Skip to content
November 10, 2026
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube

Daily CyberSecurity

Zero-hour alerts. Unmatched analysis.

Primary Menu
  • Home
  • CVE Data
    • CVE Watchtower
    • Top Exploited CVEs
    • CVE Stats by Vendor
    • Q2 2026 Report
    • CVE Alerts
    • CVE Alert Settings
    • Pricing
  • Cyber Criminals
  • Data Leak
  • Free Tools
    • CVSS 3.1 Calculator
    • Certificate Viewer
    • DNS Lookup
    • Encoder & Hash Generator
    • IP / Subnet Calculator
    • Whois Lookup
  • Linux
  • Malware
  • Vulnerability
  • Submit Press Release
Light/Dark Button
Hackers Hack Hackers: MUT-1244 Steals Credentials in Deceptive GitHub Attack 67344006c9d78
  • Cyber Security
  • Malware

Hackers Hack Hackers: MUT-1244 Steals Credentials in Deceptive GitHub Attack

Do Son December 16, 2024 0

Discover the shocking details of the MUT-1244 cyberattack campaign targeting security professionals and hackers, resulting in the theft of sensitive data.

OpenAI Services Hit by Major Outage Due to Telemetry Service Deployment OpenAI Major Outage - Time Bandit GPT-4.5 Phase-Out
  • Technology

OpenAI Services Hit by Major Outage Due to Telemetry Service Deployment

Do Son December 15, 2024 0

Learn about the major service disruption OpenAI faced and the causes behind it. Explore the impact on ChatGPT, the API, and Sora.

CVE-2024-38819: Spring Framework Path Traversal PoC Exploit Released CVE-2024-38819 PoC
  • Vulnerability

CVE-2024-38819: Spring Framework Path Traversal PoC Exploit Released

Do Son December 15, 2024 0

Discover the critical vulnerability in the Spring Framework and the impact of CVE-2024-38819 PoC exploit on server security.

Open Sesame Attack: Ruijie Networks Devices Vulnerable to Remote Takeover Open Sesame attack - CVE-2024-52324
  • Vulnerability

Open Sesame Attack: Ruijie Networks Devices Vulnerable to Remote Takeover

Do Son December 15, 2024 0

Uncover the 10 security flaws in Ruijie Networks' Reyee cloud platform and its associated devices. Learn how these vulnerabilities could be exploited in the Open Sesame attack.

CVE-2024-45337: Golang Crypto Library Flawed, Risks Authorization Bypass CVE-2024-45337
  • Vulnerability

CVE-2024-45337: Golang Crypto Library Flawed, Risks Authorization Bypass

Do Son December 15, 2024 0

Learn about CVE-2024-45337, a critical security vulnerability in the Golang cryptography library that can result in authorization bypasses.

Russian APT “Secret Blizzard” Leverages Cybercriminal Tools in Ukraine Attacks exfiltrating AWS credentials - fabrice package
  • Cyber Security
  • Malware

Russian APT “Secret Blizzard” Leverages Cybercriminal Tools in Ukraine Attacks

Do Son December 15, 2024 0

Uncovering the tactics of Secret Blizzard: Learn how this threat actor co-opts tools from cybercriminals to target Ukraine.

Google Ads Abused in Graphic Design Malvertising Attack Ongoing Malvertising Campaign
  • Cyber Security
  • Malware

Google Ads Abused in Graphic Design Malvertising Attack

Do Son December 15, 2024 0

Stay informed about the ongoing malvertising campaign targeting graphic design professionals. Learn how to protect yourself against this threat.

CVE-2024-55884 (CVSS 9.0): Critical Vulnerability Found in Mullvad VPN Mullvad_logo.svg
  • Vulnerability

CVE-2024-55884 (CVSS 9.0): Critical Vulnerability Found in Mullvad VPN

Do Son December 15, 2024 0

Find out about the critical vulnerability (CVE-2024-55884) in the Mullvad VPN application that could potentially lead to memory corruption.

Passkeys: Microsoft’s Solution to 7,000 Password Attacks Per Second Microsoft passkey
  • Technology

Passkeys: Microsoft’s Solution to 7,000 Password Attacks Per Second

Do Son December 15, 2024 0

Discover how Microsoft is revolutionizing authentication with passkeys, the next-gen security solution for a passwordless future.

336,000 Prometheus Servers at Risk: Urgent Security Alert Screenshot 2024-12-15 135137
  • Vulnerability

336,000 Prometheus Servers at Risk: Urgent Security Alert

Do Son December 15, 2024 0

Learn about the vulnerabilities affecting Prometheus servers and exporters. Take steps to secure your systems and prevent unauthorized access.

The Zero-Detection PHP Backdoor Glutton Exposed Glutton backdoor
  • Cyber Security
  • Malware

The Zero-Detection PHP Backdoor Glutton Exposed

Do Son December 15, 2024 0

Discover Glutton, a new generation PHP backdoor that poses a threat to organizations and the cybercrime ecosystem. Learn how it blends modularity with strategic subterfuge.

Multiple Critical Vulnerabilities Expose GLPI to Widespread Attacks GLPI - CVE-2024-50339
  • Vulnerability

Multiple Critical Vulnerabilities Expose GLPI to Widespread Attacks

Do Son December 15, 2024 0

Protect your organization from GLPI vulnerabilities. Learn about the critical flaws and how to update to secure your IT assets.

Stealth, Persistence, and Privilege Escalation: A Sophisticated PUMAKIT Linux Malware Screenshot 2024-12-15 133333
  • Linux
  • Malware

Stealth, Persistence, and Privilege Escalation: A Sophisticated PUMAKIT Linux Malware

Do Son December 15, 2024 0

Learn about PUMAKIT, a sophisticated Linux malware with stealth capabilities and alarming functionalities. Dive into its architecture and infection chain.

Citrix Alerts on Global Password Spraying Campaigns Targeting NetScaler Appliances NetScaler Password Spraying
  • Cyber Security

Citrix Alerts on Global Password Spraying Campaigns Targeting NetScaler Appliances

Do Son December 15, 2024 0

Discover the dangers of password spraying attacks on Citrix NetScaler appliances and how they can disrupt your organization's operations.

CVE-2024-11053: Curl Vulnerability Exposes User Credentials in Redirects CVE-2024-11053 cURL Bounty, AI-generated Reports
  • Vulnerability

CVE-2024-11053: Curl Vulnerability Exposes User Credentials in Redirects

Do Son December 14, 2024 0

Stay informed about the security implications of CVE-2024-11053 in curl. Learn how this vulnerability can potentially compromise user credentials.

New Android Banking Trojan Targets Indian Users Through Fake Apps New Android Banking Trojan
  • Malware

New Android Banking Trojan Targets Indian Users Through Fake Apps

Do Son December 14, 2024 0

Beware of the new Android banking trojan targeting Indian users. Learn how this sophisticated malware steals financial information through phishing campaigns.

Critical Microsoft Azure MFA Bypass Exposed: What You Need to Know Microsoft Azure MFA Bypass KMS38 Broken Windows KMS Change
  • Vulnerability

Critical Microsoft Azure MFA Bypass Exposed: What You Need to Know

Do Son December 14, 2024 0

Critical vulnerability discovered in Microsoft Azure MFA system exposes millions of users to potential breaches. Learn more about the bypass technique and its impact.

IOCONTROL Malware: CyberAv3ngers’ Weapon of Choice Targets Critical Infrastructure IOCONTROL malware
  • Malware

IOCONTROL Malware: CyberAv3ngers’ Weapon of Choice Targets Critical Infrastructure

Do Son December 14, 2024 0

Discover the threats posed by the sophisticated malware strain IOCONTROL. Learn about its targeting of industrial control systems and IoT devices.

Careto APT Returns: Decade-Old Threat Resurfaces with New Sophistication Iranian Hacktivists Operation Epic Fury Cyber New Generation Warfare Russian Hybrid Escalation Plex data breach Water Systems Cybersecurity - Threat Actor Naming Standard
  • Cyber Security

Careto APT Returns: Decade-Old Threat Resurfaces with New Sophistication

Do Son December 13, 2024 0

Explore the return of Careto, a legendary Advanced Persistent Threat (APT) actor. Discover their highly sophisticated attacks and the evolution of their methods.

DCOM Upload & Execute: A New Backdoor Technique Unveiled DCOM Lateral movement
  • Malware
  • Vulnerability

DCOM Upload & Execute: A New Backdoor Technique Unveiled

Do Son December 13, 2024 0

Uncover a powerful new DCOM lateral movement attack: the DCOM Upload & Execute technique. Learn how attackers exploit DCOM interfaces for remote code execution.

Over 15,000 Sites at Risk: Woffice WordPress Theme Vulnerabilities Could Lead to Full Site Takeovers WordPress Privilege Escalation CVE-2026-1492 Sneeit Framework RCE, Unauthenticated Code Execution Post SMTP, Account Takeover WordPress Vulnerability, Unpatched XSS WordPress Vulnerability, PHP Object Injection WordPress AI Engine, Privilege Escalation CVE-2024-43153 & CVE-2024-43234
  • Vulnerability

Over 15,000 Sites at Risk: Woffice WordPress Theme Vulnerabilities Could Lead to Full Site Takeovers

Do Son December 13, 2024 0

Discover the critical vulnerabilities in the Woffice WordPress theme, rated at CVSS 9.8 severity. Learn how unauthenticated users can register with any role, posing a security risk.

Abusing Microsoft’s UI Automation Framework: The New Evasion Technique Bypassing EDR DPRK IT Workers, APT38 Crypto Forfeiture
  • Malware
  • Vulnerability
  • Windows

Abusing Microsoft’s UI Automation Framework: The New Evasion Technique Bypassing EDR

Do Son December 13, 2024 0

Discover the hidden cybersecurity risks of Microsoft UI Automation. Learn how attackers can exploit this framework to bypass modern EDR systems and exfiltrate sensitive data.

❮ Prev Page
Next Page ❯

Search

CVE ALERTS
📈

EPSS Spike Alerts
Catch risk spikes before they make headlines.

🎯

Custom EPSS/CVSS
Set score thresholds to effectively filter noise.

🛡️

Exploit Intel
Real-world exploit signals beyond the KEV catalog.

🐙

GitHub Issues
Auto-create alert tickets without duplication.

📬

Weekly Digest
Clean summaries, eliminating email spam.

🏷️

Watchlist Groups
Tag vulnerabilities by team (Infra/AppSec/SOC).

🔀

Smart Routing
Route chat channels based on severity levels.

🚨

RBP Tracker
Early warning detection and tracking system.

Subscribe – $7/mo or try free for 14 days →

🚨 Active Exploits in the Wild

  • CVE-2026-116606CVSS 9.3
    An authentication bypass in Barracuda Email Security Gateway versions earlier than 9.4.0.030 allows an unauthenticated remote attacker to...
    Admin intel📅 Updated: Nov 10, 2026
  • CVE-2026-125350
    Use after free in XML. Reported by anonymous on 2026-11-06. Google is aware that an exploit for CVE-2026-125350...
    Admin intel📅 Updated: Nov 10, 2026
  • CVE-2026-123751CVSS 9.8
    The WP Duplicate WordPress plugin through 1.1.11 does not properly verify a request authentication value and does not...
    Watchtower Verified📅 Updated: Nov 9, 2026
  • CVE-2026-111793CVSS 4.3
    Openwave Webtop Media Transcoder does not enforce administrator-defined file type restrictions to restrict the file-types to be converted....
    Admin intel📅 Updated: Nov 9, 2026
  • CVE-2026-114713CVSS 8.6
    The labeled-response module in UnrealIRCd 6.0.0 before 6.2.7.1 does not escape the IRCv3 "label" message tag when echoing...
    Admin intel📅 Updated: Nov 9, 2026
  • CVE-2026-116779CVSS 9.8
    Summary `sofia_presence_handle_sip_i_message()` splits the To user of an inbound SIP MESSAGE on `+` and treats the left half...
    CISA KEV📅 Added to KEV: Nov 9, 2026
  • CVE-2026-102895CVSS 9.8
    GPUStack is an open-source GPU cluster manager for AI model serving and GPU instance provisioning. Prior to 2.2.0,...
    CISA KEV📅 Added to KEV: Nov 9, 2026
  • CVE-2026-123158CVSS 8.1
    sshd in OpenSSH before 10.6p2 on Linux, when musl libc is used without PAM, lacks a workaround for...
    CISA KEV📅 Added to KEV: Nov 9, 2026
Powered by CVE Watchtower

Critical Vulnerabilities

  • CVE-2026-91341CVSS 9.1
    Vulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component: Outside In Clean Content SDK)....
    📅 Updated: Nov 10, 2026
  • CVE-2026-63017CVSS 9.4
    Incorrect authorization in PowerSYSTEM Center allows a low-privileged, authenticated user to access resources normally limited to administrators.
    📅 Updated: Nov 10, 2026
  • CVE-2026-63774CVSS 9.4
    Insufficient input validation in the PowerSYSTEM Center report designer allows an authenticated user to execute unauthorized SQL commands.
    📅 Updated: Nov 10, 2026
  • CVE-2026-123025CVSS 9.4
    An OS Command Injection vulnerability was discovered in the Google Cloud DNS validation module of the OPNsense os-acme-client...
    📅 Updated: Nov 10, 2026
  • CVE-2026-123218CVSS 9.8
    IBM Aspera Faspex 5.0.0 through 5.0.19 could allow an authorized user to craft a specific message to bypass...
    CISA KEV📅 Added to KEV: Nov 9, 2026📅 Updated: Nov 10, 2026
  • CVE-2026-82509CVSS 9.1
    V programming language standard library net.http through version 0.5.2 prior to commit 4077484 contains a TLS certificate validation...
    📅 Updated: Nov 10, 2026
  • CVE-2026-8376CVSS 9.8
    Perl versions before 5.40.5-RC1, from 5.41.0 before 5.42.3-RC1, from 5.43.0 before 5.43.11 have a heap buffer overflow when...
    📅 Updated: Nov 10, 2026
  • CVE-2026-57433CVSS 9.8
    Storable versions before 3.41 for Perl have a signed integer overflow when deserializing a crafted SX_HOOK record. retrieve_hook_common...
    📅 Updated: Nov 10, 2026
Powered by CVE Watchtower

Daily CyberSecurity

  • About SecurityOnline.info
  • Advertise with us
  • Announcement
  • Contact
  • Contributor Register
  • Login
  • Disclaimer
  • DCMA
  • Privacy Policy
  • About SecurityOnline.info
  • Advertise on SecurityOnline.info
  • Contact Us

When you purchase through links on our site, we may earn an affiliate commission. Here’s how it works

  • CVE Watchtower
  • CVE Statistics by Vendor 2026
  • Q3 2026 Report
  • Top Exploited CVEs
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube
© 2017 - 2026 Daily CyberSecurity. All Rights Reserved.