Skip to content
November 11, 2026
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube

Daily CyberSecurity

Zero-hour alerts. Unmatched analysis.

Primary Menu
  • Home
  • CVE Data
    • CVE Watchtower
    • Top Exploited CVEs
    • CVE Stats by Vendor
    • Q2 2026 Report
    • CVE Alerts
    • CVE Alert Settings
    • Pricing
  • Cyber Criminals
  • Data Leak
  • Free Tools
    • CVSS 3.1 Calculator
    • Certificate Viewer
    • DNS Lookup
    • Encoder & Hash Generator
    • IP / Subnet Calculator
    • Whois Lookup
  • Linux
  • Malware
  • Vulnerability
  • Submit Press Release
Light/Dark Button
Meta Fixes ‘Broken’ Support: Rolling Out AI Assistants and New Recovery Hubs Meta AI Support Hacked Account Recovery
  • Technology

Meta Fixes ‘Broken’ Support: Rolling Out AI Assistants and New Recovery Hubs

Do Son December 8, 2025 0
Many people have endured the nightmare of having their Facebook or Instagram accounts hacked or locked, only...
Read More Read more about Meta Fixes ‘Broken’ Support: Rolling Out AI Assistants and New Recovery Hubs
PoC Available: Bluetooth Flaw Risks DoS Crash on Smart Cars and Wear OS BlueShrimp, Android Automotive UAF
  • Vulnerability

PoC Available: Bluetooth Flaw Risks DoS Crash on Smart Cars and Wear OS

Do Son December 8, 2025 0
While most Android users can breathe a sigh of relief, a newly analyzed Bluetooth vulnerability presents a...
Read More Read more about PoC Available: Bluetooth Flaw Risks DoS Crash on Smart Cars and Wear OS
High-Severity Duc Disk Tool Flaw (CVE-2025-13654) Risks DoS and Information Leak via Integer Underflow Duc Buffer Overflow, Linux Disk Tool Flaw
  • Vulnerability Report

High-Severity Duc Disk Tool Flaw (CVE-2025-13654) Risks DoS and Information Leak via Integer Underflow

Do Son December 8, 2025 0
A stack-based buffer overflow vulnerability has been discovered in Duc, a popular open-source tool used for indexing...
Read More Read more about High-Severity Duc Disk Tool Flaw (CVE-2025-13654) Risks DoS and Information Leak via Integer Underflow
“SeedSnatcher” Android Malware Targets Crypto Users, Using Overlay Phishing and BIP 39 Validation to Steal Seed Phrases SeedSnatcher Crypto Malware, Android Overlay Phishing
  • Malware

“SeedSnatcher” Android Malware Targets Crypto Users, Using Overlay Phishing and BIP 39 Validation to Steal Seed Phrases

Do Son December 8, 2025 0
A dangerous new Android malware campaign dubbed “SeedSnatcher” is actively targeting cryptocurrency users by masquerading as a...
Read More Read more about “SeedSnatcher” Android Malware Targets Crypto Users, Using Overlay Phishing and BIP 39 Validation to Steal Seed Phrases
Russian APT UTA0355 Steals Microsoft 365 OAuth Tokens via Fake Security Conference Lures and WhatsApp Support UTA0355 OAuth Phishing, Fake Conference Lure
  • Cyber Security

Russian APT UTA0355 Steals Microsoft 365 OAuth Tokens via Fake Security Conference Lures and WhatsApp Support

Do Son December 8, 2025 0
A sophisticated Russian threat actor, tracked as UTA0355, has launched a targeted phishing campaign impersonating prestigious international...
Read More Read more about Russian APT UTA0355 Steals Microsoft 365 OAuth Tokens via Fake Security Conference Lures and WhatsApp Support
Stealth Supply Chain Attack: Malicious Rust Crate Used Unpinned Dependency for Silent Payload Upgrades Rust Typosquatting, Unpinned Dependency Attack
  • Malware

Stealth Supply Chain Attack: Malicious Rust Crate Used Unpinned Dependency for Silent Payload Upgrades

Do Son December 8, 2025 0
A popular bioinformatics tool became the latest lure in a software supply chain attack, as threat actors...
Read More Read more about Stealth Supply Chain Attack: Malicious Rust Crate Used Unpinned Dependency for Silent Payload Upgrades
CISA/NSA Warn of BRICKSTORM Backdoor: China APT Targets VMware and ADFS for Long-Term Espionage BRICKSTORM Backdoor, VMware Espionage
  • Malware

CISA/NSA Warn of BRICKSTORM Backdoor: China APT Targets VMware and ADFS for Long-Term Espionage

Do Son December 8, 2025 0
A new and sophisticated malware threat has emerged from the shadows of state-sponsored cyber espionage. The Cybersecurity...
Read More Read more about CISA/NSA Warn of BRICKSTORM Backdoor: China APT Targets VMware and ADFS for Long-Term Espionage
High-Severity lz4-java Flaw (CVE-2025-66566) Leaks Uninitialized Memory During Decompression lz4-java Out-of-bounds Read, Library EOL
  • Vulnerability Report

High-Severity lz4-java Flaw (CVE-2025-66566) Leaks Uninitialized Memory During Decompression

Do Son December 8, 2025 0
A high-severity vulnerability has been unearthed in lz4-java, a widely used Java library for the LZ4 compression...
Read More Read more about High-Severity lz4-java Flaw (CVE-2025-66566) Leaks Uninitialized Memory During Decompression
Critical Cal.com Flaw (CVE-2025-66489, CVSS 9.9) Allows Authentication Bypass by Submitting Fake TOTP Codes Cal.com Vulnerability CVE-2026-23478 Cal.com Auth Bypass, TOTP Logic Flaw
  • Vulnerability Report

Critical Cal.com Flaw (CVE-2025-66489, CVSS 9.9) Allows Authentication Bypass by Submitting Fake TOTP Codes

Do Son December 8, 2025 0
A severe security vulnerability has been uncovered in Cal.com, the popular open-source scheduling platform positioned as the...
Read More Read more about Critical Cal.com Flaw (CVE-2025-66489, CVSS 9.9) Allows Authentication Bypass by Submitting Fake TOTP Codes
High-Severity WatchGuard Flaws Risk VPN DoS and RCE via IKEv2 Memory Corruption WatchGuard Agent Privilege Escalation CVE-2026-6787 WatchGuard Vulnerability CVE-2026-1498 WatchGuard Firebox VPN Flaws, Command Injection WatchGuard Vulnerability CVE-2024-6592 and CVE-2024-6593
  • Vulnerability Report

High-Severity WatchGuard Flaws Risk VPN DoS and RCE via IKEv2 Memory Corruption

Do Son December 8, 2025 0
WatchGuard Technologies has released a critical series of security advisories addressing five high-severity vulnerabilities across its Firebox...
Read More Read more about High-Severity WatchGuard Flaws Risk VPN DoS and RCE via IKEv2 Memory Corruption
❮ Prev Page
Next Page ❯
Cheana Stealer Targets VPN Users Across Windows, Linux, and macOS in Sophisticated Phishing Campaign Cheana Stealer
  • Malware

Cheana Stealer Targets VPN Users Across Windows, Linux, and macOS in Sophisticated Phishing Campaign

Do Son August 25, 2024 0

Protect yourself from the Cheana Stealer, a malicious tool targeting VPN users. Learn how to recognize and defend against this new cyber threat.

Malicious Browser Extension Hijacks Solana Transactions Bull Checker Solana
  • Malware

Malicious Browser Extension Hijacks Solana Transactions

Do Son August 25, 2024 0

Discover the incident involving the Bull Checker browser extension on the Solana platform and learn how users lost their funds.

Hacking the Hacker: Researcher Found Critical Flaw (CVE-2024-45163) in Mirai Botnet
  • Vulnerability

Hacking the Hacker: Researcher Found Critical Flaw (CVE-2024-45163) in Mirai Botnet

Do Son August 25, 2024 0

Learn about CVE-2024-45163, a critical vulnerability in the Mirai botnet. Discover how this flaw can be exploited for remote DoS attacks.

China-Nexus Group Velvet Ant Exploits Cisco Zero-Day (CVE-2024-20399) CVE-2020-3259 Router Smishing, Grooza Cluster
  • Cyber Security
  • Malware
  • Vulnerability

China-Nexus Group Velvet Ant Exploits Cisco Zero-Day (CVE-2024-20399)

Do Son August 25, 2024 0

Learn about the sophisticated tactics and impact of the Velvet Ant cyber attack on Cisco switches. Discover how they exploited a zero-day vulnerability to gain control and facilitate data theft.

Cyberattack on Magento: Hackers Inject Skimmer, Card Data Stolen malicious
  • Malware

Cyberattack on Magento: Hackers Inject Skimmer, Card Data Stolen

Do Son August 25, 2024 0

Discover the details of a cyberattack on Magento platform: how hackers injected a skimmer to steal payment card data.

User Outcry Forces Google to Resume Chrome Support on Ubuntu 18.04 Ubuntu 18.04 Chrome
  • Linux
  • Technology

User Outcry Forces Google to Resume Chrome Support on Ubuntu 18.04

Do Son August 25, 2024 0

Google's decision to discontinue support for Chrome on Ubuntu 18.04 LTS sparked discontent among users. Learn about the temporary reinstatement of support.

CVE-2024-43399: Critical Zip Slip Vulnerability Discovered in Mobile Security Framework (MobSF) CVE-2024-43399
  • Vulnerability

CVE-2024-43399: Critical Zip Slip Vulnerability Discovered in Mobile Security Framework (MobSF)

Do Son August 25, 2024 0

Discover the critical vulnerability in MobSF - CVE-2024-43399. Find out how this flaw could lead to remote code execution and the potential impact on app security.

ShellSweepX: A Precision Tool for Web Shell Detection shellsweep
  • Open Source Tool

ShellSweepX: A Precision Tool for Web Shell Detection

Do Son August 24, 2024 0

Protect your web applications from unauthorized access with ShellSweepX. Learn how this specialized tool detects and mitigates the threat of web shells.

PEAKLIGHT Malware: A New Stealthy Memory-Only Threat Emerges PEAKLIGHT Malware
  • Malware

PEAKLIGHT Malware: A New Stealthy Memory-Only Threat Emerges

Do Son August 24, 2024 0

Unveiling PEAKLIGHT: A sophisticated memory-only dropper and downloader delivering stealthy malware-as-a-service infostealers.

Qilin Ransomware: Beyond Encryption, a New Threat of Credential Theft Dark Angels group
  • Malware

Qilin Ransomware: Beyond Encryption, a New Threat of Credential Theft

Do Son August 24, 2024 0

Find out how the Qilin ransomware group is using a new approach to steal credentials from Google Chrome. Stay vigilant and protect your data.

CertiK Issues Public Apology to Kraken Over $3M Bug Bounty Incident ATLAS LION
  • Cyber Security

CertiK Issues Public Apology to Kraken Over $3M Bug Bounty Incident

Do Son August 24, 2024 0

Find out about the involvement of CertiK in the Kraken vulnerability incident. Learn how the cybersecurity firm uncovered the vulnerability and the subsequent accusations.

Moscow Hacker Arrested in Georgia, Faces U.S. Court for Cybercrimes Romanian hacker sentenced identity theft conviction Pig-Butchering Crackdown Operation Level Up Oleksandr Didenko North Korean IT Workers Coinbase TaskUs insider breach, Hyderabad police Coinbase arrest Scattered Spider, Cybercrime Scattered Spider group
  • Cyber Security

Moscow Hacker Arrested in Georgia, Faces U.S. Court for Cybercrimes

Do Son August 24, 2024 0

Discover the story of Deniss Zolotarjovs, a Moscow hacker charged with participating in an international cybercriminal organization.

CVE-2024-39717: Versa Networks Director GUI Flaw Under Active Attack, CISA Issues Urgent Patching Directive Versa Director GUI - CVE-2024-39717
  • Vulnerability

CVE-2024-39717: Versa Networks Director GUI Flaw Under Active Attack, CISA Issues Urgent Patching Directive

Do Son August 23, 2024 0

Protect your organization from the active exploitation of CVE-2024-39717. Understand the severity and how to implement the necessary security measures.

ALBeast Vulnerability Exposes Thousands of AWS Applications to Critical AuthN/AuthZ Bypass ALBeast vulnerability
  • Vulnerability

ALBeast Vulnerability Exposes Thousands of AWS Applications to Critical AuthN/AuthZ Bypass

Do Son August 23, 2024 0

Learn about ALBeast, a critical vulnerability affecting AWS Application Load Balancers (ALBs). Discover how this flaw can lead to unauthorized access and data breaches.

New PostgreSQL Threat: PG_MEM Malware Strikes Databases PG_MEM PostgreSQL malware
  • Cyber Security
  • Malware

New PostgreSQL Threat: PG_MEM Malware Strikes Databases

Do Son August 23, 2024 0

Beware of PG_MEM: a new malware targeting PostgreSQL. Learn how this sophisticated threat exploits and mines cryptocurrency.

Urgent Edge Security Update: Microsoft Patches Zero-day & RCE Vulnerabilities Microsoft Edge Google account login interface and synchronization settings Browser Choice Alliance letter Microsoft Edge cleartext credentials memory dump Microsoft Edge auto-startup Microsoft Edge Collections sunset, export Edge Collections CSV Edge IE Mode Zero-Day, Chakra Exploit Windows Search, Microsoft Edge AI video translation, Edge browser Microsoft Editor, Edge Edge Developer tools Windows 10 ESU, Microsoft Edge Microsoft Edge, FCP Optimization CVE-2023-36735 Edge, AI Search
  • Vulnerability

Urgent Edge Security Update: Microsoft Patches Zero-day & RCE Vulnerabilities

Do Son August 23, 2024 0

Upgrade to Microsoft Edge Stable Version 128.0.2739.42 to address 25 security vulnerabilities, including the critical CVE-2024-7971 flaw.

Exploit for CVE-2024-38054 Released: Elevation of Privilege Flaw in Windows Kernel Streaming WOW Thunk CVE-2024-38054 exploit
  • Vulnerability
  • Windows

Exploit for CVE-2024-38054 Released: Elevation of Privilege Flaw in Windows Kernel Streaming WOW Thunk

Do Son August 22, 2024 0

Frost has released PoC exploit code for the CVE-2024-38054 vulnerability, escalating concerns over a recently patched Windows security flaw

Critical Vulnerabilities Uncovered in Progress WhatsUp Gold (CVE-2024-6670 & CVE-2024-6671) MOVEit Automation Vulnerability CVE-2026-4670 CVE-2024-6670 & CVE-2024-6671 Progress WhatsUp Gold
  • Vulnerability

Critical Vulnerabilities Uncovered in Progress WhatsUp Gold (CVE-2024-6670 & CVE-2024-6671)

Do Son August 22, 2024 0

Learn about the severe risks posed by CVE-2024-6670, CVE-2024-6671 and other vulnerabilities in Progress WhatsUp Gold.

SonicWall Issues Urgent Patch for Critical Firewall Vulnerability (CVE-2024-40766) SonicWall Firewall CVE-2024-40766 SonicWall SMA Vulnerabilities, Web Interface Flaws
  • Vulnerability

SonicWall Issues Urgent Patch for Critical Firewall Vulnerability (CVE-2024-40766)

Do Son August 22, 2024 0

SonicWall Firewall CVE-2024-40766 flaw alert: Take immediate action to secure your network against unauthorized access and potential system compromise

Cybercriminals Mimic Slack in Sophisticated Malvertising Campaign SecTopRAT
  • Cyber Security

Cybercriminals Mimic Slack in Sophisticated Malvertising Campaign

Do Son August 22, 2024 0

Beware of a malicious ad targeting Slack users. Security experts uncover a complex scheme using Google ads and cloaking domains to distribute SecTopRAT

NGate Android Malware Steals NFC Payment Data at ATMs NGate Android malware
  • Malware

NGate Android Malware Steals NFC Payment Data at ATMs

Do Son August 22, 2024 0

Uncover the new NGate malware: attackers target Czech bank customers through infected Android devices, stealing payment card data.

CVE-2024-38206: SSRF Vulnerability in Microsoft Copilot Studio Exposes Internal Infrastructure Windows 11 26H1, Copilot+ PC AI content, monetization AI Code Review, Microsoft Engineering Microsoft Copilot Studio Uninstall Copilot AI Windows 11 LTSC
  • Vulnerability

CVE-2024-38206: SSRF Vulnerability in Microsoft Copilot Studio Exposes Internal Infrastructure

Do Son August 22, 2024 0

Discover the CVE-2024-38206 vulnerability in Microsoft Copilot Studio, exposing internal resources to unauthorized access.

❮ Prev Page
Next Page ❯

Search

CVE ALERTS
📈

EPSS Spike Alerts
Catch risk spikes before they make headlines.

🎯

Custom EPSS/CVSS
Set score thresholds to effectively filter noise.

🛡️

Exploit Intel
Real-world exploit signals beyond the KEV catalog.

🐙

GitHub Issues
Auto-create alert tickets without duplication.

📬

Weekly Digest
Clean summaries, eliminating email spam.

🏷️

Watchlist Groups
Tag vulnerabilities by team (Infra/AppSec/SOC).

🔀

Smart Routing
Route chat channels based on severity levels.

🚨

RBP Tracker
Early warning detection and tracking system.

Subscribe – $7/mo or try free for 14 days →

🚨 Active Exploits in the Wild

  • CVE-2026-20320CVSS 7.5
    A vulnerability in the Open Client Interface (OCI) XML Parser of Cisco BroadWorks could allow an unauthenticated, remote...
    CISA KEV📅 Added to KEV: Nov 10, 2026
  • CVE-2026-111793CVSS 4.3
    Openwave Webtop Media Transcoder does not enforce administrator-defined file type restrictions to restrict the file-types to be converted....
    CISA KEV📅 Added to KEV: Nov 10, 2026
  • CVE-2026-111560CVSS 8.6
    Improper neutralization of shell metacharacters in the timezone configuration field in certain Barracuda appliance products using common Barracuda...
    CISA KEV📅 Added to KEV: Nov 10, 2026
  • CVE-2026-116606CVSS 9.3
    An authentication bypass in Barracuda Email Security Gateway versions earlier than 9.4.0.030 allows an unauthenticated remote attacker to...
    CISA KEV📅 Added to KEV: Nov 10, 2026
  • CVE-2026-125350
    Use after free in XML. Reported by anonymous on 2026-11-06. Google is aware that an exploit for CVE-2026-125350...
    CISA KEV📅 Added to KEV: Nov 10, 2026
  • CVE-2026-124194CVSS 6.5
    Product ui does not warn user of unsafe actions in Microsoft Office Outlook allows an unauthorized attacker to...
    CISA KEV📅 Added to KEV: Nov 10, 2026
  • CVE-2026-123751CVSS 9.8
    The WP Duplicate WordPress plugin through 1.1.11 does not properly verify a request authentication value and does not...
    Watchtower Verified📅 Updated: Nov 9, 2026
  • CVE-2026-114713CVSS 8.6
    The labeled-response module in UnrealIRCd 6.0.0 before 6.2.7.1 does not escape the IRCv3 "label" message tag when echoing...
    Admin intel📅 Updated: Nov 9, 2026
Powered by CVE Watchtower

Critical Vulnerabilities

  • CVE-2026-114160CVSS 9.8
    Server-side request forgery (ssrf) in Azure Managed Grafana allows an unauthorized attacker to elevate privileges over a network.
    📅 Updated: Nov 11, 2026
  • CVE-2026-109469CVSS 10.0
    Authorization bypass through user-controlled key in Entra Device Registration allows an unauthorized attacker to elevate privileges over a...
    📅 Updated: Nov 11, 2026
  • CVE-2026-101763CVSS 9.8
    Vulnerability in the Oracle Communications BRM - Elastic Charging Engine product of Oracle Communications (component: Cloud native deployment)....
    📅 Updated: Nov 11, 2026
  • CVE-2026-101809CVSS 10.0
    Vulnerability in the Workflow product of Oracle E-Business Suite (component: Workflow Notification Mailer). Supported versions that are affected...
    📅 Updated: Nov 11, 2026
  • CVE-2026-126253CVSS 9.3
    An Authentication Bypass by Primary Weakness vulnerability [cwe-305] in FortiOS and FortiSASE ospf daemon may allow an unauthenticated...
    📅 Updated: Nov 11, 2026
  • CVE-2026-126170CVSS 9.8
    An Improper Encoding or Escaping of Output vulnerability [CWE-116] in FortiSASE-Sovereign, FortiAnalyzer, FortiManager, FortiAnalyzer Cloud, FortiManager Cloud and...
    📅 Updated: Nov 11, 2026
  • CVE-2026-91220CVSS 9.8
    Vulnerability in the Oracle Business Process Management Suite product of Oracle Fusion Middleware (component: Human Workflow). Supported versions...
    📅 Updated: Nov 11, 2026
  • CVE-2026-91222CVSS 9.9
    Vulnerability in the Oracle Business Process Management Suite product of Oracle Fusion Middleware (component: Human Workflow (11g+)). Supported...
    📅 Updated: Nov 11, 2026
Powered by CVE Watchtower

Daily CyberSecurity

  • About SecurityOnline.info
  • Advertise with us
  • Announcement
  • Contact
  • Contributor Register
  • Login
  • Disclaimer
  • DCMA
  • Privacy Policy
  • About SecurityOnline.info
  • Advertise on SecurityOnline.info
  • Contact Us

When you purchase through links on our site, we may earn an affiliate commission. Here’s how it works

  • CVE Watchtower
  • CVE Statistics by Vendor 2026
  • Q3 2026 Report
  • Top Exploited CVEs
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube
© 2017 - 2026 Daily CyberSecurity. All Rights Reserved.