Skip to content
November 11, 2026
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube

Daily CyberSecurity

Zero-hour alerts. Unmatched analysis.

Primary Menu
  • Home
  • CVE Data
    • CVE Watchtower
    • Top Exploited CVEs
    • CVE Stats by Vendor
    • Q2 2026 Report
    • CVE Alerts
    • CVE Alert Settings
    • Pricing
  • Cyber Criminals
  • Data Leak
  • Free Tools
    • CVSS 3.1 Calculator
    • Certificate Viewer
    • DNS Lookup
    • Encoder & Hash Generator
    • IP / Subnet Calculator
    • Whois Lookup
  • Linux
  • Malware
  • Vulnerability
  • Submit Press Release
Light/Dark Button
CVE-2024-8986 (CVSS 9.1): Critical Grafana Plugin SDK Flaw Exposes Sensitive Information CVE-2024-8986 - grafana plugin SDK
  • Vulnerability

CVE-2024-8986 (CVSS 9.1): Critical Grafana Plugin SDK Flaw Exposes Sensitive Information

Do Son September 22, 2024 0

Critical security vulnerability in Grafana Plugin SDK for Go: CVE-2024-8986. Find out how this vulnerability could lead to the leakage of sensitive information and repository credentials.

GreyNoise Intelligence Uncovers New Internet Noise Storm with Potential China Link and Cryptic “LOVE” Message Noise Storms
  • Cyber Security

GreyNoise Intelligence Uncovers New Internet Noise Storm with Potential China Link and Cryptic “LOVE” Message

Do Son September 22, 2024 0

Uncover the mysterious world of Noise Storms - enigmatic surges of fake traffic that have puzzled experts since 2020.

Passive Backdoors, Active Threat: UNC1860’s Espionage Tools Exposed CVE-2024-1147 and CVE-2024-1148
  • Cyber Security
  • Malware

Passive Backdoors, Active Threat: UNC1860’s Espionage Tools Exposed

Do Son September 22, 2024 0

Get insights into UNC1860, a threat actor known for its ability to gain persistent access to high-priority networks in the Middle East.

CVE-2024-8698: Keycloak Vulnerability Puts SAML Authentication at Risk CVE-2024-8698 - Keycloak
  • Vulnerability

CVE-2024-8698: Keycloak Vulnerability Puts SAML Authentication at Risk

Do Son September 22, 2024 0

Uncover the security flaw in Keycloak's SAML signature validation process. Find out how this vulnerability could be exploited by attackers for privilege escalation and user impersonation attacks.

Interactive PDF Analysis: An Open Source Forensic Tool for Threat Detection PDF Analysis
  • Open Source Tool

Interactive PDF Analysis: An Open Source Forensic Tool for Threat Detection

Do Son September 21, 2024 0

Uncover hidden threats in PDF files with Interactive PDF Analysis. Explore the inner structure of PDFs to detect malicious elements and enhance security.

ZeroLogon to NoPac Vulnerability: Black Basta Group’s Exploit Arsenal Revealed Black Basta group
  • Malware

ZeroLogon to NoPac Vulnerability: Black Basta Group’s Exploit Arsenal Revealed

Do Son September 21, 2024 0

Learn about Black Basta ransomware and its similarities to the infamous Conti group. Qualys report sheds light on their operational tactics.

Beware of Fake Downloads: AsyncRAT Spreads via Popular Software Cracks AsyncRAT tactics
  • Malware

Beware of Fake Downloads: AsyncRAT Spreads via Popular Software Cracks

Do Son September 21, 2024 0

Beware of the evolving threat of AsyncRAT malware disguised as cracked software. Learn how cybercriminals are using this sophisticated remote access trojan to infiltrate systems.

$230 Million Cryptocurrency Heist: Two Arrested in Miami and Los Angeles Cryptocurrency Scam
  • Cyber Security

$230 Million Cryptocurrency Heist: Two Arrested in Miami and Los Angeles

Do Son September 20, 2024 0

Learn about the recent $230 million cryptocurrency theft and how two individuals orchestrated a sophisticated scam to gain unauthorized access to victims' accounts.

Versa Networks Exposes Critical API Vulnerability in Versa Director (CVE-2024-45229) Versa Director (CVE-2024-45229)
  • Vulnerability

Versa Networks Exposes Critical API Vulnerability in Versa Director (CVE-2024-45229)

Do Son September 20, 2024 0

Learn about the CVE-2024-45229 vulnerability in Versa Director and the potential impact on enterprise networks. Get insights on how to mitigate risks and protect sensitive authentication tokens.

Threat Actors Exploit HR-Related Phishing Tactics in Sophisticated Credential-Stealing Campaigns HR-Related Phishing
  • Cyber Security

Threat Actors Exploit HR-Related Phishing Tactics in Sophisticated Credential-Stealing Campaigns

Do Son September 20, 2024 0

Stay vigilant against HR-related phishing scams. Discover how attackers are using fake HR emails to deceive employees and steal sensitive data.

Critical Security Flaws in Camaleon CMS Put Web Servers at Risk – Users Urged to Upgrade Immediately Camaleon CMS - CVE-2024-46986
  • Vulnerability

Critical Security Flaws in Camaleon CMS Put Web Servers at Risk – Users Urged to Upgrade Immediately

Do Son September 20, 2024 0

Protect your website with the latest Camaleon CMS update. Learn about the critical security fixes addressing vulnerabilities and unauthorized access.

MutantBedrog: The Malvertiser Bypassing Trusted-Types and CSP with Disruptive Forced Redirect Campaigns MutantBedrog
  • Malware

MutantBedrog: The Malvertiser Bypassing Trusted-Types and CSP with Disruptive Forced Redirect Campaigns

Do Son September 20, 2024 0

Learn about the aggressive campaigns and unique JavaScript scripts of MutantBedrog, a new malicious actor discovered by cybersecurity specialists.

Cencora’s $75 Million Ransom: A New High in Cyber Extortion Cencora data breach
  • Cyber Security

Cencora’s $75 Million Ransom: A New High in Cyber Extortion

Do Son September 20, 2024 0

Uncover the shocking truth behind the largest ransom payment in history. Cencora paid a staggering $75 million in Bitcoin to cybercriminals.

macOS Sequoia Update Disrupts Major Cybersecurity Tools macOS 26, Apple Updates macOS Sequoia cybersecurity
  • Technology

macOS Sequoia Update Disrupts Major Cybersecurity Tools

Do Son September 20, 2024 0

Understand the cybersecurity concerns surrounding macOS Sequoia. Find out how changes to the network architecture have impacted security vendors and users.

North Korean Hackers Gleaming Pisces Poisoned Python Packages Target Linux & macOS PondRAT
  • Cyber Security
  • Malware

North Korean Hackers Gleaming Pisces Poisoned Python Packages Target Linux & macOS

Do Son September 19, 2024 0

Protect your systems from the Gleaming Pisces cyberattack campaign, which utilizes poisoned Python packages to deploy the backdoor, PondRAT.

483,000 Victims: Phishing Scam Unlocks Phones, Steals Data Operation Kaerb
  • Cyber Security

483,000 Victims: Phishing Scam Unlocks Phones, Steals Data

Do Son September 19, 2024 0

Law enforcement agencies successfully dismantled a notorious phishing network operating under the name “iServer.” Code-named Operation Kaerb

Critical Flaw in Ivanti CSA 4.6: CVE-2024-8963 Actively Exploited, Urgent Upgrade Required CVE-2024-8963
  • Vulnerability

Critical Flaw in Ivanti CSA 4.6: CVE-2024-8963 Actively Exploited, Urgent Upgrade Required

Do Son September 19, 2024 0

Take action to secure your Ivanti Connect Secure Appliance (CSA) 4.6. Learn about the critical vulnerability (CVE-2024-8963) and its potential risks.

Ransomware Groups Exploit Veeam Flaw CVE-2023-27532 in Nigerian Cyber Infrastructure Phobos ransomware group
  • Vulnerability

Ransomware Groups Exploit Veeam Flaw CVE-2023-27532 in Nigerian Cyber Infrastructure

Do Son September 19, 2024 0

Urgent alert: Nigeria targeted by Phobos ransomware group exploiting a high-severity vulnerability in Veeam Backup and Replication software.

Tor Project Responds to De-Anonymization Report: Network Remains Secure for Most Users Ricochet attack
  • Vulnerability

Tor Project Responds to De-Anonymization Report: Network Remains Secure for Most Users

Do Son September 19, 2024 0

The Tor Project addresses concerns raised by a de-anonymization attack targeting a Tor user using the retired Ricochet application.

SambaSpy RAT Targets Italian Users in a Unique Malware Campaign SambaSpy RAT
  • Malware

SambaSpy RAT Targets Italian Users in a Unique Malware Campaign

Do Son September 19, 2024 0

Uncover the intricacies of the SambaSpy malware campaign that exclusively targeted Italian users. Explore the precision and customization of this RAT

CVE-2023-48788 Exploited: Researcher Details Cyberattacks on Fortinet EMS Fortinet EMS - CVE-2023-48788 Medusa Ransomware TTPs
  • Malware
  • Vulnerability

CVE-2023-48788 Exploited: Researcher Details Cyberattacks on Fortinet EMS

Do Son September 19, 2024 0

Discover how cybercriminals exploited Fortinet FortiClient EMS, exposing critical vulnerabilities and utilizing a sophisticated attack chain.

Google Warns: Dependency Scanners Often Misreport Vulnerabilities Dependency Scanners
  • Vulnerability

Google Warns: Dependency Scanners Often Misreport Vulnerabilities

Do Son September 19, 2024 0

Uncover the truth about dependency scanners and false positives. Learn how to identify and address inaccurate vulnerability reports in this insightful blog post.

❮ Prev Page
Next Page ❯

Search

CVE ALERTS
📈

EPSS Spike Alerts
Catch risk spikes before they make headlines.

🎯

Custom EPSS/CVSS
Set score thresholds to effectively filter noise.

🛡️

Exploit Intel
Real-world exploit signals beyond the KEV catalog.

🐙

GitHub Issues
Auto-create alert tickets without duplication.

📬

Weekly Digest
Clean summaries, eliminating email spam.

🏷️

Watchlist Groups
Tag vulnerabilities by team (Infra/AppSec/SOC).

🔀

Smart Routing
Route chat channels based on severity levels.

🚨

RBP Tracker
Early warning detection and tracking system.

Subscribe – $7/mo or try free for 14 days →

🚨 Active Exploits in the Wild

  • CVE-2026-20320CVSS 7.5
    A vulnerability in the Open Client Interface (OCI) XML Parser of Cisco BroadWorks could allow an unauthenticated, remote...
    CISA KEV📅 Added to KEV: Nov 10, 2026
  • CVE-2026-111793CVSS 4.3
    Openwave Webtop Media Transcoder does not enforce administrator-defined file type restrictions to restrict the file-types to be converted....
    CISA KEV📅 Added to KEV: Nov 10, 2026
  • CVE-2026-111560CVSS 8.6
    Improper neutralization of shell metacharacters in the timezone configuration field in certain Barracuda appliance products using common Barracuda...
    CISA KEV📅 Added to KEV: Nov 10, 2026
  • CVE-2026-116606CVSS 9.3
    An authentication bypass in Barracuda Email Security Gateway versions earlier than 9.4.0.030 allows an unauthenticated remote attacker to...
    CISA KEV📅 Added to KEV: Nov 10, 2026
  • CVE-2026-125350
    Use after free in XML. Reported by anonymous on 2026-11-06. Google is aware that an exploit for CVE-2026-125350...
    CISA KEV📅 Added to KEV: Nov 10, 2026
  • CVE-2026-124194CVSS 6.5
    Product ui does not warn user of unsafe actions in Microsoft Office Outlook allows an unauthorized attacker to...
    CISA KEV📅 Added to KEV: Nov 10, 2026
  • CVE-2026-123751CVSS 9.8
    The WP Duplicate WordPress plugin through 1.1.11 does not properly verify a request authentication value and does not...
    Watchtower Verified📅 Updated: Nov 9, 2026
  • CVE-2026-114713CVSS 8.6
    The labeled-response module in UnrealIRCd 6.0.0 before 6.2.7.1 does not escape the IRCv3 "label" message tag when echoing...
    Admin intel📅 Updated: Nov 9, 2026
Powered by CVE Watchtower

Critical Vulnerabilities

  • CVE-2026-126259CVSS 9.0
    Missing authentication for critical function in FortiOS
    📅 Updated: Nov 10, 2026
  • CVE-2026-126262CVSS 9.3
    Improper neutralization of special elements used in an SQL command in FortiManager
    📅 Updated: Nov 10, 2026
  • CVE-2026-126260CVSS 9.0
    Server side request forgery vulnerability in FortiAnalyzer, FortiManager with FortiAnalyzer features & FortiAnalyzer-BigData
    📅 Updated: Nov 10, 2026
  • CVE-2026-126170CVSS 9.8
    Unauthenticated RCE in multiple products
    📅 Updated: Nov 10, 2026
  • CVE-2026-126261CVSS 9.0
    Improper authorizatin vulnerability in FortiManager
    📅 Updated: Nov 10, 2026
  • CVE-2026-126187CVSS 9.5
    React is a JavaScript library for building user interfaces. From 19.0.0 until 19.0.9, 19.1.10, 19.2.9, and 19.3.1, the...
    📅 Updated: Nov 10, 2026
  • CVE-2026-126229CVSS 9.1
    Authorization Bypass in FortiManager, FortiAnalyzer, FortiManager Cloud and FortiAnalyzer Cloud
    📅 Updated: Nov 10, 2026
  • CVE-2026-126253CVSS 9.3
    OSPF Authentication Bypass in multiple product
    📅 Updated: Nov 10, 2026
Powered by CVE Watchtower

Daily CyberSecurity

  • About SecurityOnline.info
  • Advertise with us
  • Announcement
  • Contact
  • Contributor Register
  • Login
  • Disclaimer
  • DCMA
  • Privacy Policy
  • About SecurityOnline.info
  • Advertise on SecurityOnline.info
  • Contact Us

When you purchase through links on our site, we may earn an affiliate commission. Here’s how it works

  • CVE Watchtower
  • CVE Statistics by Vendor 2026
  • Q3 2026 Report
  • Top Exploited CVEs
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube
© 2017 - 2026 Daily CyberSecurity. All Rights Reserved.