Skip to content
November 10, 2026
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube

Daily CyberSecurity

Zero-hour alerts. Unmatched analysis.

Primary Menu
  • Home
  • CVE Data
    • CVE Watchtower
    • Top Exploited CVEs
    • CVE Stats by Vendor
    • Q2 2026 Report
    • CVE Alerts
    • CVE Alert Settings
    • Pricing
  • Cyber Criminals
  • Data Leak
  • Free Tools
    • CVSS 3.1 Calculator
    • Certificate Viewer
    • DNS Lookup
    • Encoder & Hash Generator
    • IP / Subnet Calculator
    • Whois Lookup
  • Linux
  • Malware
  • Vulnerability
  • Submit Press Release
Light/Dark Button
Midnight Blizzard Targets 100+ Organizations in RDP Phishing Attack RDP Phishing Attack
  • Cyber Security

Midnight Blizzard Targets 100+ Organizations in RDP Phishing Attack

Do Son October 29, 2024 0

Beware of the latest RDP phishing attack orchestrated by a Russian state-sponsored threat actor. Learn how to protect yourself from this targeted spear-phishing campaign.

Denial-of-Service Vulnerability Found in Squid Proxy Server (CVE-2024-45802) CVE-2024-45802 Squid Vulnerability, Remote Code Execution CVE-2025-54574
  • Vulnerability

Denial-of-Service Vulnerability Found in Squid Proxy Server (CVE-2024-45802)

Do Son October 29, 2024 0

Find out how CVE-2024-45802, a DoS vulnerability, impacts Squid, the popular caching proxy server. Stay informed to protect your system.

ThreatFabric Reveals Dangerous Upgrades in LightSpy Spyware – 28 Plugins Targeting iOS Devices LightSpy iOS
  • Malware
  • Vulnerability

ThreatFabric Reveals Dangerous Upgrades in LightSpy Spyware – 28 Plugins Targeting iOS Devices

Do Son October 29, 2024 0

Discover the intensified threat to iOS users posed by the advanced LightSpy iOS spyware. Stay updated on its capabilities and target vulnerabilities.

New Chrome Security Patch Targets Critical CVE-2024-10487 & 10488 Flaws – Update Immediately Chrome 148 lazy loading Chrome for Linux ARM64 Chrome 145 Update Chrome Security Fixes Chrome Security Update CVE-2026-1220 Chrome 144 Security Update CVE-2026-0899 Chrome Memory Safety, WebGPU UAF Chrome V8 Type Confusion, Google Updater Flaw Chrome V8 Flaw, CVE-2025-13042 Chrome V8, Type Confusion, Chrome 142 Update Chrome V8 Flaw, CVE-2025-12036 Chrome 141, WebGPU Overflow Google Chrome preloading Chrome, V8 vulnerability CVE-2025-9132 Chrome Security Update, Use-After-Free Chrome V8, Type Confusion Chrome Telemetry, Windows 10 EOL Microsoft Family Safety, Chrome Blocking Chrome Security Update, High-Severity Google Chrome, Antitrust CVE-2024-10487 and CVE-2024-10488 Google Chrome Root Program Chrome Update, CVE-2025-3619 Chrome Acquisition, Perplexity.ai
  • Vulnerability

New Chrome Security Patch Targets Critical CVE-2024-10487 & 10488 Flaws – Update Immediately

Do Son October 29, 2024 0

Stay safe online with the latest Chrome update. Find out about the critical CVE-2024-10487 and high CVE-2024-10488 flaws and how they can impact your system

PySilon: A Discord Bot Turned Malicious RAT for Data Theft and Surveillance Discord Bot
  • Malware

PySilon: A Discord Bot Turned Malicious RAT for Data Theft and Surveillance

Do Son October 29, 2024 0

Learn about the PySilon RAT, a malware variant that exploits Discord Bots to infiltrate systems and collect confidential information.

CVE-2024-45656: A 9.8 Severity Threat to IBM Power Systems Security IBM API Connect, CVE-2025-13915 IBM Privilege Escalation, CVE-2025-36356 IBM Power Systems - CVE-2024-45656 CVE-2024-49814 and CVE-2024-51450 CVE-2024-56346 and CVE-2024-56347 CVE-2025-1302
  • Vulnerability

CVE-2024-45656: A 9.8 Severity Threat to IBM Power Systems Security

Do Son October 29, 2024 0

Learn about the CVE-2024-45656 vulnerability in IBM Power Systems. Understand the risks and steps to mitigate the potential impact.

Divulge, Dedsec, and Duck: The Rise of Advanced Stealer Malware DIVULGE STEALER
  • Malware

Divulge, Dedsec, and Duck: The Rise of Advanced Stealer Malware

Do Son October 29, 2024 0

CYFIRMA has recently exposed a trio of malicious stealers—Divulge, Dedsec, and Duck Stealer—highlighting their proliferation

22,000 CyberPanel Servers Exposed: Zero-Click RCE Vulnerability Discovered, PoC Published CyberPanel vulnerability
  • Vulnerability

22,000 CyberPanel Servers Exposed: Zero-Click RCE Vulnerability Discovered, PoC Published

Do Son October 29, 2024 0

Learn about the critical flaw in CyberPanel, exposing thousands of instances to a zero-click pre-authentication root RCE threat

UNC5812: Unmasking the Russian Operation to Sabotage Ukraine’s Military Recruitment UNC5812 - CRAXSRAT
  • Cyber Security
  • Malware

UNC5812: Unmasking the Russian Operation to Sabotage Ukraine’s Military Recruitment

Do Son October 29, 2024 0

Uncover the UNC5812 Russian espionage campaign targeting Ukrainian military recruits. Learn how malware and strategic misinformation are used to undermine mobilization efforts.

Canadian Organizations Targeted by Chinese State-Sponsored Scanning Iranian Cyber Reconnaissance IP Camera Security NCSC Warning Russian Hacktivists Taiwan Cyberattacks China State-Sponsored Hacking state-sponsored threat actor Ransomware RAT Abuse, AnyDesk
  • Cyber Security

Canadian Organizations Targeted by Chinese State-Sponsored Scanning

Do Son October 28, 2024 0

Canadian organizations urged to strengthen defenses against state-sponsored threat actor from China. Learn how to protect against potential future malicious actions.

CLFS Flaw in Windows 11 Allows for Privilege Escalation, PoC Published Windows 11 Privilege Escalation
  • Vulnerability

CLFS Flaw in Windows 11 Allows for Privilege Escalation, PoC Published

Do Son October 28, 2024 0

Uncover a high-severity vulnerability in Windows 11: learn how local users can escalate their privileges through the CLFS driver.

CVE-2024-38821 (CVSS 9.1) Allows Authorization Bypass in Spring WebFlux Applications CVE-2024-38821 - CVE-2025-22223 and CVE-2025-22228 Spring Framework vulnerability, Spring Security
  • Vulnerability

CVE-2024-38821 (CVSS 9.1) Allows Authorization Bypass in Spring WebFlux Applications

Do Son October 28, 2024 0

Learn about the critical vulnerability CVE-2024-38821 impacting Spring WebFlux applications and the implications for application security.

CVE-2024-22036 (CVSS 9.1): Critical RCE Vulnerability Discovered in SUSE Rancher Rancher security flaws cluster privilege escalation Rancher Path Traversal CVE-2026-25705 Rancher Vulnerabilities, SAML Phishing CVE-2024-22036 Rancher, vulnerability
  • Vulnerability

CVE-2024-22036 (CVSS 9.1): Critical RCE Vulnerability Discovered in SUSE Rancher

Do Son October 28, 2024 0

Discover the high-risk flaw CVE-2024-22036 in Rancher environments, allowing attackers to escape the chroot jail and gain root access.

Pig Butchers Enter the Gig Economy, Targeting Job Seekers in Cryptocurrency Scams gig economy scams
  • Cyber Security

Pig Butchers Enter the Gig Economy, Targeting Job Seekers in Cryptocurrency Scams

Do Son October 28, 2024 0

Protect yourself from gig economy scams. Learn how cybercriminals are taking advantage of the demand for remote work with fake job offers.

Sharp and Toshiba Tec MFPs Exposed: Multiple Vulnerabilities Put Businesses at Risk CVE-2024-47406 CVE-2025-1268 Canon Printer Vulnerability CVE-2025-14231
  • Vulnerability

Sharp and Toshiba Tec MFPs Exposed: Multiple Vulnerabilities Put Businesses at Risk

Do Son October 28, 2024 0

(CVE-2024-47406, CVSS 9.1): Weaknesses in HTTP authentication processing could enable attackers to bypass security measures and gain access.

Cosmos Hub’s LSM: North Korean Development Raises Security Concerns Cosmos Hub
  • Malware

Cosmos Hub’s LSM: North Korean Development Raises Security Concerns

Do Son October 28, 2024 0

Iqlusion's controversial Liquid Staking Module in Cosmos Hub: potential vulnerabilities and involvement of specialists from North Korea.

Driver Signature Enforcement Cracked: OS Downgrade Attacks Possible on Windows Driver Signature Enforcement
  • Vulnerability

Driver Signature Enforcement Cracked: OS Downgrade Attacks Possible on Windows

Do Son October 28, 2024 0

Learn how attackers can bypass Driver Signature Enforcement and install rootkits on fully updated Windows systems.

CVE-2024-46483 (CVSS 9.8): Xlight FTP Server Flaw Leaves Users Exposed to Remote Attacks, PoC Published CVE-2024-46483
  • Vulnerability

CVE-2024-46483 (CVSS 9.8): Xlight FTP Server Flaw Leaves Users Exposed to Remote Attacks, PoC Published

Do Son October 28, 2024 0

Learn about the critical security vulnerability CVE-2024-46483 affecting Xlight SFTP server, and how it allows remote code execution or DoS.

TeamTNT’s “Docker Gatling Gun” Campaign Targets Exposed Cloud Environments with New Sliver Malware TeamTNT - Docker Gatling Gun
  • Cyber Security
  • Malware

TeamTNT’s “Docker Gatling Gun” Campaign Targets Exposed Cloud Environments with New Sliver Malware

Do Son October 28, 2024

New report reveals TeamTNT's large-scale campaign targeting exposed Docker environments. Learn about the Docker Gatling Gun attack and the advanced Sliver malware.

CVE-2023-32197 (CVSS 9.1): Critical RKE2 Flaw Exposes Windows Nodes to Privilege Escalation CVE-2023-32197
  • Vulnerability

CVE-2023-32197 (CVSS 9.1): Critical RKE2 Flaw Exposes Windows Nodes to Privilege Escalation

Do Son October 28, 2024 0

Explore the details of the flaw CVE-2023-32197 in RKE2. Find out how it allows unauthorized access to sensitive files on Windows nodes

Data of Over 100 Million Individuals Exposed in Change Healthcare Cyberattack CRussian Market, "Fly" (Flyded) hange Healthcare Cyberattack - CVE-2024-50603 Exploit
  • Cyber Security
  • Data Leak

Data of Over 100 Million Individuals Exposed in Change Healthcare Cyberattack

Do Son October 28, 2024 0

Get the latest update on the Change Healthcare cyberattack and learn how it compromised the medical records of over 100 million individuals.

Apple Unveils Virtual Research Environment for Private Cloud Compute Apple Private Cloud Compute
  • Technology

Apple Unveils Virtual Research Environment for Private Cloud Compute

Do Son October 28, 2024 0

Explore Apple's Private Cloud Compute (PCC) system and its robust security features. Learn how PCC ensures data privacy and encryption.

❮ Prev Page
Next Page ❯

Search

CVE ALERTS
📈

EPSS Spike Alerts
Catch risk spikes before they make headlines.

🎯

Custom EPSS/CVSS
Set score thresholds to effectively filter noise.

🛡️

Exploit Intel
Real-world exploit signals beyond the KEV catalog.

🐙

GitHub Issues
Auto-create alert tickets without duplication.

📬

Weekly Digest
Clean summaries, eliminating email spam.

🏷️

Watchlist Groups
Tag vulnerabilities by team (Infra/AppSec/SOC).

🔀

Smart Routing
Route chat channels based on severity levels.

🚨

RBP Tracker
Early warning detection and tracking system.

Subscribe – $7/mo or try free for 14 days →

🚨 Active Exploits in the Wild

  • CVE-2026-116606CVSS 9.3
    An authentication bypass in Barracuda Email Security Gateway versions earlier than 9.4.0.030 allows an unauthenticated remote attacker to...
    Admin intel📅 Updated: Nov 10, 2026
  • CVE-2026-125350
    Use after free in XML. Reported by anonymous on 2026-11-06. Google is aware that an exploit for CVE-2026-125350...
    Admin intel📅 Updated: Nov 10, 2026
  • CVE-2026-123751CVSS 9.8
    The WP Duplicate WordPress plugin through 1.1.11 does not properly verify a request authentication value and does not...
    Watchtower Verified📅 Updated: Nov 9, 2026
  • CVE-2026-111793CVSS 4.3
    Openwave Webtop Media Transcoder does not enforce administrator-defined file type restrictions to restrict the file-types to be converted....
    Admin intel📅 Updated: Nov 9, 2026
  • CVE-2026-114713CVSS 8.6
    The labeled-response module in UnrealIRCd 6.0.0 before 6.2.7.1 does not escape the IRCv3 "label" message tag when echoing...
    Admin intel📅 Updated: Nov 9, 2026
  • CVE-2026-116779CVSS 9.8
    Summary `sofia_presence_handle_sip_i_message()` splits the To user of an inbound SIP MESSAGE on `+` and treats the left half...
    CISA KEV📅 Added to KEV: Nov 9, 2026
  • CVE-2026-102895CVSS 9.8
    GPUStack is an open-source GPU cluster manager for AI model serving and GPU instance provisioning. Prior to 2.2.0,...
    CISA KEV📅 Added to KEV: Nov 9, 2026
  • CVE-2026-123158CVSS 8.1
    sshd in OpenSSH before 10.6p2 on Linux, when musl libc is used without PAM, lacks a workaround for...
    CISA KEV📅 Added to KEV: Nov 9, 2026
Powered by CVE Watchtower

Critical Vulnerabilities

  • CVE-2026-76954CVSS 9.8
    An improper neutralization of special elements used in an SQL command vulnerability in the Auth API in Synology...
    📅 Updated: Nov 10, 2026
  • CVE-2026-91241CVSS 9.1
    Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Analytics Web Administration). Supported versions...
    📅 Updated: Nov 10, 2026
  • CVE-2026-121683CVSS 9.4
    Missing authentication in Ivanti Cloud Services Application version 5.0.8 allows a remote unauthenticated attacker to add and delete...
    📅 Updated: Nov 10, 2026
  • CVE-2026-83283CVSS 9.8
    Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Platform Security). The supported version...
    📅 Updated: Nov 10, 2026
  • CVE-2026-108186CVSS 9.6
    Improper Input Validation in Zoom Workplace for Windows may allow an unauthenticated user to conduct an escalation of...
    📅 Updated: Nov 10, 2026
  • CVE-2026-121653CVSS 9.8
    SQL injection in the Core of Ivanti Endpoint Manager before version 2024 SU8 allows a remote unauthenticated attacker...
    📅 Updated: Nov 10, 2026
  • CVE-2026-125758CVSS 9.1
    Aptabase before commit 61d4c01 contains an authentication bypass vulnerability that allows unauthenticated attackers to forge sign-in links by...
    📅 Updated: Nov 10, 2026
  • CVE-2026-125757CVSS 9.4
    mailcow: dockerized before 2026-11 contains a server-side template injection vulnerability that allows domain administrators to execute commands in...
    📅 Updated: Nov 10, 2026
Powered by CVE Watchtower

Daily CyberSecurity

  • About SecurityOnline.info
  • Advertise with us
  • Announcement
  • Contact
  • Contributor Register
  • Login
  • Disclaimer
  • DCMA
  • Privacy Policy
  • About SecurityOnline.info
  • Advertise on SecurityOnline.info
  • Contact Us

When you purchase through links on our site, we may earn an affiliate commission. Here’s how it works

  • CVE Watchtower
  • CVE Statistics by Vendor 2026
  • Q3 2026 Report
  • Top Exploited CVEs
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube
© 2017 - 2026 Daily CyberSecurity. All Rights Reserved.