infection Chains Unveiled

Do Son December 22, 2024 0

Discover the sophisticated tactics of the Lazarus Group in their latest DeathNote Campaign. Learn how they exploit fake job opportunities to infiltrate defense, aerospace, cryptocurrency, and nuclear sectors.

LNK Files and SSH Commands: The New Arsenal of Advanced Cyber Attacks PromptMink Campaign AI Agent Deception LIMINAL PANDA UNC1549 DLL Hijacking, VDI Breakout
  • Cyber Security

LNK Files and SSH Commands: The New Arsenal of Advanced Cyber Attacks

Do Son December 22, 2024 0

Uncover the stealthy techniques threat actors are using: LNK files and SSH commands in advanced cyberattacks.

New Skuld Infostealer Campaign Unveiled in npm Ecosystem PyPI Packages Leak
  • Malware

New Skuld Infostealer Campaign Unveiled in npm Ecosystem

Do Son December 22, 2024 0

Learn about the Skuld infostealer malware and its impact on the npm ecosystem. Discover how deceptive packages targeted developers and organizations.

Cybercriminals Go Mobile: Executives Targeted in Advanced Phishing Campaigns BiDi Swap, phishing attacks Cybersecurity Threats
  • Cyber Security

Cybercriminals Go Mobile: Executives Targeted in Advanced Phishing Campaigns

Do Son December 22, 2024 0

New report reveals advanced mobile spear phishing attacks targeting corporate executives. Learn about the evolving dangers of phishing and how to protect your mobile devices.

NotLockBit: New Cross-Platform Ransomware Threatens Windows and macOS NotLockBit Ransomware
  • Malware

NotLockBit: New Cross-Platform Ransomware Threatens Windows and macOS

Do Son December 22, 2024 0

Discover NotLockBit, a new cross-platform ransomware strain that mimics LockBit. Learn about its advanced capabilities and targeted file encryption.

The Fastest Way to Power Level in PoE 2 — Carry Services Explained Quickly & Simply gamer-6022003_1280
  • Technique

The Fastest Way to Power Level in PoE 2 — Carry Services Explained Quickly & Simply

Do Son December 22, 2024 0

The early leveling process in Path of Exile 2 can be repetitive, especially if you’ve played through similar scenarios in the original game

From .NET to C++: BellaCiao Malware Evolves with BellaCPP BellaCiao malware
  • Malware

From .NET to C++: BellaCiao Malware Evolves with BellaCPP

Do Son December 21, 2024 0

Learn about the newest variant of BellaCiao malware - BellaCPP. Discover its shift from .NET to C++ and its stealthy persistence capabilities.

CVE-2024-51466 (CVSS 9.0): Critical Vulnerability Found in IBM Cognos Analytics CVE-2024-51466 and CVE-2024-40695
  • Vulnerability

CVE-2024-51466 (CVSS 9.0): Critical Vulnerability Found in IBM Cognos Analytics

Do Son December 21, 2024 0

Learn about the severe vulnerabilities in IBM Cognos Analytics platform (CVE-2024-51466 and CVE-2024-40695) and how to mitigate the risks.

LummApp Malware Campaign: Researcher Exposes Advanced Data Stealing Operation APT31 & APT27 in EastWind campaign
  • Cyber Security
  • Malware

LummApp Malware Campaign: Researcher Exposes Advanced Data Stealing Operation

Do Son December 21, 2024 0

Unveiling the LummApp malware campaign: a sophisticated threat employing DLL side-loading and browser extension-based attacks to exfiltrate sensitive data.

Critical Flaws in Rockwell Automation PowerMonitor 1000 Devices: CVSS Scores Hit 9.8/10 Rockwell Automation ThinManager ThinServer CVE-2024-7988 CVE-2025-1449
  • Vulnerability

Critical Flaws in Rockwell Automation PowerMonitor 1000 Devices: CVSS Scores Hit 9.8/10

Do Son December 20, 2024 0

Protect your Rockwell Automation PowerMonitor 1000 devices from critical vulnerabilities CVE-2024-12371, CVE-2024-12372, and CVE-2024-12373. Learn how to secure your systems.

Diicot Threat Group Targets Linux with Advanced Malware Campaign Operation IconCat, UNG0801 AFP cyberattack -NetWalker Ransomware VShell RAT
  • Linux
  • Malware

Diicot Threat Group Targets Linux with Advanced Malware Campaign

Do Son December 20, 2024 0

Discover the latest threat from the Diicot threat group. Learn about their sophisticated malware campaign targeting Linux environments.

Tax-Themed Campaign Exploits Windows MSC Files to Deliver Stealthy Backdoor Operation Kraken - cryptojacking
  • Cyber Security
  • Malware

Tax-Themed Campaign Exploits Windows MSC Files to Deliver Stealthy Backdoor

Do Son December 20, 2024 0

Uncover the FLUX#CONSOLE campaign and its stealthy backdoor. Learn how attackers are using tax-themed phishing emails to deploy a sophisticated phishing campaign.

Romanian National Sentenced to 20 Years for NetWalker Ransomware Attacks Operation IconCat, UNG0801 AFP cyberattack -NetWalker Ransomware VShell RAT
  • Cyber Security

Romanian National Sentenced to 20 Years for NetWalker Ransomware Attacks

Do Son December 19, 2024 0

Learn about the case of a Romanian man sentenced to 20 years for his role in the devastating NetWalker ransomware attacks.

CVE-2024-12727 and More: Sophos Issues Urgent Firewall Security Update CVE-2024-12727 CVE-2024-12728 CVE-2024-12729
  • Vulnerability

CVE-2024-12727 and More: Sophos Issues Urgent Firewall Security Update

Do Son December 19, 2024 0

Discover the significant risks posed by the Sophos Firewall vulnerabilities CVE-2024-12727, CVE-2024-12728, and CVE-2024-12729. Stay updated and secure your network.

PoC Exploit Released for Databricks Remote Code Execution Vulnerability CVE-2024-49194 CVE-2024-49194 PoC
  • Vulnerability

PoC Exploit Released for Databricks Remote Code Execution Vulnerability CVE-2024-49194

Do Son December 19, 2024 0

Stay updated on the latest security vulnerability (CVE-2024-49194) affecting the Databricks JDBC Driver. Understand the risks and learn how to mitigate them.

Phishing Campaign Targets European Companies with Fake HubSpot and DocuSign Forms HubSpot phishing campaign
  • Cyber Security

Phishing Campaign Targets European Companies with Fake HubSpot and DocuSign Forms

Do Son December 19, 2024 0

Beware of the HubSpot phishing campaign targeting European companies. Learn how cybercriminals are using fake forms and malicious PDFs to compromise Microsoft Azure infrastructures.

CVE-2024-49576 and CVE-2024-47810: Foxit Addresses Remote Code Execution Flaws CVE-2024-49576 and CVE-2024-47810
  • Vulnerability

CVE-2024-49576 and CVE-2024-47810: Foxit Addresses Remote Code Execution Flaws

Do Son December 19, 2024 0

Stay safe with the latest security update for Foxit PDF Reader and Editor. Resolve vulnerabilities, protect against remote attacks, and ensure data confidentiality.

TA397 Leverages Sophisticated Spearphishing Techniques to Deploy Malware in Defense Sector TEMPEST attacks
  • Cyber Security
  • Malware

TA397 Leverages Sophisticated Spearphishing Techniques to Deploy Malware in Defense Sector

Do Son December 19, 2024 0

Discover the tactics used by TA397, a South Asia-based APT group, in their spearphishing campaign targeting the defense sector.

Malicious App Found on Amazon Appstore Masquerades as Health Tool Fiverr Data Leak Claude Code Leak Anthropic DMCA Takedown Coupang 33.7M Breach South Korea Data Leak Red Hat Breach, Customer Data Theft Farmers Insurance, Salesforce ESLint Plugin -Mamont Android banking Trojan
  • Malware

Malicious App Found on Amazon Appstore Masquerades as Health Tool

Do Son December 19, 2024 0

Stay safe on the Amazon Appstore: Learn how a seemingly innocent BMI calculation app can compromise your privacy.

Beware of Malicious Extensions: Researcher Exposes VSCode Marketplace Threats MuddyWater APT ANY.RUN security incident
  • Malware

Beware of Malicious Extensions: Researcher Exposes VSCode Marketplace Threats

Do Son December 19, 2024 0

Unveiling a new threat in the VSCode Marketplace: a malicious campaign targeting cryptocurrency users and impersonating popular applications like Zoom.

CVE-2024-49775 (CVSS 9.8): Critical Vulnerability in Siemens UMC Exposes Systems to Remote Exploitation ROS# Path Traversal CVE-2026-41551 Siemens SIMATIC Auth Bypass, CVE-2025-40771 CVE-2024-22039 & CVE-2024-49775 CVE-2024-56336
  • Vulnerability

CVE-2024-49775 (CVSS 9.8): Critical Vulnerability in Siemens UMC Exposes Systems to Remote Exploitation

Do Son December 19, 2024 0

Learn about the critical heap-based buffer overflow vulnerability (CVE-2024-49775) in Siemens User Management Component (UMC) and its potential impact on industrial and enterprise environments.

cShell DDoS Bot Exploits Poorly Managed Linux SSH Servers exfiltrating AWS credentials - fabrice package
  • Malware

cShell DDoS Bot Exploits Poorly Managed Linux SSH Servers

Do Son December 19, 2024 0

Discover cShell, a new strain of DDoS malware targeting poorly managed Linux SSH servers. Learn how it exploits weak credentials to turn servers into DDoS bots.

❮ Prev Page
Next Page ❯

Search

CVE ALERTS
📈

EPSS Spike Alerts
Catch risk spikes before they make headlines.

🎯

Custom EPSS/CVSS
Set score thresholds to effectively filter noise.

🛡️

Exploit Intel
Real-world exploit signals beyond the KEV catalog.

🐙

GitHub Issues
Auto-create alert tickets without duplication.

📬

Weekly Digest
Clean summaries, eliminating email spam.

🏷️

Watchlist Groups
Tag vulnerabilities by team (Infra/AppSec/SOC).

🔀

Smart Routing
Route chat channels based on severity levels.

🚨

RBP Tracker
Early warning detection and tracking system.

Subscribe – $7/mo or try free for 14 days →

🚨 Active Exploits in the Wild

  • CVE-2026-116606CVSS 9.3
    An authentication bypass in Barracuda Email Security Gateway versions earlier than 9.4.0.030 allows an unauthenticated remote attacker to...
    Admin intel📅 Updated: Nov 10, 2026
  • CVE-2026-125350
    Use after free in XML. Reported by anonymous on 2026-11-06. Google is aware that an exploit for CVE-2026-125350...
    Admin intel📅 Updated: Nov 10, 2026
  • CVE-2026-123751CVSS 9.8
    The WP Duplicate WordPress plugin through 1.1.11 does not properly verify a request authentication value and does not...
    Watchtower Verified📅 Updated: Nov 9, 2026
  • CVE-2026-111793CVSS 4.3
    Openwave Webtop Media Transcoder does not enforce administrator-defined file type restrictions to restrict the file-types to be converted....
    Admin intel📅 Updated: Nov 9, 2026
  • CVE-2026-114713CVSS 8.6
    The labeled-response module in UnrealIRCd 6.0.0 before 6.2.7.1 does not escape the IRCv3 "label" message tag when echoing...
    Admin intel📅 Updated: Nov 9, 2026
  • CVE-2026-116779CVSS 9.8
    Summary `sofia_presence_handle_sip_i_message()` splits the To user of an inbound SIP MESSAGE on `+` and treats the left half...
    CISA KEV📅 Added to KEV: Nov 9, 2026
  • CVE-2026-102895CVSS 9.8
    GPUStack is an open-source GPU cluster manager for AI model serving and GPU instance provisioning. Prior to 2.2.0,...
    CISA KEV📅 Added to KEV: Nov 9, 2026
  • CVE-2026-123158CVSS 8.1
    sshd in OpenSSH before 10.6p2 on Linux, when musl libc is used without PAM, lacks a workaround for...
    CISA KEV📅 Added to KEV: Nov 9, 2026
Powered by CVE Watchtower

Critical Vulnerabilities

  • CVE-2026-91341CVSS 9.1
    Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Clean Content SDK)....
    📅 Updated: Nov 10, 2026
  • CVE-2026-63017CVSS 9.4
    Incorrect authorization in PowerSYSTEM Center allows a low-privileged, authenticated user to access resources normally limited to administrators.
    📅 Updated: Nov 10, 2026
  • CVE-2026-63774CVSS 9.4
    Insufficient input validation in the PowerSYSTEM Center report designer allows an authenticated user to execute unauthorized SQL commands.
    📅 Updated: Nov 10, 2026
  • CVE-2026-123025CVSS 9.4
    An OS Command Injection vulnerability was discovered in the Google Cloud DNS validation module of the OPNsense os-acme-client...
    📅 Updated: Nov 10, 2026
  • CVE-2026-123218CVSS 9.8
    IBM Aspera Faspex 5.0.0 through 5.0.19 could allow an authorized user to craft a specific message to bypass...
    CISA KEV📅 Added to KEV: Nov 9, 2026📅 Updated: Nov 10, 2026
  • CVE-2026-82509CVSS 9.1
    V programming language standard library net.http through version 0.5.2 prior to commit 4077484 contains a TLS certificate validation...
    📅 Updated: Nov 10, 2026
  • CVE-2026-8376CVSS 9.8
    Perl versions before 5.40.5-RC1, from 5.41.0 before 5.42.3-RC1, from 5.43.0 before 5.43.11 have a heap buffer overflow when...
    📅 Updated: Nov 10, 2026
  • CVE-2026-57433CVSS 9.8
    Storable versions before 3.41 for Perl have a signed integer overflow when deserializing a crafted SX_HOOK record. retrieve_hook_common...
    📅 Updated: Nov 10, 2026
Powered by CVE Watchtower

Daily CyberSecurity

  • About SecurityOnline.info
  • Advertise with us
  • Announcement
  • Contact
  • Contributor Register
  • Login
  • Disclaimer
  • DCMA
  • Privacy Policy
  • About SecurityOnline.info
  • Advertise on SecurityOnline.info
  • Contact Us

When you purchase through links on our site, we may earn an affiliate commission. Here’s how it works

  • CVE Watchtower
  • CVE Statistics by Vendor 2026
  • Q3 2026 Report
  • Top Exploited CVEs
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube
© 2017 - 2026 Daily CyberSecurity. All Rights Reserved.