Skip to content
November 11, 2026
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube

Daily CyberSecurity

Zero-hour alerts. Unmatched analysis.

Primary Menu
  • Home
  • CVE Data
    • CVE Watchtower
    • Top Exploited CVEs
    • CVE Stats by Vendor
    • Q2 2026 Report
    • CVE Alerts
    • CVE Alert Settings
    • Pricing
  • Cyber Criminals
  • Data Leak
  • Free Tools
    • CVSS 3.1 Calculator
    • Certificate Viewer
    • DNS Lookup
    • Encoder & Hash Generator
    • IP / Subnet Calculator
    • Whois Lookup
  • Linux
  • Malware
  • Vulnerability
  • Submit Press Release
Light/Dark Button
Iran-Linked MuddyWater Deploys UDPGangster Backdoor, Using UDP Protocol for Covert C2 UDPGangster Backdoor, MuddyWater UDP C2
  • Malware

Iran-Linked MuddyWater Deploys UDPGangster Backdoor, Using UDP Protocol for Covert C2

Do Son December 8, 2025 0
A sophisticated new malware campaign attributed to the Iranian-linked threat group MuddyWater has been discovered targeting government...
Read More Read more about Iran-Linked MuddyWater Deploys UDPGangster Backdoor, Using UDP Protocol for Covert C2
Spyware Vendor Intellexa Used 15 Zero-Days Since 2021, Deploying Predator via “smack” iOS Exploit Chain Intellexa Zero-Days, Predator Spyware
  • Malware
  • Vulnerability Report

Spyware Vendor Intellexa Used 15 Zero-Days Since 2021, Deploying Predator via “smack” iOS Exploit Chain

Do Son December 8, 2025 0
The mercenary spyware industry remains a persistent and adaptable threat, with the notorious vendor Intellexa continuing to...
Read More Read more about Spyware Vendor Intellexa Used 15 Zero-Days Since 2021, Deploying Predator via “smack” iOS Exploit Chain
urllib3 Flaws Risk Client DoS via Unbounded Decompression and Streaming Resource Exhaustion urllib3 DoS, Decompression Bomb
  • Vulnerability Report

urllib3 Flaws Risk Client DoS via Unbounded Decompression and Streaming Resource Exhaustion

Do Son December 8, 2025 0
The maintainers of urllib3, the ubiquitous HTTP client for Python, have issued a security advisory detailing two...
Read More Read more about urllib3 Flaws Risk Client DoS via Unbounded Decompression and Streaming Resource Exhaustion
ValleyRAT Targets English Job Seekers by Trojanizing Foxit PDF Reader with DLL Sideloading Kali365 phishing platform EmEditor Supply Chain Attack, WALSHAM INVESTMENTS LIMITED EggStreme, fileless malware North Korea Cybercrime, Remote IT Job Fraud RedDelta APT
  • Malware

ValleyRAT Targets English Job Seekers by Trojanizing Foxit PDF Reader with DLL Sideloading

Do Son December 8, 2025 0
A sophisticated malware campaign traditionally focused on Chinese-speaking targets has expanded its scope, now aggressively targeting English-speaking...
Read More Read more about ValleyRAT Targets English Job Seekers by Trojanizing Foxit PDF Reader with DLL Sideloading
Coordinated Reconnaissance: 7,000+ IPs Target Palo Alto GlobalProtect and SonicWall API Endpoints Palo Alto SonicWall Scanning, Coordinated Reconnaissance
  • Cybercriminals

Coordinated Reconnaissance: 7,000+ IPs Target Palo Alto GlobalProtect and SonicWall API Endpoints

Do Son December 6, 2025 0
A sudden surge in mass scanning activity has targeted two major enterprise security vendors, Palo Alto Networks...
Read More Read more about Coordinated Reconnaissance: 7,000+ IPs Target Palo Alto GlobalProtect and SonicWall API Endpoints
Key AI Solutions in Cybersecurity for 2026 WD Discovery Vulnerability CVE-2025-30248 binary-parser Vulnerability CVE-2026-1245 H3C RCE Vulnerability CVE-2025-60262 Telenium RCE, CVE-2025-10659 Fuel station security, ICS vulnerabilities FreePBX vulnerability CVE-2024-9478 & CVE-2024-9479 SysTrack Vulnerability, Privilege Escalation
  • Technique

Key AI Solutions in Cybersecurity for 2026

Do Son December 6, 2025
As we move further into the digital age, the importance of robust cybersecurity measures has never been...
Read More Read more about Key AI Solutions in Cybersecurity for 2026
Critical Step CA Flaw (CVE-2025-44005, CVSS 10.0) Allows Unauthenticated Bypass to Issue Fraudulent Certificates Step CA Auth Bypass, Critical ACME Flaw
  • Vulnerability Report

Critical Step CA Flaw (CVE-2025-44005, CVSS 10.0) Allows Unauthenticated Bypass to Issue Fraudulent Certificates

Do Son December 6, 2025 0
A critical security vulnerability has been identified in Step CA, a popular online Certificate Authority tool used...
Read More Read more about Critical Step CA Flaw (CVE-2025-44005, CVSS 10.0) Allows Unauthenticated Bypass to Issue Fraudulent Certificates
China APT UNC5174 Hijacks Discord API as Covert C2 Channel to Evade Detection and Conduct Espionage Discord C2, UNC5174 Espionage
  • Cybercriminals
  • Malware

China APT UNC5174 Hijacks Discord API as Covert C2 Channel to Evade Detection and Conduct Espionage

Do Son December 6, 2025 0
A sophisticated cyber-espionage campaign linked to the Chinese state-sponsored threat group UNC5174 has been discovered utilizing the...
Read More Read more about China APT UNC5174 Hijacks Discord API as Covert C2 Channel to Evade Detection and Conduct Espionage
Sprocket Security Earns Repeat Recognition in G2’s Winter 2025 Relationship Index for Penetration Testing G2_PR_Winter_1764779986pS3XAjIIlK
  • Press Release

Sprocket Security Earns Repeat Recognition in G2’s Winter 2025 Relationship Index for Penetration Testing

cybernewswire December 5, 2025 0
Madison, United States, 5th December 2025, CyberNewsWire
Read More Read more about Sprocket Security Earns Repeat Recognition in G2’s Winter 2025 Relationship Index for Penetration Testing
Criminal IP to Host Webinar: Beyond CVEs – From Visibility to Action with ASM webinar_sns2_1764913495pMKY77PH7j
  • Press Release

Criminal IP to Host Webinar: Beyond CVEs – From Visibility to Action with ASM

cybernewswire December 5, 2025 0
Torrance, California, USA, 5th December 2025, CyberNewsWire
Read More Read more about Criminal IP to Host Webinar: Beyond CVEs – From Visibility to Action with ASM
❮ Prev Page
Next Page ❯
McDonald’s Falls Victim to Cyberattack: Instagram Hijacked to Promote Grimace Cryptocurrency McDonald Cyberattack
  • Cyber Security

McDonald’s Falls Victim to Cyberattack: Instagram Hijacked to Promote Grimace Cryptocurrency

Do Son August 22, 2024 0

Discover the shocking McDonald's cyberattack that leveraged the brand's Instagram account to promote a meme coin called Grimace.

Escalating Cyber Threats: Q2 2024 Vulnerability Report Knowledge Deliver RCE vulnerability FortiClient EMS Vulnerability CVE-2026-35616 Cisco SD-WAN Vulnerability CVE-2026-20122 PCPcat, Next.js RCE Salesloft breach, Salesforce CRM WIREFIRE web shell
  • Vulnerability

Escalating Cyber Threats: Q2 2024 Vulnerability Report

Do Son August 22, 2024 0

Discover the alarming increase in vulnerabilities and exploitation techniques in the cybersecurity landscape of Q2 2024, according to Kaspersky Labs' latest report.

TodoSwift: North Korean Cybercriminals Use Bitcoin Lure to Spread macOS Malware BlueNoroff - TodoSwift
  • Malware

TodoSwift: North Korean Cybercriminals Use Bitcoin Lure to Spread macOS Malware

Do Son August 22, 2024 0

Find out how the TodoSwift malware poses a threat to macOS users. Explore its origins in North Korea and its ties to the notorious BlueNoroff group

CVE-2024-28000 in LiteSpeed Cache Plugin Actively Exploited: Over 30,000 Attacks Blocked in 24 Hours CVE-2024-28000 exploit
  • Vulnerability

CVE-2024-28000 in LiteSpeed Cache Plugin Actively Exploited: Over 30,000 Attacks Blocked in 24 Hours

Do Son August 22, 2024 0

Beware of the CVE-2024-28000 exploit targeting the LiteSpeed Cache plugin. Protect your WordPress site from potential takeover.

New Phishing Campaign Targets US Government Organizations Tycoon 2FA phish-kit
  • Cyber Security

New Phishing Campaign Targets US Government Organizations

Do Son August 22, 2024 0

Researchers at ANY.RUN have identified a new campaign using Tycoon 2FA phish-kit. This time, attackers are targeting US government

PoC Exploit Released for RCE 0-day CVE-2024-41992 in Arcadyan FMIMG51AX000J Model CVE-2024-41992 exploit
  • Vulnerability

PoC Exploit Released for RCE 0-day CVE-2024-41992 in Arcadyan FMIMG51AX000J Model

Do Son August 21, 2024 0

Important security alert: CVE-2024-41992 vulnerability in Arcadyan FMIMG51AX000J and other WiFi Alliance devices. Find out how this could affect your network and what steps to take.

iOS Text String Bug: A Few Characters Can Crash iPhone India smartphone source code mandate, MeitY security requirements 2026 iOS photo backup, background upload iOS crash Foldable iPhone, iPhone design
  • Technology

iOS Text String Bug: A Few Characters Can Crash iPhone

Do Son August 21, 2024 0

Is your iPhone crashing? Learn about the latest iOS bug and the mysterious code that triggers a soft reboot.

SolarWinds Web Help Desk Hit by Critical Vulnerability (CVE-2024-28987) CVE-2024-28987 - SolarWinds Web Help Desk
  • Vulnerability

SolarWinds Web Help Desk Hit by Critical Vulnerability (CVE-2024-28987)

Do Son August 21, 2024 0

Urgent security advisory: SolarWinds' Web Help Desk (WHD) software vulnerable to critical hardcoded credential vulnerability (CVE-2024-28987).

DMCA Takedown: Bypass Paywalls Clean Extension Banned for Copyright Infringement Bypass Paywalls Clean
  • Technology

DMCA Takedown: Bypass Paywalls Clean Extension Banned for Copyright Infringement

Do Son August 21, 2024 0

Discover the reasons behind the blocking of the Bypass Paywalls Clean extension and the impact on content accessibility.

Microsoft Signals End of an Era: Control Panel to be Phased Out Control Panel
  • Windows

Microsoft Signals End of an Era: Control Panel to be Phased Out

Do Son August 21, 2024 0

Discover the latest update from Microsoft: the Control Panel is being replaced by the modern and streamlined Settings app in Windows 11.

CVE-2024-43403: Kanister Vulnerability Opens Door to Cluster-Level Privilege Escalation Kanister - CVE-2024-43403
  • Vulnerability

CVE-2024-43403: Kanister Vulnerability Opens Door to Cluster-Level Privilege Escalation

Do Son August 21, 2024 0

Protect your Kubernetes clusters from a critical vulnerability (CVE-2024-43403). Learn how to patch the issue in the default-kanister-operator deployment.

Iranian APT GreenCharlie Escalates Threats Against US Political Targets Using GORBLE and POWERSTAR Malware GreenCharlie
  • Cyber Security

Iranian APT GreenCharlie Escalates Threats Against US Political Targets Using GORBLE and POWERSTAR Malware

Do Son August 21, 2024 0

Unveiling the operations of GreenCharlie, an Iran-backed APT group linked to US political campaign targeting.

Log4j Exploited Again: New Campaign Targets Vulnerable Systems with Crypto-Mining and Backdoors hackerbot-claw campaign Cisco RCE Exploit CVE-2026-20045 SonicWall VPN, Akira Ransomware Nobelium Apache Tomcat, Apache Camel
  • Cyber Security
  • Malware

Log4j Exploited Again: New Campaign Targets Vulnerable Systems with Crypto-Mining and Backdoors

Do Son August 21, 2024 0

Stay informed about the ongoing threat of Log4Shell. Learn how this vulnerability is being exploited by threat actors and the impact it has on global cybersecurity.

Beyond the Ransom: Inside the Mind of Brain Cipher Ransomware Group Brain Cipher ransomware group
  • Cyber Security
  • Malware

Beyond the Ransom: Inside the Mind of Brain Cipher Ransomware Group

Do Son August 21, 2024 0

Discover the impact of the Brain Cipher ransomware attack on Indonesian government agencies. Learn about the hackers, their ransom demands, and the unexpected release of the decryptor.

Urgent Chrome Update: Active Zero-Day Exploit Detected (CVE-2024-7971) Chrome 148 lazy loading Chrome for Linux ARM64 Chrome 145 Update Chrome Security Fixes Chrome Security Update CVE-2026-1220 Chrome 144 Security Update CVE-2026-0899 Chrome Memory Safety, WebGPU UAF Chrome V8 Type Confusion, Google Updater Flaw Chrome V8 Flaw, CVE-2025-13042 Chrome V8, Type Confusion, Chrome 142 Update Chrome V8 Flaw, CVE-2025-12036 Chrome 141, WebGPU Overflow Google Chrome preloading Chrome, V8 vulnerability CVE-2025-9132 Chrome Security Update, Use-After-Free Chrome V8, Type Confusion Chrome Telemetry, Windows 10 EOL Microsoft Family Safety, Chrome Blocking Chrome Security Update, High-Severity Google Chrome, Antitrust CVE-2024-10487 and CVE-2024-10488 Google Chrome Root Program Chrome Update, CVE-2025-3619 Chrome Acquisition, Perplexity.ai
  • Vulnerability

Urgent Chrome Update: Active Zero-Day Exploit Detected (CVE-2024-7971)

Do Son August 21, 2024 0

Urgent Chrome update released by Google to fix zero-day vulnerability (CVE-2024-7971). Protect yourself from potential data theft and malware attacks.

Styx Stealer: The Evolved Threat to Your Crypto and Data styx
  • Cyber Security
  • Malware

Styx Stealer: The Evolved Threat to Your Crypto and Data

Do Son August 21, 2024 0

Discover the dangerous Styx Stealer malware, derived from Phemedrone Stealer. Find out about its advanced capabilities and critical operational security mistake.

Microsoft, Linux, Dahua Flaws Exploited: CISA Warns CISA active exploit catalog critical gateway flaws CVE-2023-27532 & CVE-2024-37383
  • Vulnerability

Microsoft, Linux, Dahua Flaws Exploited: CISA Warns

Do Son August 21, 2024 0

Protect your systems from known exploited vulnerabilities. Find out about critical security flaws in Microsoft Exchange Server, Linux kernel, and Dahua IP Cameras.

CVE-2024-28000 (CVSS 9.8): Active Exploitation of Litespeed Cache Vulnerability, 5 Million WordPress Sites at Risk of Complete Takeover CVE-2024-28000
  • Vulnerability

CVE-2024-28000 (CVSS 9.8): Active Exploitation of Litespeed Cache Vulnerability, 5 Million WordPress Sites at Risk of Complete Takeover

Do Son August 21, 2024 0

Discover the severe security flaw (CVE-2024-28000) in Litespeed Cache plugin for WordPress, putting 5 million sites at risk.

North Korean Hackers Upgrade Arsenal with MoonPeak RAT UAT-5394 - MoonPeak
  • Cyber Security
  • Malware

North Korean Hackers Upgrade Arsenal with MoonPeak RAT

Do Son August 21, 2024 0

Uncover the latest cybersecurity threat from North Korea: MoonPeak RAT (UAT-5394) reveals new TTPs and potential links to Kimsuky.

Critical Infrastructure at Risk: BVIEC Confirms Cyberattack Winos 4.0 Malware Silver Fox APT RapperBot BVIEC cyberattack - CNC group DAMASCENED PEACOCK, malware analysis
  • Cyber Security

Critical Infrastructure at Risk: BVIEC Confirms Cyberattack

Do Son August 21, 2024 0

Find out about the recent cyber attack on the BVIEC and the ongoing efforts to recover and restore operations.

New Phishing Campaigns Exploit PWAs and WebAPKs to Target Mobile Banking Users banking phishing
  • Cyber Security

New Phishing Campaigns Exploit PWAs and WebAPKs to Target Mobile Banking Users

Do Son August 21, 2024 0

Beware of sophisticated banking phishing campaigns targeting mobile users. Learn how these malicious apps bypass traditional security warnings.

Azure Kubernetes Services at Risk: “WireServing” Threat Revealed wireserving
  • Vulnerability

Azure Kubernetes Services at Risk: “WireServing” Threat Revealed

Do Son August 20, 2024 0

Learn about the WireServing vulnerability in Azure Kubernetes Services (AKS) and the potential risks it poses to the security of your sensitive credentials.

❮ Prev Page
Next Page ❯

Search

CVE ALERTS
📈

EPSS Spike Alerts
Catch risk spikes before they make headlines.

🎯

Custom EPSS/CVSS
Set score thresholds to effectively filter noise.

🛡️

Exploit Intel
Real-world exploit signals beyond the KEV catalog.

🐙

GitHub Issues
Auto-create alert tickets without duplication.

📬

Weekly Digest
Clean summaries, eliminating email spam.

🏷️

Watchlist Groups
Tag vulnerabilities by team (Infra/AppSec/SOC).

🔀

Smart Routing
Route chat channels based on severity levels.

🚨

RBP Tracker
Early warning detection and tracking system.

Subscribe – $7/mo or try free for 14 days →

🚨 Active Exploits in the Wild

  • CVE-2026-20320CVSS 7.5
    A vulnerability in the Open Client Interface (OCI) XML Parser of Cisco BroadWorks could allow an unauthenticated, remote...
    CISA KEV📅 Added to KEV: Nov 10, 2026
  • CVE-2026-111793CVSS 4.3
    Openwave Webtop Media Transcoder does not enforce administrator-defined file type restrictions to restrict the file-types to be converted....
    CISA KEV📅 Added to KEV: Nov 10, 2026
  • CVE-2026-111560CVSS 8.6
    Improper neutralization of shell metacharacters in the timezone configuration field in certain Barracuda appliance products using common Barracuda...
    CISA KEV📅 Added to KEV: Nov 10, 2026
  • CVE-2026-116606CVSS 9.3
    An authentication bypass in Barracuda Email Security Gateway versions earlier than 9.4.0.030 allows an unauthenticated remote attacker to...
    CISA KEV📅 Added to KEV: Nov 10, 2026
  • CVE-2026-125350
    Use after free in XML. Reported by anonymous on 2026-11-06. Google is aware that an exploit for CVE-2026-125350...
    CISA KEV📅 Added to KEV: Nov 10, 2026
  • CVE-2026-124194CVSS 6.5
    Product ui does not warn user of unsafe actions in Microsoft Office Outlook allows an unauthorized attacker to...
    CISA KEV📅 Added to KEV: Nov 10, 2026
  • CVE-2026-123751CVSS 9.8
    The WP Duplicate WordPress plugin through 1.1.11 does not properly verify a request authentication value and does not...
    Watchtower Verified📅 Updated: Nov 9, 2026
  • CVE-2026-114713CVSS 8.6
    The labeled-response module in UnrealIRCd 6.0.0 before 6.2.7.1 does not escape the IRCv3 "label" message tag when echoing...
    Admin intel📅 Updated: Nov 9, 2026
Powered by CVE Watchtower

Critical Vulnerabilities

  • CVE-2026-114160CVSS 9.8
    Server-side request forgery (ssrf) in Azure Managed Grafana allows an unauthorized attacker to elevate privileges over a network.
    📅 Updated: Nov 11, 2026
  • CVE-2026-109469CVSS 10.0
    Authorization bypass through user-controlled key in Entra Device Registration allows an unauthorized attacker to elevate privileges over a...
    📅 Updated: Nov 11, 2026
  • CVE-2026-101763CVSS 9.8
    Vulnerability in the Oracle Communications BRM - Elastic Charging Engine product of Oracle Communications (component: Cloud native deployment)....
    📅 Updated: Nov 11, 2026
  • CVE-2026-101809CVSS 10.0
    Vulnerability in the Workflow product of Oracle E-Business Suite (component: Workflow Notification Mailer). Supported versions that are affected...
    📅 Updated: Nov 11, 2026
  • CVE-2026-126253CVSS 9.3
    An Authentication Bypass by Primary Weakness vulnerability [cwe-305] in FortiOS and FortiSASE ospf daemon may allow an unauthenticated...
    📅 Updated: Nov 11, 2026
  • CVE-2026-126170CVSS 9.8
    An Improper Encoding or Escaping of Output vulnerability [CWE-116] in FortiSASE-Sovereign, FortiAnalyzer, FortiManager, FortiAnalyzer Cloud, FortiManager Cloud and...
    📅 Updated: Nov 11, 2026
  • CVE-2026-91220CVSS 9.8
    Vulnerability in the Oracle Business Process Management Suite product of Oracle Fusion Middleware (component: Human Workflow). Supported versions...
    📅 Updated: Nov 11, 2026
  • CVE-2026-91222CVSS 9.9
    Vulnerability in the Oracle Business Process Management Suite product of Oracle Fusion Middleware (component: Human Workflow (11g+)). Supported...
    📅 Updated: Nov 11, 2026
Powered by CVE Watchtower

Daily CyberSecurity

  • About SecurityOnline.info
  • Advertise with us
  • Announcement
  • Contact
  • Contributor Register
  • Login
  • Disclaimer
  • DCMA
  • Privacy Policy
  • About SecurityOnline.info
  • Advertise on SecurityOnline.info
  • Contact Us

When you purchase through links on our site, we may earn an affiliate commission. Here’s how it works

  • CVE Watchtower
  • CVE Statistics by Vendor 2026
  • Q3 2026 Report
  • Top Exploited CVEs
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube
© 2017 - 2026 Daily CyberSecurity. All Rights Reserved.