Skip to content
November 11, 2026
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube

Daily CyberSecurity

Zero-hour alerts. Unmatched analysis.

Primary Menu
  • Home
  • CVE Data
    • CVE Watchtower
    • Top Exploited CVEs
    • CVE Stats by Vendor
    • Q2 2026 Report
    • CVE Alerts
    • CVE Alert Settings
    • Pricing
  • Cyber Criminals
  • Data Leak
  • Free Tools
    • CVSS 3.1 Calculator
    • Certificate Viewer
    • DNS Lookup
    • Encoder & Hash Generator
    • IP / Subnet Calculator
    • Whois Lookup
  • Linux
  • Malware
  • Vulnerability
  • Submit Press Release
Light/Dark Button
EU Launches Probe: Are Apple Maps & Apple Ads Next for DMA Gatekeeper Status? Apple Maps Apple Ads DMA EU Gatekeeper Probe
  • Technology

EU Launches Probe: Are Apple Maps & Apple Ads Next for DMA Gatekeeper Status?

Do Son November 29, 2025 0
Following the designation of Safari, iOS, iPadOS, and the App Store, Apple may soon see even more...
Read More Read more about EU Launches Probe: Are Apple Maps & Apple Ads Next for DMA Gatekeeper Status?
Critical Alert: Apache Kvrocks ‘RESET’ Command Flaw Grants Admin Privileges Apache Kvrocks, Privilege Escalation
  • Vulnerability Report

Critical Alert: Apache Kvrocks ‘RESET’ Command Flaw Grants Admin Privileges

Do Son November 29, 2025 0
The Apache Software Foundation has issued a critical security advisory for Apache Kvrocks, a distributed key-value NoSQL...
Read More Read more about Critical Alert: Apache Kvrocks ‘RESET’ Command Flaw Grants Admin Privileges
CISA Flags Actively Exploited OpenPLC Flaw (CVE-2021-26829) n8n RCE Vulnerability CVE-2025-68613 CISA KEV WinRAR Zero-Day, Cloud Files UAF OpenPLC ScadaBR, CVE-2021-26829 CISA KEV, Gladinet LFI RCE XWiki RCE, VMware EoP CISA KEV CISA, Known Exploited Vulnerabilities CVE-2020-2883 CISA, Trend Micro
  • Vulnerability Report

CISA Flags Actively Exploited OpenPLC Flaw (CVE-2021-26829)

Do Son November 29, 2025 0
The Cybersecurity and Infrastructure Security Agency (CISA) has issued a new mandate for federal agencies to secure...
Read More Read more about CISA Flags Actively Exploited OpenPLC Flaw (CVE-2021-26829)
The Authentication Gap Among Retail Shift Workers: Implications and Risks Undertow Vulnerability CVE-2025-12543 CVE-2025-0107: PoC Exploit Code Undersea Cable Security, China Tech Ban
  • Technique

The Authentication Gap Among Retail Shift Workers: Implications and Risks

Do Son November 28, 2025
Retail operations move fast. Shift workers rotate in and out throughout the day, stores rely on shared...
Read More Read more about The Authentication Gap Among Retail Shift Workers: Implications and Risks
OpenAI API Users Exposed in Mixpanel Security Breach ChatGPT Lockdown Mode OpenAI OpenClaw acquisition OpenAI Prism GPT-5.2 LaTeX, scientific research AI workspace OpenAI, Mixpanel Breach ChatGPT Data Preservation, NYT Lawsuit ChatGPT Apps SDK, super app OpenAI Jony Ive, AI Hardware Delay Musk Apple lawsuit, App Store antitrust UK AI Partnership, OpenAI Collaboration Jony Ive OpenAI, DoD Contract OpenAI Lawsuit, ChatGPT Privacy North Korea ChatGPT - GPT-4.5 model OpenAI Models, AI Advancements OpenAI pricing, Flex API
  • Data Leak

OpenAI API Users Exposed in Mixpanel Security Breach

Do Son November 28, 2025 0
In a significant reminder of the risks inherent to the digital supply chain, artificial intelligence giant OpenAI...
Read More Read more about OpenAI API Users Exposed in Mixpanel Security Breach
Google Cuts Free Daily Quota for Gemini 3 Pro and Nano Banana Pro AI Models Gemini Free Quota Cut Nano Banana Pro Limit
  • Technology

Google Cuts Free Daily Quota for Gemini 3 Pro and Nano Banana Pro AI Models

Do Son November 28, 2025 0
Google has quietly revised the usage terms for its AI services, reducing the free daily quota for...
Read More Read more about Google Cuts Free Daily Quota for Gemini 3 Pro and Nano Banana Pro AI Models
Pixel 10 Exclusive: Google Maps Launches Power-Saving Navigation Mode for 4-Hour Battery Boost Pixel 10 Power-Saving Navigation Google Maps Battery Saver
  • Android

Pixel 10 Exclusive: Google Maps Launches Power-Saving Navigation Mode for 4-Hour Battery Boost

Do Son November 28, 2025 0
Google has released a practical Google Maps update for its Pixel 10 lineupβ€”including the Pixel 10, Pixel...
Read More Read more about Pixel 10 Exclusive: Google Maps Launches Power-Saving Navigation Mode for 4-Hour Battery Boost
AWS Guarantees 60-Minute Recovery Time with New Route 53 Accelerated Recovery Motorola Smart Feed redirect Anthropic Amazon 5GW partnership Amazon Perplexity lawsuit AWS-LC Vulnerabilities Cryptographic Bypass AWS Middle East drone strikes Amazon layoffs 2026, Amazon AI restructuring Amazon Kindle DRM Policy, Publisher Control EPUB AWS Nova Forge AI Model Customization AWS Trainium3 EC2 Trn3 UltraServer Route 53 Accelerated Recovery AWS DNS Resilience AI Browser War, Amazon Comet Amazon layoffs, cost reduction AWS outage, DynamoDB DNS AWS outage, cloud dependency AWS VPN Client, Root Privilege Escalation WSA shutdown, Amazon Appstore Amazon Wondery, Podcast Restructuring Amazon Q2 2025 Generative AI AWS Client VPN, Privilege Escalation Amazon AI, Wearable AI
  • Technology

AWS Guarantees 60-Minute Recovery Time with New Route 53 Accelerated Recovery

Do Son November 28, 2025 0
Earlier, a severe outage in Amazon’s cloud computing service AWS disrupted thousands of major websites, leaving users...
Read More Read more about AWS Guarantees 60-Minute Recovery Time with New Route 53 Accelerated Recovery
Zombie Protocol: How NTLM Flaws Like CVE-2024-43451 Are Haunting 2025 NTLM Vulnerabilities, CVE-2024-43451 CVE-2024-37361 - RESURGE Malware
  • Vulnerability Report

Zombie Protocol: How NTLM Flaws Like CVE-2024-43451 Are Haunting 2025

Do Son November 28, 2025 0
A new report from Kaspersky Labs reveals that despite being over two decades old, the NTLM authentication...
Read More Read more about Zombie Protocol: How NTLM Flaws Like CVE-2024-43451 Are Haunting 2025
Silent Threat: How Malicious Calendars & ‘Promptware’ Target 4M+ Devices Daily Calendar Phishing, Promptware
  • Malware

Silent Threat: How Malicious Calendars & ‘Promptware’ Target 4M+ Devices Daily

Do Son November 28, 2025 0
A new investigation by Bitsight TRACE has uncovered a subtle yet scalable attack vector: malicious calendar subscriptions....
Read More Read more about Silent Threat: How Malicious Calendars & ‘Promptware’ Target 4M+ Devices Daily
❮ Prev Page
Next Page ❯
OpenCTI: Empowering Cyber Threat Intelligence Management OpenCTI - cyber threat intelligence
  • Open Source Tool

OpenCTI: Empowering Cyber Threat Intelligence Management

Do Son August 2, 2024 0

Stay ahead of cyber threats with OpenCTI. Discover how this open-source platform helps organizations manage and analyze cyber threat intelligence.

Chinese Hackers Accused of Spying on German Cartography Agency
  • Cyber Security

Chinese Hackers Accused of Spying on German Cartography Agency

Do Son August 2, 2024 0

Germany accuses Chinese hackers of cyberattack on BKG. Learn about the espionage incident and the measures taken to enhance information security.

Apple Open-Sources Homomorphic Encryption for Enhanced Data Security
  • Technology

Apple Open-Sources Homomorphic Encryption for Enhanced Data Security

Do Son August 2, 2024 0

Learn about Swift Homomorphic Encryption, a powerful tool for protecting user privacy and enhancing data security in applications.

Twilio Axes Authy Desktop: Users Logged Out Forcibly Authy hacked
  • Technology

Twilio Axes Authy Desktop: Users Logged Out Forcibly

Do Son August 2, 2024 0

Twilio terminates Authy for desktop: users now need to install Authy on their mobile devices for verification codes.

Beware of Fake Sora AI: Cybercriminals Exploit Hype with Malware Attacks Sora AI Malware
  • Cyber Security
  • Malware

Beware of Fake Sora AI: Cybercriminals Exploit Hype with Malware Attacks

Do Son August 2, 2024 0

Beware of Sora AI malware! Cybercriminals are exploiting the buzz around OpenAI's upcoming AI model to distribute phishing sites and malicious software.

World’s Top Silver Producer Fresnillo PLC Suffers Cyberattack Iranian Espionage Seedworm group
  • Cyber Security

World’s Top Silver Producer Fresnillo PLC Suffers Cyberattack

Do Son August 2, 2024 0

Fresnillo PLC experiences cyberattack: unauthorized access to IT systems and data. Prompt response measures in place and business units remain operational.

BingoMod Malware: Android Banking Trojan Empties Accounts, Wipes Devices BingoMod RAT
  • Malware

BingoMod Malware: Android Banking Trojan Empties Accounts, Wipes Devices

Do Son August 2, 2024 0

Stay informed about the latest Android malware threat - BingoMod. Discover how this malicious software targets banking apps and steals user credentials.

Cybercriminals Target OneBlood: Blood Supply Chain Threatened CVE-2024-1212 Vulnerability
  • Cyber Security

Cybercriminals Target OneBlood: Blood Supply Chain Threatened

Do Son August 2, 2024 0

Learn about the cyberattack on OneBlood, a nonprofit organization supplying donor blood to hospitals in the US. Discover how the attack impacted their operations and the efforts being made to address the situation.

SLUBStick: Linux Kernel Exploitation with Cross-Cache Attacks Linux kernel exploit - SLUBStick - Cross-Cache Attacks
  • Linux
  • Vulnerability

SLUBStick: Linux Kernel Exploitation with Cross-Cache Attacks

Do Son August 1, 2024 0

Learn about the new Linux kernel exploit called SLUBStick and how it could empower attackers to gain complete control over a system.

600+ Domains, One Goal: Inside the ERIAKOS Mobile E-commerce Scam Screenshot 2024-08-01 160123
  • Cyber Security

600+ Domains, One Goal: Inside the ERIAKOS Mobile E-commerce Scam

Do Son August 1, 2024 0

Learn about the ERIAKOS scam campaign, an intricate cyber fraud scheme using over 600 domains to target victims via mobile devices and social media ads.

20,000+ Ubiquiti Devices Exposed: Amplification Attacks & Data Leaks GMX Exploit, Crypto Bounty Ubiquiti vulnerability - OilRig TTPs
  • Data Leak
  • Vulnerability

20,000+ Ubiquiti Devices Exposed: Amplification Attacks & Data Leaks

Do Son August 1, 2024 0

Find out the latest vulnerability in Ubiquiti devices. Over 20,000 devices are at risk, with exposed UDP ports and lack of authentication.

Malicious PyPI Packages Expose User Credentials
  • Malware

Malicious PyPI Packages Expose User Credentials

Do Son August 1, 2024 0

Beware of Python Package Index malware! Learn about the recently discovered malicious packages that can steal sensitive information from your system.

CVE-2024-7339: DVR Vulnerability Exposes Over 400,000 Devices to Hackers CVE-2024-7339 - TVT DVR Information Disclosure
  • Vulnerability

CVE-2024-7339: DVR Vulnerability Exposes Over 400,000 Devices to Hackers

Do Son August 1, 2024 0

Uncover the web server vulnerability in TVT DVR and other popular DVR devices that exposes sensitive information and enables potential intrusions and data breaches.

Chinese APT41 Group Breaches Taiwanese Research Institute APT41 group
  • Cyber Security

Chinese APT41 Group Breaches Taiwanese Research Institute

Do Son August 1, 2024 0

Discover the details of a recent cyberattack targeting a Taiwanese research institute, believed to be carried out by the Chinese state-sponsored group APT41

Beware of “The Unarchiver” Imposter: New macOS Malware Steals Sensitive User Data The Unarchiver App Malware
  • Malware

Beware of “The Unarchiver” Imposter: New macOS Malware Steals Sensitive User Data

Do Son August 1, 2024 0

Beware of the malware masquerading as The Unarchiver app. Learn how the CryptoTrade campaign steals sensitive data from unsuspecting users.

CrowdStrike Bug Exploited: Handala Hacking Team Targets Israel Handala Hacking Team
  • Cyber Security
  • Malware

CrowdStrike Bug Exploited: Handala Hacking Team Targets Israel

Do Son August 1, 2024 0

Learn about the recent cyber attack by Handala Hacking Team on Israeli targets and the significance of this intriguing incident.

Bitdefender Patches Critical Vulnerability in GravityZone Update Server CVE-2024-6980 - GravityZone Update Server
  • Vulnerability

Bitdefender Patches Critical Vulnerability in GravityZone Update Server

Do Son August 1, 2024 0

Learn about the urgent patch issued by Bitdefender for a critical vulnerability (CVE-2024-6980) in its GravityZone Update Server.

Microsoft 365 Boosts Security with Free Defender VPN Microsoft Defender VPN
  • Technology

Microsoft 365 Boosts Security with Free Defender VPN

Do Son August 1, 2024 0

Learn about the new Microsoft Defender VPN service and how it can protect your internet traffic from data theft. Available for free with Microsoft 365 subscriptions.

WazirX Faces Backlash Over Socialized Losses from $230M Cyberattack WazirX cyberattack socialize
  • Cyber Security

WazirX Faces Backlash Over Socialized Losses from $230M Cyberattack

Do Son August 1, 2024 0

Learn about the recent cyberattack on WazirX and the controversial plan to distribute $230 million in losses among users.

ModiLoader Takes Over: Phishing Frenzy Targets Poland Chain of compromise of ModiLoader phishing campaigns in Poland during May 2024 | Image: ESET
  • Cyber Security
  • Malware

ModiLoader Takes Over: Phishing Frenzy Targets Poland

Do Son August 1, 2024 0

Stay informed about the latest phishing campaigns targeting businesses in Poland, Italy, and Romania. Learn how the ModiLoader Trojan is used to deliver malicious software.

Why Reddit Blocked Bing and Other Search Engines Reddit AI bot crackdown 2026 Reddit lawsuit, data scraping AI licensing, data monetization Reddit, AI Scraping Reddit Lawsuit, AI Data Scraping Reddit Bing search
  • Technology

Why Reddit Blocked Bing and Other Search Engines

Do Son July 31, 2024 0

Learn about the impact of Reddit's decision to limit search engine access. Explore the reasons behind the ban and how it affects Bing and other search engines.

CrowdStrike, Microsoft Face Lawsuit from Delta Air Lines After System Crash Delta Air Lines
  • Technology

CrowdStrike, Microsoft Face Lawsuit from Delta Air Lines After System Crash

Do Son July 31, 2024 0

Uncover the story behind Delta Air Lines' lawsuit against CrowdStrike and Microsoft. Discover how a software update impacted their operations and resulted in massive financial losses.

❮ Prev Page
Next Page ❯

Search

CVE ALERTS
πŸ“ˆ

EPSS Spike Alerts
Catch risk spikes before they make headlines.

🎯

Custom EPSS/CVSS
Set score thresholds to effectively filter noise.

πŸ›‘οΈ

Exploit Intel
Real-world exploit signals beyond the KEV catalog.

πŸ™

GitHub Issues
Auto-create alert tickets without duplication.

πŸ“¬

Weekly Digest
Clean summaries, eliminating email spam.

🏷️

Watchlist Groups
Tag vulnerabilities by team (Infra/AppSec/SOC).

πŸ”€

Smart Routing
Route chat channels based on severity levels.

🚨

RBP Tracker
Early warning detection and tracking system.

Subscribe – $7/mo or try free for 14 days β†’

🚨 Active Exploits in the Wild

  • CVE-2026-20320CVSS 7.5
    A vulnerability in the Open Client Interface (OCI) XML Parser of Cisco BroadWorks could allow an unauthenticated, remote...
    CISA KEV📅 Added to KEV: Nov 10, 2026
  • CVE-2026-111793CVSS 4.3
    Openwave Webtop Media Transcoder does not enforce administrator-defined file type restrictions to restrict the file-types to be converted....
    CISA KEV📅 Added to KEV: Nov 10, 2026
  • CVE-2026-111560CVSS 8.6
    Improper neutralization of shell metacharacters in the timezone configuration field in certain Barracuda appliance products using common Barracuda...
    CISA KEV📅 Added to KEV: Nov 10, 2026
  • CVE-2026-116606CVSS 9.3
    An authentication bypass in Barracuda Email Security Gateway versions earlier than 9.4.0.030 allows an unauthenticated remote attacker to...
    CISA KEV📅 Added to KEV: Nov 10, 2026
  • CVE-2026-125350
    Use after free in XML. Reported by anonymous on 2026-11-06. Google is aware that an exploit for CVE-2026-125350...
    CISA KEV📅 Added to KEV: Nov 10, 2026
  • CVE-2026-124194CVSS 6.5
    Product ui does not warn user of unsafe actions in Microsoft Office Outlook allows an unauthorized attacker to...
    CISA KEV📅 Added to KEV: Nov 10, 2026
  • CVE-2026-123751CVSS 9.8
    The WP Duplicate WordPress plugin through 1.1.11 does not properly verify a request authentication value and does not...
    Watchtower Verified📅 Updated: Nov 9, 2026
  • CVE-2026-114713CVSS 8.6
    The labeled-response module in UnrealIRCd 6.0.0 before 6.2.7.1 does not escape the IRCv3 "label" message tag when echoing...
    Admin intel📅 Updated: Nov 9, 2026
Powered by CVE Watchtower

Critical Vulnerabilities

  • CVE-2026-96067CVSS 9.8
    Integer overflow or wraparound in Microsoft Color Management allows an unauthorized attacker to execute code over a network.
    📅 Updated: Nov 11, 2026
  • CVE-2026-96078CVSS 9.8
    Heap-based buffer overflow in Microsoft Color Management allows an unauthorized attacker to execute code over a network.
    📅 Updated: Nov 11, 2026
  • CVE-2026-96157CVSS 9.8
    Heap-based buffer overflow in Microsoft Windows Media Foundation allows an unauthorized attacker to execute code over a network.
    📅 Updated: Nov 11, 2026
  • CVE-2026-89126CVSS 10.0
    SAP Web Dispatcher does not sufficiently validate certain network input processed by an internal component. An unauthenticated attacker...
    📅 Updated: Nov 11, 2026
  • CVE-2026-95882CVSS 9.8
    Stack-based buffer overflow in Windows Microsoft DirectMusic allows an unauthorized attacker to execute code over a network.
    📅 Updated: Nov 11, 2026
  • CVE-2026-95901CVSS 9.8
    Double free in Windows Microsoft DirectMusic allows an unauthorized attacker to execute code over a network.
    📅 Updated: Nov 11, 2026
  • CVE-2026-89103CVSS 10.0
    SAP Gateway activates the default Access Control List with high privileges allowing categorization of external attacker as internal...
    📅 Updated: Nov 11, 2026
  • CVE-2026-89119CVSS 9.6
    SAP Web Dispatcher and SAP NetWeaver Application Server ABAP (Internet Communication Manager) do not perform sufficient request validation...
    📅 Updated: Nov 11, 2026
Powered by CVE Watchtower

Daily CyberSecurity

  • About SecurityOnline.info
  • Advertise with us
  • Announcement
  • Contact
  • Contributor Register
  • Login
  • Disclaimer
  • DCMA
  • Privacy Policy
  • About SecurityOnline.info
  • Advertise on SecurityOnline.info
  • Contact Us

When you purchase through links on our site, we may earn an affiliate commission. Here’s how it works

  • CVE Watchtower
  • CVE Statistics by Vendor 2026
  • Q3 2026 Report
  • Top Exploited CVEs
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube
Β© 2017 - 2026 Daily CyberSecurity. All Rights Reserved.