Skip to content
November 2, 2026
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube

Daily CyberSecurity

Zero-hour alerts. Unmatched analysis.

Primary Menu
  • Home
  • CVE Data
    • CVE Watchtower
    • Top Exploited CVEs
    • CVE Stats by Vendor
    • Q2 2026 Report
    • CVE Alerts
    • CVE Alert Settings
    • Pricing
  • Cyber Criminals
  • Data Leak
  • Free Tools
    • CVSS 3.1 Calculator
    • Certificate Viewer
    • DNS Lookup
    • Encoder & Hash Generator
    • IP / Subnet Calculator
    • Whois Lookup
  • Linux
  • Malware
  • Vulnerability
  • Submit Press Release
  • Weekly Recap
Light/Dark Button
Anthropic Overcomes Export Restrictions: Mythos and Fable Models Restored Anthropic AI export ban lifted for Mythos and Fable models
  • Technology

Anthropic Overcomes Export Restrictions: Mythos and Fable Models Restored

Do Son July 1, 2026 0

The US Commerce Department lifts the Anthropic AI export ban, restoring access to Mythos and Fable models after sweeping national security compromises.

UNC1151 Phishing Campaign Targets Belarus and Ukraine UNC1151 phishing campaign login page created by the Ghostwriter threat actor.
  • Cybercriminals

UNC1151 Phishing Campaign Targets Belarus and Ukraine

Do Son July 1, 2026 0

A suspected UNC1151 phishing campaign targets Belarusian politicians and Ukrainian portals to steal credentials using deceptive login pages.

Claude Code Telemetry Rollback: Anthropic Responds to Backdoor Allegations Anthropic Claude Code telemetry rollback response and developer community controversy Claude Code human error Claude AI Data Wipe, Constraining AI Tools Anthropic lawsuit, AI copyright Claude Code, web editor
  • Technology

Claude Code Telemetry Rollback: Anthropic Responds to Backdoor Allegations

Do Son July 1, 2026 0

Anthropic announces a Claude Code telemetry rollback following intense developer backlash over hidden location tracking and proxy detection code.

Anthropic Unveils Claude Sonnet 5 for Efficient Agentic AI Anthropic Claude Sonnet 5 release focusing on enterprise Agentic AI cost efficiency
  • Technology

Anthropic Unveils Claude Sonnet 5 for Efficient Agentic AI

Do Son July 1, 2026 0

Anthropic announces the Claude Sonnet 5 release, featuring a highly efficient tokenizer for affordable Agentic AI workflows and reduced API costs.

Operation DragonReturn Targets Indian Tax Infrastructure WhatsApp Worm, Brazilian Banking Trojan LAPSUS$ Alliance, Scattered Spider Ransomware, Cybercrime RedCurl APT group Russian Cyberespionage, ApolloShadow Malware
  • Cybercriminals

Operation DragonReturn Targets Indian Tax Infrastructure

Do Son July 1, 2026 0

Operation DragonReturn is a suspected China-nexus cyber espionage campaign targeting India's tax infrastructure using deceptive phishing emails and DcRAT.

Malicious OpenClaw Skills on ClawHub Deliver Infostealers and Crypto Fraud Malicious OpenClaw skills on the ClawHub marketplace enabling an AI supply chain attack
  • Malware

Malicious OpenClaw Skills on ClawHub Deliver Infostealers and Crypto Fraud

Do Son July 1, 2026 0

Unit 42 found five malicious OpenClaw skills on ClawHub that bypassed scanners. The AI supply chain attack delivered infostealers and crypto fraud.

Gmail Live Beta Brings Voice Search to Your Inbox Gmail Live beta voice search interface on Android and iOS letting users find emails by talking to Gemini
  • Technology

Gmail Live Beta Brings Voice Search to Your Inbox

Do Son July 1, 2026 0

Gmail Live is now in beta on Android and iOS, letting you search your inbox by voice with Gemini. Here's how the feature works and who gets it.

Claude Code Spyware Controversy: Secret Location Tracking Exposed Claude Cowork quota update Claude Desktop native messaging bridge Anthropic Opus 4.5 Claude Excel Integration
  • Technology

Claude Code Spyware Controversy: Secret Location Tracking Exposed

Do Son July 1, 2026 0

A Reddit user discovered hidden spyware in Claude Code that tracks users' locations, particularly targeting Chinese developers and proxy usage. Read more.

Apache Tomcat Vulnerabilities Allow Authentication Bypass Apache Tomcat vulnerabilities including an authentication bypass via JNDIRealm GSSAPI bind (CVE-2026-55957)
  • Vulnerability Report

Apache Tomcat Vulnerabilities Allow Authentication Bypass

Do Son July 1, 2026 0

Seven Apache Tomcat vulnerabilities are patched, including an authentication bypass (CVE-2026-55957). Update to a fixed Tomcat release now.

Chrome Security Update Patches 382 Vulnerabilities, 15 Critical Chrome security update patching 382 vulnerabilities including 15 critical use-after-free flaws
  • Vulnerability Report

Chrome Security Update Patches 382 Vulnerabilities, 15 Critical

Do Son July 1, 2026 0

The latest Chrome security update patches 382 vulnerabilities, including 15 critical use-after-free flaws. Update Chrome now to stay protected.

Six Critical Incus Vulnerabilities Patched in v7.2.0 Incus vulnerabilities CVE-2026-48769 CVE-2026-48755 root file write security update
  • Vulnerability Report

Six Critical Incus Vulnerabilities Patched in v7.2.0

Do Son July 1, 2026 0

Six Incus vulnerabilities, all rated CVSS 9.9, are fixed in v7.2.0. CVE-2026-48769 and CVE-2026-48755 enable root attacks. Update now.

Ten GeoVision Camera Vulnerabilities Hit GV-LPC License Plate Models GeoVision camera vulnerabilities CVE-2026-57878 GV-LPC2011 GV-LPC2211 firmware V1.13 security advisory
  • Vulnerability Report

Ten GeoVision Camera Vulnerabilities Hit GV-LPC License Plate Models

Do Son July 1, 2026 0

Ten GeoVision camera vulnerabilities hit GV-LPC2011/2211 models, four rated CVSS 9.8 (CVE-2026-57878). Update to firmware V1.13 now.

Fluentd Vulnerabilities Patched in v1.19.3, Including Critical RCE Fluentd vulnerabilities CVE-2026-44024 RCE CVE-2026-44161 SSRF security patch v1.19.3
  • Vulnerability Report

Fluentd Vulnerabilities Patched in v1.19.3, Including Critical RCE

Do Son July 1, 2026 0

Four Fluentd vulnerabilities are fixed in v1.19.3, including a 9.8 RCE (CVE-2026-44024) and SSRF (CVE-2026-44161). Patch now.

ProFTPD ACL Bypass Flaw Exposes Files in Restricted Directories ProFTPD ACL bypass vulnerability CVE-2026-35025 access control bypass in RNFR command
  • Vulnerability Report

ProFTPD ACL Bypass Flaw Exposes Files in Restricted Directories

Do Son July 1, 2026 0

A ProFTPD ACL bypass (CVE-2026-35025, CVSS 8.6) lets logged-in FTP users reach files in restricted directories. No patch is out yet; use DefaultRoot.

Plone Fixes Critical RCE Flaw and Two Denial-of-Service Bugs Plone RCE vulnerability via TALES injection in the Classic portlet
  • Vulnerability Report

Plone Fixes Critical RCE Flaw and Two Denial-of-Service Bugs

Do Son July 1, 2026 0

A critical Plone RCE vulnerability (CVE-2026-57149, CVSS 9.9) allows TALES injection via the Classic portlet. Two more flaws enable DoS and SSRF.

Adobe ColdFusion Vulnerabilities Reach CVSS 10 With Arbitrary Code Execution Adobe ColdFusion vulnerabilities enabling arbitrary code execution with CVSS 10 scores (APSB26-68)
  • Vulnerability Report

Adobe ColdFusion Vulnerabilities Reach CVSS 10 With Arbitrary Code Execution

Do Son June 30, 2026 0

Eleven Adobe ColdFusion vulnerabilities include six CVSS 10 arbitrary code execution flaws. Patch ColdFusion 2025 and 2023 now.

Six NetScaler Vulnerabilities Allow Denial of Service and File Read NetScaler vulnerabilities causing denial of service, memory overread, and unauthenticated file read on NetScaler ADC and Gateway
  • Vulnerability Report

Six NetScaler Vulnerabilities Allow Denial of Service and File Read

Do Son June 30, 2026 0

Six NetScaler vulnerabilities allow denial of service, memory overreads, and an unauthenticated file read. Patch NetScaler ADC and Gateway now.

NDSS Symposium Heads to Seoul in 2027 to Expand Global Cybersecurity Collaboration ndss
  • Press Release

NDSS Symposium Heads to Seoul in 2027 to Expand Global Cybersecurity Collaboration

cybernewswire June 30, 2026 0
DC, United States, June 30th, 2026, CyberNewswire The Internet Society today announced that 2027 Network and Distributed System...
Read More Read more about NDSS Symposium Heads to Seoul in 2027 to Expand Global Cybersecurity Collaboration
Reflectiz to Host Webinar, Joined by Taboola, on Securing Third-Party Marketing in the AI Era tab
  • Press Release

Reflectiz to Host Webinar, Joined by Taboola, on Securing Third-Party Marketing in the AI Era

cybernewswire June 30, 2026 0
Boston, Massachusetts, June 30th, 2026, CyberNewswire Reflectiz, the web exposure management platform, today announced a live webinar...
Read More Read more about Reflectiz to Host Webinar, Joined by Taboola, on Securing Third-Party Marketing in the AI Era
OpenMatter Network Introduces Verifiable Trust Layer for Secure Collaboration and AI Agents Untitled_17_x_9_in_1782765623hTY1a9UzBA
  • Press Release

OpenMatter Network Introduces Verifiable Trust Layer for Secure Collaboration and AI Agents

cybernewswire June 30, 2026 0
Melbourne, Florida, June 30th, 2026, CyberNewswire OpenMatter Network today announced the launch of its cryptographically verifiable platform for...
Read More Read more about OpenMatter Network Introduces Verifiable Trust Layer for Secure Collaboration and AI Agents
AppViewX Launches Global Partner Program Amid Rising Demand for Machine and Agent Identity Security app
  • Press Release

AppViewX Launches Global Partner Program Amid Rising Demand for Machine and Agent Identity Security

cybernewswire June 30, 2026 0
New York, United States, June 30th, 2026, CyberNewswire Building on the momentum of its Agent Identity Security...
Read More Read more about AppViewX Launches Global Partner Program Amid Rising Demand for Machine and Agent Identity Security
NLnet Labs Patches Four Critical NSD Vulnerabilities NSD DNS vulnerabilities and CVE-2026-12244
  • Vulnerability Report

NLnet Labs Patches Four Critical NSD Vulnerabilities

Do Son June 30, 2026 0

NLnet Labs patched critical NSD DNS vulnerabilities, including CVE-2026-12244. Update now to protect your multi-tenant secondary DNS deployments.

❮ Prev Page
Next Page ❯

Search

CVE ALERTS
📈

EPSS Spike Alerts
Catch risk spikes before they make headlines.

🎯

Custom EPSS/CVSS
Set score thresholds to effectively filter noise.

🛡️

Exploit Intel
Real-world exploit signals beyond the KEV catalog.

🐙

GitHub Issues
Auto-create alert tickets without duplication.

📬

Weekly Digest
Clean summaries, eliminating email spam.

🏷️

Watchlist Groups
Tag vulnerabilities by team (Infra/AppSec/SOC).

🔀

Smart Routing
Route chat channels based on severity levels.

🚨

RBP Tracker
Early warning detection and tracking system.

Subscribe – $7/mo or try free for 14 days →

🚨 Active Exploits in the Wild

  • CVE-2026-20051CVSS 7.4
    A vulnerability with the Ethernet VPN (EVPN) Layer 2 ingress packet processing of Cisco Nexus 3600 Platform Switches...
    Watchtower Verified📅 Updated: Nov 1, 2026
  • CVE-2026-20118CVSS 6.8
    A vulnerability in the handling of an Egress Packet Network Interface (EPNI) Aligner interrupt in Cisco IOS XR...
    Watchtower Verified📅 Updated: Nov 1, 2026
  • CVE-2010-20125CVSS 8.7
    DedeCMS before 5.7 contains a file inclusion vulnerability in plus/carbuyaction.php that allows remote unauthenticated attackers to control the...
    Watchtower Verified📅 Updated: Oct 30, 2026
  • CVE-2015-20130CVSS 5.1
    Netsweeper before 4.0.11 and 4.1.0 before 4.1.5 contains a reflected cross-site scripting vulnerability in webadmin/reporter/view_server_log.php that allows remote...
    Watchtower Verified📅 Updated: Oct 30, 2026
  • CVE-2026-111357CVSS 7.0
    Ivanti Connect Secure 22.8R2.4 mishandles the manner in which the dsinvoked broker trusts DSCache configuration data, leading to...
    CISA KEV📅 Added to KEV: Oct 30, 2026
  • CVE-2026-118527CVSS 4.3
    Use of predictable filenames in Ivanti Connect Secure before versions 25.1.1.3 and 22.8R2.6 allows a remote authenticated attacker...
    CISA KEV📅 Added to KEV: Oct 30, 2026
  • CVE-2026-118539
    This module enables you to sell goods and services to customers through an included shopping cart and checkout...
    Admin intel📅 Updated: Oct 29, 2026
  • CVE-2022-31034CVSS 8.3
    Impact All versions of Argo CD starting with v0.11.0 are vulnerable to a variety of attacks when an...
    Watchtower Verified📅 Updated: Oct 29, 2026
Powered by CVE Watchtower

Critical Vulnerabilities

  • CVE-2026-120322CVSS 9.4
    A vulnerability was identified in Termix-SSH Termix up to 2.9.2. This issue affects some unknown processing of the...
    📅 Updated: Nov 2, 2026
  • CVE-2026-120283CVSS 10.0
    A vulnerability was identified in Linksys E8450 1.2.00.360516. Affected is the function strcpy of the file /www/cgi-bin/portal.cgi. Such...
    📅 Updated: Nov 2, 2026
  • CVE-2026-120282CVSS 9.4
    A vulnerability was determined in WAVLINK WN536AX6-A V260507. This impacts the function host_black of the file /protocol.csp. This...
    📅 Updated: Nov 2, 2026
  • CVE-2026-120281CVSS 10.0
    A vulnerability was found in WAVLINK WN536AX6-A V260507. This affects the function strcpy of the file /protocol.csp of...
    📅 Updated: Nov 2, 2026
  • CVE-2026-120280CVSS 10.0
    A vulnerability has been found in WAVLINK WN536AX6-A V260507. The impacted element is the function wireguard_cli_group handler of...
    📅 Updated: Nov 2, 2026
  • CVE-2026-120279CVSS 10.0
    A flaw has been found in WAVLINK WN536AX6-A V260507. The affected element is an unknown function of the...
    📅 Updated: Nov 2, 2026
  • CVE-2026-120277CVSS 10.0
    A security vulnerability has been detected in WAVLINK WN536AX6-A V260507_2.0.0. This issue affects the function sub_41a1d8 of the...
    📅 Updated: Nov 1, 2026
  • CVE-2026-120276CVSS 10.0
    A weakness has been identified in WAVLINK WN536AX6-A V260507_2.0.0. This vulnerability affects the function sub_416760 of the file...
    📅 Updated: Nov 1, 2026
Powered by CVE Watchtower

Daily CyberSecurity

  • About SecurityOnline.info
  • Advertise with us
  • Announcement
  • Contact
  • Contributor Register
  • Login
  • Disclaimer
  • DCMA
  • Privacy Policy
  • About SecurityOnline.info
  • Advertise on SecurityOnline.info
  • Contact Us

When you purchase through links on our site, we may earn an affiliate commission. Here’s how it works

  • CVE Watchtower
  • CVE Statistics by Vendor 2026
  • Q3 2026 Report
  • Top Exploited CVEs
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube
© 2017 - 2026 Daily CyberSecurity. All Rights Reserved.