Skip to content
October 31, 2026
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube

Daily CyberSecurity

Zero-hour alerts. Unmatched analysis.

Primary Menu
  • Home
  • CVE Data
    • CVE Watchtower
    • Top Exploited CVEs
    • CVE Stats by Vendor
    • Q2 2026 Report
    • CVE Alerts
    • CVE Alert Settings
    • Pricing
  • Cyber Criminals
  • Data Leak
  • Free Tools
    • CVSS 3.1 Calculator
    • Certificate Viewer
    • DNS Lookup
    • Encoder & Hash Generator
    • IP / Subnet Calculator
    • Whois Lookup
  • Linux
  • Malware
  • Vulnerability
  • Submit Press Release
  • Weekly Recap
Light/Dark Button
Windows 11 Universal Print Glitch Demands Manual Fix Windows 11 Universal Print error 0x80004005 troubleshooting diagram
  • Windows

Windows 11 Universal Print Glitch Demands Manual Fix

Do Son October 27, 2026 0

A persistent Windows 11 Universal Print bug breaks printer queues after OS upgrades, displaying error 0x80004005 and requiring queue reinstallation.

SiriusQT RAT Combines Hidden Desktop Control With Credential and Wallet Theft SiriusQT RAT and Windows SiriusQT RAT HVNC attack architecture diagram
  • Malware

SiriusQT RAT Combines Hidden Desktop Control With Credential and Wallet Theft

Do Son October 27, 2026 0

Group-IB analyzes over 280 samples of SiriusQT RAT. Discover how the Windows SiriusQT RAT uses HVNC, six persistence methods, and 100+ stealer targets.

Fake Chocolatey and Massgrave Sites Deliver Python Armorsteal Malware via SEO Poisoning Armorsteal malware and Python Armorsteal malware SEO poisoning infection chain diagram
  • Malware

Fake Chocolatey and Massgrave Sites Deliver Python Armorsteal Malware via SEO Poisoning

Do Son October 27, 2026 0

Zscaler uncovers an SEO poisoning campaign using fake Chocolatey and Massgrave sites to drop Armorsteal malware and Python Armorsteal malware modules.

CISA Adds PHP2Shell to KEV as Confirmed RCE Attacks and Suspected DPRK Scanning Surface PHP2Shell added to CISA KEV catalog after confirmed RCE and suspected DPRK scanning
  • Vulnerability Report

CISA Adds PHP2Shell to KEV as Confirmed RCE Attacks and Suspected DPRK Scanning Surface

Do Son October 27, 2026 0

CISA adds PHP2Shell flaws CVE-2026-109618 and CVE-2026-109619 to the CISA KEV catalog after confirmed RCE and suspected DPRK-linked scanning.

Apple Backports Fix for Exploited CoreGraphics Zero-Day CVE-2026-86950 to Older iPhones CoreGraphics zero-day CVE-2026-86950 exploited in the wild fixed in iOS 18.7.11
  • Vulnerability Report

Apple Backports Fix for Exploited CoreGraphics Zero-Day CVE-2026-86950 to Older iPhones

Do Son October 27, 2026 0

Apple's iOS 18.7.11 fixes CVE-2026-86950, a CoreGraphics zero-day exploited in the wild, on older iPhones and iPads. Update now.

HashiCorp Patches Critical 9.9 CVSS Consul-k8s Authorization Bypass Vulnerability (CVE-2026-110720) HashiCorp consul-k8s vulnerability diagram showing authorization bypass for CVE-2026-110720
  • Vulnerability Report

HashiCorp Patches Critical 9.9 CVSS Consul-k8s Authorization Bypass Vulnerability (CVE-2026-110720)

Do Son October 27, 2026 0

Patch CVE-2026-110720 now. This 9.9 CVSS consul-k8s vulnerability enables a cross-namespace authorization bypass in ACL binding rules.

OpenMage Fixes 34 Flaws in Magento LTS, Including Critical OAuth CSRF OpenMage vulnerabilities including critical OAuth CSRF fixed in Magento LTS 20.19.0
  • Vulnerability Report

OpenMage Fixes 34 Flaws in Magento LTS, Including Critical OAuth CSRF

Do Son October 27, 2026 0

OpenMage fixes 34 OpenMage vulnerabilities in Magento LTS, including a critical CSRF flaw that hands out API tokens. Upgrade to 20.19.0 or 20.18.2.

Intel APX Windows 11 Toggle Unlocks CPU Efficiency Intel APX Windows 11 toggle architecture showing 32 general purpose registers and instruction execution
  • Windows

Intel APX Windows 11 Toggle Unlocks CPU Efficiency

Do Son October 27, 2026 0

Microsoft tests an Intel APX Windows 11 performance toggle in preview builds, doubling general-purpose registers for enhanced processor speed.

Palo Alto Networks Confirms Critical Brotli Flaw CVE-2026-111497 Affects PAN-OS PAN-OS Brotli vulnerability CVE-2026-111497 buffer overflow affects Palo Alto Networks firewalls
  • Vulnerability Report

Palo Alto Networks Confirms Critical Brotli Flaw CVE-2026-111497 Affects PAN-OS

Do Son October 27, 2026 0

Palo Alto confirms PAN-OS Brotli vulnerability CVE-2026-111497, a CVSS 9.2 buffer overflow in PAN-OS 12.2, 12.1 and 11.2. Install the hotfixes now.

Rapid7 Discloses 17 Zimbra Collaboration Suite Vulnerabilities Breaking Identity Boundaries Zimbra Collaboration Suite vulnerabilities diagram showing Rapid7 research on CVE-2026-10632, CVE-2026-50057, and CVE-2026-93640
  • Vulnerability Report

Rapid7 Discloses 17 Zimbra Collaboration Suite Vulnerabilities Breaking Identity Boundaries

Do Son October 27, 2026 0

Rapid7 disclosed 17 Zimbra Collaboration Suite flaws, including CVE-2026-10632 and CVE-2026-93640, allowing XSS and root privilege escalation.

Mautic 7.2.2 Patches Critical Remote Code Execution and SQL Injection Vulnerabilities Mautic vulnerabilities overview showing Mautic 7.2.2 fixes for CVE-2026-115188, CVE-2026-115189, and CVE-2026-115190
  • Vulnerability Report

Mautic 7.2.2 Patches Critical Remote Code Execution and SQL Injection Vulnerabilities

Do Son October 27, 2026 0

Upgrade to Mautic 7.2.2 to fix critical Mautic vulnerabilities, including 9.9 CVSS RCE flaw CVE-2026-115188, CVE-2026-115189, and SQL injection bugs.

PoC and Full Details Released for macOS autofs Flaws Enabling Root Code Execution and Gatekeeper Bypass macOS autofs vulnerability CVE-2026-84568 root code execution and Gatekeeper bypass PoC published
  • Vulnerability Report

PoC and Full Details Released for macOS autofs Flaws Enabling Root Code Execution and Gatekeeper Bypass

Do Son October 27, 2026 0

PoC and details are public for CVE-2026-84568, a macOS autofs vulnerability enabling root code execution, and a Gatekeeper bypass. Update macOS now.

Tailscale SSH Vulnerability Enables Root Escalation Tailscale SSH vulnerability diagram showing Unix socket forwarding and privilege escalation to root
  • Vulnerability Report

Tailscale SSH Vulnerability Enables Root Escalation

Do Son October 27, 2026 0

A severe Tailscale SSH vulnerability allows attackers on authorized nodes to exploit Unix socket forwarding and escalate privileges to root access.

Apple Blocks eMudhra Certificates Over Weak Key Flaw Apple blocks eMudhra certificates across macOS and iOS security architecture diagram
  • Technology

Apple Blocks eMudhra Certificates Over Weak Key Flaw

Do Son October 27, 2026 0

Apple blocks eMudhra certificates across macOS and iOS after weak intermediate keys compromised trust, with CLI tool bundles slated for future updates.

Anthropic S-1 IPO Filing Targets Historic $2T Valuation Anthropic S-1 IPO filing documents outlining revenue trajectory and compute commitments
  • Technology

Anthropic S-1 IPO Filing Targets Historic $2T Valuation

Do Son October 26, 2026 0

The Anthropic S-1 IPO filing reveals $16.8B Q3 revenue, $750B in compute commitments, and a historic valuation target on Nasdaq.

Paying Attention to Details: How to Build Trust in a Competitive Digital World ma
  • Technique

Paying Attention to Details: How to Build Trust in a Competitive Digital World

Do Son October 26, 2026 0
For businesses, trust plays a crucial role everywhere. A customer visiting your website read your offer. They...
Read More Read more about Paying Attention to Details: How to Build Trust in a Competitive Digital World
Gheist Campaign Abuses Stolen GitHub Tokens Across 850 Accounts to Steal Secrets Workflow code used in the Gheist campaign and Gheist GitHub campaign targeting repository secrets
  • Cybercriminals

Gheist Campaign Abuses Stolen GitHub Tokens Across 850 Accounts to Steal Secrets

Do Son October 26, 2026 0

Wiz Research uncovered the Gheist campaign, a Gheist GitHub campaign planting 13,500 rogue branches across 850+ accounts to steal private repo secrets.

Apple Presto Return Scanner Targets In-Box Fraud Apple Presto return scanner inspecting sealed iPhone packaging and verifying internal components
  • Technology

Apple Presto Return Scanner Targets In-Box Fraud

Do Son October 26, 2026 0

Apple deployed an in-box Apple Presto return scanner across retail stores to combat return fraud by running diagnostics on sealed iPhones.

Windows 11 Speed Test Gets Native Tool Integration Windows 11 speed test native dialog interface powered by Ookla Speedtest
  • Windows

Windows 11 Speed Test Gets Native Tool Integration

Do Son October 26, 2026 0

Microsoft is testing a native Windows 11 speed test tool in preview builds, replacing web browser redirections with an integrated Ookla utility.

Come Back to Firefox Campaign Champions Web Privacy Come Back to Firefox marketing campaign banner promoting open web privacy
  • Technology

Come Back to Firefox Campaign Champions Web Privacy

Do Son October 26, 2026 0

Mozilla launched the Come Back to Firefox campaign, leveraging nostalgic internet memes to promote user privacy and challenge Chrome market dominance.

uCreator Android Spyware Hooks Telegram and WeChat Inside Virtual Containers uCreator Android spyware and YingGai uCreator Android spyware virtualization architecture diagram
  • Malware

uCreator Android Spyware Hooks Telegram and WeChat Inside Virtual Containers

Do Son October 26, 2026 0

Researcher Ovi exposes uCreator Android spyware. The YingGai uCreator Android spyware platform uses VirtualApp and LSPatch to hijack 20 mobile apps.

Exposed Cairn AI Panels Reveal Autonomous Hacking Against Over 1,100 Targets Attack graph inside the Cairn AI hacking tool and Cairn AI panels exposed online
  • Cybercriminals

Exposed Cairn AI Panels Reveal Autonomous Hacking Against Over 1,100 Targets

Do Son October 26, 2026 0

NorForge uncovered 20+ exposed Cairn AI panels showing how threat actors use the Cairn AI hacking tool to breach e-commerce and payment sites.

❮ Prev Page
Next Page ❯

Search

CVE ALERTS
📈

EPSS Spike Alerts
Catch risk spikes before they make headlines.

🎯

Custom EPSS/CVSS
Set score thresholds to effectively filter noise.

🛡️

Exploit Intel
Real-world exploit signals beyond the KEV catalog.

🐙

GitHub Issues
Auto-create alert tickets without duplication.

📬

Weekly Digest
Clean summaries, eliminating email spam.

🏷️

Watchlist Groups
Tag vulnerabilities by team (Infra/AppSec/SOC).

🔀

Smart Routing
Route chat channels based on severity levels.

🚨

RBP Tracker
Early warning detection and tracking system.

Subscribe – $7/mo or try free for 14 days →

🚨 Active Exploits in the Wild

  • CVE-2010-20125CVSS 8.7
    DedeCMS before 5.7 contains a file inclusion vulnerability in plus/carbuyaction.php that allows remote unauthenticated attackers to control the...
    Watchtower Verified📅 Updated: Oct 30, 2026
  • CVE-2015-20130CVSS 5.1
    Netsweeper before 4.0.11 and 4.1.0 before 4.1.5 contains a reflected cross-site scripting vulnerability in webadmin/reporter/view_server_log.php that allows remote...
    Watchtower Verified📅 Updated: Oct 30, 2026
  • CVE-2026-111357CVSS 7.0
    Ivanti Connect Secure 22.8R2.4 mishandles the manner in which the dsinvoked broker trusts DSCache configuration data, leading to...
    CISA KEV📅 Added to KEV: Oct 30, 2026
  • CVE-2026-118527CVSS 4.3
    Use of predictable filenames in Ivanti Connect Secure before versions 25.1.1.3 and 22.8R2.6 allows a remote authenticated attacker...
    CISA KEV📅 Added to KEV: Oct 30, 2026
  • CVE-2026-118539
    This module enables you to sell goods and services to customers through an included shopping cart and checkout...
    Admin intel📅 Updated: Oct 29, 2026
  • CVE-2022-31034CVSS 8.3
    Impact All versions of Argo CD starting with v0.11.0 are vulnerable to a variety of attacks when an...
    Watchtower Verified📅 Updated: Oct 29, 2026
  • CVE-2026-112353CVSS 6.2
    GFI KerioConnect (Kerio Connect) before 10.0.8 Patch 2 contains a stored cross-site scripting vulnerability in the Webmail component...
    Watchtower Verified📅 Updated: Oct 29, 2026
  • CVE-2026-116779CVSS 9.8
    Summary `sofia_presence_handle_sip_i_message()` splits the To user of an inbound SIP MESSAGE on `+` and treats the left half...
    Admin intel📅 Updated: Oct 29, 2026
Powered by CVE Watchtower

Critical Vulnerabilities

  • CVE-2026-116512CVSS 9.8
    The Project Manager – AI Powered Project Management, Task Management, Kanban Board & Time Tracker plugin for WordPress...
    📅 Updated: Oct 31, 2026
  • CVE-2026-119096CVSS 9.8
    The Uncanny Toolkit for LearnDash plugin for WordPress is vulnerable to Authentication Bypass in versions up to, and...
    📅 Updated: Oct 31, 2026
  • CVE-2026-89270CVSS 9.1
    The Popup Builder – Create highly converting, mobile friendly marketing popups. plugin for WordPress is vulnerable to authorization...
    📅 Updated: Oct 31, 2026
  • CVE-2026-116557CVSS 9.1
    The WP Booking System - Booking Calendar plugin for WordPress is vulnerable to unauthorized modification of data due...
    📅 Updated: Oct 31, 2026
  • CVE-2026-109220CVSS 9.8
    The PDF Invoice for WooCommerce + Drag and Drop Template Builder plugin for WordPress is vulnerable to PHP...
    📅 Updated: Oct 31, 2026
  • CVE-2026-119263CVSS 9.6
    Memory corruption in GarbageCollection in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to potentially execute arbitrary...
    📅 Updated: Oct 31, 2026
  • CVE-2026-119261CVSS 9.6
    Improper input validation in Skia in Google Chrome prior to 156.0.8078.79 allowed a remote attacker to potentially execute...
    📅 Updated: Oct 31, 2026
  • CVE-2026-118697CVSS 9.0
    In JetBrains Toolbox App before 3.9.1 and 3.8.2; IntelliJ IDEA before 2026.3 and 2026.2.4, the jetbrainsd daemon trusted...
    📅 Updated: Oct 31, 2026
Powered by CVE Watchtower

Daily CyberSecurity

  • About SecurityOnline.info
  • Advertise with us
  • Announcement
  • Contact
  • Contributor Register
  • Login
  • Disclaimer
  • DCMA
  • Privacy Policy
  • About SecurityOnline.info
  • Advertise on SecurityOnline.info
  • Contact Us

When you purchase through links on our site, we may earn an affiliate commission. Here’s how it works

  • CVE Watchtower
  • CVE Statistics by Vendor 2026
  • Q3 2026 Report
  • Top Exploited CVEs
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube
© 2017 - 2026 Daily CyberSecurity. All Rights Reserved.