Skip to content
November 10, 2026
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube

Daily CyberSecurity

Zero-hour alerts. Unmatched analysis.

Primary Menu
  • Home
  • CVE Data
    • CVE Watchtower
    • Top Exploited CVEs
    • CVE Stats by Vendor
    • Q2 2026 Report
    • CVE Alerts
    • CVE Alert Settings
    • Pricing
  • Cyber Criminals
  • Data Leak
  • Free Tools
    • CVSS 3.1 Calculator
    • Certificate Viewer
    • DNS Lookup
    • Encoder & Hash Generator
    • IP / Subnet Calculator
    • Whois Lookup
  • Linux
  • Malware
  • Vulnerability
  • Submit Press Release
Light/Dark Button
Patchwork APT Targets Chinese Scientific Research in Renewed Campaign Exploited VMware
  • Cyber Security

Patchwork APT Targets Chinese Scientific Research in Renewed Campaign

Do Son December 10, 2024 0

Patchwork APT group strikes again with the BadNews malware campaign. Stay vigilant and learn how to safeguard against this advanced threat.

MoqHao Malware Targets Apple IDs and Android Devices Using iCloud and VK Platforms MoqHao malware
  • Cyber Security
  • Malware

MoqHao Malware Targets Apple IDs and Android Devices Using iCloud and VK Platforms

Do Son December 10, 2024 0

Stay informed about the latest MoqHao malware campaign targeting Android and iOS users. Discover the tactics used to deceive users and deliver phishing pages.

The evolution of lending: how AI is revolutionizing loan origination 3ctirf4kk00qeXp
  • Technique

The evolution of lending: how AI is revolutionizing loan origination

Do Son December 10, 2024 0
Loan origination is a cornerstone of the financial industry, influencing how individuals and businesses access funding. While...
Read More Read more about The evolution of lending: how AI is revolutionizing loan origination
CVE-2024-47578 (CVSS 9.1): SAP Issues Critical Patch for NetWeaver AS for JAVA SAP Security Patches CVE-2026-27685 SAP Security Update CVE-2026-0488 CVE-2024-47578 - CVE-2025-0070 and CVE-2025-0066
  • Vulnerability

CVE-2024-47578 (CVSS 9.1): SAP Issues Critical Patch for NetWeaver AS for JAVA

Do Son December 10, 2024 0

Stay ahead of SAP security vulnerabilities. Learn about the critical flaws disclosed in SAP's latest Security Patch Day, including CVE-2024-47578.

CVE-2024-50623: Critical Vulnerability in Cleo Software Actively Exploited in the Wild PAN-OS Root RCE CL-STA-1132 Exploitation Tianxin RCE CVE-2021-4473 React Native Supply Chain Attack AstrOOnauta Malware Gladinet Zero-Day, LFI RCE Chain WordPress Theme, Account Takeover CVE-2024-50623 - European Space Agency cyberattack
  • Vulnerability

CVE-2024-50623: Critical Vulnerability in Cleo Software Actively Exploited in the Wild

Do Son December 10, 2024 0

Critical vulnerability (CVE-2024-50623) in Cleo's software exposes organizations to threat actors. Learn about the implications for industries and the urgent need for patching.

How Can You Unblock Your IP Address in 5 Easy Ways? 67344006c9d78
  • Technique

How Can You Unblock Your IP Address in 5 Easy Ways?

Do Son December 10, 2024 0
Method Quick Overview Restart Your Router Gets you a new IP address from your ISP Use a...
Read More Read more about How Can You Unblock Your IP Address in 5 Easy Ways?
CVE-2024-54143: Critical Vulnerability in OpenWrt’s Attended SysUpgrade Server Allows for Firmware Poisoning SysUpgrade Server - CVE-2024-54143
  • Vulnerability

CVE-2024-54143: Critical Vulnerability in OpenWrt’s Attended SysUpgrade Server Allows for Firmware Poisoning

Do Son December 9, 2024 0

OpenWrt discloses critical vulnerability CVE-2024-54143 that allows attackers to compromise firmware updates. Learn more about this security flaw.

Let’s Encrypt to Deprecate OCSP in Favor of CRLs, Enhancing User Privacy Merkle Tree Certificates Let's Encrypt 45-Day Certificates ACME Profile Updates 2026 Let’s Encrypt Generation Y, 45-Day TLS Certificates Let's Encrypt, IP Certificates Certificate Revocation Lists
  • Technology

Let’s Encrypt to Deprecate OCSP in Favor of CRLs, Enhancing User Privacy

Do Son December 9, 2024 0

Learn about the transition from OCSP to Certificate Revocation Lists (CRLs) by Let's Encrypt. Enhance privacy and operational efficiency in the world of internet security.

International Operation Dismantles Phone Phishing Ring Targeting Vulnerable Individuals Across Europe Crypto Drain Conspiracy, Malicious MobileConfig phone phishing Cryptocurrency Phishing
  • Cyber Security

International Operation Dismantles Phone Phishing Ring Targeting Vulnerable Individuals Across Europe

Do Son December 9, 2024 0

Stay informed about the recent dismantling of a phone phishing operation by Belgian and Dutch law enforcement agencies, targeting vulnerable individuals.

Bulletproof Hosting: The Dark Infrastructure Behind Global Cybercrime bulletproof hosting
  • Cyber Security

Bulletproof Hosting: The Dark Infrastructure Behind Global Cybercrime

Do Son December 9, 2024 0

Unveiling the role of bulletproof hosting services in cybercriminal activities. Discover how these hidden infrastructures facilitate illegal operations.

CVE-2024-11205: WPForms Plugin Vulnerability Impacts 6 Million WordPress Sites CVE-2024-11205
  • Vulnerability

CVE-2024-11205: WPForms Plugin Vulnerability Impacts 6 Million WordPress Sites

Do Son December 9, 2024 0

Discover the risks posed by the CVE-2024-11205 vulnerability in WPForms. Find out how to safeguard your WordPress site and prevent financial loss.

FCC Takes Action to Strengthen Cybersecurity in Response to Salt Typhoon Cyberattack Salesforce vulnerability CVE-2025-9844 Salt Typhoon cyberattack
  • Cyber Security

FCC Takes Action to Strengthen Cybersecurity in Response to Salt Typhoon Cyberattack

Do Son December 9, 2024 0

FCC takes action to strengthen telecom cybersecurity after Salt Typhoon cyberattack. Discover the measures being implemented to ensure the safety and security of U.S. networks.

Meta’s Q3 2024 Adversarial Threat Report: Global Disinformation Networks Disrupted Harvester APT Linux Backdoor OT Cyberattack Iranian APT Operation Olalampo MuddyWater APT Prince of Persia APT, Tonnerre v50 Patchwork APT, DLL Sideloading Subtle Snail, cyber espionage ShadowSilk, cyber espionage Volt Typhoon APT Group - Chinese Cybersecurity Firm
  • Cyber Security

Meta’s Q3 2024 Adversarial Threat Report: Global Disinformation Networks Disrupted

Do Son December 9, 2024 0

Explore Meta's Third Quarter Adversarial Threat Report and uncover key findings on global influence operations and coordinated inauthentic behavior.

Radiant Capital Incident: $50M Cyber Heist Linked to North Korean Threat Actors FortiClient EMS exploitation Cisco FIRESTARTER Backdoor Arcane Door Campaign Dell RecoverPoint Zero-Day UNC6201 Espionage Notepad++ Compromise Supply Chain Attack Magento SessionReaper CVE-2025-54236 ShadowRay 2.0, AI-Generated Malware WordPress Auth Bypass, CVE-2025-5947 Exploited EcoStruxure Vulnerabilities, Industrial Control System UNC5820 - CVE-2014-2120 - CVE-2021-44207
  • Cyber Security

Radiant Capital Incident: $50M Cyber Heist Linked to North Korean Threat Actors

Do Son December 9, 2024 0

Discover the detailed analysis of the Radiant Capital cyberattack, revealing a complex attack chain and vulnerability exploitation.

CVE-2024-12254: CPython Flaw Could Lead to Memory Exhaustion in asyncio Applications Python Security Memory Safety PLY Vulnerability CVE-2025-56005 Python Software Foundation, NSF DEI CVE-2024-12254
  • Vulnerability

CVE-2024-12254: CPython Flaw Could Lead to Memory Exhaustion in asyncio Applications

Do Son December 9, 2024 0

Learn about the high-severity vulnerability (CVE-2024-12254) in CPython that could lead to memory exhaustion in Python applications.

Linux 6.13 Streamlines EFI Zboot: Gzip & Zstd Take Center Stage Linus Torvalds AI bug reports Linux Kernel 7.0 Linux EFI Zboot - CVE-2022-42719 Linux KVM Intel AMX kernel panic, KVM guest host crash 2025
  • Linux

Linux 6.13 Streamlines EFI Zboot: Gzip & Zstd Take Center Stage

Do Son December 9, 2024 0

Learn about the upcoming enhancement to EFI Zboot in the Linux kernel. See how the optimization of compression algorithms improves efficiency.

SpyNote RAT Targets High-Value Individuals in Southern Asia EV2GO Charging Platform ICSA-26-057-04 Lazarus Group, Crypto Hacks LazyStealer
  • Cyber Security
  • Malware

SpyNote RAT Targets High-Value Individuals in Southern Asia

Do Son December 9, 2024 0

Discover the threats posed by SpyNote Remote Administration Tool (RAT) and how it infiltrated targeted systems using disguised Android payloads.

Meeten Malware: AI-Powered Cyber Campaign Targets Web3 Professionals ahost.exe DLL Sideloading Signed Application Abuse PS1Bot, malware ransomware attacks bill
  • Malware

Meeten Malware: AI-Powered Cyber Campaign Targets Web3 Professionals

Do Son December 9, 2024 0

Uncover the highly sophisticated Meeten malware campaign targeting professionals in the Web3 space. Learn how this cross-platform information stealer compromises macOS and Windows devices.

CVE-2024-55579 & CVE-2024-55580: Qlik Sense Users Face Serious Security Risk CVE-2024-55579 & CVE-2024-55580
  • Vulnerability

CVE-2024-55579 & CVE-2024-55580: Qlik Sense Users Face Serious Security Risk

Do Son December 8, 2024 0

Learn about the vulnerabilities in Qlik Sense Enterprise for Windows: CVE-2024-55579 and CVE-2024-55580. Find out how unprivileged users could compromise the server and gain control.

CVE-2024-55563: Transaction-Relay Jamming Vulnerability Poses Threat to Bitcoin Lightning Network CVE-2024-55563 - transaction-relay jamming attack
  • Vulnerability

CVE-2024-55563: Transaction-Relay Jamming Vulnerability Poses Threat to Bitcoin Lightning Network

Do Son December 8, 2024 0

Find out about the security risk CVE-2024-55563 in the Bitcoin network and its implications for the stability of the Lightning Network.

Activation Context Hijacking: “Eclipse” PoC Weaponizes Trusted Processes Activation Context Hijack
  • Malware
  • Open Source Tool
  • Technology

Activation Context Hijacking: “Eclipse” PoC Weaponizes Trusted Processes

Do Son December 8, 2024 0

Learn about Activation Context Hijack and how Eclipse, a proof-of-concept tool, allows attackers to load and execute arbitrary DLLs within a target process.

Windows Zero-Day Vulnerability CVE-2024-38193 Exploited in the Wild: PoC Published System-priv
  • Vulnerability

Windows Zero-Day Vulnerability CVE-2024-38193 Exploited in the Wild: PoC Published

Do Son December 8, 2024 0

Explore the in-depth analysis of CVE-2024-38193, a critical use-after-free vulnerability in the afd.sys Windows driver. Understand the exploitation process and potential impact.

❮ Prev Page
Next Page ❯

Search

CVE ALERTS
📈

EPSS Spike Alerts
Catch risk spikes before they make headlines.

🎯

Custom EPSS/CVSS
Set score thresholds to effectively filter noise.

🛡️

Exploit Intel
Real-world exploit signals beyond the KEV catalog.

🐙

GitHub Issues
Auto-create alert tickets without duplication.

📬

Weekly Digest
Clean summaries, eliminating email spam.

🏷️

Watchlist Groups
Tag vulnerabilities by team (Infra/AppSec/SOC).

🔀

Smart Routing
Route chat channels based on severity levels.

🚨

RBP Tracker
Early warning detection and tracking system.

Subscribe – $7/mo or try free for 14 days →

🚨 Active Exploits in the Wild

  • CVE-2026-116606CVSS 9.3
    An authentication bypass in Barracuda Email Security Gateway versions earlier than 9.4.0.030 allows an unauthenticated remote attacker to...
    Admin intel📅 Updated: Nov 10, 2026
  • CVE-2026-125350
    Use after free in XML. Reported by anonymous on 2026-11-06. Google is aware that an exploit for CVE-2026-125350...
    Admin intel📅 Updated: Nov 10, 2026
  • CVE-2026-123751CVSS 9.8
    The WP Duplicate WordPress plugin through 1.1.11 does not properly verify a request authentication value and does not...
    Watchtower Verified📅 Updated: Nov 9, 2026
  • CVE-2026-111793CVSS 4.3
    Openwave Webtop Media Transcoder does not enforce administrator-defined file type restrictions to restrict the file-types to be converted....
    Admin intel📅 Updated: Nov 9, 2026
  • CVE-2026-114713CVSS 8.6
    The labeled-response module in UnrealIRCd 6.0.0 before 6.2.7.1 does not escape the IRCv3 "label" message tag when echoing...
    Admin intel📅 Updated: Nov 9, 2026
  • CVE-2026-116779CVSS 9.8
    Summary `sofia_presence_handle_sip_i_message()` splits the To user of an inbound SIP MESSAGE on `+` and treats the left half...
    CISA KEV📅 Added to KEV: Nov 9, 2026
  • CVE-2026-102895CVSS 9.8
    GPUStack is an open-source GPU cluster manager for AI model serving and GPU instance provisioning. Prior to 2.2.0,...
    CISA KEV📅 Added to KEV: Nov 9, 2026
  • CVE-2026-123158CVSS 8.1
    sshd in OpenSSH before 10.6p2 on Linux, when musl libc is used without PAM, lacks a workaround for...
    CISA KEV📅 Added to KEV: Nov 9, 2026
Powered by CVE Watchtower

Critical Vulnerabilities

  • CVE-2026-125758CVSS 9.1
    Aptabase before commit 61d4c01 contains an authentication bypass vulnerability that allows unauthenticated attackers to forge sign-in links by...
    📅 Updated: Nov 10, 2026
  • CVE-2026-125757CVSS 9.4
    mailcow: dockerized before 2026-11 contains a server-side template injection vulnerability that allows domain administrators to execute commands in...
    📅 Updated: Nov 10, 2026
  • CVE-2026-124917CVSS 9.6
    Sandbox escape due to use-after-free in the Widget: Gtk component. This vulnerability was fixed in Firefox 160 and...
    📅 Updated: Nov 10, 2026
  • CVE-2026-124900CVSS 9.6
    Sandbox escape due to use-after-free in the DOM: Service Workers component. This vulnerability was fixed in Firefox 160.
    📅 Updated: Nov 10, 2026
  • CVE-2026-124903CVSS 9.6
    Sandbox escape due to use-after-free in the IPC component. This vulnerability was fixed in Firefox 160, Firefox ESR...
    📅 Updated: Nov 10, 2026
  • CVE-2026-124864CVSS 9.6
    Sandbox escape due to use-after-free in the DOM: Service Workers component. This vulnerability was fixed in Firefox 160,...
    📅 Updated: Nov 10, 2026
  • CVE-2026-124859CVSS 9.6
    Sandbox escape due to incorrect boundary conditions in the Storage: Cache API component. This vulnerability was fixed in...
    📅 Updated: Nov 10, 2026
  • CVE-2026-124861CVSS 9.6
    Sandbox escape due to use-after-free in the Audio/Video: cubeb component. This vulnerability was fixed in Firefox 160, Firefox...
    📅 Updated: Nov 10, 2026
Powered by CVE Watchtower

Daily CyberSecurity

  • About SecurityOnline.info
  • Advertise with us
  • Announcement
  • Contact
  • Contributor Register
  • Login
  • Disclaimer
  • DCMA
  • Privacy Policy
  • About SecurityOnline.info
  • Advertise on SecurityOnline.info
  • Contact Us

When you purchase through links on our site, we may earn an affiliate commission. Here’s how it works

  • CVE Watchtower
  • CVE Statistics by Vendor 2026
  • Q3 2026 Report
  • Top Exploited CVEs
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube
© 2017 - 2026 Daily CyberSecurity. All Rights Reserved.