Skip to content
November 11, 2026
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube

Daily CyberSecurity

Zero-hour alerts. Unmatched analysis.

Primary Menu
  • Home
  • CVE Data
    • CVE Watchtower
    • Top Exploited CVEs
    • CVE Stats by Vendor
    • Q2 2026 Report
    • CVE Alerts
    • CVE Alert Settings
    • Pricing
  • Cyber Criminals
  • Data Leak
  • Free Tools
    • CVSS 3.1 Calculator
    • Certificate Viewer
    • DNS Lookup
    • Encoder & Hash Generator
    • IP / Subnet Calculator
    • Whois Lookup
  • Linux
  • Malware
  • Vulnerability
  • Submit Press Release
Light/Dark Button
Critical Devolutions Server Flaw (CVE-2025-13757) Allows Authenticated SQL Injection to Steal All Passwords shell-quote command injection AI-Driven Vulnerabilities Q1 2026 Cyber Threats vm2 Sandbox Escape Node.js RCE upKeeper Privilege Escalation CVE-2026-2449 Pharos Controls Vulnerability Root Access Exploit Cybersecurity Vulnerability Roundup CVSS 10.0 Flaws Shadow Archives CVE-2026-0866 MS-Agent Prompt Injection CVE-2026-2256 basic-ftp Path Traversal CVE-2026-27699 telnetd Root Vulnerability CVE-1999-0073 Regression USR-W610 Vulnerabilities End-of-Life IoT Security IceWarp Security Update IceWarp Vulnerabilities Airleader Master Vulnerability CVE-2026-1358 ZLAN5143D Vulnerability CISA ICS Advisory Acronis Cyber Protect Vulnerability CVE-2025-30411 WAGO 852 Vulnerability OT Network Security SandboxJS Vulnerability Sandbox Escape (CVSS 10.0) Kubernetes Local Path Provisioner CVE-2025-62878 CISA Unresponsive Vendors Avation & RISS Vulnerabilities KiloView Vulnerability CVE-2026-1453 OpenClaw RCE vulnerability Johnson Controls Vulnerability CVE-2025-26385 SandboxJS Vulnerability CVE-2026-23830 ibaPDA Vulnerability CVE-2025-14988 Protobuf Vulnerability CVE-2026-0994 AVEVA Process Optimization Vulnerability CVE-2025-61937 ConnectWise PSA Vulnerability CVE-2026-0695 Aruba VIA Vulnerability CVE-2025-37186 aiohttp v3.13.3, Denial of Service (DoS) SmarterMail RCE, CVE-2025-52691 Airoha RACE, Headphone Jacking HPE OneView RCE CVE-2025-37164 FreePBX Auth Bypass, PBX Takeover ScreenConnect Config Flaw, Untrusted Extensions Ruby SAML Auth Bypass, XML Parser Differential Devolutions SQL Injection, Password Manager Flaw Vivotek Unauthenticated RCE, EOL IP Camera Flaw Lynx+ Critical Flaw, Unauthenticated Reset Firebox Default Credentials, CVE-2025-59396 Veeder-Root RCE, Critical ATG Flaw ArcGIS Server SQLi Watchdoc RCE, CVE-2025-58384 Delta DIALink Daikin Security Gateway, authentication bypass Frostbyte10, industrial controller security SunPower, vulnerability Ubiquiti UniFi Connect, EV Station Vulnerabilities Adobe Experience Manager, RCE Vulnerability UniFi Access, Command Injection LDAPNightmare - CVE-2025-1316
  • Vulnerability Report

Critical Devolutions Server Flaw (CVE-2025-13757) Allows Authenticated SQL Injection to Steal All Passwords

Do Son December 1, 2025 0
Devolutions has released urgent security updates for its flagship self-hosted password management solution, Devolutions Server, addressing three...
Read More Read more about Critical Devolutions Server Flaw (CVE-2025-13757) Allows Authenticated SQL Injection to Steal All Passwords
New TangleCrypt Packer Hides EDR Killer, But Coding Flaws Cause Ransomware to Crash Unexpectedly RedLineCyber Clipboard Hijacker TangleCrypt Packer, STONESTOP EDR Killer Gamaredon APT - BoneSpy and PlainGnome
  • Malware

New TangleCrypt Packer Hides EDR Killer, But Coding Flaws Cause Ransomware to Crash Unexpectedly

Do Son December 1, 2025 0
In the high-stakes game of ransomware, threat actors are constantly refining their camouflage. A new report from...
Read More Read more about New TangleCrypt Packer Hides EDR Killer, But Coding Flaws Cause Ransomware to Crash Unexpectedly
Russian Tomiris APT Adopts “Polyglot” Strategy, Hijacking Telegram/Discord as Covert C2 for Diplomatic Spies Tomiris APT, Polyglot C2
  • Cyber Security
  • Malware

Russian Tomiris APT Adopts “Polyglot” Strategy, Hijacking Telegram/Discord as Covert C2 for Diplomatic Spies

Do Son December 1, 2025 0
A notorious threat actor known as “Tomiris” has returned with a revamped arsenal, launching a focused campaign...
Read More Read more about Russian Tomiris APT Adopts “Polyglot” Strategy, Hijacking Telegram/Discord as Covert C2 for Diplomatic Spies
High-Severity GeoServer Flaw (CVE-2025-58360) Allows Unauthenticated XXE for File Theft and SSRF CVE-2023-25157 GeoServer XXE, Unauthenticated File Exfiltration
  • Vulnerability Report

High-Severity GeoServer Flaw (CVE-2025-58360) Allows Unauthenticated XXE for File Theft and SSRF

Do Son December 1, 2025 0
The maintainers of GeoServer have issued an important security advisory regarding a high-severity vulnerability that could allow...
Read More Read more about High-Severity GeoServer Flaw (CVE-2025-58360) Allows Unauthenticated XXE for File Theft and SSRF
New MaaS Operator TAG-150 Uses ClickFix Lure and Custom CastleLoader to Compromise 469 US Devices TAG-150 CastleLoader, ClickFix MaaS NetSupport RAT ClickFix, Multi-Cluster RMM
  • Cybercriminals

New MaaS Operator TAG-150 Uses ClickFix Lure and Custom CastleLoader to Compromise 469 US Devices

Do Son December 1, 2025 0
A new and aggressive player has entered the cybercrime arena. A recent report from Darktrace sheds light...
Read More Read more about New MaaS Operator TAG-150 Uses ClickFix Lure and Custom CastleLoader to Compromise 469 US Devices
North Korea’s “Contagious Interview” Floods npm with 200 New Packages, Using Fake Crypto Jobs to Deploy OtterCookie Spyware BlueNoroff macOS Attack GhostCall Campaign Carding Underground Bulletproof Hosting DPRK Contagious Interview, npm Flood Stonefly group -HiatusRAT Actors
  • Cyber Security

North Korea’s “Contagious Interview” Floods npm with 200 New Packages, Using Fake Crypto Jobs to Deploy OtterCookie Spyware

Do Son December 1, 2025 0
A relentless state-sponsored campaign by North Korean threat actors is aggressively targeting blockchain and Web3 developers by...
Read More Read more about North Korea’s “Contagious Interview” Floods npm with 200 New Packages, Using Fake Crypto Jobs to Deploy OtterCookie Spyware
ShadowV2 Mirai Botnet Launched Coordinated IoT Test Attack During Global AWS Outage ShadowV2 Mirai, AWS Outage Attack
  • Malware

ShadowV2 Mirai Botnet Launched Coordinated IoT Test Attack During Global AWS Outage

Do Son December 1, 2025 0
While IT teams worldwide scrambled to restore services during a massive AWS outage in October, a new...
Read More Read more about ShadowV2 Mirai Botnet Launched Coordinated IoT Test Attack During Global AWS Outage
Bloody Wolf APT Expands to Central Asia, Deploys NetSupport RAT via Custom Java Droppers and Geo-Fencing Harvester APT Linux Backdoor OT Cyberattack Iranian APT Operation Olalampo MuddyWater APT Prince of Persia APT, Tonnerre v50 Patchwork APT, DLL Sideloading Subtle Snail, cyber espionage ShadowSilk, cyber espionage Volt Typhoon APT Group - Chinese Cybersecurity Firm
  • Cyber Security
  • Malware

Bloody Wolf APT Expands to Central Asia, Deploys NetSupport RAT via Custom Java Droppers and Geo-Fencing

Do Son December 1, 2025 0
A shapeshifting advanced persistent threat (APT) group known as Bloody Wolf has expanded its hunting grounds. Following...
Read More Read more about Bloody Wolf APT Expands to Central Asia, Deploys NetSupport RAT via Custom Java Droppers and Geo-Fencing
Google Assembles Foxconn/Samsung Supply Chain for Q4 2026 AI Glasses Launch Google AI Glasses Foxconn Samsung Supply Chain
  • Android

Google Assembles Foxconn/Samsung Supply Chain for Q4 2026 AI Glasses Launch

Do Son November 29, 2025 0
Reports indicate that Google is accelerating development of an all-new AI glasses initiative and has already assembled...
Read More Read more about Google Assembles Foxconn/Samsung Supply Chain for Q4 2026 AI Glasses Launch
EU Launches Probe: Are Apple Maps & Apple Ads Next for DMA Gatekeeper Status? Apple Maps Apple Ads DMA EU Gatekeeper Probe
  • Technology

EU Launches Probe: Are Apple Maps & Apple Ads Next for DMA Gatekeeper Status?

Do Son November 29, 2025 0
Following the designation of Safari, iOS, iPadOS, and the App Store, Apple may soon see even more...
Read More Read more about EU Launches Probe: Are Apple Maps & Apple Ads Next for DMA Gatekeeper Status?
❮ Prev Page
Next Page ❯
Critical Security Vulnerabilities Discovered in Apache Linkis: Users Urged to Upgrade Immediately Apache Linkis vulnerability - CVE-2024-27181 and CVE-2024-27182
  • Vulnerability

Critical Security Vulnerabilities Discovered in Apache Linkis: Users Urged to Upgrade Immediately

Do Son August 5, 2024 0

Keep your systems secure with the latest Apache Linkis release. Discover the patched vulnerabilities and understand the potential risks they posed to user security.

BlankBot: New Android Trojan Steals Banking Data, Records Screens BlankBot Android banking trojan
  • Malware

BlankBot: New Android Trojan Steals Banking Data, Records Screens

Do Son August 5, 2024 0

Beware of the BlankBot Android banking trojan! Discover how this sophisticated malware targets mobile users and gains complete control of infected devices.

Beware of Fake AI Photo Editors on Social Media: Malvertising Campaign Targets Credentials AI Photo Editors
  • Cyber Security

Beware of Fake AI Photo Editors on Social Media: Malvertising Campaign Targets Credentials

Do Son August 5, 2024 0

Discover the sophisticated malvertising campaign that targets social media pages to promote a fraudulent AI photo editor website. Find out how users' sensitive information is compromised.

Chinese Hackers StormBamboo Target ISP to Deliver Malware via Updates StormBamboo - Evasive Panda
  • Cyber Security
  • Malware

Chinese Hackers StormBamboo Target ISP to Deliver Malware via Updates

Do Son August 5, 2024 0

Uncover the details of the StormBamboo cyber attack: learn how this Chinese group infiltrated an ISP's systems to distribute malicious software updates.

Cryptonator Seized: US and German Authorities Bust Crypto Wallet for Illicit Activity Seize Crypto Wallet Cryptonator
  • Cyber Security

Cryptonator Seized: US and German Authorities Bust Crypto Wallet for Illicit Activity

Do Son August 5, 2024 0

Uncover the illicit activities of Cryptonator, an unregistered cryptocurrency exchange involved in money laundering and supporting criminal endeavors.

Linux Kernel 6.9 Reaches End of Life, Users Urged to Upgrade for Continued Security TLP Vulnerability CVE-2025-67859 Linux Kernel 6.9 Linux Kernel, End-of-Life
  • Linux

Linux Kernel 6.9 Reaches End of Life, Users Urged to Upgrade for Continued Security

Do Son August 5, 2024 0

The Linux Kernel 6.9 series has reached end of life. Upgrade now to protect your system from security threats.

Roundcube Webmail Releases Security Updates to Patch Multiple Vulnerabilities Roundcube SVG XSS, HTML Style Sanitizer Roundcube Phishing Roundcube webmail vulnerability
  • Vulnerability

Roundcube Webmail Releases Security Updates to Patch Multiple Vulnerabilities

Do Son August 5, 2024 0

Stay protected from Roundcube webmail vulnerabilities with the latest security updates. Learn about the patches and fixes in versions 1.6.8 and 1.5.8.

CVE-2024-36268: Apache InLong Vulnerability Leaves Systems Open to Remote Attacks CVE-2024-36268 - Apache InLong vulnerability
  • Vulnerability

CVE-2024-36268: Apache InLong Vulnerability Leaves Systems Open to Remote Attacks

Do Son August 4, 2024 0

Important security advisory: Critical vulnerability (CVE-2024-36268) discovered in Apache InLong's TubeMQ component. Learn more about the risk and potential impact.

CVE-2024-38100: Leaked Wallpaper Exploit Exposes Windows Users to Privilege Escalation Attacks CVE-2024-38100 PoC Exploit
  • Vulnerability

CVE-2024-38100: Leaked Wallpaper Exploit Exposes Windows Users to Privilege Escalation Attacks

Do Son August 4, 2024 0

Dubbed "Leaked Wallpaper" by Michael Zhmaylo, CVE-2024-38100 vulnerability enables the leakage of a user's NetNTLM hash from any session

CVE-2024-38856: Critical Apache OFBiz Flaw Opens Door to Unauthorized Code Execution Apache OFBiz vulnerability - CVE-2024-38856
  • Vulnerability

CVE-2024-38856: Critical Apache OFBiz Flaw Opens Door to Unauthorized Code Execution

Do Son August 4, 2024 0

Urgent security advisory: Apache OFBiz vulnerability (CVE-2024-38856) exposes ERP systems to unauthorized code execution.

Malcolm: A Comprehensive Network Traffic Analysis Tool malcolm_data_pipeline
  • Open Source Tool

Malcolm: A Comprehensive Network Traffic Analysis Tool

Do Son August 4, 2024 0

Detect and mitigate cybersecurity threats with effective network traffic analysis. Discover how the innovative Malcolm tool suite can enhance your security operations.

Mint Stealer: New MaaS Malware Threatens Confidential Data Mint Stealer malware
  • Malware

Mint Stealer: New MaaS Malware Threatens Confidential Data

Do Son August 4, 2024 0

Learn about Mint Stealer, a sophisticated malware designed to steal confidential data. Find out how it operates and the techniques it uses to bypass security measures.

Beware DEV#POPPER: Evolving Malware Targets Developers Everywhere DEV#POPPER
  • Cyber Security

Beware DEV#POPPER: Evolving Malware Targets Developers Everywhere

Do Son August 4, 2024 0

Stay informed about the DEV#POPPER campaign by North Korean hackers. Learn how they target software developers and what precautions to take.

Calibre eBook Software Exposed: Critical Security Vulnerabilities Discovered Calibre vulnerability
  • Vulnerability

Calibre eBook Software Exposed: Critical Security Vulnerabilities Discovered

Do Son August 4, 2024 0

Stay informed about the latest security vulnerabilities in Calibre e-book management software and learn how to protect yourself.

Oyster Backdoor Gets Upgrade: Rhysida Ransomware Gang Uses SEO Poisoning in New Attack Rhysida ransomware group
  • Cyber Security
  • Malware

Oyster Backdoor Gets Upgrade: Rhysida Ransomware Gang Uses SEO Poisoning in New Attack

Do Son August 4, 2024 0

Learn about the Rhysida ransomware group and their tactics. Discover how they utilize the Oyster Backdoor and SEO Poisoning to attack unsuspecting users.

The Rise of RADAR and DISPOSSESSOR: A New Ransomware-as-a-Service RADAR and DISPOSSESSOR
  • Data Leak

The Rise of RADAR and DISPOSSESSOR: A New Ransomware-as-a-Service

Do Son August 4, 2024 0

Explore the dark world of ransomware collaboration and the devastating consequences for victims. Discover the story of RADAR and DISPOSSESSOR.

Critical Admidio Vulnerabilities CVE-2024-37906 and CVE-2024-38529 Revealed admidio vulnerability
  • Vulnerability

Critical Admidio Vulnerabilities CVE-2024-37906 and CVE-2024-38529 Revealed

Do Son August 4, 2024 0

Critical security vulnerabilities in Admidio (CVE-2024-37906 and CVE-2024-38529) exposed. Take action to protect sensitive data and systems.

Accelerating Memory Safety: DARPA’s TRACTOR Program Transforms C to Rust
  • Technology

Accelerating Memory Safety: DARPA’s TRACTOR Program Transforms C to Rust

Do Son August 4, 2024 0

Learn about the TRACTOR program, a DARPA initiative to transition to memory-safe programming languages and automate the conversion of C code to Rust

BunkerWeb: The Next-Generation Open-Source Web Application Firewall Open-Source Web Application Firewall
  • Open Source Tool

BunkerWeb: The Next-Generation Open-Source Web Application Firewall

Do Son August 3, 2024 0

Discover BunkerWeb, the cutting-edge open-source Web Application Firewall (WAF) that seamlessly integrates into your existing infrastructure.

Storm-1152’s CAPTCHA Bypass Operation Foiled by Microsoft Bypassing CAPTCHA
  • Cyber Security

Storm-1152’s CAPTCHA Bypass Operation Foiled by Microsoft

Do Son August 3, 2024 0

Microsoft cracks down on Vietnamese group Storm-1152 selling fraudulent accounts and CAPTCHA bypass services. Learn more about their operations.

Domain Takeover: 35,000+ Victims of Sitting Ducks Attack Sitting Ducks
  • Cyber Security

Domain Takeover: 35,000+ Victims of Sitting Ducks Attack

Do Son August 3, 2024 0

Find out how cybercriminals are using the Sitting Ducks attack to compromise over a million domains daily. Learn how to defend against this threat.

OpenCTI: Empowering Cyber Threat Intelligence Management OpenCTI - cyber threat intelligence
  • Open Source Tool

OpenCTI: Empowering Cyber Threat Intelligence Management

Do Son August 2, 2024 0

Stay ahead of cyber threats with OpenCTI. Discover how this open-source platform helps organizations manage and analyze cyber threat intelligence.

❮ Prev Page
Next Page ❯

Search

CVE ALERTS
πŸ“ˆ

EPSS Spike Alerts
Catch risk spikes before they make headlines.

🎯

Custom EPSS/CVSS
Set score thresholds to effectively filter noise.

πŸ›‘οΈ

Exploit Intel
Real-world exploit signals beyond the KEV catalog.

πŸ™

GitHub Issues
Auto-create alert tickets without duplication.

πŸ“¬

Weekly Digest
Clean summaries, eliminating email spam.

🏷️

Watchlist Groups
Tag vulnerabilities by team (Infra/AppSec/SOC).

πŸ”€

Smart Routing
Route chat channels based on severity levels.

🚨

RBP Tracker
Early warning detection and tracking system.

Subscribe – $7/mo or try free for 14 days β†’

🚨 Active Exploits in the Wild

  • CVE-2026-20320CVSS 7.5
    A vulnerability in the Open Client Interface (OCI) XML Parser of Cisco BroadWorks could allow an unauthenticated, remote...
    CISA KEV📅 Added to KEV: Nov 10, 2026
  • CVE-2026-111793CVSS 4.3
    Openwave Webtop Media Transcoder does not enforce administrator-defined file type restrictions to restrict the file-types to be converted....
    CISA KEV📅 Added to KEV: Nov 10, 2026
  • CVE-2026-111560CVSS 8.6
    Improper neutralization of shell metacharacters in the timezone configuration field in certain Barracuda appliance products using common Barracuda...
    CISA KEV📅 Added to KEV: Nov 10, 2026
  • CVE-2026-116606CVSS 9.3
    An authentication bypass in Barracuda Email Security Gateway versions earlier than 9.4.0.030 allows an unauthenticated remote attacker to...
    CISA KEV📅 Added to KEV: Nov 10, 2026
  • CVE-2026-125350
    Use after free in XML. Reported by anonymous on 2026-11-06. Google is aware that an exploit for CVE-2026-125350...
    CISA KEV📅 Added to KEV: Nov 10, 2026
  • CVE-2026-124194CVSS 6.5
    Product ui does not warn user of unsafe actions in Microsoft Office Outlook allows an unauthorized attacker to...
    CISA KEV📅 Added to KEV: Nov 10, 2026
  • CVE-2026-123751CVSS 9.8
    The WP Duplicate WordPress plugin through 1.1.11 does not properly verify a request authentication value and does not...
    Watchtower Verified📅 Updated: Nov 9, 2026
  • CVE-2026-114713CVSS 8.6
    The labeled-response module in UnrealIRCd 6.0.0 before 6.2.7.1 does not escape the IRCv3 "label" message tag when echoing...
    Admin intel📅 Updated: Nov 9, 2026
Powered by CVE Watchtower

Critical Vulnerabilities

  • CVE-2026-96067CVSS 9.8
    Integer overflow or wraparound in Microsoft Color Management allows an unauthorized attacker to execute code over a network.
    📅 Updated: Nov 11, 2026
  • CVE-2026-96078CVSS 9.8
    Heap-based buffer overflow in Microsoft Color Management allows an unauthorized attacker to execute code over a network.
    📅 Updated: Nov 11, 2026
  • CVE-2026-96157CVSS 9.8
    Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.
    📅 Updated: Nov 11, 2026
  • CVE-2026-89126CVSS 10.0
    SAP Web Dispatcher does not sufficiently validate certain network input processed by an internal component. An unauthenticated attacker...
    📅 Updated: Nov 11, 2026
  • CVE-2026-95882CVSS 9.8
    Stack-based buffer overflow in Windows Microsoft DirectMusic allows an unauthorized attacker to execute code over a network.
    📅 Updated: Nov 11, 2026
  • CVE-2026-95901CVSS 9.8
    Double free in Windows Microsoft DirectMusic allows an unauthorized attacker to execute code over a network.
    📅 Updated: Nov 11, 2026
  • CVE-2026-89103CVSS 10.0
    SAP Gateway activates the default Access Control List with high privileges allowing categorization of external attacker as internal...
    📅 Updated: Nov 11, 2026
  • CVE-2026-89119CVSS 9.6
    SAP Web Dispatcher and SAP NetWeaver Application Server ABAP (Internet Communication Manager) do not perform sufficient request validation...
    📅 Updated: Nov 11, 2026
Powered by CVE Watchtower

Daily CyberSecurity

  • About SecurityOnline.info
  • Advertise with us
  • Announcement
  • Contact
  • Contributor Register
  • Login
  • Disclaimer
  • DCMA
  • Privacy Policy
  • About SecurityOnline.info
  • Advertise on SecurityOnline.info
  • Contact Us

When you purchase through links on our site, we may earn an affiliate commission. Here’s how it works

  • CVE Watchtower
  • CVE Statistics by Vendor 2026
  • Q3 2026 Report
  • Top Exploited CVEs
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube
Β© 2017 - 2026 Daily CyberSecurity. All Rights Reserved.