Skip to content
October 29, 2026
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube

Daily CyberSecurity

Zero-hour alerts. Unmatched analysis.

Primary Menu
  • Home
  • CVE Data
    • CVE Watchtower
    • Top Exploited CVEs
    • CVE Stats by Vendor
    • Q2 2026 Report
    • CVE Alerts
    • CVE Alert Settings
    • Pricing
  • Cyber Criminals
  • Data Leak
  • Free Tools
    • CVSS 3.1 Calculator
    • Certificate Viewer
    • DNS Lookup
    • Encoder & Hash Generator
    • IP / Subnet Calculator
    • Whois Lookup
  • Linux
  • Malware
  • Vulnerability
  • Submit Press Release
  • Weekly Recap
Light/Dark Button
FortiSIEM Flaw CVE-2026-106173 Exploited in the Wild After PoC and Details Go Public FortiSIEM vulnerability CVE-2026-106173 exploited in the wild with public PoC exploit
  • Vulnerability Report

FortiSIEM Flaw CVE-2026-106173 Exploited in the Wild After PoC and Details Go Public

Do Son October 26, 2026 0

FortiSIEM vulnerability CVE-2026-106173 is exploited in the wild after Horizon3 released details and a PoC exploit. Upgrade to 7.5.1 now.

PHP2Shell: List of Affected Products PHP2Shell affected products list including PAN-OS, QNAP, Cisco and Citrix with fix status
  • Vulnerability Report

PHP2Shell: List of Affected Products

Do Son October 26, 2026 0

PHP2Shell affected products list: vendor patch status for CVE-2026-109618 and CVE-2026-109619 across PAN-OS, QNAP, Cisco, Citrix, F5 and more.

Linux Kernel CVE-2026-43501 (CVSS 9.8) Exploit and Full Details Released for IPv6 RPL Flaw Linux kernel IPv6 vulnerability CVE-2026-43501 in RPL source routing with public exploit
  • Vulnerability Report

Linux Kernel CVE-2026-43501 (CVSS 9.8) Exploit and Full Details Released for IPv6 RPL Flaw

Do Son October 26, 2026 0

A PoC and full details are public for CVE-2026-43501 (CVSS 9.8), a Linux kernel IPv6 vulnerability in RPL source routing. Update your kernel now.

Suspected Chinese Operator Uses ARTEX AI Framework in Global Hacking Campaign ARTEX AI hacking and global ARTEX AI hacking architecture diagram
  • Cybercriminals

Suspected Chinese Operator Uses ARTEX AI Framework in Global Hacking Campaign

Do Son October 25, 2026 0

Zscaler ThreatLabz exposes a global ARTEX AI hacking campaign. See how an operator used ARTEX AI hacking tools, DeepSeek, GLM, and Grok to steal data.

iOS 27.1 iPhone Duo Release Targets Foldable Hardware Apple iOS 27.1 iPhone Duo software update on foldable display showing adaptive UI layout
  • Technology

iOS 27.1 iPhone Duo Release Targets Foldable Hardware

Do Son October 25, 2026 0

Apple launched the iOS 27.1 iPhone Duo update exclusively for its foldable smartphone, introducing adaptive layouts and dedicated SDK tools.

OpenAI Cuts Internet Access for Frontier Model Training OpenAI offline world training environment replacing live internet access, with red-team AI agents testing sandbox escapes in frontier model training
  • Technology

OpenAI Cuts Internet Access for Frontier Model Training

Do Son October 25, 2026 0

OpenAI offline world training replaces live internet access after a September 20 DNS escape paused frontier training for 11 days.

Google Privacy Policy Change Raises Gmail Ad Concerns Google privacy policy change adding an exception for Personal Intelligence, linking Gmail, Drive, and Photos context to AI Mode search ads
  • Technology

Google Privacy Policy Change Raises Gmail Ad Concerns

Do Son October 25, 2026 0

A Google privacy policy change adds an exception to its Gmail ad pledge via Personal Intelligence. See how to turn it off.

Autovado vs. PartsGeek: Which Is Better for Buying Auto Parts Online? ISO 27001
  • Technique

Autovado vs. PartsGeek: Which Is Better for Buying Auto Parts Online?

Do Son October 24, 2026 0
Buying auto parts online can save time, simplify vehicle maintenance and help drivers compare replacement options without...
Read More Read more about Autovado vs. PartsGeek: Which Is Better for Buying Auto Parts Online?
DOJ Extradites Suspect in $36.9M Cambodia Crypto Scam Targeting Americans Law enforcement graphic of the Cambodia crypto scam and Cambodia crypto scam extradition
  • Cybercriminals

DOJ Extradites Suspect in $36.9M Cambodia Crypto Scam Targeting Americans

Do Son October 24, 2026 0

DOJ officials announced a Cambodia crypto scam extradition after Zheng Zhao allegedly helped launder $36.9M stolen from 174 US victims via USDT.

Skynet LLMjacking Agent Hijacks Exposed AI Models to Hack Servers and Mine Crypto Skynet LLMjacking agent hijacking exposed AI models to scan, exploit servers and mine cryptocurrency
  • Malware

Skynet LLMjacking Agent Hijacks Exposed AI Models to Hack Servers and Mine Crypto

Do Son October 24, 2026 0

A Skynet LLMjacking agent hijacks exposed AI models to scan, hack servers and mine crypto for 100,000 steps, while victims pay the bill.

10 Best EVM-Compatible Blockchain Networks in 2026 CVE-2024-45337
  • Technique

10 Best EVM-Compatible Blockchain Networks in 2026

Do Son October 23, 2026 0
The best EVM-compatible blockchain network in 2026 is Autheo for developers seeking familiar Ethereum tooling within a...
Read More Read more about 10 Best EVM-Compatible Blockchain Networks in 2026
Palo Alto Networks Confirms PHP2Shell Flaws Affect PAN-OS and Panorama PAN-OS PHP2Shell vulnerabilities affect Palo Alto Networks firewall management interface
  • Vulnerability Report

Palo Alto Networks Confirms PHP2Shell Flaws Affect PAN-OS and Panorama

Do Son October 23, 2026 0

Palo Alto confirms PAN-OS PHP2Shell flaws CVE-2026-109618 and CVE-2026-109619 affect the firewall management interface. Restrict access and patch.

PHP Warns of New Session Upload Progress Flaw CVE-2026-115560, Urges Mitigation PHP session vulnerability CVE-2026-115560 in session upload progress after PHP2Shell
  • Vulnerability Report

PHP Warns of New Session Upload Progress Flaw CVE-2026-115560, Urges Mitigation

Do Son October 23, 2026 0

PHP warns of CVE-2026-115560, a PHP session vulnerability that follows PHP2Shell. Disable session.upload_progress until the next bugfix release.

NS2JB Brings a Switch 2 Jailbreak With Codex Help Switch 2 jailbreak NS2JB running homebrew on Nintendo Switch 2 firmware 23.0.1, developed with help from Codex AI
  • Technology

NS2JB Brings a Switch 2 Jailbreak With Codex Help

Do Son October 23, 2026 0

The Switch 2 jailbreak NS2JB runs native code on firmware 23.0.1 through SmileBASIC 4, built with Codex. It is not permanent.

Qualcomm Global Layoffs Planned Amid Smartphone Slump Qualcomm global layoffs announcement and corporate headquarters in San Diego
  • Technology

Qualcomm Global Layoffs Planned Amid Smartphone Slump

Do Son October 23, 2026 0

Qualcomm global layoffs will begin in November 2026 as smartphone shipments plunge 20 percent and memory costs strain device manufacturers worldwide.

Python Ships Emergency Releases After emSign CA Certificate Incident emSign CA certificate removal prompts Python security release for pip and certifi
  • Technology

Python Ships Emergency Releases After emSign CA Certificate Incident

Do Son October 23, 2026 0

The emSign CA certificate was pulled from certifi. A new Python security release updates pip to block MITM risks. Upgrade pip and uv now.

LiteSpeed Cache Flaws Expose 7 Million WordPress Sites to Stored XSS LiteSpeed Cache vulnerabilities enable stored XSS on 7 million WordPress sites
  • Vulnerability Report

LiteSpeed Cache Flaws Expose 7 Million WordPress Sites to Stored XSS

Do Son October 23, 2026 0

Three LiteSpeed Cache vulnerabilities, including stored XSS flaws CVE-2026-113499 and CVE-2026-113500, affect 7M+ WordPress sites. Update to 7.9.2.

OpenBSD 8.0 Release Introduces Kernel Hardening and Day-One Errata OpenBSD 8.0 release architecture showing kernel hardening and day-one security errata
  • Linux

OpenBSD 8.0 Release Introduces Kernel Hardening and Day-One Errata

Do Son October 23, 2026 0

The OpenBSD 8.0 release brings OpenSSH 10.6, kernel mitigations, and immediate day-one errata patches addressing critical IPsec memory corruption.

INC Ransomware Affiliates Expose Seven Servers Holding Phantom AI Framework and 46 Encryptors INC Ransomware affiliates and INC Ransomware affiliates AI server infrastructure diagram
  • Malware

INC Ransomware Affiliates Expose Seven Servers Holding Phantom AI Framework and 46 Encryptors

Do Son October 23, 2026 0

SOCRadar reveals 7 servers run by INC Ransomware affiliates, exposing an INC Ransomware affiliates AI workbench, Phantom, and 46 encryptors.

Australian Court Forces Apple to Open the App Store Australian App Store ruling forcing Apple to allow sideloading and outside payments, with Fortnite returning to the Australian App Store
  • Technology

Australian Court Forces Apple to Open the App Store

Do Son October 23, 2026 0

The Australian App Store ruling orders Apple to allow sideloading and outside payments by March 1, 2027. Apple will appeal.

CAPCOM ID Data Breach Exposes 11.77 Million Records CAPCOM ID data breach notice showing 11.77 million exposed user records, a Capcom account breach affecting emails and login activity
  • Data Leak

CAPCOM ID Data Breach Exposes 11.77 Million Records

Do Son October 23, 2026 0

A CAPCOM ID data breach exposed 11.77 million records, including emails and login activity. No payment data was leaked.

Arc Browser Shutdown Set for December 22, 2026 Arc browser shutdown notice from The Browser Company, urging users to export data and complete a Dia browser migration before December 22
  • Technology

Arc Browser Shutdown Set for December 22, 2026

Do Son October 23, 2026 0

The Arc browser shutdown arrives December 22, 2026. Export your data now and move to Dia before accounts are deleted.

❮ Prev Page
Next Page ❯

Search

Translation

CVE ALERTS
📈

EPSS Spike Alerts
Catch risk spikes before they make headlines.

🎯

Custom EPSS/CVSS
Set score thresholds to effectively filter noise.

🛡️

Exploit Intel
Real-world exploit signals beyond the KEV catalog.

🐙

GitHub Issues
Auto-create alert tickets without duplication.

📬

Weekly Digest
Clean summaries, eliminating email spam.

🏷️

Watchlist Groups
Tag vulnerabilities by team (Infra/AppSec/SOC).

🔀

Smart Routing
Route chat channels based on severity levels.

🚨

RBP Tracker
Early warning detection and tracking system.

Subscribe – $7/mo or try free for 14 days →

🚨 Active Exploits in the Wild

  • CVE-2022-31034CVSS 8.3
    Impact All versions of Argo CD starting with v0.11.0 are vulnerable to a variety of attacks when an...
    Watchtower Verified📅 Updated: Oct 29, 2026
  • CVE-2026-112353CVSS 6.2
    GFI KerioConnect (Kerio Connect) before 10.0.8 Patch 2 contains a stored cross-site scripting vulnerability in the Webmail component...
    Watchtower Verified📅 Updated: Oct 29, 2026
  • CVE-2026-116779CVSS 9.8
    Summary `sofia_presence_handle_sip_i_message()` splits the To user of an inbound SIP MESSAGE on `+` and treats the left half...
    Admin intel📅 Updated: Oct 29, 2026
  • CVE-2026-97229CVSS 10.0
    GitLab has remediated an issue that, under certain conditions, could have allowed an unauthenticated user to execute arbitrary...
    Admin intel📅 Updated: Oct 29, 2026
  • CVE-2026-76418CVSS 8.6
    A vulnerability in the Remote Access SSL VPN service of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software...
    Admin intel📅 Updated: Oct 29, 2026
  • CVE-2026-116690CVSS 7.5
    MLflow is an open source AI engineering platform for agents, large language models, and machine learning models. From...
    Admin intel📅 Updated: Oct 28, 2026
  • CVE-2026-101767CVSS 9.8
    Vulnerability in the Oracle Application Object Library product of Oracle E-Business Suite (component: Core). Supported versions that are...
    Admin intel📅 Updated: Oct 28, 2026
  • CVE-2020-13125CVSS 7.2
    An issue was discovered in the "Ultimate Addons for Elementor" plugin before 1.24.2 for WordPress, as exploited in...
    Watchtower Verified📅 Updated: Oct 28, 2026
Powered by CVE Watchtower

Critical Vulnerabilities

  • CVE-2026-39746CVSS 9.3
    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Booknetic Booknetic booknetic allows...
    📅 Updated: Oct 29, 2026
  • CVE-2026-97854CVSS 9.3
    Yamaha wireless LAN router NWR100 provided by Yamaha Corporation contains an OS command injection vulnerability. Arbitrary OS commands...
    📅 Updated: Oct 29, 2026
  • CVE-2026-115324CVSS 9.2
    mem0 0.1.117 before 1.0.8 contains an sql injection vulnerability in mem0/vector_stores/databricks.py that allows attackers to inject SQL by...
    📅 Updated: Oct 29, 2026
  • CVE-2026-96639CVSS 9.8
    Pillow is a Python imaging library. From 11.0.0 until 13.0.0, multi-frame loaders can retain an ImagingCore allocation created...
    📅 Updated: Oct 29, 2026
  • CVE-2026-86384CVSS 9.8
    Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, LTS2024 release versions 7.13.1.0 through 7.13.1.80, LTS2025 release...
    📅 Updated: Oct 29, 2026
  • CVE-2026-115964CVSS 9.3
    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in StylemixThemes Motors motors-car-dealership-classified-listings allows...
    📅 Updated: Oct 29, 2026
  • CVE-2026-115245CVSS 9.8
    The Chat AI with Dispatcher WordPress plugin before 2.4 does not properly validate uploaded files, relying only on...
    📅 Updated: Oct 29, 2026
  • CVE-2026-113616CVSS 9.8
    The LogixFast Auth WordPress plugin before 1.0.4 does not deliver its password-reset one-time code to the resolved account's...
    📅 Updated: Oct 29, 2026
Powered by CVE Watchtower

Daily CyberSecurity

  • About SecurityOnline.info
  • Advertise with us
  • Announcement
  • Contact
  • Contributor Register
  • Login
  • Disclaimer
  • DCMA
  • Privacy Policy
  • About SecurityOnline.info
  • Advertise on SecurityOnline.info
  • Contact Us

When you purchase through links on our site, we may earn an affiliate commission. Here’s how it works

  • CVE Watchtower
  • CVE Statistics by Vendor 2026
  • Q3 2026 Report
  • Top Exploited CVEs
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube
© 2017 - 2026 Daily CyberSecurity. All Rights Reserved.