Skip to content
November 8, 2026
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube

Daily CyberSecurity

Zero-hour alerts. Unmatched analysis.

Primary Menu
  • Home
  • CVE Data
    • CVE Watchtower
    • Top Exploited CVEs
    • CVE Stats by Vendor
    • Q2 2026 Report
    • CVE Alerts
    • CVE Alert Settings
    • Pricing
  • Cyber Criminals
  • Data Leak
  • Free Tools
    • CVSS 3.1 Calculator
    • Certificate Viewer
    • DNS Lookup
    • Encoder & Hash Generator
    • IP / Subnet Calculator
    • Whois Lookup
  • Linux
  • Malware
  • Vulnerability
  • Submit Press Release
Light/Dark Button
CVE-2026-61511: vBulletin Preauth RCE with Public PoC Disclosed CVE-2026-61511 vBulletin preauth RCE proof-of-concept abusing the runMaths eval for remote code execution
  • Vulnerability Report

CVE-2026-61511: vBulletin Preauth RCE with Public PoC Disclosed

Do Son July 27, 2026 0

A public PoC now targets CVE-2026-61511, a vBulletin preauth RCE via runMaths eval. Patch to vBulletin 6.2.2 to block remote code execution.

TELESHIM Malware Targets Middle East Governments Through Telegram SonicWall Reconnaissance Akira Ransomware residential proxy malware TraderTraitor BreachForums Honeypot, French Interior Ministry Leak
  • Cybercriminals

TELESHIM Malware Targets Middle East Governments Through Telegram

Do Son July 27, 2026 0

TELESHIM malware hits Middle East governments and abuses Telegram C2 to hide traffic. Zscaler ThreatLabz found the new backdoor and its tooling.

RenPy Loader Spreads Amatera Stealer Through Fake Game Downloads RenPy Loader infection chain in fake game installers using MSBuild and EtherHiding to deploy Amatera Stealer
  • Malware

RenPy Loader Spreads Amatera Stealer Through Fake Game Downloads

Do Son July 27, 2026 0

Malwarebytes finds fake games spreading Amatera Stealer through RenPy Loader, MSBuild abuse, and EtherHiding C2. See the infection chain and defenses.

APT42 TAMECAT Malware Grows with AI-Assisted Phishing Tamecat
  • Cybercriminals

APT42 TAMECAT Malware Grows with AI-Assisted Phishing

Do Son July 27, 2026 0

APT42 TAMECAT malware now blends AI-assisted phishing with cloud C2 to steal credentials from defense and nuclear-sector targets.

Google AI Overviews Traffic Loss Drives Publisher Backlash Google AI Overviews traffic decline chart and publisher organic search impact
  • Technology

Google AI Overviews Traffic Loss Drives Publisher Backlash

Do Son July 27, 2026 0

Prominent publishers re-evaluate Google partnerships as Google AI Overviews traffic decline severely impacts organic search referrals and audience growth.

Samsung One UI 9 Locks the Phone Forever After 13 Wrong Codes Samsung One UI 9 lockscreen security on Android 17 permanently locks the device after 13 failed passcode attempts, requiring a factory reset
  • Android

Samsung One UI 9 Locks the Phone Forever After 13 Wrong Codes

Do Son July 27, 2026 0

Samsung One UI 9 permanently locks a phone after 13 wrong passcodes, forcing a factory reset. Accidental lockouts remain very unlikely by design.

Claude AI Shared Chats Surfaced in Google Over a Config Error Claude AI shared conversation links indexed in Google search due to a robots.txt and X-Robots-Tag misconfiguration exposing private chat content
  • Data Leak

Claude AI Shared Chats Surfaced in Google Over a Config Error

Do Son July 27, 2026 0

Claude AI shared conversation links were indexed by Google due to a config error, exposing some chats with private data. Delete sensitive shares now.

Windows 11 File Explorer Now Deletes Large Fragmented Files Faster Windows 11 File Explorer faster deletion of large fragmented files in Build 26300.8935, a rare NTFS performance win from Microsoft
  • Windows

Windows 11 File Explorer Now Deletes Large Fragmented Files Faster

Do Son July 27, 2026 0

Windows 11 Build 26300.8935 speeds up deleting large, heavily fragmented files in File Explorer, a rare performance win rolling out gradually.

Intel to Bring Back Hyper-Threading in 2028 Coral Rapids Xeon Intel hyper-threading return in 2028 Coral Rapids Xeon server CPUs announced by CEO Lip-Bu Tan to reclaim data center CPU market share
  • Technology

Intel to Bring Back Hyper-Threading in 2028 Coral Rapids Xeon

Do Son July 27, 2026 0

Intel will revive hyper-threading in its 2028 Coral Rapids Xeon server CPUs, CEO Lip-Bu Tan said, as it fights to reclaim CPU market share.

EU Says TikTok Breaches DSA Rules on Protecting Minors’ Privacy EU preliminary findings accuse TikTok of breaching DSA minor-safety rules over public-by-default accounts and For You algorithmic recommendation
  • Technology

EU Says TikTok Breaches DSA Rules on Protecting Minors’ Privacy

Do Son July 27, 2026 0

The EU's preliminary findings accuse TikTok of breaching DSA minor-safety rules through public-by-default accounts and For You algorithmic exposure.

Qualcomm Announces Double-Digit Chip Price Increase Qualcomm chip price increase notification letter to OEM customers
  • Technology

Qualcomm Announces Double-Digit Chip Price Increase

Do Son July 27, 2026 0

Qualcomm notifies clients of double-digit chip price hikes starting September 2026, impacting Android smartphones and wearable technology.

Weekly Threat Intelligence Briefing: Late July 2026 CISA flagged 6 actively exploited CVEs this week, from a SharePoint RCE to a Check Point auth bypass. See the full CISA KEV list and patch fast.
  • Weekly Recap

Weekly Threat Intelligence Briefing: Late July 2026

Do Son July 27, 2026 0

Read our latest weekly threat intelligence briefing. This active vulnerability update reveals critical Microsoft Exchange and Oracle flaws for July 2026.

CVE-2026-49176 Windows WalletService Elevation of Privilege Flaw Gets Public PoC Exploit CVE-2026-49176 Windows WalletService elevation of privilege exploit escalating to SYSTEM
  • Vulnerability Report

CVE-2026-49176 Windows WalletService Elevation of Privilege Flaw Gets Public PoC Exploit

Do Son July 27, 2026 0

CVE-2026-49176 is a Windows WalletService elevation of privilege flaw. Full details and a public PoC exploit are out, so patch Windows now.

Cruciferra Crypter Service Cloaks RATs and Infostealers for Many Threat Actors Kali365 phishing platform EmEditor Supply Chain Attack, WALSHAM INVESTMENTS LIMITED EggStreme, fileless malware North Korea Cybercrime, Remote IT Job Fraud RedDelta APT
  • Malware

Cruciferra Crypter Service Cloaks RATs and Infostealers for Many Threat Actors

Do Son July 27, 2026 0

Proofpoint details the Cruciferra crypter service that cloaks RATs and infostealers using BYOVD EDR tampering and 90+ custom encryption routines.

The Operational Systems That Protect Private Jet Passengers tech-pass
  • Technique

The Operational Systems That Protect Private Jet Passengers

Do Son July 27, 2026 0

Discover the operational systems that protect private jet passengers, from pilot training and aircraft maintenance to safety management systems, flight planning, and risk assessment procedures.

Microsoft Fortifies KMS Activation with TPM Hardware Trust Microsoft China AI business growth via OpenAI and ByteDance partnership
  • Technology

Microsoft Fortifies KMS Activation with TPM Hardware Trust

Do Son July 26, 2026 0

Discover how Microsoft is strengthening KMS activation by introducing hardware-based trust and TPM verification to combat forged licensing servers.

Google Weighs Restricting Local ADB, Threatening Shizuku on Android Google proposal to restrict local ADB loopback connections on Android, potentially breaking Shizuku and aShell no-root tools over security concerns
  • Android

Google Weighs Restricting Local ADB, Threatening Shizuku on Android

Do Son July 26, 2026 0

Google engineers propose restricting local ADB loopback connections on Android to close a security gap, a change that could break Shizuku and aShell.

India Orders GitHub to Block BitChat Repository Within 3 Hours India orders GitHub to block the BitChat repository, targeting Jack Dorsey decentralized Bluetooth mesh messaging app used without internet
  • Technology

India Orders GitHub to Block BitChat Repository Within 3 Hours

Do Son July 26, 2026 0

India ordered GitHub to block the BitChat repository within 3 hours, targeting Jack Dorsey's decentralized Bluetooth mesh messaging app.

Google Pixel 11 Price Increase Confirmed Amid Memory Cost Surge Google Pixel 11 lineup price increase analysis and memory cost impact
  • Android

Google Pixel 11 Price Increase Confirmed Amid Memory Cost Surge

Do Son July 26, 2026 0

Discover the details behind the upcoming Google Pixel 11 price increase. Learn how surging memory costs drive this change and how Google plans to optimize Android.

Meta Seller App Brings Pro Tools and Meta AI to Marketplace Meta Seller App dashboard for Facebook Marketplace showing Meta AI listing, unified inbox, inventory management, and performance analytics
  • Technology

Meta Seller App Brings Pro Tools and Meta AI to Marketplace

Do Son July 25, 2026 0

Meta launches the Seller App for Facebook Marketplace, pairing Meta AI listing tools with a unified inbox, inventory management, and analytics.

25 Tech Firms Sign Open-Weight AI Letter Backing US Leadership Open-weight AI open letter signed by NVIDIA, Microsoft, and Meta defending open models for US AI leadership amid US-China competition
  • Technology

25 Tech Firms Sign Open-Weight AI Letter Backing US Leadership

Do Son July 25, 2026 0

NVIDIA, Microsoft, and Meta lead 25 firms signing an open-weight AI letter urging US policymakers to avoid premature limits on open models.

Facebook Verified Adds Free Real-Person Badge to Fight AI Fakes Facebook Verified real-person badge verification using a face-scan selfie to confirm a genuine human user against AI-generated fake accounts
  • Technology

Facebook Verified Adds Free Real-Person Badge to Fight AI Fakes

Do Son July 25, 2026 0

Facebook Verified is a free real-person badge using a face-scan selfie to prove a user is human, rolling out across Marketplace, Dating, and more.

❮ Prev Page
Next Page ❯

Search

CVE ALERTS
📈

EPSS Spike Alerts
Catch risk spikes before they make headlines.

🎯

Custom EPSS/CVSS
Set score thresholds to effectively filter noise.

🛡️

Exploit Intel
Real-world exploit signals beyond the KEV catalog.

🐙

GitHub Issues
Auto-create alert tickets without duplication.

📬

Weekly Digest
Clean summaries, eliminating email spam.

🏷️

Watchlist Groups
Tag vulnerabilities by team (Infra/AppSec/SOC).

🔀

Smart Routing
Route chat channels based on severity levels.

🚨

RBP Tracker
Early warning detection and tracking system.

Subscribe – $7/mo or try free for 14 days →

🚨 Active Exploits in the Wild

  • CVE-2026-123158CVSS 8.1
    sshd in OpenSSH before 10.6p2 on Linux, when musl libc is used without PAM, lacks a workaround for...
    Admin intel📅 Updated: Nov 6, 2026
  • CVE-2026-19868CVSS 7.5
    An authentication enforcement vulnerability in SonicOS SSLVPN service may allow a user with valid credentials for an alternate...
    CISA KEV📅 Added to KEV: Nov 6, 2026
  • CVE-2026-120422CVSS 8.9
    Sogou Input Method for Windows contains a vulnerability in the configuration retrieval mechanism of its SGTool.exe component. The...
    Admin intel📅 Updated: Nov 5, 2026
  • CVE-2026-102895CVSS 9.8
    GPUStack is an open-source GPU cluster manager for AI model serving and GPU instance provisioning. Prior to 2.2.0,...
    Watchtower Verified📅 Updated: Nov 5, 2026
  • CVE-2026-115732CVSS 9.0
    Incorrect authorization in the certificate-name matching of trapperkeeper-authorization, as used by Puppet Server, in the affected products, allows...
    Admin intel📅 Updated: Nov 4, 2026
  • CVE-2026-98432CVSS 9.8
    In the Linux kernel, the following vulnerability has been resolved: ipv4: free inet_opt and ireq_opt after an RCU...
    Admin intel📅 Updated: Nov 4, 2026
  • CVE-2026-107441CVSS 8.8
    An out-of-bounds write vulnerability in the CGI program of Zyxel GS1900-24E firmware versions through 2.90(AAHK.2)C0 could allow an...
    Admin intel📅 Updated: Nov 4, 2026
  • CVE-2019-25779CVSS 7.5
    The Diarise theme for WordPress is vulnerable to Directory Traversal in all versions up to, and including, 1.5.9....
    Watchtower Verified📅 Updated: Nov 4, 2026
Powered by CVE Watchtower

Critical Vulnerabilities

  • CVE-2026-18535CVSS 9.6
    IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 are vulnerable to a Regular Expression Denial of...
    📅 Updated: Nov 8, 2026
  • CVE-2026-17409CVSS 9.4
    IBM API Connect 10.0.8.0 through 10.0.8.12 and 12.1.0.0 through 12.1.1.2 could allow a remote attacker to execute unauthorized...
    📅 Updated: Nov 8, 2026
  • CVE-2026-123614CVSS 9.3
    imgproxy from 4.0.0 before 4.0.16 contains an integer overflow in the ICO loader that allows remote attackers to...
    📅 Updated: Nov 8, 2026
  • CVE-2026-123550CVSS 9.3
    OpenAM before 16.1.4 contains an authentication bypass vulnerability in its SAML v2.0 service provider that accepts unsigned assertions...
    📅 Updated: Nov 8, 2026
  • CVE-2026-123551CVSS 10.0
    OpenAM from 14.0.0 before 16.1.4 contains an information disclosure vulnerability that allows unauthenticated attackers to read live session...
    📅 Updated: Nov 8, 2026
  • CVE-2026-123549CVSS 9.3
    OpenAM before 16.1.4 fails to enforce the Valid Creation Attributes list during self-registration, allowing anonymous attackers to set...
    📅 Updated: Nov 8, 2026
  • CVE-2025-57085CVSS 9.8
    Tenda W30E V16.01.0.19 (5037) was discovered to contain a stack overflow in the v17 parameter in the UploadCfg...
    📅 Updated: Nov 8, 2026
  • CVE-2025-59359CVSS 9.8
    The cleanTcs mutation in Chaos Controller Manager is vulnerable to OS command injection. In conjunction with CVE-2025-59358, this...
    📅 Updated: Nov 8, 2026
Powered by CVE Watchtower

Daily CyberSecurity

  • About SecurityOnline.info
  • Advertise with us
  • Announcement
  • Contact
  • Contributor Register
  • Login
  • Disclaimer
  • DCMA
  • Privacy Policy
  • About SecurityOnline.info
  • Advertise on SecurityOnline.info
  • Contact Us

When you purchase through links on our site, we may earn an affiliate commission. Here’s how it works

  • CVE Watchtower
  • CVE Statistics by Vendor 2026
  • Q3 2026 Report
  • Top Exploited CVEs
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube
© 2017 - 2026 Daily CyberSecurity. All Rights Reserved.