Skip to content
November 11, 2026
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube

Daily CyberSecurity

Zero-hour alerts. Unmatched analysis.

Primary Menu
  • Home
  • CVE Data
    • CVE Watchtower
    • Top Exploited CVEs
    • CVE Stats by Vendor
    • Q2 2026 Report
    • CVE Alerts
    • CVE Alert Settings
    • Pricing
  • Cyber Criminals
  • Data Leak
  • Free Tools
    • CVSS 3.1 Calculator
    • Certificate Viewer
    • DNS Lookup
    • Encoder & Hash Generator
    • IP / Subnet Calculator
    • Whois Lookup
  • Linux
  • Malware
  • Vulnerability
  • Submit Press Release
Light/Dark Button
Critical Elementor Plugin Flaw (CVE-2025-8489, CVSS 9.8) Under Active Exploitation Allows Unauthenticated Admin Takeover Elementor Unauthenticated EoP, CVE-2025-8489 Exploitation WordPress Privilege Escalation, WP Freeio WordPress backdoor Jupiter X Core - CVE-2024-7781 & CVE-2024-7782
  • Vulnerability Report

Critical Elementor Plugin Flaw (CVE-2025-8489, CVSS 9.8) Under Active Exploitation Allows Unauthenticated Admin Takeover

Do Son December 3, 2025 0
A critical security flaw in a popular WordPress plugin has triggered a massive wave of exploitation attempts,...
Read More Read more about Critical Elementor Plugin Flaw (CVE-2025-8489, CVSS 9.8) Under Active Exploitation Allows Unauthenticated Admin Takeover
High-Severity Angular Flaw (CVE-2025-66412) Allows Stored XSS via SVG and MathML Bypass Angular hostname hijacking vulnerability Angular SSRF Origin Hijacking Angular XSS Vulnerability CVE-2026-32635 Angular i18n XSS CVE-2026-27970 Angular SSR SSRF CVE-2026-27739 Angular Vulnerability CVE-2026-22610 CVE-2025-59052 Angular security Angular XSS Bypass, SVG Injection
  • Vulnerability Report

High-Severity Angular Flaw (CVE-2025-66412) Allows Stored XSS via SVG and MathML Bypass

Do Son December 3, 2025 0
The maintainers of Angular, the popular platform for building mobile and desktop web applications, have released an...
Read More Read more about High-Severity Angular Flaw (CVE-2025-66412) Allows Stored XSS via SVG and MathML Bypass
Discontinued Library: High-Severity lz4-java Flaw (CVE‐2025‐12183) Forces Immediate Migration to Community Fork lz4-java Out-of-bounds Read, Library EOL
  • Vulnerability Report

Discontinued Library: High-Severity lz4-java Flaw (CVE‐2025‐12183) Forces Immediate Migration to Community Fork

Do Son December 3, 2025 0
A high-severity vulnerability, tracked as CVE‐2025‐12183, has been disclosed in the popular lz4-java compression library, exposing applications...
Read More Read more about Discontinued Library: High-Severity lz4-java Flaw (CVE‐2025‐12183) Forces Immediate Migration to Community Fork
Cyber Startup Frenetik Launches with Patented Deception Technology That Bets Against the AI Arms Race frenetik_17640073059qwMUZNORw
  • Press Release

Cyber Startup Frenetik Launches with Patented Deception Technology That Bets Against the AI Arms Race

cybernewswire December 2, 2025 0
Bethesda, USA / Maryland, 2nd December 2025, CyberNewsWire
Read More Read more about Cyber Startup Frenetik Launches with Patented Deception Technology That Bets Against the AI Arms Race
AI Adoption Surges While Governance Lags — Report Warns of Growing Shadow Identity Risk AI-Data-Security-Report-Image-2_1764604257jUacyOMyCu
  • Press Release

AI Adoption Surges While Governance Lags — Report Warns of Growing Shadow Identity Risk

cybernewswire December 2, 2025 0
Baltimore, MD, 2nd December 2025, CyberNewsWire
Read More Read more about AI Adoption Surges While Governance Lags — Report Warns of Growing Shadow Identity Risk
Apple AI Shakeup: Giannandrea Out, Former Google Gemini Chief Amar Subramanya Hired Apple Spring Event 2026 Apple Intel 14A iPhone 2028, Intel Foundry Apple Silicon iPhone 18 glass cloth shortage, Nittobo T-glass Apple crisis Apple UK App Store lawsuit appeal, Apple tax £1.5bn damages Apple AI Leadership Shakeup Giannandrea Subramanya Touchscreen MacBook Pro Apple 2026 Roadmap Apple Smart Home, Desktop Robot Apple H3 Chip, AirPods Camera Apple chips, on-device AI Apple AI, retail chatbot MacBook, Affordable Foldable iPhone, Apple Strategy Apple COO, Leadership Transition DOJ Lawsuit Apple EU Policy, App Store Fees CVE-2024-23222 Apple French antitrust fine
  • Technology

Apple AI Shakeup: Giannandrea Out, Former Google Gemini Chief Amar Subramanya Hired

Do Son December 2, 2025 0
Apple has announced a major leadership reshuffle, confirming that Senior Vice President of Machine Learning and AI...
Read More Read more about Apple AI Shakeup: Giannandrea Out, Former Google Gemini Chief Amar Subramanya Hired
Sonesta International Hotels Implements Industry-Leading Cloud Security Through AccuKnox Collaboration snoesta_17645641359YKXX9ahRy
  • Press Release

Sonesta International Hotels Implements Industry-Leading Cloud Security Through AccuKnox Collaboration

cybernewswire December 2, 2025 0
Menlo Park, USA, 2nd December 2025, CyberNewsWire
Read More Read more about Sonesta International Hotels Implements Industry-Leading Cloud Security Through AccuKnox Collaboration
Alarm: Coupang Data Breach Exposes 33.7 Million Users—Over Half of South Korea Fiverr Data Leak Claude Code Leak Anthropic DMCA Takedown Coupang 33.7M Breach South Korea Data Leak Red Hat Breach, Customer Data Theft Farmers Insurance, Salesforce ESLint Plugin -Mamont Android banking Trojan
  • Data Leak

Alarm: Coupang Data Breach Exposes 33.7 Million Users—Over Half of South Korea

Do Son December 2, 2025 0
A major data breach has struck Coupang, one of South Korea’s most prominent e-commerce platforms, compromising the...
Read More Read more about Alarm: Coupang Data Breach Exposes 33.7 Million Users—Over Half of South Korea
Europol Shuts Down CryptoMixer, Seizes €25 Million in Bitcoin & 12 TB of Data Europol CryptoMixer Takedown Centralized Mixer Seizure
  • Cybercriminals

Europol Shuts Down CryptoMixer, Seizes €25 Million in Bitcoin & 12 TB of Data

Do Son December 2, 2025 0
Europol recently disclosed that, during a coordinated operation, it successfully dismantled the mixing service CryptoMixer, a platform...
Read More Read more about Europol Shuts Down CryptoMixer, Seizes €25 Million in Bitcoin & 12 TB of Data
AWS Transform: Agentic AI Automates Legacy Code Modernization and Reduces Technical Debt AWS Transform Agentic AI Technical Debt Automation
  • Technology

AWS Transform: Agentic AI Automates Legacy Code Modernization and Reduces Technical Debt

Do Son December 2, 2025 0
At the re:Invent 2025 conference, AWS announced a sweeping enhancement to its application-modernization service, AWS Transform, introducing...
Read More Read more about AWS Transform: Agentic AI Automates Legacy Code Modernization and Reduces Technical Debt
❮ Prev Page
Next Page ❯
CVE-2024-7589: OpenSSH Pre-Authentication Vulnerability in FreeBSD Exposes Systems to RCE FreeBSD Wi-Fi RCE Vulnerability CVE-2026-45255 Patch FreeBSD dhclient Root Exploit CVE-2026-42511 FreeBSD Vulnerability - CVE-2024-7589 FreeBSD Jail Escape CVE-2025-15576
  • Vulnerability

CVE-2024-7589: OpenSSH Pre-Authentication Vulnerability in FreeBSD Exposes Systems to RCE

Do Son August 11, 2024 0

The FreeBSD Project disclosed a critical vulnerability (CVE-2024-7589) in OpenSSH, the widely-used implementation of the SSH protocol suite

PoC Exploit Releases for Cisco SSM On-Prem Account Takeover (CVE-2024-20419) Flaw CVE-2024-20419 PoC Exploit
  • Vulnerability

PoC Exploit Releases for Cisco SSM On-Prem Account Takeover (CVE-2024-20419) Flaw

Do Son August 11, 2024 0

CVE-2024-20419 has been disclosed by security researcher Mohammed Adel, who published a detailed writeup along with PoC exploit code

Hacker Leaks 1.4 Billion Tencent Records: Mobile, Email, and QQ IDs Exposed Tencent Data Leak
  • Data Leak

Hacker Leaks 1.4 Billion Tencent Records: Mobile, Email, and QQ IDs Exposed

Do Son August 11, 2024 0

Learn about the massive Tencent data leak involving 1.4 billion records and the exposure of sensitive personal information.

Simple Coding Errors Lead to Major Ransomware Takedown ransomware groups
  • Cyber Security
  • Vulnerability

Simple Coding Errors Lead to Major Ransomware Takedown

Do Son August 11, 2024 0

Discover how a security researcher thwarted ransomware groups and saved companies from cyberattacks. Learn how vulnerabilities were uncovered and critical errors exploited.

LoanDepot Cyberattack: $27 Million Fallout LoanDepot cyberattack
  • Cyber Security

LoanDepot Cyberattack: $27 Million Fallout

Do Son August 11, 2024 0

LoanDepot discloses the financial impact of a cyberattack. Find out how the mortgage lender incurred nearly $27 million in expenses and the aftermath of the breach.

North Korean Hackers Exploit VPN Vulnerabilities to Breach Networks exploiting VPN vulnerabilities
  • Cyber Security
  • Malware

North Korean Hackers Exploit VPN Vulnerabilities to Breach Networks

Do Son August 11, 2024 0

Learn about the escalating cyberattacks on South Korea's construction and engineering sectors and how cybercriminal groups are exploiting VPN vulnerabilities.

New Mac Stealer “AMOS” Poses as Loom Screen Recorder, Targets Crypto Wallets Mac stealer AMOS
  • Malware

New Mac Stealer “AMOS” Poses as Loom Screen Recorder, Targets Crypto Wallets

Do Son August 11, 2024 0

Unveiling a new Mac stealer threat: the AMOS stealer. Learn how cybercriminals are targeting Mac users through a fake Loom website.

Dark Skippy: New Threat Steals Secret Keys from Signing Devices Dark Skippy attack
  • Vulnerability

Dark Skippy: New Threat Steals Secret Keys from Signing Devices

Do Son August 11, 2024 0

Learn about the Dark Skippy security threat in the cryptocurrency world. Discover how malicious actors can extract private keys from transaction signing devices.

Seqrite Labs Uncovers New Cronus Ransomware Campaign Utilizing Fake PayPal Documents Cronus Ransomware
  • Malware

Seqrite Labs Uncovers New Cronus Ransomware Campaign Utilizing Fake PayPal Documents

Do Son August 11, 2024 0

Learn about Cronus Ransomware, a sophisticated fileless variant that targets individuals worldwide. Discover how it operates entirely in memory, leaving no trace on the victim's disk.

CVE-2024-38200: Zero-Day Vulnerability in Microsoft Office: A Call for Urgent Action Microsoft Office vulnerability - CVE-2024-38200
  • Vulnerability

CVE-2024-38200: Zero-Day Vulnerability in Microsoft Office: A Call for Urgent Action

Do Son August 11, 2024 0

Don't overlook this zero-day Microsoft Office vulnerability. Learn about the CVE-2024-38200 flaw and the steps you can take to mitigate the risk

Vuls: A Comprehensive Vulnerability Management Solution for Modern IT Environments vuls-abstract
  • Open Source Tool

Vuls: A Comprehensive Vulnerability Management Solution for Modern IT Environments

Do Son August 10, 2024 0

Optimize your vulnerability management with Vuls, an automated solution designed to streamline the process of identifying and patching vulnerabilities.

GL-iNet Routers Exposed to Critical Vulnerabilities: Urgent Firmware Updates Required GL-iNet Routers vulnerability
  • Vulnerability

GL-iNet Routers Exposed to Critical Vulnerabilities: Urgent Firmware Updates Required

Do Son August 10, 2024 0

Stay safe with GL-iNet router updates: Discover the critical vulnerabilities affecting multiple router models and the steps to mitigate risks

STAC6451: A Threat Group Targeting Indian Organizations with Mimic Ransomware STAC6451 threat group
  • Cyber Security
  • Malware

STAC6451: A Threat Group Targeting Indian Organizations with Mimic Ransomware

Do Son August 10, 2024 0

New threat activity cluster, STAC6451, targeting organizations in India with Mimic ransomware. Learn how to protect your SQL Server databases.

2024 US Election Faces Escalating Iranian Cyber Influence, MTAC Warns Iran cyber influence
  • Cyber Security

2024 US Election Faces Escalating Iranian Cyber Influence, MTAC Warns

Do Son August 10, 2024 0

Stay informed about the escalating cyber-enabled influence operations originating from Iran ahead of the 2024 US presidential election.

Nexera Hacked: $1.8 Million Stolen from Tokenization Giant Nexera attack
  • Cyber Security

Nexera Hacked: $1.8 Million Stolen from Tokenization Giant

Do Son August 9, 2024 0

Learn about the recent attack on Nexera, a leading blockchain infrastructure protocol. Discover how hackers stole $1.8 million and the measures taken to suspend trading.

Wazuh: A Comprehensive Open-Source Platform for Threat Detection and Response Threat Detection
  • Open Source Tool

Wazuh: A Comprehensive Open-Source Platform for Threat Detection and Response

Do Son August 9, 2024 0

Discover Wazuh, a free and open-source platform that provides end-to-end threat prevention, detection, and response capabilities for IT infrastructures.

Django Releases Security Updates to Address Critical Flaw (CVE-2024-42005, CVSS 9.8) Django vulnerability - CVE-2024-42005 Django SQL Injection, CVE-2025-59681
  • Vulnerability

Django Releases Security Updates to Address Critical Flaw (CVE-2024-42005, CVSS 9.8)

Do Son August 9, 2024 0

Ensure the security of your Django web applications. Get the latest security updates and patch critical vulnerabilities (CVE-2024-42005).

GoGra: New Go-Based Backdoor Targets South Asian Media
  • Cyber Security
  • Malware

GoGra: New Go-Based Backdoor Targets South Asian Media

Do Son August 9, 2024 0

Uncover the GoGra backdoor: a stealthy malware leveraging Microsoft's ecosystem to infiltrate targeted systems.

Team82 Unveils Research on Unitronics PLC/HMI Attacks Targeting Critical Infrastructure Programmable Logic Controllers
  • Vulnerability

Team82 Unveils Research on Unitronics PLC/HMI Attacks Targeting Critical Infrastructure

Do Son August 9, 2024 0

Delve into the investigation of the cyberattacks on Unitronics' Programmable Logic Controllers (PLCs) and Human-Machine Interfaces (HMIs). Discover how these attacks targeted critical infrastructure and the tactics used by the hackers.

Windows Smart App Control, SmartScreen Vulnerable to Exploits Windows Smart App Control Flaws
  • Vulnerability

Windows Smart App Control, SmartScreen Vulnerable to Exploits

Do Son August 9, 2024 0

Discover the vulnerabilities in Microsoft Windows Smart App Control and SmartScreen that allow for system infiltration without triggering alerts.

Department of Justice Disrupts North Korean IT Worker Fraud Scheme with Arrest of Nashville Resident TASPEN, mobile malware North Korean IT Worker Fraud
  • Cyber Security

Department of Justice Disrupts North Korean IT Worker Fraud Scheme with Arrest of Nashville Resident

Do Son August 9, 2024 0

Learn about the charges filed against Matthew Isaac Knoot for his role in a scheme to generate illicit revenue for North Korea's weapons program.

SSHamble: runZero’s Open Source Tool to Secure Your SSH Implementations SSH Implementations - SSHamble
  • Vulnerability

SSHamble: runZero’s Open Source Tool to Secure Your SSH Implementations

Do Son August 9, 2024 0

Uncover the vulnerabilities of SSH implementations and learn how to secure your network from potential attacks.

❮ Prev Page
Next Page ❯

Search

CVE ALERTS
📈

EPSS Spike Alerts
Catch risk spikes before they make headlines.

🎯

Custom EPSS/CVSS
Set score thresholds to effectively filter noise.

🛡️

Exploit Intel
Real-world exploit signals beyond the KEV catalog.

🐙

GitHub Issues
Auto-create alert tickets without duplication.

📬

Weekly Digest
Clean summaries, eliminating email spam.

🏷️

Watchlist Groups
Tag vulnerabilities by team (Infra/AppSec/SOC).

🔀

Smart Routing
Route chat channels based on severity levels.

🚨

RBP Tracker
Early warning detection and tracking system.

Subscribe – $7/mo or try free for 14 days →

🚨 Active Exploits in the Wild

  • CVE-2026-20320CVSS 7.5
    A vulnerability in the Open Client Interface (OCI) XML Parser of Cisco BroadWorks could allow an unauthenticated, remote...
    CISA KEV📅 Added to KEV: Nov 10, 2026
  • CVE-2026-111793CVSS 4.3
    Openwave Webtop Media Transcoder does not enforce administrator-defined file type restrictions to restrict the file-types to be converted....
    CISA KEV📅 Added to KEV: Nov 10, 2026
  • CVE-2026-111560CVSS 8.6
    Improper neutralization of shell metacharacters in the timezone configuration field in certain Barracuda appliance products using common Barracuda...
    CISA KEV📅 Added to KEV: Nov 10, 2026
  • CVE-2026-116606CVSS 9.3
    An authentication bypass in Barracuda Email Security Gateway versions earlier than 9.4.0.030 allows an unauthenticated remote attacker to...
    CISA KEV📅 Added to KEV: Nov 10, 2026
  • CVE-2026-125350
    Use after free in XML. Reported by anonymous on 2026-11-06. Google is aware that an exploit for CVE-2026-125350...
    CISA KEV📅 Added to KEV: Nov 10, 2026
  • CVE-2026-124194CVSS 6.5
    Product ui does not warn user of unsafe actions in Microsoft Office Outlook allows an unauthorized attacker to...
    CISA KEV📅 Added to KEV: Nov 10, 2026
  • CVE-2026-123751CVSS 9.8
    The WP Duplicate WordPress plugin through 1.1.11 does not properly verify a request authentication value and does not...
    Watchtower Verified📅 Updated: Nov 9, 2026
  • CVE-2026-114713CVSS 8.6
    The labeled-response module in UnrealIRCd 6.0.0 before 6.2.7.1 does not escape the IRCv3 "label" message tag when echoing...
    Admin intel📅 Updated: Nov 9, 2026
Powered by CVE Watchtower

Critical Vulnerabilities

  • CVE-2026-114160CVSS 9.8
    Server-side request forgery (ssrf) in Azure Managed Grafana allows an unauthorized attacker to elevate privileges over a network.
    📅 Updated: Nov 11, 2026
  • CVE-2026-109469CVSS 10.0
    Authorization bypass through user-controlled key in Entra Device Registration allows an unauthorized attacker to elevate privileges over a...
    📅 Updated: Nov 11, 2026
  • CVE-2026-101763CVSS 9.8
    Vulnerability in the Oracle Communications BRM - Elastic Charging Engine product of Oracle Communications (component: Cloud native deployment)....
    📅 Updated: Nov 11, 2026
  • CVE-2026-101809CVSS 10.0
    Vulnerability in the Workflow product of Oracle E-Business Suite (component: Workflow Notification Mailer). Supported versions that are affected...
    📅 Updated: Nov 11, 2026
  • CVE-2026-126253CVSS 9.3
    An Authentication Bypass by Primary Weakness vulnerability [cwe-305] in FortiOS and FortiSASE ospf daemon may allow an unauthenticated...
    📅 Updated: Nov 11, 2026
  • CVE-2026-126170CVSS 9.8
    An Improper Encoding or Escaping of Output vulnerability [CWE-116] in FortiSASE-Sovereign, FortiAnalyzer, FortiManager, FortiAnalyzer Cloud, FortiManager Cloud and...
    📅 Updated: Nov 11, 2026
  • CVE-2026-91220CVSS 9.8
    Vulnerability in the Oracle Business Process Management Suite product of Oracle Fusion Middleware (component: Human Workflow). Supported versions...
    📅 Updated: Nov 11, 2026
  • CVE-2026-91222CVSS 9.9
    Vulnerability in the Oracle Business Process Management Suite product of Oracle Fusion Middleware (component: Human Workflow (11g+)). Supported...
    📅 Updated: Nov 11, 2026
Powered by CVE Watchtower

Daily CyberSecurity

  • About SecurityOnline.info
  • Advertise with us
  • Announcement
  • Contact
  • Contributor Register
  • Login
  • Disclaimer
  • DCMA
  • Privacy Policy
  • About SecurityOnline.info
  • Advertise on SecurityOnline.info
  • Contact Us

When you purchase through links on our site, we may earn an affiliate commission. Here’s how it works

  • CVE Watchtower
  • CVE Statistics by Vendor 2026
  • Q3 2026 Report
  • Top Exploited CVEs
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube
© 2017 - 2026 Daily CyberSecurity. All Rights Reserved.