Skip to content
November 2, 2026
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube

Daily CyberSecurity

Zero-hour alerts. Unmatched analysis.

Primary Menu
  • Home
  • CVE Data
    • CVE Watchtower
    • Top Exploited CVEs
    • CVE Stats by Vendor
    • Q2 2026 Report
    • CVE Alerts
    • CVE Alert Settings
    • Pricing
  • Cyber Criminals
  • Data Leak
  • Free Tools
    • CVSS 3.1 Calculator
    • Certificate Viewer
    • DNS Lookup
    • Encoder & Hash Generator
    • IP / Subnet Calculator
    • Whois Lookup
  • Linux
  • Malware
  • Vulnerability
  • Submit Press Release
  • Weekly Recap
Light/Dark Button
Can You Trust Your Exchange? Inside BTCC’s Monthly Proof-of-Reserves Audit CVE-2024-55563 - transaction-relay jamming attack
  • Technique

Can You Trust Your Exchange? Inside BTCC’s Monthly Proof-of-Reserves Audit

Do Son June 24, 2026 0
When you deposit crypto onto a centralized exchange, you are handing over custody. The exchange’s database ledger...
Read More Read more about Can You Trust Your Exchange? Inside BTCC’s Monthly Proof-of-Reserves Audit
How Secure Virtual Assistants Improve Outbound Calling Workflows call
  • Technique

How Secure Virtual Assistants Improve Outbound Calling Workflows

Do Son June 24, 2026 0
Outbound calling can create pipeline, but it can also create risk. For US teams, outsourced calling security...
Read More Read more about How Secure Virtual Assistants Improve Outbound Calling Workflows
Squidbleed (CVE-2026-47729): Squid Proxy Memory Leak Details and PoC Disclosed Squidbleed vulnerability CVE-2026-47729 Squid proxy memory leak diagram
  • Vulnerability Report

Squidbleed (CVE-2026-47729): Squid Proxy Memory Leak Details and PoC Disclosed

Do Son June 24, 2026 0

The Squidbleed vulnerability is a Squid proxy memory leak exposing user credentials. CVE-2026-47729 details and PoC exploit code are now public.

Top Train Ticket Booking App Development Companies in the USA tech-pass
  • Technique

Top Train Ticket Booking App Development Companies in the USA

Do Son June 24, 2026 0

Discover the top train ticket booking app development companies in the USA. Compare leading rail-tech firms and learn how to select the right partner.

LastPass Customer Data Stolen in Klue Supply Chain Breach LastPass Klue breach OAuth token theft Salesforce supply chain attack
  • Data Leak

LastPass Customer Data Stolen in Klue Supply Chain Breach

Do Son June 23, 2026 0

LastPass confirms the Klue breach exposed customer CRM data via OAuth token theft in Salesforce. Vaults stayed safe. Here's what to know.

CISA Adds Four Exploited UniFi OS and Lantronix Flaws to KEV Catalog CISA KEV catalog actively exploited vulnerabilities CVE-2026-34908 UniFi OS Lantronix EDS5000
  • Vulnerability Report

CISA Adds Four Exploited UniFi OS and Lantronix Flaws to KEV Catalog

Do Son June 23, 2026 0

CISA added four actively exploited vulnerabilities to its KEV catalog, hitting Ubiquiti UniFi OS and Lantronix EDS5000. Patch before June 26, 2026.

Internet Society Foundation Opens Global Call for Common Good Cyber Fund to Strengthen Cybersecurity  CGCF_Featured_image_17822196430bFkMKNfEs
  • Press Release

Internet Society Foundation Opens Global Call for Common Good Cyber Fund to Strengthen Cybersecurity 

cybernewswire June 23, 2026 0
DC, United States, June 23rd, 2026, CyberNewswire   Applications open 23 June–4 August 2026 to support nonprofits...
Read More Read more about Internet Society Foundation Opens Global Call for Common Good Cyber Fund to Strengthen Cybersecurity 
GitBait Phishing Campaign Targets 12 Mexican Banks via GitHub Pages GitBait phishing campaign abusing GitHub Pages and SheetBest API to steal Mexican banking credentials
  • Cybercriminals

GitBait Phishing Campaign Targets 12 Mexican Banks via GitHub Pages

Do Son June 23, 2026 0

The GitBait phishing campaign abuses GitHub Pages and the SheetBest API to steal banking credentials from at least 12 Mexican financial institutions.

macOS ClickFix AppleScript Stealer Hijacks Crypto Wallets macOS ClickFix AppleScript stealer diagram showing the Meow macOS stealer infection chain
  • Malware

macOS ClickFix AppleScript Stealer Hijacks Crypto Wallets

Do Son June 23, 2026 0

A new macOS ClickFix AppleScript stealer named the Meow macOS stealer acts as a persistent RAT, hijacking wallets and evading detection. Protect your Macs.

Dropping Elephant Malware: China-Themed Loader Campaign Analyzed Dropping Elephant malware China-themed loader and in-memory RAT diagram
  • Malware

Dropping Elephant Malware: China-Themed Loader Campaign Analyzed

Do Son June 23, 2026 0

Rapid7 exposes a new Dropping Elephant malware campaign using a China-themed loader to deploy a fileless RAT. Learn about its evasion tactics and defense.

AryStinger Malware Attacks Routers via CVE-2013-3307 AryStinger malware infection chain exploiting CVE-2013-3307
  • Malware

AryStinger Malware Attacks Routers via CVE-2013-3307

Do Son June 23, 2026 0

A new AryStinger malware campaign exploits CVE-2013-3307 and CVE-2016-5681 to compromise legacy routers, building a global attack proxy network.

Cloud DNS Takeover Powers Thai Gambling Campaign Zammad zero-day CVE-2026-102489 CVE-2026-102490 exploited in DIVD breach
  • Cybercriminals

Cloud DNS Takeover Powers Thai Gambling Campaign

Do Son June 23, 2026 0

A massive cloud DNS takeover campaign exploits abandoned enterprise domains to serve Thai gambling content. 163 organizations are currently compromised.

Android Developer Verification: Google Reveals the Full Timeline Android developer verification timeline showing the September 30 2026 sideloading enforcement and 24-hour advanced flow
  • Android

Android Developer Verification: Google Reveals the Full Timeline

Do Son June 23, 2026 0

Google's Android developer verification starts enforcing on Sept 30, 2026. See the full timeline, the 24-hour sideload flow, and the ADB exemption.

Tata Electronics Data Breach Exposes Apple and Tesla Files Tata Electronics data breach leaking Apple and Tesla component design and specification files on a dark web site
  • Data Leak

Tata Electronics Data Breach Exposes Apple and Tesla Files

Do Son June 23, 2026 0

A Tata Electronics data breach exposed 630GB of files. Hackers claim Apple and Tesla design documents are in the stolen 200,000-file haul.

Apple AirPort Utility Deprecated in iOS 27 & macOS 27 Apple AirPort Utility deprecated notice on legacy wireless routers AFP protocol macOS 27, SMB3 protocol, Apple Filing Protocol, file sharing protocol Apple WWDC 2026 announcements
  • Technology

Apple AirPort Utility Deprecated in iOS 27 & macOS 27

Do Son June 23, 2026 0

Apple confirms the AirPort Utility app is going away soon. Discover how the AirPort Utility deprecated status affects legacy Wi-Fi router management.

iOS 27 Developer Beta 2 Adds Write with Siri and RCS Replies iOS 27 Developer Beta 2 new features including Write with Siri keyboard button and RCS inline replies
  • Technology

iOS 27 Developer Beta 2 Adds Write with Siri and RCS Replies

Do Son June 23, 2026 0

iOS 27 Developer Beta 2 brings Write with Siri on the keyboard, RCS inline replies, Wallet Insights, and an iPhone Mirroring fix.

Resolving the Codex SSD Wear Issue Codex v0.142.0 update addressing the SSD wear issue and SQLite logging optimizations
  • Technology

Resolving the Codex SSD Wear Issue

Do Son June 23, 2026 0

Discover how the latest v0.142.0 update fixes the severe Codex SSD wear issue. Learn about the log optimization and how it protects your local database.

Tinyproxy Request Smuggling Flaws Expose Networks Tinyproxy request smuggling diagram showing CVE-2026-54388 vulnerabilities
  • Vulnerability Report

Tinyproxy Request Smuggling Flaws Expose Networks

Do Son June 23, 2026 0

Three critical Tinyproxy request smuggling vulnerabilities, including CVE-2026-54388, expose networks to severe attacks. Update your proxy servers immediately.

Critical libssh2 Vulnerability CVE-2026-55200 Enables Remote Code Execution libssh2 vulnerability CVE-2026-55200 enabling remote code execution via out-of-bounds write
  • Vulnerability Report

Critical libssh2 Vulnerability CVE-2026-55200 Enables Remote Code Execution

Do Son June 23, 2026 0

A critical libssh2 vulnerability, CVE-2026-55200, lets remote attackers trigger an out-of-bounds write and achieve remote code execution. Patch now.

MariaDB Server Vulnerabilities Allow CVSS 10 Attacks MariaDB server vulnerabilities diagram showing shell command execution risks
  • Vulnerability Report

MariaDB Server Vulnerabilities Allow CVSS 10 Attacks

Do Son June 23, 2026 0

Three critical MariaDB server vulnerabilities, including a CVSS 10 flaw, allow attackers to execute shell commands. Patch your database servers immediately.

Mitel Patches 12 Critical MiCollab Vulnerabilities Rated Up to CVSS 10.0 Mitel MiCollab vulnerabilities MISA-2026-0005 command injection flaws rated CVSS 10.0
  • Vulnerability Report

Mitel Patches 12 Critical MiCollab Vulnerabilities Rated Up to CVSS 10.0

Do Son June 23, 2026 0

Mitel patched 12 critical MiCollab vulnerabilities, several at CVSS 10.0. Unauthenticated command injection and SQL injection flaws need urgent updates.

Vendor-Signed UEFI Applications Allow Secure Boot Bypass vendor-signed UEFI applications Secure Boot bypass via BYOVD attack and UEFI DBX revocation
  • Vulnerability Report

Vendor-Signed UEFI Applications Allow Secure Boot Bypass

Do Son June 23, 2026 0

ESET found vendor-signed UEFI applications vulnerable to a Secure Boot bypass. Attackers can run pre-boot code. Update firmware and the UEFI DBX now.

❮ Prev Page
Next Page ❯

Search

CVE ALERTS
📈

EPSS Spike Alerts
Catch risk spikes before they make headlines.

🎯

Custom EPSS/CVSS
Set score thresholds to effectively filter noise.

🛡️

Exploit Intel
Real-world exploit signals beyond the KEV catalog.

🐙

GitHub Issues
Auto-create alert tickets without duplication.

📬

Weekly Digest
Clean summaries, eliminating email spam.

🏷️

Watchlist Groups
Tag vulnerabilities by team (Infra/AppSec/SOC).

🔀

Smart Routing
Route chat channels based on severity levels.

🚨

RBP Tracker
Early warning detection and tracking system.

Subscribe – $7/mo or try free for 14 days →

🚨 Active Exploits in the Wild

  • CVE-2026-20051CVSS 7.4
    A vulnerability with the Ethernet VPN (EVPN) Layer 2 ingress packet processing of Cisco Nexus 3600 Platform Switches...
    Watchtower Verified📅 Updated: Nov 1, 2026
  • CVE-2026-20118CVSS 6.8
    A vulnerability in the handling of an Egress Packet Network Interface (EPNI) Aligner interrupt in Cisco IOS XR...
    Watchtower Verified📅 Updated: Nov 1, 2026
  • CVE-2010-20125CVSS 8.7
    DedeCMS before 5.7 contains a file inclusion vulnerability in plus/carbuyaction.php that allows remote unauthenticated attackers to control the...
    Watchtower Verified📅 Updated: Oct 30, 2026
  • CVE-2015-20130CVSS 5.1
    Netsweeper before 4.0.11 and 4.1.0 before 4.1.5 contains a reflected cross-site scripting vulnerability in webadmin/reporter/view_server_log.php that allows remote...
    Watchtower Verified📅 Updated: Oct 30, 2026
  • CVE-2026-111357CVSS 7.0
    Ivanti Connect Secure 22.8R2.4 mishandles the manner in which the dsinvoked broker trusts DSCache configuration data, leading to...
    CISA KEV📅 Added to KEV: Oct 30, 2026
  • CVE-2026-118527CVSS 4.3
    Use of predictable filenames in Ivanti Connect Secure before versions 25.1.1.3 and 22.8R2.6 allows a remote authenticated attacker...
    CISA KEV📅 Added to KEV: Oct 30, 2026
  • CVE-2026-118539
    This module enables you to sell goods and services to customers through an included shopping cart and checkout...
    Admin intel📅 Updated: Oct 29, 2026
  • CVE-2022-31034CVSS 8.3
    Impact All versions of Argo CD starting with v0.11.0 are vulnerable to a variety of attacks when an...
    Watchtower Verified📅 Updated: Oct 29, 2026
Powered by CVE Watchtower

Critical Vulnerabilities

  • CVE-2026-102435CVSS 9.8
    The Ultra Addons for Contact Form 7 plugin for WordPress is vulnerable to arbitrary file deletion due to...
    📅 Updated: Nov 2, 2026
  • CVE-2025-11969CVSS 9.4
    The System REST APIs do not correctly enforce access control mechanisms, allowing users with lower privilege roles to...
    📅 Updated: Nov 2, 2026
  • CVE-2026-120345CVSS 10.0
    A vulnerability was found in WAVLINK WN551X3-A M51X3_V251020-WO-182e965. This impacts the function sub_41a430 of the file /bin/ioos of...
    📅 Updated: Nov 2, 2026
  • CVE-2026-120344CVSS 10.0
    A vulnerability has been found in WAVLINK WN551X3-A M51X3_V251020-WO-182e965. This affects the function system of the file /bin/ioos...
    📅 Updated: Nov 2, 2026
  • CVE-2026-120322CVSS 9.4
    A vulnerability was identified in Termix-SSH Termix up to 2.9.2. This issue affects some unknown processing of the...
    📅 Updated: Nov 2, 2026
  • CVE-2026-120283CVSS 10.0
    A vulnerability was identified in Linksys E8450 1.2.00.360516. Affected is the function strcpy of the file /www/cgi-bin/portal.cgi. Such...
    📅 Updated: Nov 2, 2026
  • CVE-2026-120282CVSS 9.4
    A vulnerability was determined in WAVLINK WN536AX6-A V260507. This impacts the function host_black of the file /protocol.csp. This...
    📅 Updated: Nov 2, 2026
  • CVE-2026-120281CVSS 10.0
    A vulnerability was found in WAVLINK WN536AX6-A V260507. This affects the function strcpy of the file /protocol.csp of...
    📅 Updated: Nov 2, 2026
Powered by CVE Watchtower

Daily CyberSecurity

  • About SecurityOnline.info
  • Advertise with us
  • Announcement
  • Contact
  • Contributor Register
  • Login
  • Disclaimer
  • DCMA
  • Privacy Policy
  • About SecurityOnline.info
  • Advertise on SecurityOnline.info
  • Contact Us

When you purchase through links on our site, we may earn an affiliate commission. Here’s how it works

  • CVE Watchtower
  • CVE Statistics by Vendor 2026
  • Q3 2026 Report
  • Top Exploited CVEs
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube
© 2017 - 2026 Daily CyberSecurity. All Rights Reserved.