Skip to content
October 31, 2026
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube

Daily CyberSecurity

Zero-hour alerts. Unmatched analysis.

Primary Menu
  • Home
  • CVE Data
    • CVE Watchtower
    • Top Exploited CVEs
    • CVE Stats by Vendor
    • Q2 2026 Report
    • CVE Alerts
    • CVE Alert Settings
    • Pricing
  • Cyber Criminals
  • Data Leak
  • Free Tools
    • CVSS 3.1 Calculator
    • Certificate Viewer
    • DNS Lookup
    • Encoder & Hash Generator
    • IP / Subnet Calculator
    • Whois Lookup
  • Linux
  • Malware
  • Vulnerability
  • Submit Press Release
  • Weekly Recap
Light/Dark Button
Google Gemini Hits 1 Billion Users – Now the Fastest-Growing App in Google History Google Gemini app reaches 1 billion monthly active users milestone, Gemini AI assistant growth
  • Technology

Google Gemini Hits 1 Billion Users – Now the Fastest-Growing App in Google History

Do Son August 15, 2026 0

Google Gemini surpasses 1 billion monthly active users, becoming Google's fastest-growing app and rivaling ChatGPT's milestone.

Microsoft Defender Causes VLC Playback Issues Microsoft Defender VLC bug causing audio playback failure on Windows 11
  • Windows

Microsoft Defender Causes VLC Playback Issues

Do Son August 15, 2026 0

Microsoft Defender incorrectly isolates VLC plugin caches on Windows 11. Discover how to fix this annoying Microsoft Defender VLC bug and restore playback.

DEF CON Attendee Suspected in Fake WiFi Attack Targeting Delta Flight 591 Passengers DEF CON hacker fake WiFi hotspot attack Delta flight 591 phishing Google credentials deauthentication
  • Cybercriminals

DEF CON Attendee Suspected in Fake WiFi Attack Targeting Delta Flight 591 Passengers

Do Son August 15, 2026 0

Delta Air Lines is investigating a rogue WiFi hotspot on Flight 591 carrying DEF CON attendees, used to phish Google credentials via deauth attacks.

ChatGPT for Linux Desktop Preview Launches for Ubuntu, Debian, and Fedora ChatGPT Linux desktop app preview for Ubuntu Debian Fedora with Codex and Work features
  • Technology

ChatGPT for Linux Desktop Preview Launches for Ubuntu, Debian, and Fedora

Do Son August 15, 2026 0

OpenAI launches ChatGPT for Linux desktop in preview, supporting Ubuntu, Debian, and Fedora with ChatGPT, Codex, and Work features.

SpaceXAI Launches Grok 4.6 AI Model SpaceXAI Grok 4.6 AI Model handling complex tasks and software engineering
  • Technology

SpaceXAI Launches Grok 4.6 AI Model

Do Son August 15, 2026 0

Discover the new Grok 4.6 AI model by SpaceXAI. It excels in long-horizon tasks, software engineering, and interactive visual projects for developers.

Firefox uBlock Origin Support: The MV3 Solution Firefox uBlock Origin support against MV3 restrictions
  • Technology

Firefox uBlock Origin Support: The MV3 Solution

Do Son August 15, 2026 0

Discover how Firefox uBlock Origin support continues despite the MV3 transition. Learn why Edge and Chrome users face ad blocker restrictions soon.

Google Search Tests Exclusive AI Mode for Select Users Google Search AI mode interface, Google AI testing features
  • Technology

Google Search Tests Exclusive AI Mode for Select Users

Do Son August 15, 2026 0

Google recently began testing a new exclusive AI mode for search. Discover how this ChatGPT-style layout impacts conventional search results and user habits.

VINclarity Publishes Investigation Into Alleged Scam and Fraud Reputation Attack Across Search and AI photo_2026-08-14_162201_1786717337e6KSQ4lqBp
  • Press Release

VINclarity Publishes Investigation Into Alleged Scam and Fraud Reputation Attack Across Search and AI

cybernewswire August 14, 2026 0
Selidan, USA, August 14th, 2026, CyberNewswire New report examines suspicious Reddit activity, coordinated YouTube content and BBB...
Read More Read more about VINclarity Publishes Investigation Into Alleged Scam and Fraud Reputation Attack Across Search and AI
CVE-2025-41771: SQL Injection Flaw Hits Phoenix Contact PLCnext Phoenix Contact PLCnext vulnerability letting an attacker execute unauthorized SQL queries via the controller web interface
  • Vulnerability Report

CVE-2025-41771: SQL Injection Flaw Hits Phoenix Contact PLCnext

Do Son August 14, 2026 0

Phoenix Contact patched three PLCnext flaws, including CVE-2025-41771, which lets an attacker execute unauthorized SQL queries, plus a CVSS 9.8 RCE bug.

Gunra Ransomware Hits Critical Infrastructure, CISA Warns GoSerpent backdoor cyber espionage attack chain against Southeast Asian government networks
  • Malware

Gunra Ransomware Hits Critical Infrastructure, CISA Warns

Do Son August 14, 2026 0

CISA and five agencies warn that Gunra ransomware is hitting critical infrastructure with double extortion. A Linux flaw may let victims recover free.

CVE-2026-68067 (CVSS 9.8): Mira Monitor Flaw Lets Attackers Control User Accounts Mira Hormone Monitor vulnerability CVE-2026-68067 letting attackers control user accounts via a cloud login bypass
  • Vulnerability Report

CVE-2026-68067 (CVSS 9.8): Mira Monitor Flaw Lets Attackers Control User Accounts

Do Son August 14, 2026 0

CVE-2026-68067 (CVSS 9.8) lets attackers control user accounts on the Mira Hormone Monitor by bypassing the cloud login. Eight flaws total.

TP-Link Patches 5 Flaws in ISP-Managed Routers and Mesh Devices TP-Link router vulnerabilities in ISP-managed mesh and modem devices with authentication bypass and command injection flaws
  • Vulnerability Report

TP-Link Patches 5 Flaws in ISP-Managed Routers and Mesh Devices

Do Son August 14, 2026 0

TP-Link patched 5 TP-Link router vulnerabilities in ISP-managed mesh, router, and modem lines, including auth bypass and command injection.

CVE-2026-64582: PoC Exploit Published for Kernel LPE Linux kernel RDMA rxe use-after-free CVE-2026-64582 local privilege escalation with public PoC exploit code
  • Vulnerability Report

CVE-2026-64582: PoC Exploit Published for Kernel LPE

Do Son August 14, 2026 0

A Linux kernel RDMA/rxe use-after-free (CVE-2026-64582) enables local privilege escalation. Full details and PoC exploit code are now public.

CVE-2026-63455: EdgeConnect Orchestrator Web Authentication Bypass Rated CVSS 9.8 EdgeConnect Orchestrator authentication bypass flaws CVE-2026-63455 and CVE-2026-63456 rated CVSS 9.8
  • Vulnerability Report

CVE-2026-63455: EdgeConnect Orchestrator Web Authentication Bypass Rated CVSS 9.8

Do Son August 13, 2026 0

CVE-2026-63455 and CVE-2026-63456 let attackers bypass web authentication on HPE EdgeConnect Orchestrator. CVSS 9.8. Patch now.

CVE-2026-43723: Apple mediaremoted Flaw Lets Apps Gain Root Privileges, PoC Exploit Code Publicly Disclosed Apple mediaremoted root privileges flaw CVE-2026-43723 with public proof-of-concept exploit code
  • Vulnerability Report

CVE-2026-43723: Apple mediaremoted Flaw Lets Apps Gain Root Privileges, PoC Exploit Code Publicly Disclosed

Do Son August 13, 2026 0

PoC exploit code is public for CVE-2026-43723, an Apple mediaremoted flaw that lets an app gain root privileges. CVSS 7.8. Patch now.

Zero-Click File Drop Hits Xiaomi ShareMe: PoC Public Xiaomi ShareMe MiDrop zero-click vulnerability silent file drop over BLE with public proof-of-concept exploit code
  • Vulnerability Report

Zero-Click File Drop Hits Xiaomi ShareMe: PoC Public

Do Son August 13, 2026 0

A zero-click flaw in Xiaomi ShareMe (MiDrop) lets nearby attackers write files silently. Full details and PoC code are now public.

CVE-2026-65640: WordPress 7.0.4 Fixes Remote Code Execution WordPress 7.0.4 patches CVE-2026-65640, an Author-level remote code execution bug on sites using Imagick and Ghostscript. Update now.
  • Vulnerability Report

CVE-2026-65640: WordPress 7.0.4 Fixes Remote Code Execution

Do Son August 13, 2026 0

WordPress 7.0.4 patches CVE-2026-65640, an Author-level remote code execution bug on sites using Imagick and Ghostscript. Update now.

ChainDrop npm Worm Hits 400+ Packages via Blockchain C2 ChainDrop npm worm supply chain malware stealing cloud credentials via Ethereum blockchain C2
  • Malware

ChainDrop npm Worm Hits 400+ Packages via Blockchain C2

Do Son August 13, 2026 0

ChainDrop npm worm infected 400+ packages, stealing cloud keys and CI secrets via blockchain C2. Unit 42 details the full attack chain and fixes.

Fake Zoom Installer Drops Overlord RAT on macOS Fake Zoom installer delivering Overlord RAT on macOS via a .NET downloader
  • Malware

Fake Zoom Installer Drops Overlord RAT on macOS

Do Son August 13, 2026 0

A fake Zoom installer delivers Overlord RAT on macOS via a .NET downloader. Jamf Threat Labs details the infection chain and defenses.

MariaDB Low-Privilege Remote Code Execution Chain: Full Details and PoC Exploit Code Publicly Disclosed MariaDB remote code execution low-privilege RCE exploit chain with public proof-of-concept code
  • Vulnerability Report

MariaDB Low-Privilege Remote Code Execution Chain: Full Details and PoC Exploit Code Publicly Disclosed

Do Son August 13, 2026 0

PoC exploit code is public for a MariaDB remote code execution chain. A low-privilege account can run commands as mariadbd. Details inside.

GitLab Patch Release Fixes 13 Flaws, Including High-Severity XSS Bugs GitLab patch release fixing 13 security flaws including high-severity XSS and CVE-2026-15217 on a dashboard
  • Vulnerability Report

GitLab Patch Release Fixes 13 Flaws, Including High-Severity XSS Bugs

Do Son August 12, 2026 0

The new GitLab patch release fixes 13 flaws, including high-severity XSS and authorization bugs. Update to 19.2.2, 19.1.4, or 19.0.6 now.

CVE-2026-67261: Dell VSI RCE Flaw Scores CVSS 9.8 Dell Virtual Storage Integrator unauthenticated remote code execution CVE-2026-67261 CVSS 9.8 critical vulnerability
  • Vulnerability Report

CVE-2026-67261: Dell VSI RCE Flaw Scores CVSS 9.8

Do Son August 12, 2026 0

Dell VSI for VMware vSphere Client has a critical unauthenticated RCE flaw (CVE-2026-67261) rated CVSS 9.8. Patch now.

❮ Prev Page
Next Page ❯

Search

CVE ALERTS
📈

EPSS Spike Alerts
Catch risk spikes before they make headlines.

🎯

Custom EPSS/CVSS
Set score thresholds to effectively filter noise.

🛡️

Exploit Intel
Real-world exploit signals beyond the KEV catalog.

🐙

GitHub Issues
Auto-create alert tickets without duplication.

📬

Weekly Digest
Clean summaries, eliminating email spam.

🏷️

Watchlist Groups
Tag vulnerabilities by team (Infra/AppSec/SOC).

🔀

Smart Routing
Route chat channels based on severity levels.

🚨

RBP Tracker
Early warning detection and tracking system.

Subscribe – $7/mo or try free for 14 days →

🚨 Active Exploits in the Wild

  • CVE-2010-20125CVSS 8.7
    DedeCMS before 5.7 contains a file inclusion vulnerability in plus/carbuyaction.php that allows remote unauthenticated attackers to control the...
    Watchtower Verified📅 Updated: Oct 30, 2026
  • CVE-2015-20130CVSS 5.1
    Netsweeper before 4.0.11 and 4.1.0 before 4.1.5 contains a reflected cross-site scripting vulnerability in webadmin/reporter/view_server_log.php that allows remote...
    Watchtower Verified📅 Updated: Oct 30, 2026
  • CVE-2026-111357CVSS 7.0
    Ivanti Connect Secure 22.8R2.4 mishandles the manner in which the dsinvoked broker trusts DSCache configuration data, leading to...
    CISA KEV📅 Added to KEV: Oct 30, 2026
  • CVE-2026-118527CVSS 4.3
    Use of predictable filenames in Ivanti Connect Secure before versions 25.1.1.3 and 22.8R2.6 allows a remote authenticated attacker...
    CISA KEV📅 Added to KEV: Oct 30, 2026
  • CVE-2026-118539
    This module enables you to sell goods and services to customers through an included shopping cart and checkout...
    Admin intel📅 Updated: Oct 29, 2026
  • CVE-2022-31034CVSS 8.3
    Impact All versions of Argo CD starting with v0.11.0 are vulnerable to a variety of attacks when an...
    Watchtower Verified📅 Updated: Oct 29, 2026
  • CVE-2026-112353CVSS 6.2
    GFI KerioConnect (Kerio Connect) before 10.0.8 Patch 2 contains a stored cross-site scripting vulnerability in the Webmail component...
    Watchtower Verified📅 Updated: Oct 29, 2026
  • CVE-2026-116779CVSS 9.8
    Summary `sofia_presence_handle_sip_i_message()` splits the To user of an inbound SIP MESSAGE on `+` and treats the left half...
    Admin intel📅 Updated: Oct 29, 2026
Powered by CVE Watchtower

Critical Vulnerabilities

  • CVE-2026-120209CVSS 9.3
    AJ-Report through 1.7.1 signs share tokens with a hard-coded JWT secret, allowing attackers to forge valid Share-Tokens offline....
    📅 Updated: Oct 31, 2026
  • CVE-2026-120201CVSS 9.3
    Jpom 2.10.0 through 2.11.12 contains an authentication bypass vulnerability that allows unauthenticated attackers to gain super-administrator access by...
    📅 Updated: Oct 31, 2026
  • CVE-2026-69399CVSS 9.9
    Unintended proxy or intermediary in Azure Arc allows an authorized attacker to elevate privileges over a network.
    📅 Updated: Oct 31, 2026
  • CVE-2026-113380CVSS 9.3
    In the RingRTC library before 2.72.0 for Signal, a peer that saturates a call's FSM queue can interfere...
    📅 Updated: Oct 31, 2026
  • CVE-2026-99153CVSS 9.8
    In the Linux kernel, the following vulnerability has been resolved: scsi: libiscsi: Validate the ITT reflected in a...
    📅 Updated: Oct 31, 2026
  • CVE-2026-99154CVSS 9.8
    In the Linux kernel, the following vulnerability has been resolved: scsi: libiscsi: Reject a negative task index from...
    📅 Updated: Oct 31, 2026
  • CVE-2026-118235CVSS 9.8
    The SimpleForm – Form Maker to Chat Apps with Quiz, Poll and Multi Lead Notifications plugin for WordPress...
    📅 Updated: Oct 31, 2026
  • CVE-2026-103882CVSS 9.1
    The Acadlix LMS – AI Quiz Maker, Online Exam & Course Plugin for WordPress plugin for WordPress is...
    📅 Updated: Oct 31, 2026
Powered by CVE Watchtower

Daily CyberSecurity

  • About SecurityOnline.info
  • Advertise with us
  • Announcement
  • Contact
  • Contributor Register
  • Login
  • Disclaimer
  • DCMA
  • Privacy Policy
  • About SecurityOnline.info
  • Advertise on SecurityOnline.info
  • Contact Us

When you purchase through links on our site, we may earn an affiliate commission. Here’s how it works

  • CVE Watchtower
  • CVE Statistics by Vendor 2026
  • Q3 2026 Report
  • Top Exploited CVEs
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube
© 2017 - 2026 Daily CyberSecurity. All Rights Reserved.