Skip to content
November 11, 2026
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube

Daily CyberSecurity

Zero-hour alerts. Unmatched analysis.

Primary Menu
  • Home
  • CVE Data
    • CVE Watchtower
    • Top Exploited CVEs
    • CVE Stats by Vendor
    • Q2 2026 Report
    • CVE Alerts
    • CVE Alert Settings
    • Pricing
  • Cyber Criminals
  • Data Leak
  • Free Tools
    • CVSS 3.1 Calculator
    • Certificate Viewer
    • DNS Lookup
    • Encoder & Hash Generator
    • IP / Subnet Calculator
    • Whois Lookup
  • Linux
  • Malware
  • Vulnerability
  • Submit Press Release
Light/Dark Button
Cybercriminals Exploit CosmicSting Vulnerability, Hacking Thousands of Adobe Commerce and Magento Stores CosmicSting Exploit
  • Malware
  • Vulnerability

Cybercriminals Exploit CosmicSting Vulnerability, Hacking Thousands of Adobe Commerce and Magento Stores

Do Son October 3, 2024 0

Cyber breach alert: CosmicSting vulnerability exploited by hackers to steal sensitive customer data. Stay informed about this critical cybersecurity threat.

“Pig Butchering” Scam: Cybercriminals Prey on Mobile Trading Enthusiasts fraudulent
  • Cyber Security

“Pig Butchering” Scam: Cybercriminals Prey on Mobile Trading Enthusiasts

Do Son October 3, 2024 0

Beware of the Pig Butchering scam: a new fraudulent trend targeting iOS and Android users through fake trading apps. Learn how cybercriminals lure and drain victims of their investments.

RPKI Security Under Fire: 53 Vulnerabilities Exposed in New Research Resource Public Key Infrastructure (RPKI)
  • Vulnerability

RPKI Security Under Fire: 53 Vulnerabilities Exposed in New Research

Do Son October 3, 2024 0

Uncover the vulnerabilities and challenges in Resource Public Key Infrastructure (RPKI) protocol, raising concerns about its stability and security.

Prince Ransomware Hits UK and US via Royal Mail Phishing Scam Prince ransomware
  • Malware

Prince Ransomware Hits UK and US via Royal Mail Phishing Scam

Do Son October 3, 2024 0

Beware of the Prince ransomware phishing campaign impersonating Royal Mail. Learn how attackers distribute destructive malware disguised as legitimate communication.

CVE-2024-5102: Avast Antivirus Flaw Could Allow Hackers to Delete Files and Run Code as SYSTEM CVE-2024-5102
  • Vulnerability

CVE-2024-5102: Avast Antivirus Flaw Could Allow Hackers to Delete Files and Run Code as SYSTEM

Do Son October 3, 2024 0

Learn about a critical vulnerability (CVE-2024-5102) in Avast Antivirus for Windows that can be exploited to delete files, install malware, and steal sensitive data.

Linux Servers Under Siege: “Perfctl” Malware Evades Detection for Years perfctl malware
  • Linux
  • Malware

Linux Servers Under Siege: “Perfctl” Malware Evades Detection for Years

Do Son October 3, 2024 0

Discover the impact of perfctl, a stealthy and dangerous malware targeting Linux servers. Understand its sophisticated techniques and learn how to defend against it.

Cybercriminals Exploit Job Search with More_eggs Backdoor in Resume Scam more_eggs backdoor
  • Malware

Cybercriminals Exploit Job Search with More_eggs Backdoor in Resume Scam

Do Son October 3, 2024 0

Beware of the More_eggs backdoor phishing campaign targeting HR professionals. Find out how attackers are using job applicant inquiries to infiltrate networks.

YouTube, Snapchat, TikTok Ordered to Reveal Recommender System Details Amid DSA Crackdown Digital Services Act - recommender systems
  • Technology

YouTube, Snapchat, TikTok Ordered to Reveal Recommender System Details Amid DSA Crackdown

Do Son October 3, 2024 0

Digital Services Act: European Commission investigates recommender systems of YouTube, Snapchat, and TikTok. Discover the risks and concerns surrounding these algorithms.

Security Vulnerabilities Uncovered in Jenkins: Immediate Updates Recommended Jenkins Security Update CVE-2026-27099 Jenkins security - CVE-2023-35141 Jenkins plugins, CVE-2025-47884
  • Vulnerability

Security Vulnerabilities Uncovered in Jenkins: Immediate Updates Recommended

Do Son October 3, 2024 0

Secure your Jenkins installation now! Don't leave your data at risk. Learn about the recently disclosed vulnerabilities and how to protect your server.

Chrome Releases Stable Channel Update Addressing High Security Vulnerabilities Chrome Stable
  • Vulnerability

Chrome Releases Stable Channel Update Addressing High Security Vulnerabilities

Do Son October 3, 2024 0

Learn about the latest Stable channel update for Chrome. Find out how version 129.0.6668.89/.90 improves security and fixes significant vulnerabilities.

0-Day Flaw CVE-2024-38200 in Microsoft Office Exposes NTLMv2 Hashes: PoC Exploit Released CVE-2024-38200 exploit
  • Vulnerability

0-Day Flaw CVE-2024-38200 in Microsoft Office Exposes NTLMv2 Hashes: PoC Exploit Released

Do Son October 2, 2024 0

Learn how a newly discovered vulnerability in Microsoft Office can compromise your data security. Explore the details of CVE-2024-38200 exploit and its implications.

CVE-2024-20432 (CVSS 9.9): Cisco Nexus Dashboard Fabric Controller Exposed to RCE CVE-2024-20432 - Cisco Nexus
  • Vulnerability

CVE-2024-20432 (CVSS 9.9): Cisco Nexus Dashboard Fabric Controller Exposed to RCE

Do Son October 2, 2024 0

Discover the severity and impact of CVE-2024-20432, a critical vulnerability in Cisco Nexus Dashboard Fabric Controller (NDFC).

North Korean Stonefly Group Continues Attacks on US Targets BlueNoroff macOS Attack GhostCall Campaign Carding Underground Bulletproof Hosting DPRK Contagious Interview, npm Flood Stonefly group -HiatusRAT Actors
  • Cyber Security
  • Malware

North Korean Stonefly Group Continues Attacks on US Targets

Do Son October 2, 2024 0

Symantec's Threat Hunter Team unveils the persistence of Stonefly, a North Korean cyberespionage group, in targeting U.S. organizations despite recent indictments.

CUPS Exploit Turns Common Devices into DDoS Weapons BingX cyberattack FortiGate SSO Attacks Firewall Config Theft
  • Malware
  • Vulnerability

CUPS Exploit Turns Common Devices into DDoS Weapons

Do Son October 2, 2024 0

Learn about a new attack vector exploiting vulnerabilities in CUPS. Find out how printers can be used to launch large-scale DDoS attacks.

New Malware Duo Bulbature and GobRAT Target Edge Devices Worldwide Bulbature & GobRAT
  • Malware

New Malware Duo Bulbature and GobRAT Target Edge Devices Worldwide

Do Son October 2, 2024 0

Uncover the intricate cyber threat of GobRAT and Bulbature targeting edge devices worldwide. Learn how these malware variants have caused chaos in critical networks.

CVE-2024-47374: LiteSpeed Cache Plugin Flaw Threatens Millions of WordPress Sites CVE-2024-47374
  • Vulnerability

CVE-2024-47374: LiteSpeed Cache Plugin Flaw Threatens Millions of WordPress Sites

Do Son October 2, 2024 0

Stay protected from CVE-2024-47374 with the latest version of LiteSpeed Cache plugin. Enhance performance and security for your WordPress site.

INTERPOL’s Operation Contender 2.0 Strikes Major Blow Against West African Cybercrime Operation Contender 2.0
  • Cyber Security

INTERPOL’s Operation Contender 2.0 Strikes Major Blow Against West African Cybercrime

Do Son October 2, 2024 0

Major breakthrough in the fight against cybercrime. Operation Contender 2.0 leads to the arrest of eight individuals involved in a phishing scam defrauding victims of over USD 1.4 million.

Key Group Ransomware: A Growing Threat Using Off-the-Shelf Tools Key Group - Keygroup777
  • Cyber Security

Key Group Ransomware: A Growing Threat Using Off-the-Shelf Tools

Do Son October 2, 2024 0

Learn about the Key Group, a ransomware group that targets Russian-speaking users and leverages various ransomware toolkits to execute attacks.

DrayTek Patched Multi Flaws in Routers, Including CVE-2024-41592 (CVSS 10.0) CVE-2024-41592 - DrayTek routers
  • Vulnerability

DrayTek Patched Multi Flaws in Routers, Including CVE-2024-41592 (CVSS 10.0)

Do Son October 2, 2024 0

Security alert: 14 vulnerabilities found in DrayTek routers, with a critical buffer overflow vulnerability (CVE-2024-41592) that exposes networks to potential attacks.

Europol Leads Global Crackdown on LockBit Ransomware Syndicate LockBit LockBit 5.0 Resurgence, ETW Blinding Ransomware
  • Cyber Security

Europol Leads Global Crackdown on LockBit Ransomware Syndicate

Do Son October 2, 2024 0

Europol's landmark operation against LockBit ransomware: key individuals arrested, critical servers seized in a coordinated crackdown.

CVE-2024-29824: Critical Vulnerability in Ivanti Endpoint Manager Actively Exploited, PoC Published CVE-2024-29824 exploit PoC
  • Vulnerability

CVE-2024-29824: Critical Vulnerability in Ivanti Endpoint Manager Actively Exploited, PoC Published

Do Son October 2, 2024 0

CISA alert: Act now to secure your organization from CVE-2024-29824 exploit targeting Ivanti Endpoint Manager (EPM)

Vulnerability in Vesta Control Panel Exposes Admin Accounts Vesta Control Panel
  • Vulnerability

Vulnerability in Vesta Control Panel Exposes Admin Accounts

Do Son October 2, 2024 0

Discover the critical vulnerability in Vesta Control Panel and learn how attackers can exploit reduced seed entropy in Bash's $RANDOM variable.

❮ Prev Page
Next Page ❯

Search

CVE ALERTS
📈

EPSS Spike Alerts
Catch risk spikes before they make headlines.

🎯

Custom EPSS/CVSS
Set score thresholds to effectively filter noise.

🛡️

Exploit Intel
Real-world exploit signals beyond the KEV catalog.

🐙

GitHub Issues
Auto-create alert tickets without duplication.

📬

Weekly Digest
Clean summaries, eliminating email spam.

🏷️

Watchlist Groups
Tag vulnerabilities by team (Infra/AppSec/SOC).

🔀

Smart Routing
Route chat channels based on severity levels.

🚨

RBP Tracker
Early warning detection and tracking system.

Subscribe – $7/mo or try free for 14 days →

🚨 Active Exploits in the Wild

  • CVE-2026-20320CVSS 7.5
    A vulnerability in the Open Client Interface (OCI) XML Parser of Cisco BroadWorks could allow an unauthenticated, remote...
    CISA KEV📅 Added to KEV: Nov 10, 2026
  • CVE-2026-111793CVSS 4.3
    Openwave Webtop Media Transcoder does not enforce administrator-defined file type restrictions to restrict the file-types to be converted....
    CISA KEV📅 Added to KEV: Nov 10, 2026
  • CVE-2026-111560CVSS 8.6
    Improper neutralization of shell metacharacters in the timezone configuration field in certain Barracuda appliance products using common Barracuda...
    CISA KEV📅 Added to KEV: Nov 10, 2026
  • CVE-2026-116606CVSS 9.3
    An authentication bypass in Barracuda Email Security Gateway versions earlier than 9.4.0.030 allows an unauthenticated remote attacker to...
    CISA KEV📅 Added to KEV: Nov 10, 2026
  • CVE-2026-125350
    Use after free in XML. Reported by anonymous on 2026-11-06. Google is aware that an exploit for CVE-2026-125350...
    CISA KEV📅 Added to KEV: Nov 10, 2026
  • CVE-2026-124194CVSS 6.5
    Product ui does not warn user of unsafe actions in Microsoft Office Outlook allows an unauthorized attacker to...
    CISA KEV📅 Added to KEV: Nov 10, 2026
  • CVE-2026-123751CVSS 9.8
    The WP Duplicate WordPress plugin through 1.1.11 does not properly verify a request authentication value and does not...
    Watchtower Verified📅 Updated: Nov 9, 2026
  • CVE-2026-114713CVSS 8.6
    The labeled-response module in UnrealIRCd 6.0.0 before 6.2.7.1 does not escape the IRCv3 "label" message tag when echoing...
    Admin intel📅 Updated: Nov 9, 2026
Powered by CVE Watchtower

Critical Vulnerabilities

  • CVE-2026-126259CVSS 9.0
    Missing authentication for critical function in FortiOS
    📅 Updated: Nov 10, 2026
  • CVE-2026-126262CVSS 9.3
    Improper neutralization of special elements used in an SQL command in FortiManager
    📅 Updated: Nov 10, 2026
  • CVE-2026-126260CVSS 9.0
    Server side request forgery vulnerability in FortiAnalyzer, FortiManager with FortiAnalyzer features & FortiAnalyzer-BigData
    📅 Updated: Nov 10, 2026
  • CVE-2026-126170CVSS 9.8
    Unauthenticated RCE in multiple products
    📅 Updated: Nov 10, 2026
  • CVE-2026-126261CVSS 9.0
    Improper authorizatin vulnerability in FortiManager
    📅 Updated: Nov 10, 2026
  • CVE-2026-126187CVSS 9.5
    React is a JavaScript library for building user interfaces. From 19.0.0 until 19.0.9, 19.1.10, 19.2.9, and 19.3.1, the...
    📅 Updated: Nov 10, 2026
  • CVE-2026-126229CVSS 9.1
    Authorization Bypass in FortiManager, FortiAnalyzer, FortiManager Cloud and FortiAnalyzer Cloud
    📅 Updated: Nov 10, 2026
  • CVE-2026-126253CVSS 9.3
    OSPF Authentication Bypass in multiple product
    📅 Updated: Nov 10, 2026
Powered by CVE Watchtower

Daily CyberSecurity

  • About SecurityOnline.info
  • Advertise with us
  • Announcement
  • Contact
  • Contributor Register
  • Login
  • Disclaimer
  • DCMA
  • Privacy Policy
  • About SecurityOnline.info
  • Advertise on SecurityOnline.info
  • Contact Us

When you purchase through links on our site, we may earn an affiliate commission. Here’s how it works

  • CVE Watchtower
  • CVE Statistics by Vendor 2026
  • Q3 2026 Report
  • Top Exploited CVEs
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube
© 2017 - 2026 Daily CyberSecurity. All Rights Reserved.