Skip to content
November 11, 2026
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube

Daily CyberSecurity

Zero-hour alerts. Unmatched analysis.

Primary Menu
  • Home
  • CVE Data
    • CVE Watchtower
    • Top Exploited CVEs
    • CVE Stats by Vendor
    • Q2 2026 Report
    • CVE Alerts
    • CVE Alert Settings
    • Pricing
  • Cyber Criminals
  • Data Leak
  • Free Tools
    • CVSS 3.1 Calculator
    • Certificate Viewer
    • DNS Lookup
    • Encoder & Hash Generator
    • IP / Subnet Calculator
    • Whois Lookup
  • Linux
  • Malware
  • Vulnerability
  • Submit Press Release
Light/Dark Button
EU’s Green Mandate: Parliament Pledges 90% Emissions Cut by 2040 Apple Google EU alliance DMA European Commission Breach Trivy Supply Chain Attack Europa.eu Breach EU Cloud Infrastructure EU Cyber Sanctions State-Sponsored Hacking EU 2040 Emissions Target, Europe Climate Leadership AWS Azure DMA Cloud Gatekeeper DSA violation, illegal content Apple DMA Delay, iPhone Mirroring EU EU Age Verification, Google Play Integrity Corning Antitrust, EU Competition Apple EU Digital Markets Act App Store commission European Union cyberattacks - InvestAI EU Targets Musk’s X Digital Markets Act, EU fines
  • Technology

EU’s Green Mandate: Parliament Pledges 90% Emissions Cut by 2040

Do Son December 11, 2025 0
To confront the escalating challenge of climate change, the European Parliament has announced—via an official press release—that...
Read More Read more about EU’s Green Mandate: Parliament Pledges 90% Emissions Cut by 2040
Apache Struts 2 DoS Flaw (CVE-2025-66675) Risks Server Crash via File Leak in Multipart Request Processing CVE-2024-53677 Apache Struts 2 DoS, File Leak Vulnerability
  • Vulnerability Report

Apache Struts 2 DoS Flaw (CVE-2025-66675) Risks Server Crash via File Leak in Multipart Request Processing

Do Son December 11, 2025 0
A significant denial-of-service (DoS) vulnerability has been discovered in Apache Struts 2, the widely used open-source framework...
Read More Read more about Apache Struts 2 DoS Flaw (CVE-2025-66675) Risks Server Crash via File Leak in Multipart Request Processing
High-Severity Zoom Rooms Flaw Risks Privilege Escalation via Downgrade Protection Bypass Zoom Rooms LPE, Downgrade Protection Bypass Zoom High-Risk Flaws Zoom security updates
  • Vulnerability Report

High-Severity Zoom Rooms Flaw Risks Privilege Escalation via Downgrade Protection Bypass

Do Son December 11, 2025 0
Zoom Video Communications has released a critical security update for its Zoom Rooms software, addressing vulnerabilities that...
Read More Read more about High-Severity Zoom Rooms Flaw Risks Privilege Escalation via Downgrade Protection Bypass
Emergency Chrome Update: Google Patches New Zero-Day Under Active Attack Chrome security update exploit in the wild Chrome Zero-Day CVE-2026-3909 Chrome Zero-Day PoC CVE-2026-2441 Chrome Zero-Day CVE-2026-2441 Chrome Zero-Day, Active Exploitation CVE-2025-10585 Chrome vulnerability, zero-day exploit CVE-2025-6558 Chrome Zero-Day, V8 Vulnerability Chrome Zero-Day, Security Update
  • Vulnerability Report

Emergency Chrome Update: Google Patches New Zero-Day Under Active Attack

Do Son December 11, 2025 0
Google has pushed an urgent security update to the Stable Channel for Desktop, racing to patch a...
Read More Read more about Emergency Chrome Update: Google Patches New Zero-Day Under Active Attack
High-Severity Jenkins Flaws Risk Unauthenticated DoS via HTTP CLI and XSS Via Coverage Reports Jenkins security advisory 2026, CVE-2026-53435, CVE-2026-53436 Jenkins Plugin RCE CI/CD Security Advisory Jenkins Vulnerability CVE-2026-33001 Jenkins CLI DoS, Coverage Plugin XSS Jenkins SAML Hijacking, Plaintext Secrets CVE-2023-43495 - Jenkins Vulnerability
  • Vulnerability Report

High-Severity Jenkins Flaws Risk Unauthenticated DoS via HTTP CLI and XSS Via Coverage Reports

Do Son December 11, 2025 0
The maintainers of Jenkins, the world’s leading open-source automation server, have issued a critical security advisory addressing...
Read More Read more about High-Severity Jenkins Flaws Risk Unauthenticated DoS via HTTP CLI and XSS Via Coverage Reports
Gogs Zero-Day (CVE-2025-8110) Risks RCE for 700+ Servers via Symlink Path Traversal Bypass Gogs Zero-Day RCE, Symlink Path Traversal
  • Vulnerability Report

Gogs Zero-Day (CVE-2025-8110) Risks RCE for 700+ Servers via Symlink Path Traversal Bypass

Do Son December 11, 2025 0
A routine malware investigation has spiraled into the discovery of a widespread “smash-and-grab” campaign targeting the developer...
Read More Read more about Gogs Zero-Day (CVE-2025-8110) Risks RCE for 700+ Servers via Symlink Path Traversal Bypass
High-Severity GitLab XSS Flaw (CVE-2025-12716) Risks Session Hijack via Malicious Wiki Pages CVE-2024-9164 - CVE-2025-0376 GitLab Wiki XSS, Session Hijack Flaw
  • Vulnerability Report

High-Severity GitLab XSS Flaw (CVE-2025-12716) Risks Session Hijack via Malicious Wiki Pages

Do Son December 11, 2025 0
In a critical mid-week security sprint, GitLab has rolled out a series of important updates for its...
Read More Read more about High-Severity GitLab XSS Flaw (CVE-2025-12716) Risks Session Hijack via Malicious Wiki Pages
Facebook Gets New Look, But Instagram Secretly Uses AI for SEO Bait Meta Instagram AI SEO, Facebook App Redesign
  • Technology

Facebook Gets New Look, But Instagram Secretly Uses AI for SEO Bait

Do Son December 11, 2025 0
Meta has recently implemented two starkly contrasting changes across its major social platforms. Facebook is receiving a...
Read More Read more about Facebook Gets New Look, But Instagram Secretly Uses AI for SEO Bait
SpaceX IPO: Targeting a $1.5 Trillion Valuation to Fund Space Data Centers Anthropic SpaceX partnership SpaceX IPO 1.75 trillion 2026 Tech IPO wave, SpaceX OpenAI Anthropic valuation SpaceX IPO 2026, $800 Billion Valuation SpaceX $1.5 Trillion IPO, Starship Starlink
  • Technology

SpaceX IPO: Targeting a $1.5 Trillion Valuation to Fund Space Data Centers

Do Son December 11, 2025 0
Insiders reveal that SpaceX is now advancing an extraordinarily ambitious initial public offering (IPO), with plans to...
Read More Read more about SpaceX IPO: Targeting a $1.5 Trillion Valuation to Fund Space Data Centers
China’s WARP PANDA APT Deploys BRICKSTORM Backdoor to Hijack VMware vCenter/ESXi and Azure Cloud BRICKSTORM DoH Backdoor
  • Cyber Security
  • Malware

China’s WARP PANDA APT Deploys BRICKSTORM Backdoor to Hijack VMware vCenter/ESXi and Azure Cloud

Do Son December 11, 2025 0
A sophisticated cyber-espionage campaign has been uncovered deep within the virtualization layers of major U.S. organizations. Throughout...
Read More Read more about China’s WARP PANDA APT Deploys BRICKSTORM Backdoor to Hijack VMware vCenter/ESXi and Azure Cloud
❮ Prev Page
Next Page ❯
CVE-2024-45076 (CVSS 9.9): Critical Flaw in IBM webMethods Integration Demand Immediate Action CVE-2024-45076 IBM webMethods Integration
  • Vulnerability

CVE-2024-45076 (CVSS 9.9): Critical Flaw in IBM webMethods Integration Demand Immediate Action

Do Son September 6, 2024 0

Critical security advisory: IBM webMethods Integration Server vulnerabilities revealed. Learn about CVE-2024-45076 and CVE-2024-45075 and their potential impact.

Threat Actors Exploit GeoServer Vulnerability CVE-2024-36401 to Launch Malware Campaigns SideWalk malware & GOREVERSE
  • Malware
  • Vulnerability

Threat Actors Exploit GeoServer Vulnerability CVE-2024-36401 to Launch Malware Campaigns

Do Son September 6, 2024 0

Stay informed about the latest cybersecurity threat: SideWalk malware targeting critical vulnerability in GeoServer.

Red Hat Issues Critical Patch for Pulpcore Authentication Bypass Flaw (CVE-2024-7923)
  • Vulnerability

Red Hat Issues Critical Patch for Pulpcore Authentication Bypass Flaw (CVE-2024-7923)

Do Son September 6, 2024 0

Critical security advisory: Learn about CVE-2024-7923, an authentication bypass flaw in Red Hat Pulpcore affecting Satellite deployments.

Babylon RAT Unleashed: Malaysian Politicians Under Cyber Siege Babylon RAT
  • Cyber Security
  • Malware

Babylon RAT Unleashed: Malaysian Politicians Under Cyber Siege

Do Son September 6, 2024 0

Discover the powerful Babylon Remote Access Trojan (RAT) used in a cyber espionage campaign targeting political figures in Malaysia. Find out how it works and its impact.

The Supercar Phishing Kit: A Luxurious Trap for Your Microsoft 365 Credentials Supercar Phishing Kit
  • Cyber Security

The Supercar Phishing Kit: A Luxurious Trap for Your Microsoft 365 Credentials

Do Son September 6, 2024 0

Uncover the sophistication of the Supercar Phishing Kit: a new level of phishing tactics targeting Microsoft 365 users.

Netflix Phishing Scam: Even the Savviest Streamers Can Fall Victim Netflix Phishing Emails
  • Cyber Security

Netflix Phishing Scam: Even the Savviest Streamers Can Fall Victim

Do Son September 6, 2024 0

Beware of Netflix phishing emails! Learn how cybercriminals impersonate Netflix to steal sensitive information and how to protect yourself.

Tropic Trooper Expands Espionage to Middle East, Targets Human Rights Organizations Tropic Trooper - China Chopper web shell
  • Cyber Security
  • Malware

Tropic Trooper Expands Espionage to Middle East, Targets Human Rights Organizations

Do Son September 6, 2024 0

Learn about Tropic Trooper, a cyber espionage group that has expanded its focus to the Middle East, targeting government entities.

U.S. Offers $10 Million Reward for Information on GRU Hackers Targeting Critical Infrastructure GRU Hackers & WhisperGate malware
  • Cyber Security

U.S. Offers $10 Million Reward for Information on GRU Hackers Targeting Critical Infrastructure

Do Son September 6, 2024 0

$10 million reward for information on GRU hackers. Help identify the Russian military intelligence officers behind major cyberattacks.

SonicWall Confirms Critical CVE-2024-40766 Vulnerability Actively Exploited in the Wild CVE-2024-40766 exploited SonicOS Vulnerability, DoS Attack
  • Vulnerability

SonicWall Confirms Critical CVE-2024-40766 Vulnerability Actively Exploited in the Wild

Do Son September 6, 2024 0

Stay informed about the active exploitation of CVE-2024-40766. Discover how this critical access control vulnerability in SonicOS can compromise your security.

CVE-2024-26581 PoC Exploit Released: Linux Systems at Risk of Root Compromise CVE-2024-26581 PoC Exploit nftables, CVE-2024-26809
  • Linux
  • Vulnerability

CVE-2024-26581 PoC Exploit Released: Linux Systems at Risk of Root Compromise

Do Son September 5, 2024 0

The security researchers have disclosed technical details and PoC exploit code for a CVE-2024-26581 vulnerability within the Linux kernel

CVE-2024-7591 (CVSS 10): Critical Vulnerability Discovered in Progress LoadMaster CVE-2024-7591 - Progress LoadMaster
  • Vulnerability

CVE-2024-7591 (CVSS 10): Critical Vulnerability Discovered in Progress LoadMaster

Do Son September 5, 2024 0

Critical vulnerability (CVE-2024-7591) in Progress LoadMaster ADC and load balancer. Learn how unauthenticated, remote attackers can execute system commands.

MuddyWater’s Sneaky New Tactic: Hijacking RMM Software for Espionage MuddyWater attacks
  • Cyber Security

MuddyWater’s Sneaky New Tactic: Hijacking RMM Software for Espionage

Do Son September 5, 2024 0

Discover the alarming tactics of the MuddyWater hacking group. Find out how they exploit legitimate software in their attacks.

North Korean Hackers Launch Job Interview Scam to Deploy BeaverTail and InvisibleFerret Malware BeaverTail malware
  • Cyber Security
  • Malware

North Korean Hackers Launch Job Interview Scam to Deploy BeaverTail and InvisibleFerret Malware

Do Son September 5, 2024 0

Protect yourself from the BeaverTail malware and InvisibleFerret backdoor used by Lazarus Group. Learn how the Contagious Interview campaign targets blockchain professionals and job seekers through deceptive tactics.

Critical Flaws in Veeam ONE Expose Systems to RCE (CVE-2024-42024) and Credential Theft (CVE-2024-42019) CVE-2024-42024 & CVE-2024-42019
  • Vulnerability

Critical Flaws in Veeam ONE Expose Systems to RCE (CVE-2024-42024) and Credential Theft (CVE-2024-42019)

Do Son September 5, 2024 0

Stay protected from critical vulnerabilities in Veeam ONE. Learn about CVE-2024-42024 & CVE-2024-42019 and the risks it poses to your virtual and data protection environments.

Black Basta’s Evolving Tactics and the Rising Role of LLMs in Cyber Attack Oracle EBS Zero-Day, GRACEFUL SPIDER Cracked Software, Supply Chain Attack Black Basta - NOVA stealer
  • Cyber Security

Black Basta’s Evolving Tactics and the Rising Role of LLMs in Cyber Attack

Do Son September 5, 2024 0

Discover the tactics of Black Basta, one of the most dangerous extortion groups. Explore the use of large language models in cybersecurity.

CVE-2024-7012 (CVSS 9.8): Critical Foreman Flaw Exposes Red Hat Satellite to Unauthorized Access CVE-2024-7012
  • Vulnerability

CVE-2024-7012 (CVSS 9.8): Critical Foreman Flaw Exposes Red Hat Satellite to Unauthorized Access

Do Son September 5, 2024 0

Learn about the critical vulnerability, CVE-2024-7012, in Foreman. Discover how this flaw could enable unauthorized access to Red Hat Satellite.

DarkCracks: A New Stealthy Malware Framework Exploiting GLPI and WordPress DarkCracks
  • Cyber Security
  • Malware

DarkCracks: A New Stealthy Malware Framework Exploiting GLPI and WordPress

Do Son September 5, 2024 0

Uncover the advanced malware campaign known as DarkCracks. Learn how it exploits vulnerabilities in GLPI and WordPress websites for stealthy control.

Bitcoin ATM Scams Surge with Over $110 Million in Losses in 2023 Bitcoin ATM Scams
  • Cyber Security

Bitcoin ATM Scams Surge with Over $110 Million in Losses in 2023

Do Son September 5, 2024 0

Beware of Bitcoin ATM scams. The FTC reveals alarming figures—over $110 million lost in 2023 alone. Learn how criminals exploit these decentralized machines.

OpenStack Ironic Users Urged to Patch Critical Vulnerability (CVE-2024-44082) CVE-2024-44082 - OpenStack Ironic OpenStack Keystone LDAP Identity Service Vulnerability
  • Vulnerability

OpenStack Ironic Users Urged to Patch Critical Vulnerability (CVE-2024-44082)

Do Son September 5, 2024 0

Critical security flaw in OpenStack's Ironic project (CVE-2024-44082) exposes sensitive data. Learn more about the vulnerability and its impact.

Microchip Technology Confirms Data Breach in August Cyberattack Microchip Technology data breach
  • Cyber Security
  • Data Leak

Microchip Technology Confirms Data Breach in August Cyberattack

Do Son September 5, 2024 0

Learn about the significant data breach at Microchip Technology caused by a cyberattack. Discover how the company responded to contain the attack.

CVE-2024-44000 (CVSS 9.8): Litespeed Cache flaw exposes millions of WordPress sites to takeover attacks CVE-2024-44000
  • Vulnerability

CVE-2024-44000 (CVSS 9.8): Litespeed Cache flaw exposes millions of WordPress sites to takeover attacks

Do Son September 5, 2024 0

Discover the severe security flaw in LiteSpeed Cache plugin for WordPress (CVE-2024-44000) and its potential implications for your site's security.

CVE-2024-38650 & CVE-2024-39714 (CVSS 9.9): Critical Flaws in Veeam Console Put Data at Risk CVE-2024-39714 & CVE-2024-38650
  • Vulnerability

CVE-2024-38650 & CVE-2024-39714 (CVSS 9.9): Critical Flaws in Veeam Console Put Data at Risk

Do Son September 5, 2024 0

Discover critical vulnerabilities in Veeam Service Provider Console. Learn about the impact and potential risks of CVE-2024-38650 and CVE-2024-39714.

❮ Prev Page
Next Page ❯

Search

CVE ALERTS
📈

EPSS Spike Alerts
Catch risk spikes before they make headlines.

🎯

Custom EPSS/CVSS
Set score thresholds to effectively filter noise.

🛡️

Exploit Intel
Real-world exploit signals beyond the KEV catalog.

🐙

GitHub Issues
Auto-create alert tickets without duplication.

📬

Weekly Digest
Clean summaries, eliminating email spam.

🏷️

Watchlist Groups
Tag vulnerabilities by team (Infra/AppSec/SOC).

🔀

Smart Routing
Route chat channels based on severity levels.

🚨

RBP Tracker
Early warning detection and tracking system.

Subscribe – $7/mo or try free for 14 days →

🚨 Active Exploits in the Wild

  • CVE-2026-20320CVSS 7.5
    A vulnerability in the Open Client Interface (OCI) XML Parser of Cisco BroadWorks could allow an unauthenticated, remote...
    CISA KEV📅 Added to KEV: Nov 10, 2026
  • CVE-2026-111793CVSS 4.3
    Openwave Webtop Media Transcoder does not enforce administrator-defined file type restrictions to restrict the file-types to be converted....
    CISA KEV📅 Added to KEV: Nov 10, 2026
  • CVE-2026-111560CVSS 8.6
    Improper neutralization of shell metacharacters in the timezone configuration field in certain Barracuda appliance products using common Barracuda...
    CISA KEV📅 Added to KEV: Nov 10, 2026
  • CVE-2026-116606CVSS 9.3
    An authentication bypass in Barracuda Email Security Gateway versions earlier than 9.4.0.030 allows an unauthenticated remote attacker to...
    CISA KEV📅 Added to KEV: Nov 10, 2026
  • CVE-2026-125350
    Use after free in XML. Reported by anonymous on 2026-11-06. Google is aware that an exploit for CVE-2026-125350...
    CISA KEV📅 Added to KEV: Nov 10, 2026
  • CVE-2026-124194CVSS 6.5
    Product ui does not warn user of unsafe actions in Microsoft Office Outlook allows an unauthorized attacker to...
    CISA KEV📅 Added to KEV: Nov 10, 2026
  • CVE-2026-123751CVSS 9.8
    The WP Duplicate WordPress plugin through 1.1.11 does not properly verify a request authentication value and does not...
    Watchtower Verified📅 Updated: Nov 9, 2026
  • CVE-2026-114713CVSS 8.6
    The labeled-response module in UnrealIRCd 6.0.0 before 6.2.7.1 does not escape the IRCv3 "label" message tag when echoing...
    Admin intel📅 Updated: Nov 9, 2026
Powered by CVE Watchtower

Critical Vulnerabilities

  • CVE-2026-114160CVSS 9.8
    Server-side request forgery (ssrf) in Azure Managed Grafana allows an unauthorized attacker to elevate privileges over a network.
    📅 Updated: Nov 11, 2026
  • CVE-2026-109469CVSS 10.0
    Authorization bypass through user-controlled key in Entra Device Registration allows an unauthorized attacker to elevate privileges over a...
    📅 Updated: Nov 11, 2026
  • CVE-2026-101763CVSS 9.8
    Vulnerability in the Oracle Communications BRM - Elastic Charging Engine product of Oracle Communications (component: Cloud native deployment)....
    📅 Updated: Nov 11, 2026
  • CVE-2026-101809CVSS 10.0
    Vulnerability in the Workflow product of Oracle E-Business Suite (component: Workflow Notification Mailer). Supported versions that are affected...
    📅 Updated: Nov 11, 2026
  • CVE-2026-126253CVSS 9.3
    An Authentication Bypass by Primary Weakness vulnerability [cwe-305] in FortiOS and FortiSASE ospf daemon may allow an unauthenticated...
    📅 Updated: Nov 11, 2026
  • CVE-2026-126170CVSS 9.8
    An Improper Encoding or Escaping of Output vulnerability [CWE-116] in FortiSASE-Sovereign, FortiAnalyzer, FortiManager, FortiAnalyzer Cloud, FortiManager Cloud and...
    📅 Updated: Nov 11, 2026
  • CVE-2026-91220CVSS 9.8
    Vulnerability in the Oracle Business Process Management Suite product of Oracle Fusion Middleware (component: Human Workflow). Supported versions...
    📅 Updated: Nov 11, 2026
  • CVE-2026-91222CVSS 9.9
    Vulnerability in the Oracle Business Process Management Suite product of Oracle Fusion Middleware (component: Human Workflow (11g+)). Supported...
    📅 Updated: Nov 11, 2026
Powered by CVE Watchtower

Daily CyberSecurity

  • About SecurityOnline.info
  • Advertise with us
  • Announcement
  • Contact
  • Contributor Register
  • Login
  • Disclaimer
  • DCMA
  • Privacy Policy
  • About SecurityOnline.info
  • Advertise on SecurityOnline.info
  • Contact Us

When you purchase through links on our site, we may earn an affiliate commission. Here’s how it works

  • CVE Watchtower
  • CVE Statistics by Vendor 2026
  • Q3 2026 Report
  • Top Exploited CVEs
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube
© 2017 - 2026 Daily CyberSecurity. All Rights Reserved.