Skip to content
November 10, 2026
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube

Daily CyberSecurity

Zero-hour alerts. Unmatched analysis.

Primary Menu
  • Home
  • CVE Data
    • CVE Watchtower
    • Top Exploited CVEs
    • CVE Stats by Vendor
    • Q2 2026 Report
    • CVE Alerts
    • CVE Alert Settings
    • Pricing
  • Cyber Criminals
  • Data Leak
  • Free Tools
    • CVSS 3.1 Calculator
    • Certificate Viewer
    • DNS Lookup
    • Encoder & Hash Generator
    • IP / Subnet Calculator
    • Whois Lookup
  • Linux
  • Malware
  • Vulnerability
  • Submit Press Release
Light/Dark Button
cShell DDoS Bot Exploits Poorly Managed Linux SSH Servers exfiltrating AWS credentials - fabrice package
  • Malware

cShell DDoS Bot Exploits Poorly Managed Linux SSH Servers

Do Son December 19, 2024 0

Discover cShell, a new strain of DDoS malware targeting poorly managed Linux SSH servers. Learn how it exploits weak credentials to turn servers into DDoS bots.

Earth Koshchei’s Rogue RDP Campaign: A Sophisticated APT Attack Targets Governments and Enterprises threat group Earth Koshchei
  • Cyber Security

Earth Koshchei’s Rogue RDP Campaign: A Sophisticated APT Attack Targets Governments and Enterprises

Do Son December 19, 2024 0

Discover the espionage operations of Earth Koshchei, a threat group behind a large-scale remote desktop protocol (RDP) campaign.

Weaponized Hacktivism: How Countries Use Activists for Cyber Warfare IARPA Research Security Data Abyss Report Telecom threat, Secret Service cybersecurity news - Cyber Espionage Campaign
  • Cyber Security

Weaponized Hacktivism: How Countries Use Activists for Cyber Warfare

Do Son December 19, 2024 0

Discover the world of hacktivist groups and their impact on geopolitics. Explore the tactics, players, and implications of state-linked hacktivism.

Kaspersky Uncovers Active Exploitation of Fortinet Vulnerability CVE-2023-48788 FortiClient EMS exploitation Cisco FIRESTARTER Backdoor Arcane Door Campaign Dell RecoverPoint Zero-Day UNC6201 Espionage Notepad++ Compromise Supply Chain Attack Magento SessionReaper CVE-2025-54236 ShadowRay 2.0, AI-Generated Malware WordPress Auth Bypass, CVE-2025-5947 Exploited EcoStruxure Vulnerabilities, Industrial Control System UNC5820 - CVE-2014-2120 - CVE-2021-44207
  • Cyber Security
  • Vulnerability

Kaspersky Uncovers Active Exploitation of Fortinet Vulnerability CVE-2023-48788

Do Son December 19, 2024 0

Learn about the new CVE-2023-48788 exploit targeting Fortinet FortiClient EMS and how to protect your network from unauthorized code execution.

CVE-2023-34990 (CVSS 9.8): Critical Security Flaw Found in Fortinet FortiWLM CVE-2026-25089 CVE-2023-45590
  • Vulnerability

CVE-2023-34990 (CVSS 9.8): Critical Security Flaw Found in Fortinet FortiWLM

Do Son December 18, 2024 0

Critical vulnerabilities in Fortinet products - FortiClient VPN, FortiManager, and FortiWLM. Stay safe from CVE-2023-34990 with the latest updates.

CVE-2024-51479: Next.js Authorization Bypass Vulnerability Affects Millions of Developers CVE-2024-51479
  • Vulnerability

CVE-2024-51479: Next.js Authorization Bypass Vulnerability Affects Millions of Developers

Do Son December 18, 2024 0

Find out about the Next.js vulnerability CVE-2024-51479 that could have exposed sensitive data. Take necessary measures to secure your Next.js application.

VIPKeyLogger: A New Infostealer Targeting Sensitive Data via Phishing Campaigns UAT-8099 BadIIS Malware Pacific Islands Forum Cyberattack
  • Malware
  • Vulnerability

VIPKeyLogger: A New Infostealer Targeting Sensitive Data via Phishing Campaigns

Do Son December 18, 2024 0

Stay informed about the rise of VIPKeyLogger, a dangerous infostealer malware that poses significant risks to individuals and organizations.

Azure Key Vault Vulnerability: Exploiting Role Misconfigurations for Privilege Escalation Azure outage, Front Door Microsoft Azure Surveillance, Gaza Call Records Red Sea cables, Azure outage MFA enforcement Azure outage, Red Sea cables Azure Key Vault Azure, Surveillance
  • Vulnerability

Azure Key Vault Vulnerability: Exploiting Role Misconfigurations for Privilege Escalation

Do Son December 18, 2024 0

Uncover a potential privilege escalation method in Azure Key Vault and learn how attackers could exploit role misconfigurations to access sensitive data.

CVE-2024-10205: Critical Authentication Bypass Flaw Found in Hitachi Infrastructure Analytics Advisor and Ops Center Analyzer CVE-2024-10205
  • Vulnerability

CVE-2024-10205: Critical Authentication Bypass Flaw Found in Hitachi Infrastructure Analytics Advisor and Ops Center Analyzer

Do Son December 18, 2024 0

Discover the severity of the CVE-2024-10205 flaw affecting Hitachi Vantara's Infrastructure Analytics Advisor and Ops Center Analyzer.

“Mamont” Android Banking Trojan Disguised as Parcel Tracking App Targets Thousands in Russia Fiverr Data Leak Claude Code Leak Anthropic DMCA Takedown Coupang 33.7M Breach South Korea Data Leak Red Hat Breach, Customer Data Theft Farmers Insurance, Salesforce ESLint Plugin -Mamont Android banking Trojan
  • Malware

“Mamont” Android Banking Trojan Disguised as Parcel Tracking App Targets Thousands in Russia

Do Son December 18, 2024 0

Uncover the dangers of the Mamont Android banking Trojan. Protect yourself from malicious parcel tracking apps and photo identification scams.

CVE-2024-12356 (CVSS 9.8): Critical Vulnerability in BeyondTrust PRA and RS Enables Remote Code Execution BeyondTrust Vulnerability CVE-2026-1731 CVE-2024-12356 - CVE-2025-0889 BeyondTrust Privilege Escalation, Windows Security
  • Vulnerability

CVE-2024-12356 (CVSS 9.8): Critical Vulnerability in BeyondTrust PRA and RS Enables Remote Code Execution

Do Son December 18, 2024 0

Protect your organization from critical command injection vulnerability CVE-2024-12356 in BeyondTrust’s Privileged Remote Access and Remote Support solutions.

BADBOX Botnet Rises Again: 192,000+ Android Devices Compromised BADBOX Botnet
  • Malware

BADBOX Botnet Rises Again: 192,000+ Android Devices Compromised

Do Son December 18, 2024 0

The BADBOX botnet is making a comeback with a vengeance. Discover the alarming details about its resurgence and growing sophistication.

Data Exfiltration and RCE Risks Found in Azure Data Factory’s Airflow Integration Azure Data Factory Apache Airflow - Dirty DAG vulnerabilities
  • Vulnerability

Data Exfiltration and RCE Risks Found in Azure Data Factory’s Airflow Integration

Do Son December 18, 2024 0

Discover the vulnerabilities in Azure Data Factory's integration with Apache Airflow. Learn how attackers can achieve shadow administrator control and remote code execution.

High-Severity Vulnerabilities Fixed in Latest Chrome Release CVE-2024-12692 & CVE-2024-12695
  • Vulnerability

High-Severity Vulnerabilities Fixed in Latest Chrome Release

Do Son December 18, 2024 0

Take action to secure your system. Find out how Google's latest Chrome update addresses CVE-2024-12692 and other security vulnerabilities.

Fake CAPTCHAs Deliver Lumma Infostealer Malware in Massive Malvertising Campaign Lumma infostealer malware
  • Cyber Security
  • Malware

Fake CAPTCHAs Deliver Lumma Infostealer Malware in Massive Malvertising Campaign

Do Son December 18, 2024 0

Unveiling the Lumma infostealer malware: How a malvertising campaign uses fake CAPTCHA prompts to spread this dangerous threat.

RisePro and PrivateLoader Threat Actors Strike Again with RiseLoader BlueNoroff macOS Attack GhostCall Campaign Carding Underground Bulletproof Hosting DPRK Contagious Interview, npm Flood Stonefly group -HiatusRAT Actors
  • Cyber Security
  • Malware

RisePro and PrivateLoader Threat Actors Strike Again with RiseLoader

Do Son December 18, 2024 0

Discover RiseLoader, a new malware family focused on efficient payload delivery. Get insights into its origins, similarities with RisePro, and advanced anti-analysis measures.

Discover the Advanced Techniques and Capabilities of Nova: A Snake Keylogger Fork Snake Keylogger family
  • Malware

Discover the Advanced Techniques and Capabilities of Nova: A Snake Keylogger Fork

Do Son December 18, 2024 0

Learn about Nova, a dangerous variant of the Snake Keylogger family. Discover its advanced techniques and how it evades detection in cybersecurity.

RCE and DoS Vulnerabilities Addressed in Apache Tomcat: CVE-2024-50379 and CVE-2024-54677 CVE-2024-50379 & CVE-2024-54677 Apache Tomcat Vulnerabilities
  • Vulnerability

RCE and DoS Vulnerabilities Addressed in Apache Tomcat: CVE-2024-50379 and CVE-2024-54677

Do Son December 17, 2024 0

Stay protected from Apache Tomcat vulnerabilities. Learn about CVE-2024-50379 and CVE-2024-54677 and the security updates to address these flaws.

CVE-2024-53376: CyberPanel Flaw Exposes Systems to Full Compromise, PoC Published CVE-2024-53376 PoC
  • Vulnerability

CVE-2024-53376: CyberPanel Flaw Exposes Systems to Full Compromise, PoC Published

Do Son December 17, 2024 0

New security flaw (CVE-2024-53376) discovered in CyberPanel: understand the risks and potential server compromises. Check your version and take action.

New Malware “I2PRAT” Exploits Anonymous I2P Network for Stealthy Command and Control DriverFixer0428, Contagious Interview Cache Smuggling, ClickFix Evasion North Korean Cyber Espionage
  • Malware

New Malware “I2PRAT” Exploits Anonymous I2P Network for Stealthy Command and Control

Do Son December 17, 2024 0

Learn about the I2PRAT malware campaign, a sophisticated threat that leverages the Invisible Internet Project (I2P) to hide its activities and evade detection.

CVE-2024-55949 (CVSS 9.3): Critical MinIO Flaw Allows Any User to Gain Full Admin Privileges MinIO Signature Bypass Unauthenticated Object Write MinIO Privilege Escalation, Policy Bypass CVE-2024-55949
  • Vulnerability

CVE-2024-55949 (CVSS 9.3): Critical MinIO Flaw Allows Any User to Gain Full Admin Privileges

Do Son December 17, 2024 0

Learn about the critical vulnerability (CVE-2024-55949) in MinIO object storage platform that allows privilege escalation and poses a significant risk to data security.

HiatusRAT Campaign Targets Web Cameras and DVRs: FBI Warns of Rising IoT Exploits BlueNoroff macOS Attack GhostCall Campaign Carding Underground Bulletproof Hosting DPRK Contagious Interview, npm Flood Stonefly group -HiatusRAT Actors
  • Cyber Security
  • Malware
  • Vulnerability

HiatusRAT Campaign Targets Web Cameras and DVRs: FBI Warns of Rising IoT Exploits

Do Son December 17, 2024 0

Stay informed about the latest threat to organizations worldwide: the HiatusRAT malware campaign targeting IoT devices.

❮ Prev Page
Next Page ❯

Search

CVE ALERTS
📈

EPSS Spike Alerts
Catch risk spikes before they make headlines.

🎯

Custom EPSS/CVSS
Set score thresholds to effectively filter noise.

🛡️

Exploit Intel
Real-world exploit signals beyond the KEV catalog.

🐙

GitHub Issues
Auto-create alert tickets without duplication.

📬

Weekly Digest
Clean summaries, eliminating email spam.

🏷️

Watchlist Groups
Tag vulnerabilities by team (Infra/AppSec/SOC).

🔀

Smart Routing
Route chat channels based on severity levels.

🚨

RBP Tracker
Early warning detection and tracking system.

Subscribe – $7/mo or try free for 14 days →

🚨 Active Exploits in the Wild

  • CVE-2026-116606CVSS 9.3
    An authentication bypass in Barracuda Email Security Gateway versions earlier than 9.4.0.030 allows an unauthenticated remote attacker to...
    Admin intel📅 Updated: Nov 10, 2026
  • CVE-2026-125350
    Use after free in XML. Reported by anonymous on 2026-11-06. Google is aware that an exploit for CVE-2026-125350...
    Admin intel📅 Updated: Nov 10, 2026
  • CVE-2026-123751CVSS 9.8
    The WP Duplicate WordPress plugin through 1.1.11 does not properly verify a request authentication value and does not...
    Watchtower Verified📅 Updated: Nov 9, 2026
  • CVE-2026-111793CVSS 4.3
    Openwave Webtop Media Transcoder does not enforce administrator-defined file type restrictions to restrict the file-types to be converted....
    Admin intel📅 Updated: Nov 9, 2026
  • CVE-2026-114713CVSS 8.6
    The labeled-response module in UnrealIRCd 6.0.0 before 6.2.7.1 does not escape the IRCv3 "label" message tag when echoing...
    Admin intel📅 Updated: Nov 9, 2026
  • CVE-2026-116779CVSS 9.8
    Summary `sofia_presence_handle_sip_i_message()` splits the To user of an inbound SIP MESSAGE on `+` and treats the left half...
    CISA KEV📅 Added to KEV: Nov 9, 2026
  • CVE-2026-102895CVSS 9.8
    GPUStack is an open-source GPU cluster manager for AI model serving and GPU instance provisioning. Prior to 2.2.0,...
    CISA KEV📅 Added to KEV: Nov 9, 2026
  • CVE-2026-123158CVSS 8.1
    sshd in OpenSSH before 10.6p2 on Linux, when musl libc is used without PAM, lacks a workaround for...
    CISA KEV📅 Added to KEV: Nov 9, 2026
Powered by CVE Watchtower

Critical Vulnerabilities

  • CVE-2026-91341CVSS 9.1
    Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Clean Content SDK)....
    📅 Updated: Nov 10, 2026
  • CVE-2026-63017CVSS 9.4
    Incorrect authorization in PowerSYSTEM Center allows a low-privileged, authenticated user to access resources normally limited to administrators.
    📅 Updated: Nov 10, 2026
  • CVE-2026-63774CVSS 9.4
    Insufficient input validation in the PowerSYSTEM Center report designer allows an authenticated user to execute unauthorized SQL commands.
    📅 Updated: Nov 10, 2026
  • CVE-2026-123025CVSS 9.4
    An OS Command Injection vulnerability was discovered in the Google Cloud DNS validation module of the OPNsense os-acme-client...
    📅 Updated: Nov 10, 2026
  • CVE-2026-123218CVSS 9.8
    IBM Aspera Faspex 5.0.0 through 5.0.19 could allow an authorized user to craft a specific message to bypass...
    CISA KEV📅 Added to KEV: Nov 9, 2026📅 Updated: Nov 10, 2026
  • CVE-2026-82509CVSS 9.1
    V programming language standard library net.http through version 0.5.2 prior to commit 4077484 contains a TLS certificate validation...
    📅 Updated: Nov 10, 2026
  • CVE-2026-8376CVSS 9.8
    Perl versions before 5.40.5-RC1, from 5.41.0 before 5.42.3-RC1, from 5.43.0 before 5.43.11 have a heap buffer overflow when...
    📅 Updated: Nov 10, 2026
  • CVE-2026-57433CVSS 9.8
    Storable versions before 3.41 for Perl have a signed integer overflow when deserializing a crafted SX_HOOK record. retrieve_hook_common...
    📅 Updated: Nov 10, 2026
Powered by CVE Watchtower

Daily CyberSecurity

  • About SecurityOnline.info
  • Advertise with us
  • Announcement
  • Contact
  • Contributor Register
  • Login
  • Disclaimer
  • DCMA
  • Privacy Policy
  • About SecurityOnline.info
  • Advertise on SecurityOnline.info
  • Contact Us

When you purchase through links on our site, we may earn an affiliate commission. Here’s how it works

  • CVE Watchtower
  • CVE Statistics by Vendor 2026
  • Q3 2026 Report
  • Top Exploited CVEs
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube
© 2017 - 2026 Daily CyberSecurity. All Rights Reserved.