Skip to content
November 10, 2026
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube

Daily CyberSecurity

Zero-hour alerts. Unmatched analysis.

Primary Menu
  • Home
  • CVE Data
    • CVE Watchtower
    • Top Exploited CVEs
    • CVE Stats by Vendor
    • Q2 2026 Report
    • CVE Alerts
    • CVE Alert Settings
    • Pricing
  • Cyber Criminals
  • Data Leak
  • Free Tools
    • CVSS 3.1 Calculator
    • Certificate Viewer
    • DNS Lookup
    • Encoder & Hash Generator
    • IP / Subnet Calculator
    • Whois Lookup
  • Linux
  • Malware
  • Vulnerability
  • Submit Press Release
Light/Dark Button
Microsoft Windows Flaw: CVE-2024-30090 PoC Exploit Published, Posing SYSTEM Privilege Threat Windows 11 Privilege Escalation
  • Vulnerability

Microsoft Windows Flaw: CVE-2024-30090 PoC Exploit Published, Posing SYSTEM Privilege Threat

Do Son October 20, 2024 0

Following Angelboy's analysis, security researcher Dor00tkit published a proof-of-concept (PoC) exploit code for CVE-2024-30090 on GitHub

GHOSTPULSE Evolves: Malware Now Hides in Image Pixels, Evading Detection Lotus Wiper Digital Sabotage G_Wagon Malware NPM Supply Chain Attack IMAPLoader malware ResolverRAT Malware Evasion
  • Malware

GHOSTPULSE Evolves: Malware Now Hides in Image Pixels, Evading Detection

Do Son October 20, 2024 0

Uncover the latest tactics of GHOSTPULSE malware: discover how this evolving threat hides its payload within pixel structures.

CVE-2024-21216 (CVSS 9.8): Oracle WebLogic Flaw That Could Give Attackers Full Control CVE-2024-21216
  • Vulnerability

CVE-2024-21216 (CVSS 9.8): Oracle WebLogic Flaw That Could Give Attackers Full Control

Do Son October 20, 2024 0

Stay protected from the critical CVE-2024-21216 flaw affecting Oracle WebLogic Server. Learn how to patch the issue and secure your system.

Beast Ransomware: RaaS Platform Targets Windows, Linux, and VMware ESXi Beast Ransomware
  • Malware

Beast Ransomware: RaaS Platform Targets Windows, Linux, and VMware ESXi

Do Son October 20, 2024 0

Uncover the evolving Beast Ransomware, a popular RaaS platform actively targeting organizations. Explore its customizable options for Windows, Linux, and VMware ESXi servers.

Supply Chain Weakness: Crypt Ghouls Exploit Contractors to Deploy Ransomware Crypt Ghouls
  • Cyber Security
  • Malware

Supply Chain Weakness: Crypt Ghouls Exploit Contractors to Deploy Ransomware

Do Son October 20, 2024 0

Learn about Crypt Ghouls, a cybercriminal group behind ransomware attacks. Find out how they operate and how to defend against them.

Ducktail & Quasar RAT: Vietnamese Threat Actors Target Meta Ads Professionals Ducktail malware
  • Cyber Security
  • Malware

Ducktail & Quasar RAT: Vietnamese Threat Actors Target Meta Ads Professionals

Do Son October 20, 2024 0

Discover the tactics used by a Vietnamese threat actor to target Meta Ads specialists with malware like Ducktail and Quasar RAT.

Developers Targeted: North Korean Hackers Deploy “BeaverTail” Malware via NFTs BeaverTail
  • Cyber Security
  • Malware

Developers Targeted: North Korean Hackers Deploy “BeaverTail” Malware via NFTs

Do Son October 20, 2024 0

Learn about the sophisticated phishing campaign using a fraudulent NFT project to spread malware known as BeaverTail.

IcePeony – A New China-Nexus APT Group Targeting Asian Nations IcePeony
  • Cyber Security
  • Malware

IcePeony – A New China-Nexus APT Group Targeting Asian Nations

Do Son October 20, 2024 0

The rise of IcePeony: Explore the sophisticated tactics and geopolitical motivations of this China-nexus APT group

Vulnhuntr: A Tool for Finding Exploitable Vulnerabilities with LLMs and Static Code Analysis Vulnhuntr
  • Open Source Tool

Vulnhuntr: A Tool for Finding Exploitable Vulnerabilities with LLMs and Static Code Analysis

Do Son October 19, 2024 0

Learn how Vulnhuntr, an open-source tool, can help you identify vulnerabilities in Python-based projects using the power of Large Language Models (LLMs)

CVE-2024-10025 (CVSS 9.1): Critical Flaw in SICK Products Exposes Systems to Remote Attacks CVE-2024-10025 CVE-2025-27593 & CVE-2025-27595
  • Vulnerability

CVE-2024-10025 (CVSS 9.1): Critical Flaw in SICK Products Exposes Systems to Remote Attacks

Do Son October 19, 2024 0

Learn about the critical flaw CVE-2024-10025 affecting SICK products. Find out how attackers can exploit hard-coded credentials to compromise device security.

Beware of Fake Google Meet Invites: ClickFix Campaign Spreading Infostealers The Phantom Meet
  • Malware

Beware of Fake Google Meet Invites: ClickFix Campaign Spreading Infostealers

Do Son October 19, 2024 0

Beware of the new cybersecurity threat, ClickFix. Discover how cybercriminals are leveraging this dangerous tactic to deceive users and distribute malware.

Critical Flaw in Synology Camera Firmware Expose Devices to RCE and DoS Attacks Synology Camera BC500 Firmware
  • Vulnerability

Critical Flaw in Synology Camera Firmware Expose Devices to RCE and DoS Attacks

Do Son October 18, 2024 0

Security advisory for Synology Camera BC500/TC500/CC400W: learn about the critical flaws & how to safeguard your camera from remote attacks.

Gatekeeper Bypass: Malicious Apps Could Slip Through macOS Defenses Gatekeeper Bypass
  • Vulnerability

Gatekeeper Bypass: Malicious Apps Could Slip Through macOS Defenses

Do Son October 18, 2024 0

Discover the vulnerabilities of macOS Gatekeeper and how malicious applications can bypass Apple's verification process.

CVE-2024-48914 (CVSS 9.1): Critical File Read Flaw Discovered in Vendure E-commerce Platform CVE-2024-48914
  • Vulnerability

CVE-2024-48914 (CVSS 9.1): Critical File Read Flaw Discovered in Vendure E-commerce Platform

Do Son October 18, 2024 0

Stay informed about the latest security threats. Discover the CVE-2024-48914 flaw in Vendure and the risks it poses to the security of your server.

Infostealers Use Telegram Bots for Data Exfiltration, Exploiting a Growing Threat Telegram Bots
  • Malware

Infostealers Use Telegram Bots for Data Exfiltration, Exploiting a Growing Threat

Do Son October 18, 2024 0

Tavares highlights that between October 2024 and now, the team observed 5 million logs containing stolen credentials from 1,800 Telegram bots

Hikvision HikCentral Master Lite and Professional Affected by Multi Vulnerabilities HikCentral Master Lite & HikCentral Professional
  • Vulnerability

Hikvision HikCentral Master Lite and Professional Affected by Multi Vulnerabilities

Do Son October 18, 2024 0

Discover the vulnerabilities affecting Hikvision's HikCentral Master Lite and Professional software. Stay informed and take action to safeguard your system.

Critical Vulnerabilities in Bitdefender Total Security Expose Users to Man-in-the-Middle Attacks Bitdefender Total Security
  • Vulnerability

Critical Vulnerabilities in Bitdefender Total Security Expose Users to Man-in-the-Middle Attacks

Do Son October 18, 2024 0

Protect your data with Bitdefender Total Security. Learn about the urgent advisory regarding critical vulnerabilities in the HTTPS scanning feature.

Cybercriminal Arrested in Connection with SEC X Account Hack That Manipulated Bitcoin Market Elderly lottery fraud scam DOJ wire fraud conspiracy ALPHV BlackCat, Insider Threat Nefilim ransomware Artem Stryzhak guilty plea, Volodymyr Tymoshchuk $11M reward CoinDCX, Employee Arrest Operation PowerOFF Cybercrime, Self-Promotion Hacking
  • Cyber Security

Cybercriminal Arrested in Connection with SEC X Account Hack That Manipulated Bitcoin Market

Do Son October 18, 2024 0

Council is accused of orchestrating a "SIM swap" attack to gain control of the Securities and Exchange Commission's (SEC) official X account

Patch Now! Grafana Hit by 9.9 Severity RCE Vulnerability (CVE-2024-9264) CVE-2024-9264
  • Vulnerability

Patch Now! Grafana Hit by 9.9 Severity RCE Vulnerability (CVE-2024-9264)

Do Son October 18, 2024 0

Grafana users, beware of CVE-2024-9264! Discover the details of this critical security vulnerability and find out how to safeguard your systems from potential attacks.

SolarWinds Web Help Desk Hit With Critical RCE Flaw (CVE-2024-28988, CVSS 9.8) CVE-2024-28988
  • Vulnerability

SolarWinds Web Help Desk Hit With Critical RCE Flaw (CVE-2024-28988, CVSS 9.8)

Do Son October 17, 2024 0

Protect your organization from the critical flaw CVE-2024-28988 in SolarWinds' Web Help Desk. Understand the risks and learn how to mitigate them

UAT-5647 Unleashes RomCom Malware in Attacks on Ukraine and Poland UAT-5647 - RomCom malware
  • Cyber Security
  • Malware

UAT-5647 Unleashes RomCom Malware in Attacks on Ukraine and Poland

Do Son October 17, 2024 0

Discover the latest cyber threat campaign: UAT-5647. Uncover the tactics, tools, and motivations behind this persistent group's targeted attacks.

F5 BIG-IP Vulnerability (CVE-2024-45844): Access Control Bypass Risk, PoC Available CVE-2024-45844 command injection root access
  • Vulnerability

F5 BIG-IP Vulnerability (CVE-2024-45844): Access Control Bypass Risk, PoC Available

Do Son October 17, 2024 0

Stay informed about CVE-2024-45844, a vulnerability in F5 BIG-IP that allows authenticated attackers to gain unauthorized access and control the system.

❮ Prev Page
Next Page ❯

Search

CVE ALERTS
📈

EPSS Spike Alerts
Catch risk spikes before they make headlines.

🎯

Custom EPSS/CVSS
Set score thresholds to effectively filter noise.

🛡️

Exploit Intel
Real-world exploit signals beyond the KEV catalog.

🐙

GitHub Issues
Auto-create alert tickets without duplication.

📬

Weekly Digest
Clean summaries, eliminating email spam.

🏷️

Watchlist Groups
Tag vulnerabilities by team (Infra/AppSec/SOC).

🔀

Smart Routing
Route chat channels based on severity levels.

🚨

RBP Tracker
Early warning detection and tracking system.

Subscribe – $7/mo or try free for 14 days →

🚨 Active Exploits in the Wild

  • CVE-2026-116606CVSS 9.3
    An authentication bypass in Barracuda Email Security Gateway versions earlier than 9.4.0.030 allows an unauthenticated remote attacker to...
    Admin intel📅 Updated: Nov 10, 2026
  • CVE-2026-125350
    Use after free in XML. Reported by anonymous on 2026-11-06. Google is aware that an exploit for CVE-2026-125350...
    Admin intel📅 Updated: Nov 10, 2026
  • CVE-2026-123751CVSS 9.8
    The WP Duplicate WordPress plugin through 1.1.11 does not properly verify a request authentication value and does not...
    Watchtower Verified📅 Updated: Nov 9, 2026
  • CVE-2026-111793CVSS 4.3
    Openwave Webtop Media Transcoder does not enforce administrator-defined file type restrictions to restrict the file-types to be converted....
    Admin intel📅 Updated: Nov 9, 2026
  • CVE-2026-114713CVSS 8.6
    The labeled-response module in UnrealIRCd 6.0.0 before 6.2.7.1 does not escape the IRCv3 "label" message tag when echoing...
    Admin intel📅 Updated: Nov 9, 2026
  • CVE-2026-116779CVSS 9.8
    Summary `sofia_presence_handle_sip_i_message()` splits the To user of an inbound SIP MESSAGE on `+` and treats the left half...
    CISA KEV📅 Added to KEV: Nov 9, 2026
  • CVE-2026-102895CVSS 9.8
    GPUStack is an open-source GPU cluster manager for AI model serving and GPU instance provisioning. Prior to 2.2.0,...
    CISA KEV📅 Added to KEV: Nov 9, 2026
  • CVE-2026-123158CVSS 8.1
    sshd in OpenSSH before 10.6p2 on Linux, when musl libc is used without PAM, lacks a workaround for...
    CISA KEV📅 Added to KEV: Nov 9, 2026
Powered by CVE Watchtower

Critical Vulnerabilities

  • CVE-2026-76954CVSS 9.8
    An improper neutralization of special elements used in an SQL command vulnerability in the Auth API in Synology...
    📅 Updated: Nov 10, 2026
  • CVE-2026-91241CVSS 9.1
    Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Analytics Web Administration). Supported versions...
    📅 Updated: Nov 10, 2026
  • CVE-2026-121683CVSS 9.4
    Missing authentication in Ivanti Cloud Services Application version 5.0.8 allows a remote unauthenticated attacker to add and delete...
    📅 Updated: Nov 10, 2026
  • CVE-2026-83283CVSS 9.8
    Vulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics (component: Platform Security). The supported version...
    📅 Updated: Nov 10, 2026
  • CVE-2026-108186CVSS 9.6
    Improper Input Validation in Zoom Workplace for Windows may allow an unauthenticated user to conduct an escalation of...
    📅 Updated: Nov 10, 2026
  • CVE-2026-121653CVSS 9.8
    SQL injection in the Core of Ivanti Endpoint Manager before version 2024 SU8 allows a remote unauthenticated attacker...
    📅 Updated: Nov 10, 2026
  • CVE-2026-125758CVSS 9.1
    Aptabase before commit 61d4c01 contains an authentication bypass vulnerability that allows unauthenticated attackers to forge sign-in links by...
    📅 Updated: Nov 10, 2026
  • CVE-2026-125757CVSS 9.4
    mailcow: dockerized before 2026-11 contains a server-side template injection vulnerability that allows domain administrators to execute commands in...
    📅 Updated: Nov 10, 2026
Powered by CVE Watchtower

Daily CyberSecurity

  • About SecurityOnline.info
  • Advertise with us
  • Announcement
  • Contact
  • Contributor Register
  • Login
  • Disclaimer
  • DCMA
  • Privacy Policy
  • About SecurityOnline.info
  • Advertise on SecurityOnline.info
  • Contact Us

When you purchase through links on our site, we may earn an affiliate commission. Here’s how it works

  • CVE Watchtower
  • CVE Statistics by Vendor 2026
  • Q3 2026 Report
  • Top Exploited CVEs
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube
© 2017 - 2026 Daily CyberSecurity. All Rights Reserved.