Skip to content
November 11, 2026
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube

Daily CyberSecurity

Zero-hour alerts. Unmatched analysis.

Primary Menu
  • Home
  • CVE Data
    • CVE Watchtower
    • Top Exploited CVEs
    • CVE Stats by Vendor
    • Q2 2026 Report
    • CVE Alerts
    • CVE Alert Settings
    • Pricing
  • Cyber Criminals
  • Data Leak
  • Free Tools
    • CVSS 3.1 Calculator
    • Certificate Viewer
    • DNS Lookup
    • Encoder & Hash Generator
    • IP / Subnet Calculator
    • Whois Lookup
  • Linux
  • Malware
  • Vulnerability
  • Submit Press Release
Light/Dark Button
CISA KEV Alert: EOL D-Link and Array Networks Command Injection Under Active Attack Ivanti EPMM Vulnerability CVE-2026-1340 CISA KEV Catalog CVE-2026-21385 CISA KEV Update CVE-2008-0015 CISA KEV, Array Networks Command Injection CVE-2025-0111 & CVE-2025-23209 CISA, Known Exploited Vulnerabilities
  • Vulnerability Report

CISA KEV Alert: EOL D-Link and Array Networks Command Injection Under Active Attack

Do Son December 9, 2025 0
The Cybersecurity and Infrastructure Security Agency (CISA) has updated its Known Exploited Vulnerabilities (KEV) Catalog with two...
Read More Read more about CISA KEV Alert: EOL D-Link and Array Networks Command Injection Under Active Attack
Samsung Foundry Hits 60% 4nm Yield, Secures $100M AI Chip Order from Tsavorite Samsung MagicInfo9 Vulnerability CVE-2026-25202 Galaxy S26 benchmarks Samsung HBM4 NVIDIA certification Samsung Bixby Perplexity integration, One UI 8.5 AI assistant Samsung Taylor 2nm mass production, TSMC 2nm capacity constraint 2026 Samsung SATA SSD Discontinuation, SSD Market Shift Samsung SATA SSD Discontinuation, M.2 Market Shift Samsung Foundry 4nm Yield Tsavorite OPU Chip Order Samsung Project Moohan, Android XR Samsung OpenAI Partnership, AI Infrastructure Samsung Exynos 2600, 2nm GAA Tesla AI Chips, Samsung Foundry Deal Samsung Foldables, Galaxy Unpacked 2025 Samsung AI, Perplexity AI Samsung data breach Q990D firmware US tariffs
  • Technology

Samsung Foundry Hits 60% 4nm Yield, Secures $100M AI Chip Order from Tsavorite

Do Son December 9, 2025 0
After a painful period marked by yield challenges and the loss of key customers, Samsung’s foundry division...
Read More Read more about Samsung Foundry Hits 60% 4nm Yield, Secures $100M AI Chip Order from Tsavorite
Ad Code Found in ChatGPT Android Build, OpenAI Denies Current Advertising Tests OpenAI token price reduction OpenAI Deployment Company DeployCo OpenAI IPO strategy OpenAI Privacy Filter 1.5B OpenAI $122 billion funding OpenAI GitHub alternative OpenAI military agreement 2026 OpenAI Stargate project collapse NVIDIA OpenAI investment stall ChatGPT Go $8 subscription, OpenAI GPT-5.2 Instant ads OpenAI Torch acquisition, Unified Medical Memory OpenAI Head of Preparedness 2025, Sam Altman AI safety lawsuits ChatGPT Advertising Speculation OpenAI Ad Code Denial OpenAI AI Confession Hallucination Mitigation ChatGPT Quality Focus OpenAI Gemini Red Alert ChatGPT Login, AI ecosystem OpenAI Mental Health, AI Well-Being Council ChatGPT Instant Checkout, Agentic Commerce OpenAI cloud computing OpenAI, startup incubator OpenAI chips, NVIDIA competition AI competition, antitrust lawsuit GPT-5, OpenAI Livestream OpenAI Open-Weight, AI Models OpenAI Infrastructure, AI Data Centers ChatGPT Business, Office Productivity OpenAI Open-Weight Model, WindSurf Acquisition OpenAI AI Browser, ChatGPT Integration Mattel AI, OpenAI Partnership OpenAI o3, Price Cut OpenAI's Next-Gen AI: O3-Pro's Enhanced Reasoning PowerOpenAI profit OpenAI Bid OpenAI Social Network ChatGPT Social OpenAI Non-profit OpenAI UAE ChatGPT Plus free
  • Technology

Ad Code Found in ChatGPT Android Build, OpenAI Denies Current Advertising Tests

Do Son December 9, 2025 0
As the soaring operational costs of generative-AI services continue to draw scrutiny, speculation surrounding whether ChatGPT might...
Read More Read more about Ad Code Found in ChatGPT Android Build, OpenAI Denies Current Advertising Tests
AI Uncovers GhostPenguin: Undetectable Linux Backdoor Used RC5-Encrypted UDP for Covert C2 WhatsApp Worm, Brazilian Banking Trojan LAPSUS$ Alliance, Scattered Spider Ransomware, Cybercrime RedCurl APT group Russian Cyberespionage, ApolloShadow Malware
  • Malware

AI Uncovers GhostPenguin: Undetectable Linux Backdoor Used RC5-Encrypted UDP for Covert C2

Do Son December 9, 2025 0
In a demonstration of AI-powered defense, security researchers at Trend Micro have uncovered a previously unknown and...
Read More Read more about AI Uncovers GhostPenguin: Undetectable Linux Backdoor Used RC5-Encrypted UDP for Covert C2
Shanya Crypter Is the New Ransomware Toolkit: Uses Kernel Driver Abuse to Kill EDR Shanya Crypter, EDR Killer
  • Malware

Shanya Crypter Is the New Ransomware Toolkit: Uses Kernel Driver Abuse to Kill EDR

Do Son December 9, 2025 0
A sophisticated new “packer-as-a-service” has emerged from the cybercriminal underworld, providing ransomware gangs with a powerful toolkit...
Read More Read more about Shanya Crypter Is the New Ransomware Toolkit: Uses Kernel Driver Abuse to Kill EDR
Undetectable Beima Webshell Sold by College Student for Tuition Hijacks 5,200+ Gov/Edu Websites Beima PHP Webshell, Cybercrime Freelancing
  • Malware

Undetectable Beima Webshell Sold by College Student for Tuition Hijacks 5,200+ Gov/Edu Websites

Do Son December 9, 2025 0
Security researchers have uncovered a sprawling botnet operation fueled not by a state-sponsored APT, but by a...
Read More Read more about Undetectable Beima Webshell Sold by College Student for Tuition Hijacks 5,200+ Gov/Edu Websites
Silent Supply Chain Attack: Malicious Go Typosquat Siphoned Data to Pastebin for Four Years Undetected Go Typosquatting, Pastebin Exfiltration
  • Malware

Silent Supply Chain Attack: Malicious Go Typosquat Siphoned Data to Pastebin for Four Years Undetected

Do Son December 9, 2025 0
The Socket Threat Research Team has uncovered a malicious Go package that operated undetected for over four...
Read More Read more about Silent Supply Chain Attack: Malicious Go Typosquat Siphoned Data to Pastebin for Four Years Undetected
Silver Fox APT Uses Cyrillic False Flag in Teams SEO Poisoning to Deploy ValleyRAT Silver Fox False Flag, Cyrillic SEO Poisoning
  • Cyber Security
  • Malware

Silver Fox APT Uses Cyrillic False Flag in Teams SEO Poisoning to Deploy ValleyRAT

Do Son December 9, 2025 0
A cunning cyber-espionage campaign is targeting Chinese organizations with a twist of geopolitical deception. According to a...
Read More Read more about Silver Fox APT Uses Cyrillic False Flag in Teams SEO Poisoning to Deploy ValleyRAT
Evolved ClayRat Spyware Gains Self-Defense, Using Accessibility Abuse to Block Uninstallation and Steal Keys Android zero day flaw June 2026 security bulletin RuTaxi Trojan Android Banking Malware Pixel 9 zero-click exploit, Dolby UDC vulnerability CVE-2025-54957 NexusRoute Android RAT, India E-Challan Phishing ClayRat Self-Defense, Android Accessibility Abuse Android Trojan, AntiDot Android Malware "BadPack"
  • Malware

Evolved ClayRat Spyware Gains Self-Defense, Using Accessibility Abuse to Block Uninstallation and Steal Keys

Do Son December 9, 2025 0
A notorious Android spyware family has resurfaced with dangerous new capabilities, evolving from a simple data thief...
Read More Read more about Evolved ClayRat Spyware Gains Self-Defense, Using Accessibility Abuse to Block Uninstallation and Steal Keys
New FvncBot Android Trojan Targets mBank Users with HVNC and H.264 Screen Streaming FvncBot Android Trojan, HVNC Screen Streaming
  • Malware

New FvncBot Android Trojan Targets mBank Users with HVNC and H.264 Screen Streaming

Do Son December 9, 2025 0
A sophisticated new Android banking trojan has been discovered targeting customers of mBank, one of Poland’s largest...
Read More Read more about New FvncBot Android Trojan Targets mBank Users with HVNC and H.264 Screen Streaming
❮ Prev Page
Next Page ❯
CVE-2024-39584: Dell BIOS Flaw Exposes Systems to Secure Boot Bypass and Arbitrary Code Execution Dell BIOS Flaw - CVE-2024-39584
  • Vulnerability

CVE-2024-39584: Dell BIOS Flaw Exposes Systems to Secure Boot Bypass and Arbitrary Code Execution

Do Son August 29, 2024 0

Discover the high-severity vulnerability affecting Dell BIOS and the potential consequences. Learn how to mitigate the risk and protect your Dell client platforms.

Docker-OSX Shut Down: Apple’s Copyright Claim Impacts macOS Containers Docker-OSX
  • Technology

Docker-OSX Shut Down: Apple’s Copyright Claim Impacts macOS Containers

Do Son August 29, 2024 0

Discover Docker-OSX, an open-source project that enables running macOS systems effortlessly through containers. Learn about recent issues with image pulling and Apple's copyright infringement complaint.

Critical CVE-2024-45321 Flaw in Popular Perl Module Installer cpanminus, No Patch Available CVE-2024-45321 - cpanminus
  • Vulnerability

Critical CVE-2024-45321 Flaw in Popular Perl Module Installer cpanminus, No Patch Available

Do Son August 28, 2024 0

Stay informed about the critical vulnerability, CVE-2024-45321, affecting App::cpanminus (cpanm) and the risks it poses to the Perl community.

Mirai Botnet Exploits Zero-Day Vulnerability CVE-2024-7029 in AVTECH IP Cameras CVE-2024-7029 - CVE-2024-7029 PoC - AVTECH IP - Corona Mirai
  • Malware
  • Vulnerability

Mirai Botnet Exploits Zero-Day Vulnerability CVE-2024-7029 in AVTECH IP Cameras

Do Son August 28, 2024 0

Discover the alarming implications of CVE-2024-7029, a zero-day vulnerability in AVTECH IP cameras exploited by the Corona Mirai botnet campaign.

CVE-2024-43425: Moodle Remote Code Execution Vulnerability, PoC Published Moodle CVE-2024-43425 exploit
  • Vulnerability

CVE-2024-43425: Moodle Remote Code Execution Vulnerability, PoC Published

Do Son August 28, 2024 0

Explore the potential impact of a critical CVE-2024-43425 vulnerability in Moodle, a widely-used Learning Management System.

Critical Vulnerabilities Expose Hitachi Energy MicroSCADA X SYS600 to Cyberattacks MicroSCADA X SYS600 CVE-2024-4872, CVE-2024-3980
  • Vulnerability

Critical Vulnerabilities Expose Hitachi Energy MicroSCADA X SYS600 to Cyberattacks

Do Son August 28, 2024 0

Protect your power systems from cyber threats. Learn about the critical vulnerabilities in MicroSCADA X SYS600 and how to mitigate the risks.

New Attack on Microsoft 365 Copilot Steals Personal Data Microsoft Copilot ASCII Smuggling
  • Vulnerability

New Attack on Microsoft 365 Copilot Steals Personal Data

Do Son August 28, 2024 0

Discover the critical vulnerability in Microsoft Copilot, the AI-powered assistant in Microsoft 365, that poses significant risks to data security.

BlackByte Ransomware Group Exploits VMware CVE-2024-37085 Flaw, Shifts Tactics BlackByte Ransomware Group
  • Cyber Security

BlackByte Ransomware Group Exploits VMware CVE-2024-37085 Flaw, Shifts Tactics

Do Son August 28, 2024 0

Discover the evolving capabilities of the BlackByte ransomware group. Understand the urgent need for robust cybersecurity defenses to mitigate the risk.

“Unicode QR Code Phishing”: The New Threat You Need to Know Unicode QR Code Phishing
  • Cyber Security

“Unicode QR Code Phishing”: The New Threat You Need to Know

Do Son August 28, 2024 0

Stay informed about Unicode QR Code Phishing and its threats to your online safety. Discover strategies to defend against this growing cyber threat.

AI-Powered Cyberattacks: Greasy Opal Bypasses CAPTCHA, Threatens User Accounts Greasy Opal
  • Cyber Security

AI-Powered Cyberattacks: Greasy Opal Bypasses CAPTCHA, Threatens User Accounts

Do Son August 28, 2024 0

Discover how Greasy Opal is being used in cyber attacks to bypass CAPTCHA systems and create millions of fake accounts.

Mallox Unleashed: Inside a Cloud Ransomware Attack Mallox ransomware attack
  • Malware

Mallox Unleashed: Inside a Cloud Ransomware Attack

Do Son August 28, 2024 0

Explore the details of the Mallox ransomware attack that exposed the vulnerabilities of a misconfigured cloud server.

ESET Uncovers Zero-Day Vulnerabilities in WPS Office, Exploited by APT-C-60 Overview of the exploit’s control flow
  • Cyber Security
  • Vulnerability

ESET Uncovers Zero-Day Vulnerabilities in WPS Office, Exploited by APT-C-60

Do Son August 28, 2024 0

Find out how the APT-C-60 cyberespionage group exploits vulnerabilities in WPS Office for Windows to compromise millions of users.

WineHQ Takes Helm of Mono Project, Ensuring Linux-Windows Compatibility Mono Project
  • Technology

WineHQ Takes Helm of Mono Project, Ensuring Linux-Windows Compatibility

Do Son August 28, 2024 0

Learn about the history and transfer of the Mono project from Microsoft to Wine. Discover how this open-source implementation of .NET framework is evolving.

Angler Exploit Kit Architect Wanted: U.S. Puts $2.5M Bounty on Belarusian Cybercriminal Angler Exploit Kit - Volodymyr Kadariya
  • Cyber Security

Angler Exploit Kit Architect Wanted: U.S. Puts $2.5M Bounty on Belarusian Cybercriminal

Do Son August 27, 2024 0

Learn about the notorious Angler Exploit Kit and its role in spreading malware across millions of computers worldwide.

Cryptojacking Campaign Exploits Atlassian Confluence CVE-2023-22527 Vulnerability Cryptojacking Campaign - CVE-2023-22527 Vulnerability
  • Malware
  • Vulnerability

Cryptojacking Campaign Exploits Atlassian Confluence CVE-2023-22527 Vulnerability

Do Son August 27, 2024 0

Learn about the critical vulnerability CVE-2023-22527 in Atlassian Confluence. Find out how attackers exploit the flaw for cryptocurrency mining.

Intel SGX Security Compromised: Root Provisioning Key Extracted Root Provisioning Key - Intel SGX
  • Vulnerability

Intel SGX Security Compromised: Root Provisioning Key Extracted

Do Son August 27, 2024 0

Discover the latest findings in Intel SGX technology. Learn about the extraction of Intel's SGX Fuse Key0 and its implications for secure data processing.

CVE-2024-6633 (CVSS 9.8): Critical Flaw in Fortra FileCatalyst Workflow FileCatalyst Workflow CVE-2024-6633
  • Vulnerability

CVE-2024-6633 (CVSS 9.8): Critical Flaw in Fortra FileCatalyst Workflow

Do Son August 27, 2024 0

Critical flaws in FileCatalyst Workflow pose a significant risk to sensitive data and systems. Learn about CVE-2024-6633 and CVE-2024-6632

Poortry EDR Killer Evolves, Now Wipes Security Software From Windows Systems Poortry EDR Killer
  • Malware

Poortry EDR Killer Evolves, Now Wipes Security Software From Windows Systems

Do Son August 27, 2024 0

Explore the threat of Poortry: a malicious toolset designed to undermine endpoint detection and response (EDR) software on Windows systems. Learn how it bypasses security measures and adapts to evade detection.

PoC Exploit Released for Arbitrary File Write Flaw (CVE-2024-22263) in Spring Cloud Data Flow CVE-2024-22263 exploit
  • Vulnerability

PoC Exploit Released for Arbitrary File Write Flaw (CVE-2024-22263) in Spring Cloud Data Flow

Do Son August 27, 2024 0

Stay informed about the security risks posed by the CVE-2024-22263 exploit in Spring Cloud Data Flow and take necessary precautions.

SSN, Banking Details at Risk in Major Texas Credit Union Breach TDECU data breach
  • Data Leak

SSN, Banking Details at Risk in Major Texas Credit Union Breach

Do Son August 27, 2024 0

TDECU, the largest credit union in Texas, reports a significant data breach affecting over 500,000 individuals. Find out what happened and how it may impact you.

macOS Backdoor “HZ Rat” Targets Users of DingTalk and WeChat HZ Rat backdoor
  • Malware

macOS Backdoor “HZ Rat” Targets Users of DingTalk and WeChat

Do Son August 27, 2024 0

Learn about the emergence of HZ Rat backdoor on macOS, targeting DingTalk and WeChat users. Stay vigilant against this new threat.

CVE-2024-7988 (CVSS 9.8): Rockwell Automation’s ThinManager Flaw Allows RCE Rockwell Automation ThinManager ThinServer CVE-2024-7988 CVE-2025-1449
  • Vulnerability

CVE-2024-7988 (CVSS 9.8): Rockwell Automation’s ThinManager Flaw Allows RCE

Do Son August 27, 2024 0

Protect your systems from critical vulnerabilities in Rockwell Automation's ThinManager ThinServer software. Learn about the risks posed by CVE-2024-7988 and the urgent need for patching.

❮ Prev Page
Next Page ❯

Search

CVE ALERTS
📈

EPSS Spike Alerts
Catch risk spikes before they make headlines.

🎯

Custom EPSS/CVSS
Set score thresholds to effectively filter noise.

🛡️

Exploit Intel
Real-world exploit signals beyond the KEV catalog.

🐙

GitHub Issues
Auto-create alert tickets without duplication.

📬

Weekly Digest
Clean summaries, eliminating email spam.

🏷️

Watchlist Groups
Tag vulnerabilities by team (Infra/AppSec/SOC).

🔀

Smart Routing
Route chat channels based on severity levels.

🚨

RBP Tracker
Early warning detection and tracking system.

Subscribe – $7/mo or try free for 14 days →

🚨 Active Exploits in the Wild

  • CVE-2026-20320CVSS 7.5
    A vulnerability in the Open Client Interface (OCI) XML Parser of Cisco BroadWorks could allow an unauthenticated, remote...
    CISA KEV📅 Added to KEV: Nov 10, 2026
  • CVE-2026-111793CVSS 4.3
    Openwave Webtop Media Transcoder does not enforce administrator-defined file type restrictions to restrict the file-types to be converted....
    CISA KEV📅 Added to KEV: Nov 10, 2026
  • CVE-2026-111560CVSS 8.6
    Improper neutralization of shell metacharacters in the timezone configuration field in certain Barracuda appliance products using common Barracuda...
    CISA KEV📅 Added to KEV: Nov 10, 2026
  • CVE-2026-116606CVSS 9.3
    An authentication bypass in Barracuda Email Security Gateway versions earlier than 9.4.0.030 allows an unauthenticated remote attacker to...
    CISA KEV📅 Added to KEV: Nov 10, 2026
  • CVE-2026-125350
    Use after free in XML. Reported by anonymous on 2026-11-06. Google is aware that an exploit for CVE-2026-125350...
    CISA KEV📅 Added to KEV: Nov 10, 2026
  • CVE-2026-124194CVSS 6.5
    Product ui does not warn user of unsafe actions in Microsoft Office Outlook allows an unauthorized attacker to...
    CISA KEV📅 Added to KEV: Nov 10, 2026
  • CVE-2026-123751CVSS 9.8
    The WP Duplicate WordPress plugin through 1.1.11 does not properly verify a request authentication value and does not...
    Watchtower Verified📅 Updated: Nov 9, 2026
  • CVE-2026-114713CVSS 8.6
    The labeled-response module in UnrealIRCd 6.0.0 before 6.2.7.1 does not escape the IRCv3 "label" message tag when echoing...
    Admin intel📅 Updated: Nov 9, 2026
Powered by CVE Watchtower

Critical Vulnerabilities

  • CVE-2026-114160CVSS 9.8
    Server-side request forgery (ssrf) in Azure Managed Grafana allows an unauthorized attacker to elevate privileges over a network.
    📅 Updated: Nov 11, 2026
  • CVE-2026-109469CVSS 10.0
    Authorization bypass through user-controlled key in Entra Device Registration allows an unauthorized attacker to elevate privileges over a...
    📅 Updated: Nov 11, 2026
  • CVE-2026-101763CVSS 9.8
    Vulnerability in the Oracle Communications BRM - Elastic Charging Engine product of Oracle Communications (component: Cloud native deployment)....
    📅 Updated: Nov 11, 2026
  • CVE-2026-101809CVSS 10.0
    Vulnerability in the Workflow product of Oracle E-Business Suite (component: Workflow Notification Mailer). Supported versions that are affected...
    📅 Updated: Nov 11, 2026
  • CVE-2026-126253CVSS 9.3
    An Authentication Bypass by Primary Weakness vulnerability [cwe-305] in FortiOS and FortiSASE ospf daemon may allow an unauthenticated...
    📅 Updated: Nov 11, 2026
  • CVE-2026-126170CVSS 9.8
    An Improper Encoding or Escaping of Output vulnerability [CWE-116] in FortiSASE-Sovereign, FortiAnalyzer, FortiManager, FortiAnalyzer Cloud, FortiManager Cloud and...
    📅 Updated: Nov 11, 2026
  • CVE-2026-91220CVSS 9.8
    Vulnerability in the Oracle Business Process Management Suite product of Oracle Fusion Middleware (component: Human Workflow). Supported versions...
    📅 Updated: Nov 11, 2026
  • CVE-2026-91222CVSS 9.9
    Vulnerability in the Oracle Business Process Management Suite product of Oracle Fusion Middleware (component: Human Workflow (11g+)). Supported...
    📅 Updated: Nov 11, 2026
Powered by CVE Watchtower

Daily CyberSecurity

  • About SecurityOnline.info
  • Advertise with us
  • Announcement
  • Contact
  • Contributor Register
  • Login
  • Disclaimer
  • DCMA
  • Privacy Policy
  • About SecurityOnline.info
  • Advertise on SecurityOnline.info
  • Contact Us

When you purchase through links on our site, we may earn an affiliate commission. Here’s how it works

  • CVE Watchtower
  • CVE Statistics by Vendor 2026
  • Q3 2026 Report
  • Top Exploited CVEs
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube
© 2017 - 2026 Daily CyberSecurity. All Rights Reserved.