Skip to content
November 11, 2026
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube

Daily CyberSecurity

Zero-hour alerts. Unmatched analysis.

Primary Menu
  • Home
  • CVE Data
    • CVE Watchtower
    • Top Exploited CVEs
    • CVE Stats by Vendor
    • Q2 2026 Report
    • CVE Alerts
    • CVE Alert Settings
    • Pricing
  • Cyber Criminals
  • Data Leak
  • Free Tools
    • CVSS 3.1 Calculator
    • Certificate Viewer
    • DNS Lookup
    • Encoder & Hash Generator
    • IP / Subnet Calculator
    • Whois Lookup
  • Linux
  • Malware
  • Vulnerability
  • Submit Press Release
Light/Dark Button
JS#SMUGGLER Malware Evades EDR Using “Junk Code” JavaScript and Fileless PowerShell to Deploy NetSupport RAT JS#SMUGGLER, Junk Code Obfuscation
  • Malware

JS#SMUGGLER Malware Evades EDR Using “Junk Code” JavaScript and Fileless PowerShell to Deploy NetSupport RAT

Do Son December 9, 2025 0
A sophisticated new malware campaign has been uncovered targeting enterprise users through compromised websites, employing a complex...
Read More Read more about JS#SMUGGLER Malware Evades EDR Using “Junk Code” JavaScript and Fileless PowerShell to Deploy NetSupport RAT
Sophisticated CastleRAT Backdoor Uses Steam Community Pages as Covert C2 Resolver for Espionage CastleRAT, Steam C2 Resolver
  • Malware

Sophisticated CastleRAT Backdoor Uses Steam Community Pages as Covert C2 Resolver for Espionage

Do Son December 9, 2025 0
A sophisticated new Remote Access Trojan (RAT) has emerged, blending stealthy execution with powerful data theft capabilities...
Read More Read more about Sophisticated CastleRAT Backdoor Uses Steam Community Pages as Covert C2 Resolver for Espionage
LockBit 5.0 Resurfaces Stronger: New Variant Blinds Defenders by Disabling Windows ETW for Stealth Encryption LockBit LockBit 5.0 Resurgence, ETW Blinding Ransomware
  • Malware

LockBit 5.0 Resurfaces Stronger: New Variant Blinds Defenders by Disabling Windows ETW for Stealth Encryption

Do Son December 9, 2025 0
Just eighteen months ago, the cybersecurity world celebrated “Operation Cronos,” a massive law enforcement crackdown that promised...
Read More Read more about LockBit 5.0 Resurfaces Stronger: New Variant Blinds Defenders by Disabling Windows ETW for Stealth Encryption
AI Clutter Solved? Windows 11 Adds Setting to Disable AI Actions in File Explorer Menu Windows 11 AI Clutter File Explorer Context Menu
  • Windows

AI Clutter Solved? Windows 11 Adds Setting to Disable AI Actions in File Explorer Menu

Do Son December 9, 2025 0
Microsoft is currently weaving a wide array of AI capabilities into Windows 11. Notepad, for instance, has...
Read More Read more about AI Clutter Solved? Windows 11 Adds Setting to Disable AI Actions in File Explorer Menu
Google Antitrust Remedy: Judge Limits Default Search Contracts to One-Year Term Low carbon cloud computing Smartphone clusters, Green technology, Data centers, Google research Google Agentic AI search G Suite legacy free commercial reclassification 2026 Agent Payments Protocol AP2 Back-Button Hijacking Google Search AI headlines Google Play Store fee reduction Google Antigravity account recovery Google Advanced Air-Cooling Alphabet $185 billion CapEx 2026 Google Aluminum OS 2026 ai-disclosure HTML attribute, Chrome AI content transparency 2026 Google monopoly appeal 2026, Search data sharing stay Change @gmail.com address, Gmail email alias feature 2025 Google Play Store external download fees, Epic vs Google 2026 billing Google Dark Web Report Retirement, Data Breach Monitoring Google Antitrust One-Year Limit Default Search Contract Term Google AI Headlines Discover Headline Distortion Aluminium OS Android ChromeOS Merge Google Accelerator Impact $31.2 Billion Funding Google Texas Investment AI Data Center Expansion Google Play payments, external billing Gmail HIBP leak Privacy Sandbox Termination, Third-Party Cookies Google Strategic Market Status, CMA Antitrust ICEBlock Removal, DOJ Pressure Google Logo, AI Branding
  • Technology

Google Antitrust Remedy: Judge Limits Default Search Contracts to One-Year Term

Do Son December 9, 2025 0
In response to the U.S. Department of Justice’s antitrust lawsuit against Google, federal judge Amit Mehta has...
Read More Read more about Google Antitrust Remedy: Judge Limits Default Search Contracts to One-Year Term
INE Earns G2 Winter 2026 Badges Across Global Markets Blog___December_2025___INE_Earns_7_G2_Winter_Badge_1764797523pLmOEXCSvc
  • Press Release

INE Earns G2 Winter 2026 Badges Across Global Markets

cybernewswire December 8, 2025 0
Cary, North Carolina, USA, 8th December 2025, CyberNewsWire
Read More Read more about INE Earns G2 Winter 2026 Badges Across Global Markets
Windows 11 Agenda View is Back, But Built on WebView 2 with Performance Overhead Windows 11 Agenda WebView 2 Performance vs. Copilot Windows 11 Search, Image Previews
  • Windows

Windows 11 Agenda View is Back, But Built on WebView 2 with Performance Overhead

Do Son December 8, 2025 0
Windows 10 once offered a calendar agenda view within the Action Center, allowing users to add and...
Read More Read more about Windows 11 Agenda View is Back, But Built on WebView 2 with Performance Overhead
Pixel Phone Turns into Webcam for Nintendo Switch 2 via USB, No Accessory Needed Pixel Switch 2 Webcam Google UVC Fix Pixel 10, Google Store Teaser
  • Android

Pixel Phone Turns into Webcam for Nintendo Switch 2 via USB, No Accessory Needed

Do Son December 8, 2025 0
For players who have already purchased a Nintendo Switch 2, the absence of a built-in camera typically...
Read More Read more about Pixel Phone Turns into Webcam for Nintendo Switch 2 via USB, No Accessory Needed
Meta Reverses Course: Strikes Deals with CNN, Le Monde to Feed Licensed News to Meta AI Instagram account recovery flaw Meta incident notification Meta AI data center Louisiana Meta AI news partnerships Meta AI Shopping Assistant Meta Vibes standalone app Meta Oversight Board account ban, Instagram permanent suspension review Meta Compute initiative 2026, personal superintelligence nuclear power Meta AI News Licensing Publisher Content Deal Meta Project Mercury Omnilingual ASR 1600 Languages Meta $600B Investment, AI Data Centers Meta AI strategy, Llama models Meta AI Glasses, Smart Glasses
  • Technology

Meta Reverses Course: Strikes Deals with CNN, Le Monde to Feed Licensed News to Meta AI

Do Son December 8, 2025 0
To keep its AI chatbot from remaining “out of the loop” on current affairs, Meta appears to...
Read More Read more about Meta Reverses Course: Strikes Deals with CNN, Le Monde to Feed Licensed News to Meta AI
EU Fines X €120 Million for DSA Violation Over ‘Deceptive’ Blue Check Verification X DSA Fine Blue Check Deceptive Design
  • Technology

EU Fines X €120 Million for DSA Violation Over ‘Deceptive’ Blue Check Verification

Do Son December 8, 2025 0
The European Commission has recently imposed a substantial penalty on X for violating the Digital Services Act...
Read More Read more about EU Fines X €120 Million for DSA Violation Over ‘Deceptive’ Blue Check Verification
❮ Prev Page
Next Page ❯
Symantec Exposes Widespread Mobile App Privacy Risks: Popular Apps Leak Sensitive Data Mobile App Vulnerabilities
  • Data Leak
  • Vulnerability

Symantec Exposes Widespread Mobile App Privacy Risks: Popular Apps Leak Sensitive Data

Do Son August 27, 2024 0

Protect your personal information from potential cyber threats. Learn about the vulnerabilities in popular mobile apps and how to stay safe.

Bling Libra’s Tactical Evolution: Exploiting Cloud Misconfigurations for Extortion Bling Libra
  • Cyber Security

Bling Libra’s Tactical Evolution: Exploiting Cloud Misconfigurations for Extortion

Do Son August 27, 2024 0

Uncover the evolution of Bling Libra, a threat actor group. See how they have transitioned from data breaches to extortion in cloud environments.

SonicWall Warns: New Malware Targets Gmail Extracted script contents
  • Malware

SonicWall Warns: New Malware Targets Gmail

Do Son August 27, 2024 0

Protect your Gmail account from malware attacks. Learn about a newly discovered executable that targets Gmail and compromises user accounts.

CISA Warns of Actively Exploited Apache OFBiz CVE-2024-38856 Vulnerability, PoC Available CVE-2024-38856 Apache OFBiz vulnerability
  • Vulnerability

CISA Warns of Actively Exploited Apache OFBiz CVE-2024-38856 Vulnerability, PoC Available

Do Son August 27, 2024 0

Urgent warning: Apache OFBiz vulnerability CVE-2024-38856 poses a severe risk to outdated systems. Protect your organization now!

Chinese Hackers Deploy VersaMem Web Shell via Versa Director Zero-Day (CVE-2024-39717) VersaMem web shell
  • Cyber Security
  • Malware
  • Vulnerability

Chinese Hackers Deploy VersaMem Web Shell via Versa Director Zero-Day (CVE-2024-39717)

Do Son August 27, 2024 0

The VersaMem web shell, uncovered by Black Lotus Labs, is a sophisticated tool specifically designed to exploit Versa Director servers

Linux Leaps to Record 4.44% Market Share: Open-Source OS Hits All-Time High in July French Digital Sovereignty Greg Kroah-Hartman AI code review CVE-2025-38352 Linux kernel exploit, Android 32-bit UAF vulnerability CVE-2022-36946 Linux Kernel 6.16, Hardware Support
  • Linux

Linux Leaps to Record 4.44% Market Share: Open-Source OS Hits All-Time High in July

Do Son August 27, 2024 0

Discover the latest statistics on Linux market share. See how it has reached an unprecedented 4.44% in July and the reasons behind its growth.

CVE-2024-31214 & CVE-2024-24809: Traccar Users Urged to Update Immediately CVE-2024-24809 & CVE-2024-31214 Traccar
  • Vulnerability

CVE-2024-31214 & CVE-2024-24809: Traccar Users Urged to Update Immediately

Do Son August 27, 2024 0

Learn about two critical vulnerabilities found in Traccar, a popular GPS tracking system. Discover how these vulnerabilities could lead to remote code execution.

Argentina Busts Crypto Ring Linked to North Korea, Seizes Millions Romanian hacker sentenced identity theft conviction Pig-Butchering Crackdown Operation Level Up Oleksandr Didenko North Korean IT Workers Coinbase TaskUs insider breach, Hyderabad police Coinbase arrest Scattered Spider, Cybercrime Scattered Spider group
  • Cyber Security

Argentina Busts Crypto Ring Linked to North Korea, Seizes Millions

Do Son August 27, 2024 0

Exploring the connection between a suspected North Korean hacker, stolen crypto assets, and an illegal financial organization uncovered in Argentina.

CVE-2024-42531 (CVSS 9.8): Ezviz Camera Flaw Exposes Live Feeds to Unauthenticated Access CVE-2024-42531 Ezviz Internet PT Camera
  • Vulnerability

CVE-2024-42531 (CVSS 9.8): Ezviz Camera Flaw Exposes Live Feeds to Unauthenticated Access

Do Son August 26, 2024 0

A critical vulnerability, identified as CVE-2024-42531 and rated with a CVSS score of 9.8 (Critical), has been discovered in the Ezviz Camera

Zero-Click Windows RCE Threat: Researcher Publishes PoC Exploit for CVE-2024-38063 CVE-2024-38063 PoC exploit
  • Vulnerability

Zero-Click Windows RCE Threat: Researcher Publishes PoC Exploit for CVE-2024-38063

Do Son August 26, 2024 0

Security researcher Ynwarcs has published an in-depth analysis and PoC exploit code for a critical zero-click CVE-2024-38063

Pidgin Users Beware! Malicious Plugin Discovered with Keylogger Pidgin Keylogger
  • Malware

Pidgin Users Beware! Malicious Plugin Discovered with Keylogger

Do Son August 26, 2024 0

Learn about the recent Pidgin keylogger incident and the risks associated with third-party plugins. Stay informed and protect your online privacy.

CVE-2024-6386 (CVSS 9.9) in WPML Plugin Exposes Millions of WordPress Sites to RCE Attacks CVE-2024-6386
  • Vulnerability

CVE-2024-6386 (CVSS 9.9) in WPML Plugin Exposes Millions of WordPress Sites to RCE Attacks

Do Son August 26, 2024 0

Learn about the severe security flaw (CVE-2024-6386) in WPML plugin for WordPress and its potential risks to over one million websites.

Exploitation of URL Rewriting: A New Phishing Paradigm Threatens Cybersecurity URL rewriting
  • Cyber Security

Exploitation of URL Rewriting: A New Phishing Paradigm Threatens Cybersecurity

Do Son August 26, 2024 0

Uncover the dark side of URL rewriting: Cybercriminals are exploiting this security mechanism, leading to a surge in sophisticated phishing attacks.

Google Chrome Faces Double Blow with New Zero-Day Flaw Exploits: CVE-2024-7965 and CVE-2024-7971 CVE-2024-7965
  • Vulnerability

Google Chrome Faces Double Blow with New Zero-Day Flaw Exploits: CVE-2024-7965 and CVE-2024-7971

Do Son August 26, 2024 0

Stay updated on the latest security news: Google reveals active exploitation of CVE-2024-7965, a high-severity zero-day vulnerability in Chrome.

Iranian Hackers Target US Politicians on Meta Platforms
  • Cyber Security

Iranian Hackers Target US Politicians on Meta Platforms

Do Son August 26, 2024 0

Discover the attempted hacking of American officials' accounts by hacker group APT42. Meta uncovers the use of sophisticated social engineering tactics.

Digital Wallets: Unveiling Critical Security Risks Digital Wallet
  • Vulnerability

Digital Wallets: Unveiling Critical Security Risks

Do Son August 26, 2024 0

Uncover the vulnerabilities in major digital wallet systems. Discover how stolen and canceled payment cards can be used for unauthorized transactions.

Firefox Klar’s Quiet Change: Adjust Removed Amidst Privacy Concerns Firefox Klar Adjust
  • Technology

Firefox Klar’s Quiet Change: Adjust Removed Amidst Privacy Concerns

Do Son August 26, 2024 0

Mozilla removes Adjust integration from Firefox and Firefox Klar browsers for Android and iOS. Learn why and how it impacts marketing campaigns.

Centreon Issues Critical Security Update: SQL Injection Vulnerabilities Threaten IT Monitoring Centreon RCE CVE-2026-2749 CVE-2024-33852 & CVE-2024-33853 Centreon Web
  • Vulnerability

Centreon Issues Critical Security Update: SQL Injection Vulnerabilities Threaten IT Monitoring

Do Son August 26, 2024 0

Centreon issued a critical security bulletin addressing multiple SQLi flaws (CVE-2024-33852 & CVE-2024-33853) in its Centreon Web interface

Uber Hit with €290 Million GDPR Fine by Dutch DPA Uber GDPR
  • Technology

Uber Hit with €290 Million GDPR Fine by Dutch DPA

Do Son August 26, 2024 0

Uber fined €290 million by Dutch privacy regulator for GDPR violation: unlawfully transferring European driver data to US servers.

ARRL Confirms $1 Million Ransom Payment Following May Attack ARRL ransomware attack
  • Cyber Security
  • Data Leak

ARRL Confirms $1 Million Ransom Payment Following May Attack

Do Son August 26, 2024 0

ARRL pays $1 million ransom following ransomware attack. Learn about the cyberattack on the American Radio Relay League's systems and the measures taken to prevent further spread of the threat.

Hillstone Networks Addresses Critical RCE Vulnerability in WAF (CVE-2024-8073, CVSS 9.8) CVE-2024-8073 Hillstone Networks Web Application Firewall
  • Vulnerability

Hillstone Networks Addresses Critical RCE Vulnerability in WAF (CVE-2024-8073, CVSS 9.8)

Do Son August 26, 2024 0

Hillstone Networks' Web Application Firewall (WAF) is at risk. Learn about the CVE-2024-8073 vulnerability and how to protect your system.

Windows Endpoint Security Summit: Microsoft and CrowdStrike Unite to Protect Critical Infrastructure Windows Endpoint Security
  • Technology

Windows Endpoint Security Summit: Microsoft and CrowdStrike Unite to Protect Critical Infrastructure

Do Son August 26, 2024 0

Discover key insights from the CrowdStrike incident and the Windows Endpoint Security Ecosystem Summit. Learn about industry-wide measures to enhance security.

❮ Prev Page
Next Page ❯

Search

CVE ALERTS
📈

EPSS Spike Alerts
Catch risk spikes before they make headlines.

🎯

Custom EPSS/CVSS
Set score thresholds to effectively filter noise.

🛡️

Exploit Intel
Real-world exploit signals beyond the KEV catalog.

🐙

GitHub Issues
Auto-create alert tickets without duplication.

📬

Weekly Digest
Clean summaries, eliminating email spam.

🏷️

Watchlist Groups
Tag vulnerabilities by team (Infra/AppSec/SOC).

🔀

Smart Routing
Route chat channels based on severity levels.

🚨

RBP Tracker
Early warning detection and tracking system.

Subscribe – $7/mo or try free for 14 days →

🚨 Active Exploits in the Wild

  • CVE-2026-20320CVSS 7.5
    A vulnerability in the Open Client Interface (OCI) XML Parser of Cisco BroadWorks could allow an unauthenticated, remote...
    CISA KEV📅 Added to KEV: Nov 10, 2026
  • CVE-2026-111793CVSS 4.3
    Openwave Webtop Media Transcoder does not enforce administrator-defined file type restrictions to restrict the file-types to be converted....
    CISA KEV📅 Added to KEV: Nov 10, 2026
  • CVE-2026-111560CVSS 8.6
    Improper neutralization of shell metacharacters in the timezone configuration field in certain Barracuda appliance products using common Barracuda...
    CISA KEV📅 Added to KEV: Nov 10, 2026
  • CVE-2026-116606CVSS 9.3
    An authentication bypass in Barracuda Email Security Gateway versions earlier than 9.4.0.030 allows an unauthenticated remote attacker to...
    CISA KEV📅 Added to KEV: Nov 10, 2026
  • CVE-2026-125350
    Use after free in XML. Reported by anonymous on 2026-11-06. Google is aware that an exploit for CVE-2026-125350...
    CISA KEV📅 Added to KEV: Nov 10, 2026
  • CVE-2026-124194CVSS 6.5
    Product ui does not warn user of unsafe actions in Microsoft Office Outlook allows an unauthorized attacker to...
    CISA KEV📅 Added to KEV: Nov 10, 2026
  • CVE-2026-123751CVSS 9.8
    The WP Duplicate WordPress plugin through 1.1.11 does not properly verify a request authentication value and does not...
    Watchtower Verified📅 Updated: Nov 9, 2026
  • CVE-2026-114713CVSS 8.6
    The labeled-response module in UnrealIRCd 6.0.0 before 6.2.7.1 does not escape the IRCv3 "label" message tag when echoing...
    Admin intel📅 Updated: Nov 9, 2026
Powered by CVE Watchtower

Critical Vulnerabilities

  • CVE-2026-114160CVSS 9.8
    Server-side request forgery (ssrf) in Azure Managed Grafana allows an unauthorized attacker to elevate privileges over a network.
    📅 Updated: Nov 11, 2026
  • CVE-2026-109469CVSS 10.0
    Authorization bypass through user-controlled key in Entra Device Registration allows an unauthorized attacker to elevate privileges over a...
    📅 Updated: Nov 11, 2026
  • CVE-2026-101763CVSS 9.8
    Vulnerability in the Oracle Communications BRM - Elastic Charging Engine product of Oracle Communications (component: Cloud native deployment)....
    📅 Updated: Nov 11, 2026
  • CVE-2026-101809CVSS 10.0
    Vulnerability in the Workflow product of Oracle E-Business Suite (component: Workflow Notification Mailer). Supported versions that are affected...
    📅 Updated: Nov 11, 2026
  • CVE-2026-126253CVSS 9.3
    An Authentication Bypass by Primary Weakness vulnerability [cwe-305] in FortiOS and FortiSASE ospf daemon may allow an unauthenticated...
    📅 Updated: Nov 11, 2026
  • CVE-2026-126170CVSS 9.8
    An Improper Encoding or Escaping of Output vulnerability [CWE-116] in FortiSASE-Sovereign, FortiAnalyzer, FortiManager, FortiAnalyzer Cloud, FortiManager Cloud and...
    📅 Updated: Nov 11, 2026
  • CVE-2026-91220CVSS 9.8
    Vulnerability in the Oracle Business Process Management Suite product of Oracle Fusion Middleware (component: Human Workflow). Supported versions...
    📅 Updated: Nov 11, 2026
  • CVE-2026-91222CVSS 9.9
    Vulnerability in the Oracle Business Process Management Suite product of Oracle Fusion Middleware (component: Human Workflow (11g+)). Supported...
    📅 Updated: Nov 11, 2026
Powered by CVE Watchtower

Daily CyberSecurity

  • About SecurityOnline.info
  • Advertise with us
  • Announcement
  • Contact
  • Contributor Register
  • Login
  • Disclaimer
  • DCMA
  • Privacy Policy
  • About SecurityOnline.info
  • Advertise on SecurityOnline.info
  • Contact Us

When you purchase through links on our site, we may earn an affiliate commission. Here’s how it works

  • CVE Watchtower
  • CVE Statistics by Vendor 2026
  • Q3 2026 Report
  • Top Exploited CVEs
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube
© 2017 - 2026 Daily CyberSecurity. All Rights Reserved.