Skip to content
November 11, 2026
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube

Daily CyberSecurity

Zero-hour alerts. Unmatched analysis.

Primary Menu
  • Home
  • CVE Data
    • CVE Watchtower
    • Top Exploited CVEs
    • CVE Stats by Vendor
    • Q2 2026 Report
    • CVE Alerts
    • CVE Alert Settings
    • Pricing
  • Cyber Criminals
  • Data Leak
  • Free Tools
    • CVSS 3.1 Calculator
    • Certificate Viewer
    • DNS Lookup
    • Encoder & Hash Generator
    • IP / Subnet Calculator
    • Whois Lookup
  • Linux
  • Malware
  • Vulnerability
  • Submit Press Release
Light/Dark Button
Unpatched TOTOLINK AX1800 Router Flaw Allows Unauthenticated Telnet & Root RCE TOTOLINK EX200 Vulnerability CVE-2025-65606 TOTOLINK Auth Bypass, Unauthenticated Telnet
  • Vulnerability Report

Unpatched TOTOLINK AX1800 Router Flaw Allows Unauthenticated Telnet & Root RCE

Do Son December 11, 2025 0
A critical security vulnerability has been uncovered in the popular TOTOLINK AX1800 wireless router, a device widely...
Read More Read more about Unpatched TOTOLINK AX1800 Router Flaw Allows Unauthenticated Telnet & Root RCE
FBI/CISA Warn: Pro-Russia Hacktivists Target Critical Infrastructure Via Unsecured VNC HMIs Pro-Russia Hacktivist OT Attack, Unsecured VNC HMI
  • Cyber Security

FBI/CISA Warn: Pro-Russia Hacktivists Target Critical Infrastructure Via Unsecured VNC HMIs

Do Son December 11, 2025 0
A coalition of international cybersecurity agencies, led by the FBI, CISA, and the NSA, has issued a...
Read More Read more about FBI/CISA Warn: Pro-Russia Hacktivists Target Critical Infrastructure Via Unsecured VNC HMIs
Critical CCTV Flaw (CVE-2025-13607) Risks Video Feed Hijack & Credential Theft via Missing Authentication CCTV Auth Bypass, Critical D-Link Flaw
  • Vulnerability Report

Critical CCTV Flaw (CVE-2025-13607) Risks Video Feed Hijack & Credential Theft via Missing Authentication

Do Son December 11, 2025 0
The Cybersecurity and Infrastructure Security Agency (CISA) has issued a high-severity alert regarding a critical flaw affecting...
Read More Read more about Critical CCTV Flaw (CVE-2025-13607) Risks Video Feed Hijack & Credential Theft via Missing Authentication
“React2Shell” Crisis: Critical Vulnerability Triggers Global Cyberattacks by State-Sponsored Groups React2Shell RCE, Flight Protocol Deserialization
  • Vulnerability Report

“React2Shell” Crisis: Critical Vulnerability Triggers Global Cyberattacks by State-Sponsored Groups

Do Son December 11, 2025 0
A critical security flaw in the popular React web framework has ignited a wave of cyberattacks, with...
Read More Read more about “React2Shell” Crisis: Critical Vulnerability Triggers Global Cyberattacks by State-Sponsored Groups
Makop Ransomware Evolves: GuLoader and BYOVD EDR Killers Used to Attack RDP-Exposed Networks Cuckoo Spear campaign - APT 10
  • Malware

Makop Ransomware Evolves: GuLoader and BYOVD EDR Killers Used to Attack RDP-Exposed Networks

Do Son December 11, 2025 0
A familiar threat has returned with new tricks, proving that cybercriminals don’t need sophisticated custom code to...
Read More Read more about Makop Ransomware Evolves: GuLoader and BYOVD EDR Killers Used to Attack RDP-Exposed Networks
DeadLock Ransomware Deploys BYOVD EDR Killer by Exploiting Baidu Driver for Kernel-Level Defense Bypass DeadLock Ransomware, BYOVD EDR Killer
  • Malware

DeadLock Ransomware Deploys BYOVD EDR Killer by Exploiting Baidu Driver for Kernel-Level Defense Bypass

Do Son December 11, 2025 0
A financially motivated threat group is deploying a new ransomware strain known as “DeadLock,” utilizing advanced “Bring...
Read More Read more about DeadLock Ransomware Deploys BYOVD EDR Killer by Exploiting Baidu Driver for Kernel-Level Defense Bypass
Critical PCIe 6.0 Flaws Risk Secure Data Integrity via Stale Data Injection in IDE Mechanism PCIe IDE Vulnerability, Stale Data Injection
  • Technology

Critical PCIe 6.0 Flaws Risk Secure Data Integrity via Stale Data Injection in IDE Mechanism

Do Son December 11, 2025 0
The secure foundations of high-speed data transfer have developed a crack. The CERT Coordination Center (CERT/CC) has...
Read More Read more about Critical PCIe 6.0 Flaws Risk Secure Data Integrity via Stale Data Injection in IDE Mechanism
EtherRAT Malware Hijacks Ethereum Blockchain for Covert C2 After React2Shell Exploit EtherRAT C2 Blockchain, React2Shell DPRK
  • Malware

EtherRAT Malware Hijacks Ethereum Blockchain for Covert C2 After React2Shell Exploit

Do Son December 10, 2025 0
In a alarming escalation of the “React2Shell” crisis, security researchers have uncovered a sophisticated new malware strain...
Read More Read more about EtherRAT Malware Hijacks Ethereum Blockchain for Covert C2 After React2Shell Exploit
Slack CEO Denise Dresser Joins OpenAI as CRO to Solve the Profitability Puzzle OpenAI confidential IPO filing OpenAI code signing certificate rotation AI private equity joint ventures OpenAI Axios Supply Chain Attack OpenAI Promptfoo acquisition OpenAI military resignation ChatGPT Plus military fraud OpenAI smart speaker Jony Ive OpenAI Frontier platform ChatGPT AI age prediction 2026, OpenAI Persona age verification Sarah Friar OpenAI infrastructure, AI Scaling Law revenue OpenAI Gumdrop AI pen, Jony Ive OpenAI hardware 2027 OpenAI New CRO, Denise Dresser Monetization Strategy OpenAI Competitive Pressure Gemini 3 Overtake OpenAI Infrastructure, AI Closed Loop Economy
  • Technology

Slack CEO Denise Dresser Joins OpenAI as CRO to Solve the Profitability Puzzle

Do Son December 10, 2025 0
To sustain its enormous AI-compute expenditures and accelerate its path to profitability, OpenAI has announced the recruitment...
Read More Read more about Slack CEO Denise Dresser Joins OpenAI as CRO to Solve the Profitability Puzzle
OpenAI, Anthropic, Google Unite: Launch Agentic AI Foundation Under Linux Agentic AI Foundation, MCP Protocol Open-Source Chrome DevTools AI, MCP Protocol Model Context Protocol (MCP) Gemini AI Windows AI future, AI interoperability
  • Technology

OpenAI, Anthropic, Google Unite: Launch Agentic AI Foundation Under Linux

Do Son December 10, 2025 0
Several leading technology and artificial intelligence companies recently announced the joint establishment of the Agentic AI Foundation...
Read More Read more about OpenAI, Anthropic, Google Unite: Launch Agentic AI Foundation Under Linux
❮ Prev Page
Next Page ❯
CyberVolk Ransomware: A New and Evolving Threat to Global Cybersecurity CyberVolk Ransomware
  • Malware

CyberVolk Ransomware: A New and Evolving Threat to Global Cybersecurity

Do Son September 5, 2024 0

Stay informed about the new threat in the cybercrime world - CyberVolk Ransomware. Explore its advanced features and growing impact in the cybersecurity landscape.

Web3’s Billion-Dollar Bleeding: Cybercrime in DeFi Web3 security
  • Cyber Security

Web3’s Billion-Dollar Bleeding: Cybercrime in DeFi

Do Son September 5, 2024 0

Stay one step ahead of cybercriminals in the world of Web3 and decentralized finance (DeFi). Learn about the evolving landscape of Web3 security and how to protect your digital assets.

CVE-2024-20017 (CVSS 9.8): Zero-Click Exploit Discovered in Popular Wi-Fi Chipsets, PoC Published CVE-2024-20017 exploit PoC
  • Vulnerability

CVE-2024-20017 (CVSS 9.8): Zero-Click Exploit Discovered in Popular Wi-Fi Chipsets, PoC Published

Do Son September 4, 2024 0

Hyprdude has published detailed information and a proof-of-concept (PoC) exploit for a critical vulnerability identified as CVE-2024-20017

Veeam Backup & Replication Faces RCE Flaw– CVE-2024-40711 (CVSS 9.8) Allows Full System Takeover Veeam RCE Vulnerability CVE-2026-21666 CVE-2024-40711 Veeam Backup & Replication
  • Vulnerability

Veeam Backup & Replication Faces RCE Flaw– CVE-2024-40711 (CVSS 9.8) Allows Full System Takeover

Do Son September 4, 2024 0

Critical vulnerabilities discovered in Veeam Backup & Replication (CVE-2024-40711). Understand the risks and take necessary precautions to secure data.

Critical Cisco SLU Vulnerabilities CVE-2024-20439 and CVE-2024-20440 Threaten Remote Admin Control CVE-2024-20439 & CVE-2024-20440
  • Vulnerability

Critical Cisco SLU Vulnerabilities CVE-2024-20439 and CVE-2024-20440 Threaten Remote Admin Control

Do Son September 4, 2024 0

Discover the security advisory from Cisco warning of multiple vulnerabilities in Smart Licensing Utility, including CVE-2024-20439, and CVE-2024-20440

New KTLVdoor Backdoor Discovered in Multiplatform Intrusion Campaign Linked to Earth Lusca KTLVdoor backdoor - CoffeeLoader Malware
  • Cyber Security
  • Malware

New KTLVdoor Backdoor Discovered in Multiplatform Intrusion Campaign Linked to Earth Lusca

Do Son September 4, 2024 0

Uncover the sophisticated KTLVdoor backdoor used by Chinese-speaking threat actor Earth Lusca. Learn about its advanced functionality and targets.

Goffloader: In-Memory Execution, No Disk Required GoffLoader - Unauthorized Cobalt Strikes
  • Open Source Tool

Goffloader: In-Memory Execution, No Disk Required

Do Son September 4, 2024 0

Discover GoffLoader, the revolutionary tool that empowers security professionals to execute BOF and Cobalt Strike PE files directly in memory.

Warning: CVE-2024-20469 in Cisco ISE with PoC Code Puts Networks at Risk CVE-2024-20469 Cisco Identity Services Engine
  • Vulnerability

Warning: CVE-2024-20469 in Cisco ISE with PoC Code Puts Networks at Risk

Do Son September 4, 2024 0

Discover the details of CVE-2024-20469, a vulnerability in Cisco Identity Services Engine (ISE) that allows local attackers to elevate privileges and compromise system security.

Webmin/Virtualmin Vulnerability Opens Door to Loop DoS Attacks (CVE-2024-2169) Webmin CVE-2024-2169 Loop DoS attack CVE-2024-45692
  • Vulnerability

Webmin/Virtualmin Vulnerability Opens Door to Loop DoS Attacks (CVE-2024-2169)

Do Son September 4, 2024 0

Take immediate action to secure your server. Explore the CVE-2024-2169 vulnerability in Webmin and Virtualmin control panels and prevent DoS attacks.

Nigerian National Receives 5-Year Sentence for Multi-Million Dollar BEC Fraud Romanian hacker sentenced identity theft conviction Pig-Butchering Crackdown Operation Level Up Oleksandr Didenko North Korean IT Workers Coinbase TaskUs insider breach, Hyderabad police Coinbase arrest Scattered Spider, Cybercrime Scattered Spider group
  • Cyber Security

Nigerian National Receives 5-Year Sentence for Multi-Million Dollar BEC Fraud

Do Son September 4, 2024 0

Explore the case of a Nigerian national sentenced to prison for his role in a $5 million BEC fraud scheme. Learn about the sophisticated tactics employed and the restitution ordered.

ECDSA Vulnerability in YubiKey: What You Need to Know YubiKey ECDSA Vulnerability CVE-2024-45678
  • Vulnerability

ECDSA Vulnerability in YubiKey: What You Need to Know

Do Son September 4, 2024 0

Stay informed about the YubiKey vulnerability CVE-2024-45678 affecting several of its hardware security devices and the potential risks involved.

Revival Hijack: A New PyPI Hijacking Technique Threatens Thousands of Packages Revival Hijack
  • Malware
  • Vulnerability

Revival Hijack: A New PyPI Hijacking Technique Threatens Thousands of Packages

Do Son September 4, 2024 0

Learn about the Revival Hijack technique and how it puts over 22,000 PyPI packages at risk. Discover the new attack vector exploited by malicious actors.

North Korea Targets DeFi and Crypto Companies with Advanced Social Engineering Attacks KongTuke Microsoft Teams Phishing ModeloRAT Initial Access Broker CVE-2024-38193 - Lazarus Group Threat Actors ScreenConnect
  • Cyber Security

North Korea Targets DeFi and Crypto Companies with Advanced Social Engineering Attacks

Do Son September 4, 2024 0

Stay informed about the latest social engineering attack tactics employed by North Korean state-sponsored hackers in the cryptocurrency industry.

Transport for London Under Cyberattack, Transport Services Remain Unaffected IARPA Research Security Data Abyss Report Telecom threat, Secret Service cybersecurity news - Cyber Espionage Campaign
  • Cyber Security

Transport for London Under Cyberattack, Transport Services Remain Unaffected

Do Son September 4, 2024 0

Transport for London (TfL) faces cyber security incident. Learn about the ongoing attack and the measures taken to protect user data.

Clearview AI Faces Record €30.5 Million Fine for Privacy Breach Clearview AI
  • Data Leak

Clearview AI Faces Record €30.5 Million Fine for Privacy Breach

Do Son September 4, 2024 0

Clearview AI fined €30.5 million by the Dutch DPA for unlawfully collecting and using facial recognition data of Dutch residents.

CVE-2024-38106: 0-Day Windows Kernel Vulnerability Exploited in the Wild, PoC Published Microsoft MAI-Image-1, In-House AI Microsoft Learn, MCP Server Windows Kernel Vulnerability - CVE-2024-38106 PoC exploit
  • Vulnerability

CVE-2024-38106: 0-Day Windows Kernel Vulnerability Exploited in the Wild, PoC Published

Do Son September 3, 2024 0

PixiePoint Security published a PoC exploit for a critical 0-day vulnerability in the Windows Kernel, identified as CVE-2024-38106

Emansrepo Stealer: A Multi-Faceted Threat Evolving in Complexity Emansrepo Stealer
  • Malware

Emansrepo Stealer: A Multi-Faceted Threat Evolving in Complexity

Do Son September 3, 2024 0

Learn about Emansrepo, a persistent Python-based infostealer that poses a significant threat to cybersecurity. Uncover its complex attack chains and evasive techniques.

RomCom Group’s Underground Ransomware Exploits Microsoft Zero-Day Flaw Storm-0978 RomCom group Underground ransomware
  • Malware

RomCom Group’s Underground Ransomware Exploits Microsoft Zero-Day Flaw

Do Son September 3, 2024 0

Beware of the new ransomware variant, Underground, linked to the RomCom group (Storm-0978). Learn about its tactics and how to protect your Windows machines.

CISA Issues Alert: Three Actively Exploited Vulnerabilities Demand Immediate Attention CISA KEV Catalog DarkSword Exploit Draytek Routers VMware vCenter RCE CVE-2024-37079
  • Vulnerability

CISA Issues Alert: Three Actively Exploited Vulnerabilities Demand Immediate Attention

Do Son September 3, 2024 0

Take action against cybersecurity threats with Draytek routers & WPS Office. Find out about the exploited vulnerabilities and how to defend your system.

Google Patches Actively Exploited Zero-Day in September Android Update Google Lawsuit, Android Data Privacy Android September Security
  • Vulnerability

Google Patches Actively Exploited Zero-Day in September Android Update

Do Son September 3, 2024 0

Stay protected with Google's September 2024 Android security patch. Learn about the 36 vulnerabilities it addresses, including a high-severity zero-day exploit.

Researcher Identifies ToddyCat-Inspired APT Attack Leveraging ICMP Backdoor and Microsoft Exchange Flaws ToddyCat APT
  • Cyber Security
  • Malware

Researcher Identifies ToddyCat-Inspired APT Attack Leveraging ICMP Backdoor and Microsoft Exchange Flaws

Do Son September 3, 2024 0

Explore the extensive investigation into a sophisticated attack involving the ToddyCat APT group. Uncover the multi-layered strategy and targeted vulnerabilities.

Travelers Targeted: Booking.com Phishing Scam Unveiled Booking phishing campaign
  • Cyber Security

Travelers Targeted: Booking.com Phishing Scam Unveiled

Do Son September 3, 2024 0

Beware of the sophisticated booking phishing campaign targeting Booking.com. Learn how cybercriminals compromise accounts and scam hotel customers.

❮ Prev Page
Next Page ❯

Search

CVE ALERTS
📈

EPSS Spike Alerts
Catch risk spikes before they make headlines.

🎯

Custom EPSS/CVSS
Set score thresholds to effectively filter noise.

🛡️

Exploit Intel
Real-world exploit signals beyond the KEV catalog.

🐙

GitHub Issues
Auto-create alert tickets without duplication.

📬

Weekly Digest
Clean summaries, eliminating email spam.

🏷️

Watchlist Groups
Tag vulnerabilities by team (Infra/AppSec/SOC).

🔀

Smart Routing
Route chat channels based on severity levels.

🚨

RBP Tracker
Early warning detection and tracking system.

Subscribe – $7/mo or try free for 14 days →

🚨 Active Exploits in the Wild

  • CVE-2026-20320CVSS 7.5
    A vulnerability in the Open Client Interface (OCI) XML Parser of Cisco BroadWorks could allow an unauthenticated, remote...
    CISA KEV📅 Added to KEV: Nov 10, 2026
  • CVE-2026-111793CVSS 4.3
    Openwave Webtop Media Transcoder does not enforce administrator-defined file type restrictions to restrict the file-types to be converted....
    CISA KEV📅 Added to KEV: Nov 10, 2026
  • CVE-2026-111560CVSS 8.6
    Improper neutralization of shell metacharacters in the timezone configuration field in certain Barracuda appliance products using common Barracuda...
    CISA KEV📅 Added to KEV: Nov 10, 2026
  • CVE-2026-116606CVSS 9.3
    An authentication bypass in Barracuda Email Security Gateway versions earlier than 9.4.0.030 allows an unauthenticated remote attacker to...
    CISA KEV📅 Added to KEV: Nov 10, 2026
  • CVE-2026-125350
    Use after free in XML. Reported by anonymous on 2026-11-06. Google is aware that an exploit for CVE-2026-125350...
    CISA KEV📅 Added to KEV: Nov 10, 2026
  • CVE-2026-124194CVSS 6.5
    Product ui does not warn user of unsafe actions in Microsoft Office Outlook allows an unauthorized attacker to...
    CISA KEV📅 Added to KEV: Nov 10, 2026
  • CVE-2026-123751CVSS 9.8
    The WP Duplicate WordPress plugin through 1.1.11 does not properly verify a request authentication value and does not...
    Watchtower Verified📅 Updated: Nov 9, 2026
  • CVE-2026-114713CVSS 8.6
    The labeled-response module in UnrealIRCd 6.0.0 before 6.2.7.1 does not escape the IRCv3 "label" message tag when echoing...
    Admin intel📅 Updated: Nov 9, 2026
Powered by CVE Watchtower

Critical Vulnerabilities

  • CVE-2026-114160CVSS 9.8
    Server-side request forgery (ssrf) in Azure Managed Grafana allows an unauthorized attacker to elevate privileges over a network.
    📅 Updated: Nov 11, 2026
  • CVE-2026-109469CVSS 10.0
    Authorization bypass through user-controlled key in Entra Device Registration allows an unauthorized attacker to elevate privileges over a...
    📅 Updated: Nov 11, 2026
  • CVE-2026-101763CVSS 9.8
    Vulnerability in the Oracle Communications BRM - Elastic Charging Engine product of Oracle Communications (component: Cloud native deployment)....
    📅 Updated: Nov 11, 2026
  • CVE-2026-101809CVSS 10.0
    Vulnerability in the Workflow product of Oracle E-Business Suite (component: Workflow Notification Mailer). Supported versions that are affected...
    📅 Updated: Nov 11, 2026
  • CVE-2026-126253CVSS 9.3
    An Authentication Bypass by Primary Weakness vulnerability [cwe-305] in FortiOS and FortiSASE ospf daemon may allow an unauthenticated...
    📅 Updated: Nov 11, 2026
  • CVE-2026-126170CVSS 9.8
    An Improper Encoding or Escaping of Output vulnerability [CWE-116] in FortiSASE-Sovereign, FortiAnalyzer, FortiManager, FortiAnalyzer Cloud, FortiManager Cloud and...
    📅 Updated: Nov 11, 2026
  • CVE-2026-91220CVSS 9.8
    Vulnerability in the Oracle Business Process Management Suite product of Oracle Fusion Middleware (component: Human Workflow). Supported versions...
    📅 Updated: Nov 11, 2026
  • CVE-2026-91222CVSS 9.9
    Vulnerability in the Oracle Business Process Management Suite product of Oracle Fusion Middleware (component: Human Workflow (11g+)). Supported...
    📅 Updated: Nov 11, 2026
Powered by CVE Watchtower

Daily CyberSecurity

  • About SecurityOnline.info
  • Advertise with us
  • Announcement
  • Contact
  • Contributor Register
  • Login
  • Disclaimer
  • DCMA
  • Privacy Policy
  • About SecurityOnline.info
  • Advertise on SecurityOnline.info
  • Contact Us

When you purchase through links on our site, we may earn an affiliate commission. Here’s how it works

  • CVE Watchtower
  • CVE Statistics by Vendor 2026
  • Q3 2026 Report
  • Top Exploited CVEs
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube
© 2017 - 2026 Daily CyberSecurity. All Rights Reserved.