Skip to content
November 11, 2026
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube

Daily CyberSecurity

Zero-hour alerts. Unmatched analysis.

Primary Menu
  • Home
  • CVE Data
    • CVE Watchtower
    • Top Exploited CVEs
    • CVE Stats by Vendor
    • Q2 2026 Report
    • CVE Alerts
    • CVE Alert Settings
    • Pricing
  • Cyber Criminals
  • Data Leak
  • Free Tools
    • CVSS 3.1 Calculator
    • Certificate Viewer
    • DNS Lookup
    • Encoder & Hash Generator
    • IP / Subnet Calculator
    • Whois Lookup
  • Linux
  • Malware
  • Vulnerability
  • Submit Press Release
Light/Dark Button
Russian Calisto APT Targets Reporters Without Borders with Custom AiTM Phishing and “Missing File” Lure Calisto RSF Espionage, AiTM Phishing Lure
  • Cyber Security

Russian Calisto APT Targets Reporters Without Borders with Custom AiTM Phishing and “Missing File” Lure

Do Son December 5, 2025 0
A fresh wave of cyber-espionage attacks has struck the international non-profit sector, with Russian state-sponsored hackers zeroing...
Read More Read more about Russian Calisto APT Targets Reporters Without Borders with Custom AiTM Phishing and “Missing File” Lure
NVIDIA Triton Server Patches Two High-Severity DoS Flaws, Risking Critical AI Inference Disruption NVIDIA DGX Cloud restructuring, Dwight Diercks engineering shift NVIDIA Isaac Launchable, Hard-coded Credentials NVIDIA Merlin Deserialization, AI Pipeline RCE Triton DoS Flaws, AI Inference Server Security NVIDIA AI programming AI Chips China 800VDC Data Center, AI Power Architecture CVE-2024-0114 NVIDIA Container Toolkit vulnerability Container escape
  • Vulnerability Report

NVIDIA Triton Server Patches Two High-Severity DoS Flaws, Risking Critical AI Inference Disruption

Do Son December 5, 2025 0
NVIDIA has issued a security bulletin regarding its Triton Inference Server, a cornerstone tool used by MLOps...
Read More Read more about NVIDIA Triton Server Patches Two High-Severity DoS Flaws, Risking Critical AI Inference Disruption
Patchwork APT Deploys StreamSpy Trojan, Hiding C2 Commands in WebSocket Traffic for Stealth Espionage Patchwork StreamSpy, WebSocket C2
  • Cyber Security
  • Malware

Patchwork APT Deploys StreamSpy Trojan, Hiding C2 Commands in WebSocket Traffic for Stealth Espionage

Do Son December 5, 2025 0
The Patchwork APT group (also known as Bai Xiang or “White Elephant”), a cyberespionage actor believed to...
Read More Read more about Patchwork APT Deploys StreamSpy Trojan, Hiding C2 Commands in WebSocket Traffic for Stealth Espionage
AI Demand Struggles: Microsoft Slashes Enterprise AI Sales Quotas by Up to 50% Microsoft Strategic Market Status investigation Dell CES 2026 AI PC marketing, Microsoft Copilot+ PC consumer apathy Microsoft AI Sales Quota Enterprise AI Demand Edge Copilot, AI browsing
  • Technology

AI Demand Struggles: Microsoft Slashes Enterprise AI Sales Quotas by Up to 50%

Do Son December 5, 2025 0
In recent months, major technology companies have been aggressively advancing artificial intelligence initiatives and promoting AI-driven services...
Read More Read more about AI Demand Struggles: Microsoft Slashes Enterprise AI Sales Quotas by Up to 50%
No More SMS: Telegram is Developing Passkey Authentication for Secure Login Telegram Bot Formatting HTML formatting, Markdown update, bot development Telegram Passkey SMS Login Replacement Telegram Zero-Click Vulnerability
  • Technology

No More SMS: Telegram is Developing Passkey Authentication for Secure Login

Do Son December 5, 2025 0
Telegram is currently developing passkey authentication, a move that will eventually free the platform from its long-standing...
Read More Read more about No More SMS: Telegram is Developing Passkey Authentication for Secure Login
SpyCloud Data Shows Corporate Users 3x More Likely to Be Targeted by Phishing Than by Malware SpyCloud_wordmark_square_1764614423dsLEchjEU4
  • Press Release

SpyCloud Data Shows Corporate Users 3x More Likely to Be Targeted by Phishing Than by Malware

cybernewswire December 4, 2025 0
Austin, TX, USA, 4th December 2025, CyberNewsWire
Read More Read more about SpyCloud Data Shows Corporate Users 3x More Likely to Be Targeted by Phishing Than by Malware
Policy U-Turn: India Drops Mandatory Sanchar Saathi App After Fierce Opposition Sanchar Saathi Mandatory Reversal India App U-Turn
  • Technology

Policy U-Turn: India Drops Mandatory Sanchar Saathi App After Fierce Opposition

Do Son December 4, 2025 0
Confronted with fierce resistance from both global tech giants and domestic political forces, the Indian government has...
Read More Read more about Policy U-Turn: India Drops Mandatory Sanchar Saathi App After Fierce Opposition
AWS Trainium Chip Business Hits Multi-Billion Revenue, Challenging NVIDIA’s Pricing AWS Trainium Revenue AI Chip Price-Performance
  • Technology

AWS Trainium Chip Business Hits Multi-Billion Revenue, Challenging NVIDIA’s Pricing

Do Son December 4, 2025 0
Under the near-monopoly that NVIDIA holds in the AI acceleration market, Amazon has unmistakably carved out a...
Read More Read more about AWS Trainium Chip Business Hits Multi-Billion Revenue, Challenging NVIDIA’s Pricing
Design Wars: Meta Hires Apple Veteran Alan Dye to Lead New Reality Labs Creative Studio Meta Reality Labs restructuring, AI wearables pivot Meta Alan Dye Hire Apple Design Defection smart glasses, Ray-Ban Display
  • Technology

Design Wars: Meta Hires Apple Veteran Alan Dye to Lead New Reality Labs Creative Studio

Do Son December 4, 2025 0
Meta CEO Mark Zuckerberg has announced that the company has successfully recruited Alan Dye, a veteran design...
Read More Read more about Design Wars: Meta Hires Apple Veteran Alan Dye to Lead New Reality Labs Creative Studio
Misleading AI Headlines: Google Discover Testing Rewrites That Distort News Facts Low carbon cloud computing Smartphone clusters, Green technology, Data centers, Google research Google Agentic AI search G Suite legacy free commercial reclassification 2026 Agent Payments Protocol AP2 Back-Button Hijacking Google Search AI headlines Google Play Store fee reduction Google Antigravity account recovery Google Advanced Air-Cooling Alphabet $185 billion CapEx 2026 Google Aluminum OS 2026 ai-disclosure HTML attribute, Chrome AI content transparency 2026 Google monopoly appeal 2026, Search data sharing stay Change @gmail.com address, Gmail email alias feature 2025 Google Play Store external download fees, Epic vs Google 2026 billing Google Dark Web Report Retirement, Data Breach Monitoring Google Antitrust One-Year Limit Default Search Contract Term Google AI Headlines Discover Headline Distortion Aluminium OS Android ChromeOS Merge Google Accelerator Impact $31.2 Billion Funding Google Texas Investment AI Data Center Expansion Google Play payments, external billing Gmail HIBP leak Privacy Sandbox Termination, Third-Party Cookies Google Strategic Market Status, CMA Antitrust ICEBlock Removal, DOJ Pressure Google Logo, AI Branding
  • Technology

Misleading AI Headlines: Google Discover Testing Rewrites That Distort News Facts

Do Son December 4, 2025 0
The Verge reports that Google has begun testing AI-rewritten headlines within its Google Discover service, aiming to...
Read More Read more about Misleading AI Headlines: Google Discover Testing Rewrites That Distort News Facts
❮ Prev Page
Next Page ❯
Backdoor discovered in MIFARE classic compatible cards XZ backdoor, Docker Hub MIFARE classic backdoor C++/CLI IIS Backdoor
  • Vulnerability

Backdoor discovered in MIFARE classic compatible cards

Do Son August 19, 2024 0

Uncover backdoor in the latest variant of MIFARE Classic smart cards and their potential to compromise secure access control systems worldwide

New Infostealer “Ailurophile” Discovered, Poses Significant Risk to User Privacy Ailurophile malware
  • Malware

New Infostealer “Ailurophile” Discovered, Poses Significant Risk to User Privacy

Do Son August 19, 2024 0

Learn about Ailurophile, a powerful information-stealing malware with Vietnamese origins. Find out how it's being customized and used by cybercriminals.

PrestaShop Websites Under Attack: GTAG Websocket Skimmer Steals Credit Card Data Magento Credit Card Stealer npm package reverse shell
  • Malware

PrestaShop Websites Under Attack: GTAG Websocket Skimmer Steals Credit Card Data

Do Son August 19, 2024 0

Protect your customers and your PrestaShop website from the GTAG Websocket Skimmer. Learn about this new credit card skimming threat and how to defend against it.

Phishing Campaign Targets World Agricultural Cycling Competition Attendees with Havoc C2 Malware World Agricultural Cycling Competition
  • Cyber Security
  • Malware

Phishing Campaign Targets World Agricultural Cycling Competition Attendees with Havoc C2 Malware

Do Son August 19, 2024 0

Stay informed about the phishing campaign that targeted participants of the World Agricultural Cycling Competition.

Cyberattack Cripples Unicoin: Employees Locked Out Unicoin cyberattack
  • Cyber Security

Cyberattack Cripples Unicoin: Employees Locked Out

Do Son August 19, 2024 0

Unicoin cyberattack: Learn about the recent incident that left employees without access to corporate systems for four days.

Chrome for Android to Blur Sensitive Data in Screen Captures redact
  • Technology

Chrome for Android to Blur Sensitive Data in Screen Captures

Do Son August 19, 2024 0

Enhance security on Chrome Android with a new feature designed to protect sensitive information during screen recording and sharing.

HookChain: The Technique That Bypass Exposes EDR in 94% of Security Solutions Bypassing EDR Solutions
  • Vulnerability

HookChain: The Technique That Bypass Exposes EDR in 94% of Security Solutions

Do Son August 19, 2024 0

Explore the vulnerabilities in today's advanced security frameworks with HookChain. Discover how this new technique bypasses EDR solutions in cybersecurity.

Debian 11 ‘Bullseye’ Enters LTS: What You Need to Know Debian 11 LTS Ubuntu 26.04 Google Drive issue
  • Linux

Debian 11 ‘Bullseye’ Enters LTS: What You Need to Know

Do Son August 18, 2024 0

Learn about Debian 11 LTS and its extended security support phase. Find out how it ensures usability and provides five years of security updates

Beware of Fake PoC Exploits for 0-Click RCE CVE-2024-38063 on GitHub Screenshot 2024-08-18 171947
  • Malware

Beware of Fake PoC Exploits for 0-Click RCE CVE-2024-38063 on GitHub

Do Son August 18, 2024 0

Discover the details of the critical CVE-2024-38063 vulnerability affecting Windows systems and the fraudulent PoC exploits used to spread malware.

CVE-2024-7646: A Threat to Kubernetes Clusters Running ingress-nginx CVE-2024-7646 Kubernetes Clusters ingress-nginx
  • Vulnerability

CVE-2024-7646: A Threat to Kubernetes Clusters Running ingress-nginx

Do Son August 18, 2024 0

Discover the details of the newly discovered security vulnerability CVE-2024-7646 in the ingress-nginx controller for Kubernetes.

French Police Crack Down on $14.4 Million Holograph Hack Holograph Hack
  • Cyber Security

French Police Crack Down on $14.4 Million Holograph Hack

Do Son August 18, 2024 0

Learn about the devastating Holograph Hack and the arrests made in connection with the theft of $14.4 million worth of tokens.

Ransomware Attacks Surge: $459 Million Paid in First Half of 2024 Ransomware Attackers
  • Cyber Security
  • Malware

Ransomware Attacks Surge: $459 Million Paid in First Half of 2024

Do Son August 18, 2024 0

Stay informed about the worsening ransomware situation: victims paid $459 million to attackers in the first half of 2024.

Cloud Attack: Extortionists Breach AWS, Expose 90,000 Variables cloud attack
  • Cyber Security

Cloud Attack: Extortionists Breach AWS, Expose 90,000 Variables

Do Son August 18, 2024 0

Learn about a massive ransomware campaign targeting over 100,000 domains. Understand the user errors in cloud services that enabled the attack and the impact on data security.

BANSHEE Stealer: $3,000/Month macOS Malware Targets Apple Users macOS malware BANSHEE Stealer
  • Malware

BANSHEE Stealer: $3,000/Month macOS Malware Targets Apple Users

Do Son August 18, 2024 0

BANSHEE Stealer: A sophisticated macOS malware targeting critical system information, browser data, and cryptocurrency wallets.

Shimano Di2 Wireless Protocol: Critical Vulnerabilities Uncovered Shimano Di2
  • Vulnerability

Shimano Di2 Wireless Protocol: Critical Vulnerabilities Uncovered

Do Son August 18, 2024 0

Discover the security flaw in Shimano Di2 gear-shifting tools used by professional cyclists. Find out how hackers could exploit these vulnerabilities during races.

Gafgyt Botnet: Now Exploiting GPU Power in Cloud-Native Environments Gafgyt botnet malware
  • Malware

Gafgyt Botnet: Now Exploiting GPU Power in Cloud-Native Environments

Do Son August 18, 2024 0

Discover the latest evolution of the Gafgyt botnet: a new variant that targets cloud-native environments and mines cryptocurrency using GPU power

Cyclops: Iranian APT 35 Hackers’ Latest Tool for Network Infiltration Open VSX Malware String-Fragment Reconstruction DarkCloud Stealer, steganography APT 35 Charming Kitten cyclops
  • Cyber Security
  • Malware

Cyclops: Iranian APT 35 Hackers’ Latest Tool for Network Infiltration

Do Son August 18, 2024 0

Uncover the details of Cyclops, a new malware developed by the APT 35 group. Learn about its capabilities, targets, and method of operation.

10,000+ WordPress Sites at Risk: Critical File Deletion Flaw Found in InPost Plugins CVE-2024-6500
  • Vulnerability

10,000+ WordPress Sites at Risk: Critical File Deletion Flaw Found in InPost Plugins

Do Son August 17, 2024 0

Learn about the critical vulnerability CVE-2024-6500 in WordPress plugins InPost PL and InPost for WooCommerce.

CrowdSec: The Next-Generation Behavior Detection Engine for Enhanced Cybersecurity securing network infrastructures
  • Open Source Tool

CrowdSec: The Next-Generation Behavior Detection Engine for Enhanced Cybersecurity

Do Son August 17, 2024 0

Discover how CrowdSec is revolutionizing the security of network infrastructures. Learn about its cutting-edge behavior detection engine and its community-powered protection.

ValleyRAT Campaign Leverages Shellcode and Social Engineering to Target Chinese Speakers ValleyRAT Campaign
  • Malware

ValleyRAT Campaign Leverages Shellcode and Social Engineering to Target Chinese Speakers

Do Son August 17, 2024 0

Uncover the ValleyRAT malware campaign targeting Chinese-speaking users in e-commerce, finance, sales, and management sectors.

EDRKillShifter: A New EDR-Killing Tool in Ransomware Attack EDRKillShifter
  • Malware

EDRKillShifter: A New EDR-Killing Tool in Ransomware Attack

Do Son August 17, 2024 0

Sophos researchers uncover EDRKillShifter: a powerful tool that bypasses security measures. Find out how to defend against this emerging threat.

From HR Operations to Product-Led Platforms: Dmytro Zykov on Building Enterprise Digital Products Inside the ANCOR Ecosystem Salesforce vulnerability CVE-2025-9844 Salt Typhoon cyberattack
  • Technique

From HR Operations to Product-Led Platforms: Dmytro Zykov on Building Enterprise Digital Products Inside the ANCOR Ecosystem

Do Son August 17, 2024 0
Intro: Most large companies do not become “digital” simply by automating what they already do. The larger...
Read More Read more about From HR Operations to Product-Led Platforms: Dmytro Zykov on Building Enterprise Digital Products Inside the ANCOR Ecosystem
❮ Prev Page
Next Page ❯

Search

CVE ALERTS
📈

EPSS Spike Alerts
Catch risk spikes before they make headlines.

🎯

Custom EPSS/CVSS
Set score thresholds to effectively filter noise.

🛡️

Exploit Intel
Real-world exploit signals beyond the KEV catalog.

🐙

GitHub Issues
Auto-create alert tickets without duplication.

📬

Weekly Digest
Clean summaries, eliminating email spam.

🏷️

Watchlist Groups
Tag vulnerabilities by team (Infra/AppSec/SOC).

🔀

Smart Routing
Route chat channels based on severity levels.

🚨

RBP Tracker
Early warning detection and tracking system.

Subscribe – $7/mo or try free for 14 days →

🚨 Active Exploits in the Wild

  • CVE-2026-20320CVSS 7.5
    A vulnerability in the Open Client Interface (OCI) XML Parser of Cisco BroadWorks could allow an unauthenticated, remote...
    CISA KEV📅 Added to KEV: Nov 10, 2026
  • CVE-2026-111793CVSS 4.3
    Openwave Webtop Media Transcoder does not enforce administrator-defined file type restrictions to restrict the file-types to be converted....
    CISA KEV📅 Added to KEV: Nov 10, 2026
  • CVE-2026-111560CVSS 8.6
    Improper neutralization of shell metacharacters in the timezone configuration field in certain Barracuda appliance products using common Barracuda...
    CISA KEV📅 Added to KEV: Nov 10, 2026
  • CVE-2026-116606CVSS 9.3
    An authentication bypass in Barracuda Email Security Gateway versions earlier than 9.4.0.030 allows an unauthenticated remote attacker to...
    CISA KEV📅 Added to KEV: Nov 10, 2026
  • CVE-2026-125350
    Use after free in XML. Reported by anonymous on 2026-11-06. Google is aware that an exploit for CVE-2026-125350...
    CISA KEV📅 Added to KEV: Nov 10, 2026
  • CVE-2026-124194CVSS 6.5
    Product ui does not warn user of unsafe actions in Microsoft Office Outlook allows an unauthorized attacker to...
    CISA KEV📅 Added to KEV: Nov 10, 2026
  • CVE-2026-123751CVSS 9.8
    The WP Duplicate WordPress plugin through 1.1.11 does not properly verify a request authentication value and does not...
    Watchtower Verified📅 Updated: Nov 9, 2026
  • CVE-2026-114713CVSS 8.6
    The labeled-response module in UnrealIRCd 6.0.0 before 6.2.7.1 does not escape the IRCv3 "label" message tag when echoing...
    Admin intel📅 Updated: Nov 9, 2026
Powered by CVE Watchtower

Critical Vulnerabilities

  • CVE-2026-114160CVSS 9.8
    Server-side request forgery (ssrf) in Azure Managed Grafana allows an unauthorized attacker to elevate privileges over a network.
    📅 Updated: Nov 11, 2026
  • CVE-2026-109469CVSS 10.0
    Authorization bypass through user-controlled key in Entra Device Registration allows an unauthorized attacker to elevate privileges over a...
    📅 Updated: Nov 11, 2026
  • CVE-2026-101763CVSS 9.8
    Vulnerability in the Oracle Communications BRM - Elastic Charging Engine product of Oracle Communications (component: Cloud native deployment)....
    📅 Updated: Nov 11, 2026
  • CVE-2026-101809CVSS 10.0
    Vulnerability in the Workflow product of Oracle E-Business Suite (component: Workflow Notification Mailer). Supported versions that are affected...
    📅 Updated: Nov 11, 2026
  • CVE-2026-126253CVSS 9.3
    An Authentication Bypass by Primary Weakness vulnerability [cwe-305] in FortiOS and FortiSASE ospf daemon may allow an unauthenticated...
    📅 Updated: Nov 11, 2026
  • CVE-2026-126170CVSS 9.8
    An Improper Encoding or Escaping of Output vulnerability [CWE-116] in FortiSASE-Sovereign, FortiAnalyzer, FortiManager, FortiAnalyzer Cloud, FortiManager Cloud and...
    📅 Updated: Nov 11, 2026
  • CVE-2026-91220CVSS 9.8
    Vulnerability in the Oracle Business Process Management Suite product of Oracle Fusion Middleware (component: Human Workflow). Supported versions...
    📅 Updated: Nov 11, 2026
  • CVE-2026-91222CVSS 9.9
    Vulnerability in the Oracle Business Process Management Suite product of Oracle Fusion Middleware (component: Human Workflow (11g+)). Supported...
    📅 Updated: Nov 11, 2026
Powered by CVE Watchtower

Daily CyberSecurity

  • About SecurityOnline.info
  • Advertise with us
  • Announcement
  • Contact
  • Contributor Register
  • Login
  • Disclaimer
  • DCMA
  • Privacy Policy
  • About SecurityOnline.info
  • Advertise on SecurityOnline.info
  • Contact Us

When you purchase through links on our site, we may earn an affiliate commission. Here’s how it works

  • CVE Watchtower
  • CVE Statistics by Vendor 2026
  • Q3 2026 Report
  • Top Exploited CVEs
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube
© 2017 - 2026 Daily CyberSecurity. All Rights Reserved.