Skip to content
November 10, 2026
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube

Daily CyberSecurity

Zero-hour alerts. Unmatched analysis.

Primary Menu
  • Home
  • CVE Data
    • CVE Watchtower
    • Top Exploited CVEs
    • CVE Stats by Vendor
    • Q2 2026 Report
    • CVE Alerts
    • CVE Alert Settings
    • Pricing
  • Cyber Criminals
  • Data Leak
  • Free Tools
    • CVSS 3.1 Calculator
    • Certificate Viewer
    • DNS Lookup
    • Encoder & Hash Generator
    • IP / Subnet Calculator
    • Whois Lookup
  • Linux
  • Malware
  • Vulnerability
  • Submit Press Release
Light/Dark Button
NVIDIA Base Command Manager Update Patches CVE-2024-0138 (CVSS 9.8) NVIDIA GPU Security CUDA-Q Vulnerability NVIDIA Apex Vulnerability AI Infrastructure Security NVIDIA Cumulus Linux CVE-2025-33179 NVIDIA Arm divestment NVIDIA DGX Spark, CVE-2025-33187 NVIDIA Isaac-GROOT, Code Injection Megatron-LM Vulnerability, AI Code Injection NVIDIA China NVIDIA GPUs, Hardware Kill Switches NVIDIA Megatron-LM, LLM Vulnerabilities NVIDIA Base Command Manager - CVE-2024-0138
  • Vulnerability

NVIDIA Base Command Manager Update Patches CVE-2024-0138 (CVSS 9.8)

Do Son November 21, 2024 0

Critical security update for NVIDIA Base Command Manager software. Learn about a CVE-2024-0138 vulnerability and how to protect your system.

Weaponized Defenses: Malicious Campaign Hijacks Legitimate Security Drivers Hijack Security Drivers
  • Malware

Weaponized Defenses: Malicious Campaign Hijacks Legitimate Security Drivers

Do Son November 21, 2024 0

Uncover a malicious campaign targeting security drivers. Learn how attackers exploited the Avast Anti-Rootkit driver to bypass and seize control of systems.

CVE-2024-10126 & CVE-2024-10127: M-Files Addresses File Inclusion and Authentication Bypass Flaws M-Files Security, Session Token Disclosure CVE-2024-10126 and CVE-2024-10127
  • Vulnerability

CVE-2024-10126 & CVE-2024-10127: M-Files Addresses File Inclusion and Authentication Bypass Flaws

Do Son November 21, 2024 0

Stay secure with M-Files security updates. Learn about the vulnerabilities CVE-2024-10126 and CVE-2024-10127 and how they can be mitigated.

Chinese APTs Shift Tactics to Evade Detection and Maintain Stealth Mercenary Akula European Financial Targeting AI-Generated Malware React2Shell Exploit UAT-8837 Critical Infrastructure Attack APT36, BOSS Linux BRICKSTORM Malware, China Espionage Curly COMrades, MucorAgent Chinese APT - HTTP Client Tools Shuckworm Cyber Espionage
  • Cyber Security

Chinese APTs Shift Tactics to Evade Detection and Maintain Stealth

Do Son November 21, 2024 0

Uncover the tactics of Chinese APT groups in cyber espionage. Learn about zero-day exploits, LOTL techniques, and ORB networks in their evolving strategies.

Raspberry Robin’s Stealth Tactics: USB Infections, Exploits, and Advanced Obfuscation Unveiled GuLoader Malware CloudEye Obfuscation npm, malware Ethereum, npm supply chain OAST techniques StilachiRAT macOS Malware PasivRobber
  • Cyber Security
  • Vulnerability

Raspberry Robin’s Stealth Tactics: USB Infections, Exploits, and Advanced Obfuscation Unveiled

Do Son November 21, 2024 0

Discover the advanced techniques and intricate execution process of the highly sophisticated Raspberry Robin downloader.

CVE-2024-9478 & CVE-2024-9479: upKeeper IPA Flaws Rated CVSSv4 10 Now Resolved WD Discovery Vulnerability CVE-2025-30248 binary-parser Vulnerability CVE-2026-1245 H3C RCE Vulnerability CVE-2025-60262 Telenium RCE, CVE-2025-10659 Fuel station security, ICS vulnerabilities FreePBX vulnerability CVE-2024-9478 & CVE-2024-9479 SysTrack Vulnerability, Privilege Escalation
  • Vulnerability

CVE-2024-9478 & CVE-2024-9479: upKeeper IPA Flaws Rated CVSSv4 10 Now Resolved

Do Son November 21, 2024 0

Discover the critical vulnerabilities in upKeeper's Instant Privilege Access product. CVE-2024-9478 and CVE-2024-9479 carry a high severity score of 10

Cybersecurity Concerns Loom Over Drinking Water Systems, Says EPA Inspector General Report Iranian Hacktivists Operation Epic Fury Cyber New Generation Warfare Russian Hybrid Escalation Plex data breach Water Systems Cybersecurity - Threat Actor Naming Standard
  • Cyber Security

Cybersecurity Concerns Loom Over Drinking Water Systems, Says EPA Inspector General Report

Do Son November 21, 2024 0

Discover the alarming cybersecurity concerns at drinking water systems in the US. Find out how vulnerabilities could be exploited and what measures need to be taken for protection.

Volt Typhoon: Chinese State-Sponsored APT Targets U.S. Critical Infrastructure Volt Typhoon APT group
  • Cyber Security
  • Vulnerability

Volt Typhoon: Chinese State-Sponsored APT Targets U.S. Critical Infrastructure

Do Son November 21, 2024 0

Uncover the critical details about Volt Typhoon APT group: a state-sponsored threat targeting US critical infrastructure sectors.

CVE-2024-52067: Sensitive Data Exposed in Apache NiFi Debug Logs Apache NiFi RCE CVE-2026-39816 Apache NiFi Vulnerability CVE-2026-25903 Apache NiFi Deserialization, GetAsanaObject Vulnerability CVE-2024-52067 - CVE-2024-56512 CVE-2025-27017
  • Vulnerability

CVE-2024-52067: Sensitive Data Exposed in Apache NiFi Debug Logs

Do Son November 21, 2024 0

Learn about the newly discovered vulnerability in Apache NiFi (CVE-2024-52067) that could expose sensitive information through debug logs.

Sync-Scheduler Malware: Unveiling a Sophisticated Espionage Attack APT Bitter - Sync-Scheduler
  • Cyber Security

Sync-Scheduler Malware: Unveiling a Sophisticated Espionage Attack

Do Son November 21, 2024 0

Discover the targeted cyber espionage campaign against the Pakistan Navy and the role of the Sync-Scheduler malware.

MisakaNetwork: Blockchain Botnet Threatens npm Ecosystem C2 interaction with an infected system
  • Malware

MisakaNetwork: Blockchain Botnet Threatens npm Ecosystem

Do Son November 21, 2024 0

Learn about MisakaNetwork, a decentralized blockchain-powered botnet targeting open-source software and compromising systems.

Researchers Uncover XenoRAT’s New Tactics Leveraging Excel XLL Files and Advanced Obfuscation ahost.exe DLL Sideloading Signed Application Abuse PS1Bot, malware ransomware attacks bill
  • Malware

Researchers Uncover XenoRAT’s New Tactics Leveraging Excel XLL Files and Advanced Obfuscation

Do Son November 21, 2024 0

Learn about the implications of the new XenoRAT variant, utilizing Excel XLL files for delivery and posing a threat to enterprise networks.

Critical VMware vCenter Server Flaws Under Active Attack: CISA Issues Urgent Warning GUARDIANWALL MailSuite Exploit CVE-2026-32661 FileZen Vulnerability CVE-2026-25108 Ivanti EPMM Vulnerability Dormant Backdoor Fortinet Authentication Bypass CVE-2026-24858 VMware vCenter Server Flaw CVE-2025-21590
  • Vulnerability

Critical VMware vCenter Server Flaws Under Active Attack: CISA Issues Urgent Warning

Do Son November 21, 2024 0

Urgent warning! Stay protected from VMware vCenter Server flaws. Learn about the critical vulnerabilities and their potential impact on your organization.

CVE-2024-52940: AnyDesk Vulnerability Exposes User IP Addresses, PoC Published CVE-2024-52940
  • Vulnerability

CVE-2024-52940: AnyDesk Vulnerability Exposes User IP Addresses, PoC Published

Do Son November 21, 2024 0

Find out about the CVE-2024-52940 flaw in AnyDesk that allows attackers to retrieve users' IP addresses. Stay informed and protect yourself

PDFFlex: Analyzing PUA Persistence and Evasion Techniques PUA Persistence
  • Malware

PDFFlex: Analyzing PUA Persistence and Evasion Techniques

Do Son November 21, 2024 0

Uncover the stealthy tactics of a Potentially Unwanted Application (PUA) masquerading as a PDF conversion tool. Learn how persistence mechanisms are exploited by threat actors to maintain control.

CVE-2024-10220: Kubernetes Vulnerability Allows Arbitrary Command Execution Ingress-Nginx Vulnerability Kubernetes RCE Vulnerability CVE-2025-9708 Kubernetes Security, Image Builder Vulnerability CVE-2024-10220 - OPA Gatekeeper Bypass
  • Vulnerability

CVE-2024-10220: Kubernetes Vulnerability Allows Arbitrary Command Execution

Do Son November 20, 2024 0

Learn about the high-severity vulnerability CVE-2024-10220 in Kubernetes that allows arbitrary command execution outside container boundaries.

Phishing Scheme Nets Millions in Cryptocurrency, Five Charged StrelaStealer malware attacks - Phishing Scheme
  • Cyber Security

Phishing Scheme Nets Millions in Cryptocurrency, Five Charged

Do Son November 20, 2024 0

Discover how a sophisticated phishing scheme targeted employees, stole confidential information, and compromised the security of companies nationwide.

CVE-2024-42450 (CVSS 10): Versa Networks Addresses Critical Vulnerability in Versa Director CVE-2024-42450 - Versa Director
  • Vulnerability

CVE-2024-42450 (CVSS 10): Versa Networks Addresses Critical Vulnerability in Versa Director

Do Son November 20, 2024 0

Discover the critical vulnerability (CVE-2024-42450) impacting Versa Director software from Versa Networks. Understand the potential risks and find out how to protect your systems.

Earth Kasha Expands Operations: New LODEINFO Malware Hits Government and High-Tech Earth Kasha - LODEINFO
  • Cyber Security
  • Malware

Earth Kasha Expands Operations: New LODEINFO Malware Hits Government and High-Tech

Do Son November 20, 2024 0

Learn about the latest LODEINFO malware campaign attributed to the Earth Kasha threat group, targeting government agencies and high-tech industries in Japan, Taiwan, and India.

2024 CWE Top 25: Critical Software Weaknesses Revealed 2024 CWE Top 25
  • Vulnerability

2024 CWE Top 25: Critical Software Weaknesses Revealed

Do Son November 20, 2024 0

Discover the 2024 CWE Top 25 list, highlighting the most critical software weaknesses that attackers exploit. Stay informed and protect your software systems.

WorkflowKit Race Vulnerability (CVE-2024-27821): Researcher Reveals Exploit that Let Malicious Apps Hijack Shortcuts Apple Foldable, iPhone Fold WorkflowKit, CVE-2024-27821 Zero-Days
  • Vulnerability

WorkflowKit Race Vulnerability (CVE-2024-27821): Researcher Reveals Exploit that Let Malicious Apps Hijack Shortcuts

Do Son November 20, 2024 0

Learn about the significant security flaw in WorkflowKit, CVE-2024-27821, and how a malicious app can intercept and modify shortcut files during import.

FrostyGoop: New ICS Malware Exploits Modbus TCP Protocol Operation IconCat, UNG0801 AFP cyberattack -NetWalker Ransomware VShell RAT
  • Malware

FrostyGoop: New ICS Malware Exploits Modbus TCP Protocol

Do Son November 20, 2024 0

Learn about FrostyGoop, an alarming ICS-centric malware that exploits vulnerabilities in internet-exposed devices.

❮ Prev Page
Next Page ❯

Search

CVE ALERTS
📈

EPSS Spike Alerts
Catch risk spikes before they make headlines.

🎯

Custom EPSS/CVSS
Set score thresholds to effectively filter noise.

🛡️

Exploit Intel
Real-world exploit signals beyond the KEV catalog.

🐙

GitHub Issues
Auto-create alert tickets without duplication.

📬

Weekly Digest
Clean summaries, eliminating email spam.

🏷️

Watchlist Groups
Tag vulnerabilities by team (Infra/AppSec/SOC).

🔀

Smart Routing
Route chat channels based on severity levels.

🚨

RBP Tracker
Early warning detection and tracking system.

Subscribe – $7/mo or try free for 14 days →

🚨 Active Exploits in the Wild

  • CVE-2026-116606CVSS 9.3
    An authentication bypass in Barracuda Email Security Gateway versions earlier than 9.4.0.030 allows an unauthenticated remote attacker to...
    Admin intel📅 Updated: Nov 10, 2026
  • CVE-2026-125350
    Use after free in XML. Reported by anonymous on 2026-11-06. Google is aware that an exploit for CVE-2026-125350...
    Admin intel📅 Updated: Nov 10, 2026
  • CVE-2026-123751CVSS 9.8
    The WP Duplicate WordPress plugin through 1.1.11 does not properly verify a request authentication value and does not...
    Watchtower Verified📅 Updated: Nov 9, 2026
  • CVE-2026-111793CVSS 4.3
    Openwave Webtop Media Transcoder does not enforce administrator-defined file type restrictions to restrict the file-types to be converted....
    Admin intel📅 Updated: Nov 9, 2026
  • CVE-2026-114713CVSS 8.6
    The labeled-response module in UnrealIRCd 6.0.0 before 6.2.7.1 does not escape the IRCv3 "label" message tag when echoing...
    Admin intel📅 Updated: Nov 9, 2026
  • CVE-2026-116779CVSS 9.8
    Summary `sofia_presence_handle_sip_i_message()` splits the To user of an inbound SIP MESSAGE on `+` and treats the left half...
    CISA KEV📅 Added to KEV: Nov 9, 2026
  • CVE-2026-102895CVSS 9.8
    GPUStack is an open-source GPU cluster manager for AI model serving and GPU instance provisioning. Prior to 2.2.0,...
    CISA KEV📅 Added to KEV: Nov 9, 2026
  • CVE-2026-123158CVSS 8.1
    sshd in OpenSSH before 10.6p2 on Linux, when musl libc is used without PAM, lacks a workaround for...
    CISA KEV📅 Added to KEV: Nov 9, 2026
Powered by CVE Watchtower

Critical Vulnerabilities

  • CVE-2026-91241CVSS 9.1
    Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Analytics Web Administration). Supported versions...
    📅 Updated: Nov 10, 2026
  • CVE-2026-121683CVSS 9.4
    Missing authentication in Ivanti Cloud Services Application version 5.0.8 allows a remote unauthenticated attacker to add and delete...
    📅 Updated: Nov 10, 2026
  • CVE-2026-83283CVSS 9.8
    Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Platform Security). The supported version...
    📅 Updated: Nov 10, 2026
  • CVE-2026-108186CVSS 9.6
    Improper Input Validation in Zoom Workplace for Windows may allow an unauthenticated user to conduct an escalation of...
    📅 Updated: Nov 10, 2026
  • CVE-2026-121653CVSS 9.8
    SQL injection in the Core of Ivanti Endpoint Manager before version 2024 SU8 allows a remote unauthenticated attacker...
    📅 Updated: Nov 10, 2026
  • CVE-2026-125758CVSS 9.1
    Aptabase before commit 61d4c01 contains an authentication bypass vulnerability that allows unauthenticated attackers to forge sign-in links by...
    📅 Updated: Nov 10, 2026
  • CVE-2026-125757CVSS 9.4
    mailcow: dockerized before 2026-11 contains a server-side template injection vulnerability that allows domain administrators to execute commands in...
    📅 Updated: Nov 10, 2026
  • CVE-2026-124917CVSS 9.6
    Sandbox escape due to use-after-free in the Widget: Gtk component. This vulnerability was fixed in Firefox 160 and...
    📅 Updated: Nov 10, 2026
Powered by CVE Watchtower

Daily CyberSecurity

  • About SecurityOnline.info
  • Advertise with us
  • Announcement
  • Contact
  • Contributor Register
  • Login
  • Disclaimer
  • DCMA
  • Privacy Policy
  • About SecurityOnline.info
  • Advertise on SecurityOnline.info
  • Contact Us

When you purchase through links on our site, we may earn an affiliate commission. Here’s how it works

  • CVE Watchtower
  • CVE Statistics by Vendor 2026
  • Q3 2026 Report
  • Top Exploited CVEs
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube
© 2017 - 2026 Daily CyberSecurity. All Rights Reserved.