Skip to content
November 10, 2026
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube

Daily CyberSecurity

Zero-hour alerts. Unmatched analysis.

Primary Menu
  • Home
  • CVE Data
    • CVE Watchtower
    • Top Exploited CVEs
    • CVE Stats by Vendor
    • Q2 2026 Report
    • CVE Alerts
    • CVE Alert Settings
    • Pricing
  • Cyber Criminals
  • Data Leak
  • Free Tools
    • CVSS 3.1 Calculator
    • Certificate Viewer
    • DNS Lookup
    • Encoder & Hash Generator
    • IP / Subnet Calculator
    • Whois Lookup
  • Linux
  • Malware
  • Vulnerability
  • Submit Press Release
Light/Dark Button
Mauri Ransomware Exploits Apache ActiveMQ Flaw (CVE-2023-46604) Mauri ransomware
  • Malware
  • Vulnerability

Mauri Ransomware Exploits Apache ActiveMQ Flaw (CVE-2023-46604)

Do Son December 8, 2024 0

Stay informed about the latest cyber threat: Mauri ransomware exploiting a critical vulnerability (CVE-2023-46604) in Apache ActiveMQ.

QNAP Addresses High Severity Vulnerabilities in License Center and Operating Systems QNAP Zero-Day, Pwn2Own Exploit CVE-2024-21899 - QNAP QTS vulnerability
  • Vulnerability

QNAP Addresses High Severity Vulnerabilities in License Center and Operating Systems

Do Son December 8, 2024 0

Discover the latest QNAP QTS vulnerability advisory. Learn about the security vulnerabilities affecting License Center and QTS/QuTS hero operating systems.

Google Fixes Critical RCE Vulnerabilities in December 2024 Pixel Security Update Made by Google, Pixel 10 Pixel 10, Qi2 Baseband Security - CVE-2024-39343 Google Tensor TSMC Pixel 10 processor
  • Vulnerability

Google Fixes Critical RCE Vulnerabilities in December 2024 Pixel Security Update

Do Son December 8, 2024 0

Stay protected with Google's December 2024 security update for Pixel devices. Learn about the critical remote code execution flaws and other vulnerabilities

The Rise of Mac Malware: 2024 Threat Report Reveals Alarming Trends macOS malware 2024 XCSSET
  • Malware

The Rise of Mac Malware: 2024 Threat Report Reveals Alarming Trends

Do Son December 8, 2024 0

Discover the alarming rise of macOS malware in 2024. Learn about the growing variety and accessibility of malware, including Malware-as-a-Service (MaaS) and AI-powered threats.

Report Exposes Cybercriminal Exploitation of High-Profile Events high-profile events
  • Cyber Security

Report Exposes Cybercriminal Exploitation of High-Profile Events

Do Son December 8, 2024 0

Stay informed about the dangers associated with high-profile events. Learn how threat actors exploit public interest and how to protect yourself online.

Ultralytics AI Library Hit by Supply Chain Attack: 60 Million Downloads Compromised Ultralytics Supply Chain Attack
  • Malware

Ultralytics AI Library Hit by Supply Chain Attack: 60 Million Downloads Compromised

Do Son December 8, 2024 0

Learn about the supply chain attack on Ultralytics, a popular AI library with over 60 million downloads, and how it was exploited through GitHub Actions scripts.

Urgent Action Needed: ABB ASPECT Vulnerabilities Expose Buildings to Cyberattacks ASPECT Vulnerabilities
  • Vulnerability

Urgent Action Needed: ABB ASPECT Vulnerabilities Expose Buildings to Cyberattacks

Do Son December 8, 2024 0

Discover the multiple vulnerabilities in ABB's ASPECT system and their potential impact. Stay aware of the risks and take necessary precautions.

DDoSecrets Unveils Massive “Library of Leaks” Search Engine with Millions of Leaked Documents DDoSecrets Library of Leaks
  • Data Leak

DDoSecrets Unveils Massive “Library of Leaks” Search Engine with Millions of Leaked Documents

Do Son December 8, 2024 0

Explore the Library of Leaks by DDoSecrets - a massive searchable database with millions of documents from various leaks, now accessible to the public.

From Cloud to Cash: “CP3O” Indicted in Multi-Million Dollar Cryptojacking Operation Operation Kraken - cryptojacking
  • Cyber Security

From Cloud to Cash: “CP3O” Indicted in Multi-Million Dollar Cryptojacking Operation

Do Son December 8, 2024 0

Explore the recent arrest of Charles O. Parks III for orchestrating a sophisticated cryptojacking scheme. Learn how Parks mined cryptocurrency worth over $970,000 without paying for server rentals.

Manjaro 24.2 “Yonada” Released: A Refined and Feature-Rich Update Manjaro 24.2
  • Linux

Manjaro 24.2 “Yonada” Released: A Refined and Feature-Rich Update

Do Son December 8, 2024 0

Manjaro Linux 24.2 'Yonada' is here! Experience the enhanced stability, productivity tools, and hardware support in this latest release.

CVE-2024-12209 (CVSS 9.8): WP Umbrella Plugin Vulnerability Exposes 30,000 Websites to Compromise CVE-2024-12209 - WP Umbrella
  • Vulnerability

CVE-2024-12209 (CVSS 9.8): WP Umbrella Plugin Vulnerability Exposes 30,000 Websites to Compromise

Do Son December 7, 2024 0

Critical security vulnerability discovered in WP Umbrella plugin. Learn about CVE-2024-12209 and how it could allow attackers to take control of websites.

Google’s Vanir: A Powerful New Open-Source Tool for Supercharging Security Patch Validation Google Vanir Tool
  • Open Source Tool
  • Technology

Google’s Vanir: A Powerful New Open-Source Tool for Supercharging Security Patch Validation

Do Son December 7, 2024 0

Discover Vanir, Google's open-source tool designed to revolutionize security patch validation and keep Android users safe.

SystemRescue 11.03 Boots Up with a Powerful New Kernel and Updated Tools! SystemRescue 11.03
  • Linux

SystemRescue 11.03 Boots Up with a Powerful New Kernel and Updated Tools!

Do Son December 7, 2024 0

Discover the powerful capabilities of SystemRescue 11.03, the open-source system recovery toolkit trusted by system administrators and IT professionals.

BlueAlpha Exploits Cloudflare Tunnels for GammaDrop Malware Infrastructure UAT-8099 BadIIS Malware Pacific Islands Forum Cyberattack
  • Cyber Security
  • Malware

BlueAlpha Exploits Cloudflare Tunnels for GammaDrop Malware Infrastructure

Do Son December 7, 2024 0

Unveil the sophisticated operations of BlueAlpha, a state-sponsored threat actor. Explore their use of HTML smuggling, Cloudflare Tunnels, and spearphishing to distribute GammaDrop malware.

FSB-Tampered Device Returned with Monokle-Type Spyware, Experts Reveal Monokle spyware
  • Malware

FSB-Tampered Device Returned with Monokle-Type Spyware, Experts Reveal

Do Son December 7, 2024 0

Learn about the dangers of targeted surveillance and the Monokle spyware. Find out how a Russian programmer's Android device was infected with malicious spyware.

Earth Minotaur: MOONSHINE Exploit Kit and DarkNimbus Backdoor Threaten Multi-Platform Security CRussian Market, "Fly" (Flyded) hange Healthcare Cyberattack - CVE-2024-50603 Exploit
  • Cyber Security
  • Malware

Earth Minotaur: MOONSHINE Exploit Kit and DarkNimbus Backdoor Threaten Multi-Platform Security

Do Son December 6, 2024 0

Uncover the dark secrets of the Earth Minotaur cyber campaign. Learn about the MOONSHINE exploit kit and the dangerous DarkNimbus backdoor.

US Organization in China Falls Victim to Suspected Chinese Espionage Campaign Cisco SD-WAN Vulnerability CVE-2026-20127 CVE-2024-20481 - Daggerfly group
  • Cyber Security

US Organization in China Falls Victim to Suspected Chinese Espionage Campaign

Do Son December 6, 2024 0

Uncover the details of a cyberespionage operation targeting a US organization in China. Learn about the sophisticated tactics and tools employed by the attackers.

Sophisticated Campaign Targets Manufacturing Industry with Lumma Stealer and Amadey Bot XCharge C6 vulnerabilities EV charger security flaws GNU libtasn1 Vulnerability CVE-2025-13151 Credit Card Skimmer Malware CVE-2024-13892
  • Cyber Security
  • Malware

Sophisticated Campaign Targets Manufacturing Industry with Lumma Stealer and Amadey Bot

Do Son December 6, 2024 0

Uncover the sophisticated cyberattack campaign targeting the manufacturing industry. Learn about the advanced techniques and the Amadey Bot used by threat actors.

Unpatched Zero-Day Vulnerability in Mitel MiCollab Exposes Businesses to Serious Security Risks Zyxel security - Mitel MiCollab Vulnerability
  • Vulnerability

Unpatched Zero-Day Vulnerability in Mitel MiCollab Exposes Businesses to Serious Security Risks

Do Son December 6, 2024 0

Stay informed about the latest Mitel MiCollab vulnerability and learn how to protect your sensitive business data.

Kroah-Hartman Confirms: Linux Kernel 6.12 is Now LTS Linux Kernel legacy driver removal Linux kernel x86 page fault, interrupt state asymmetry fix Linux ISO, false positive CVE-2023-6200 - Linux Kernel 6.12 LTS 6.14
  • Linux

Kroah-Hartman Confirms: Linux Kernel 6.12 is Now LTS

Do Son December 6, 2024 0

Stay up to date with the Linux kernel. Find out how version 6.12 LTS provides long-term support and essential updates for enterprise deployments.

Critical Zero-Day Vulnerability in Windows Exposes User Credentials Critical Zero-Day Vulnerability
  • Vulnerability

Critical Zero-Day Vulnerability in Windows Exposes User Credentials

Do Son December 5, 2024 0

Critical zero-day vulnerability in Microsoft Windows: Attackers can compromise user accounts by simply viewing malicious files.

Django Releases Patches for CVE-2024-53907 and CVE-2024-53908 to Mitigate DoS and SQLi Threats CVE-2024-53908 & CVE-2024-53907
  • Vulnerability

Django Releases Patches for CVE-2024-53907 and CVE-2024-53908 to Mitigate DoS and SQLi Threats

Do Son December 5, 2024 0

Upgrade your Django installation to address security flaws CVE-2024-53907 and CVE-2024-53908. Protect your website from potential DoS attacks and SQL injection.

❮ Prev Page
Next Page ❯

Search

CVE ALERTS
📈

EPSS Spike Alerts
Catch risk spikes before they make headlines.

🎯

Custom EPSS/CVSS
Set score thresholds to effectively filter noise.

🛡️

Exploit Intel
Real-world exploit signals beyond the KEV catalog.

🐙

GitHub Issues
Auto-create alert tickets without duplication.

📬

Weekly Digest
Clean summaries, eliminating email spam.

🏷️

Watchlist Groups
Tag vulnerabilities by team (Infra/AppSec/SOC).

🔀

Smart Routing
Route chat channels based on severity levels.

🚨

RBP Tracker
Early warning detection and tracking system.

Subscribe – $7/mo or try free for 14 days →

🚨 Active Exploits in the Wild

  • CVE-2026-116606CVSS 9.3
    An authentication bypass in Barracuda Email Security Gateway versions earlier than 9.4.0.030 allows an unauthenticated remote attacker to...
    Admin intel📅 Updated: Nov 10, 2026
  • CVE-2026-125350
    Use after free in XML. Reported by anonymous on 2026-11-06. Google is aware that an exploit for CVE-2026-125350...
    Admin intel📅 Updated: Nov 10, 2026
  • CVE-2026-123751CVSS 9.8
    The WP Duplicate WordPress plugin through 1.1.11 does not properly verify a request authentication value and does not...
    Watchtower Verified📅 Updated: Nov 9, 2026
  • CVE-2026-111793CVSS 4.3
    Openwave Webtop Media Transcoder does not enforce administrator-defined file type restrictions to restrict the file-types to be converted....
    Admin intel📅 Updated: Nov 9, 2026
  • CVE-2026-114713CVSS 8.6
    The labeled-response module in UnrealIRCd 6.0.0 before 6.2.7.1 does not escape the IRCv3 "label" message tag when echoing...
    Admin intel📅 Updated: Nov 9, 2026
  • CVE-2026-116779CVSS 9.8
    Summary `sofia_presence_handle_sip_i_message()` splits the To user of an inbound SIP MESSAGE on `+` and treats the left half...
    CISA KEV📅 Added to KEV: Nov 9, 2026
  • CVE-2026-102895CVSS 9.8
    GPUStack is an open-source GPU cluster manager for AI model serving and GPU instance provisioning. Prior to 2.2.0,...
    CISA KEV📅 Added to KEV: Nov 9, 2026
  • CVE-2026-123158CVSS 8.1
    sshd in OpenSSH before 10.6p2 on Linux, when musl libc is used without PAM, lacks a workaround for...
    CISA KEV📅 Added to KEV: Nov 9, 2026
Powered by CVE Watchtower

Critical Vulnerabilities

  • CVE-2026-125758CVSS 9.1
    Aptabase before commit 61d4c01 contains an authentication bypass vulnerability that allows unauthenticated attackers to forge sign-in links by...
    📅 Updated: Nov 10, 2026
  • CVE-2026-125757CVSS 9.4
    mailcow: dockerized before 2026-11 contains a server-side template injection vulnerability that allows domain administrators to execute commands in...
    📅 Updated: Nov 10, 2026
  • CVE-2026-124917CVSS 9.6
    Sandbox escape due to use-after-free in the Widget: Gtk component. This vulnerability was fixed in Firefox 160 and...
    📅 Updated: Nov 10, 2026
  • CVE-2026-124900CVSS 9.6
    Sandbox escape due to use-after-free in the DOM: Service Workers component. This vulnerability was fixed in Firefox 160.
    📅 Updated: Nov 10, 2026
  • CVE-2026-124903CVSS 9.6
    Sandbox escape due to use-after-free in the IPC component. This vulnerability was fixed in Firefox 160, Firefox ESR...
    📅 Updated: Nov 10, 2026
  • CVE-2026-124864CVSS 9.6
    Sandbox escape due to use-after-free in the DOM: Service Workers component. This vulnerability was fixed in Firefox 160,...
    📅 Updated: Nov 10, 2026
  • CVE-2026-124859CVSS 9.6
    Sandbox escape due to incorrect boundary conditions in the Storage: Cache API component. This vulnerability was fixed in...
    📅 Updated: Nov 10, 2026
  • CVE-2026-124861CVSS 9.6
    Sandbox escape due to use-after-free in the Audio/Video: cubeb component. This vulnerability was fixed in Firefox 160, Firefox...
    📅 Updated: Nov 10, 2026
Powered by CVE Watchtower

Daily CyberSecurity

  • About SecurityOnline.info
  • Advertise with us
  • Announcement
  • Contact
  • Contributor Register
  • Login
  • Disclaimer
  • DCMA
  • Privacy Policy
  • About SecurityOnline.info
  • Advertise on SecurityOnline.info
  • Contact Us

When you purchase through links on our site, we may earn an affiliate commission. Here’s how it works

  • CVE Watchtower
  • CVE Statistics by Vendor 2026
  • Q3 2026 Report
  • Top Exploited CVEs
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube
© 2017 - 2026 Daily CyberSecurity. All Rights Reserved.