Skip to content
November 2, 2026
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube

Daily CyberSecurity

Zero-hour alerts. Unmatched analysis.

Primary Menu
  • Home
  • CVE Data
    • CVE Watchtower
    • Top Exploited CVEs
    • CVE Stats by Vendor
    • Q2 2026 Report
    • CVE Alerts
    • CVE Alert Settings
    • Pricing
  • Cyber Criminals
  • Data Leak
  • Free Tools
    • CVSS 3.1 Calculator
    • Certificate Viewer
    • DNS Lookup
    • Encoder & Hash Generator
    • IP / Subnet Calculator
    • Whois Lookup
  • Linux
  • Malware
  • Vulnerability
  • Submit Press Release
  • Weekly Recap
Light/Dark Button
Active Gravity SMTP Vulnerability Exploited in the Wild Gravity SMTP Vulnerability CVE-2026-4020 exploit statistics
  • Vulnerability Report

Active Gravity SMTP Vulnerability Exploited in the Wild

Do Son June 17, 2026 0

Attackers are actively exploiting a critical Gravity SMTP vulnerability (CVE-2026-4020) causing sensitive information exposure. Update your plugin now.

Cisco ISE Vulnerabilities: Critical RCE and Info Disclosure Flaws Cisco ISE vulnerabilities diagram showing CVE-2026-20181 remote code execution and CVE-2026-20190 information disclosure.
  • Vulnerability Report

Cisco ISE Vulnerabilities: Critical RCE and Info Disclosure Flaws

Do Son June 17, 2026 0

Critical Cisco ISE vulnerabilities expose networks to Remote Code Execution (CVE-2026-20181) and data theft (CVE-2026-20190). Patch affected systems now.

Critical Apache Shiro LDAP Injection Flaw Uncovered Apache Shiro LDAP Injection showing the DefaultLdapRealm vulnerability flow and CVE-2026-49268 exploit path.
  • Vulnerability Report

Critical Apache Shiro LDAP Injection Flaw Uncovered

Do Son June 17, 2026 0

A critical Apache Shiro LDAP Injection vulnerability in DefaultLdapRealm, CVE-2026-49268, allows authentication bypass. Update your framework immediately.

SpyCloud Report Finds Phishing Attacks Surge as Employee Data Is Exposed at 86% of Fortune 100 Companies spycloud-phishing_report-flat_lay_1_1781535484R2j3cq4MNC
  • Press Release

SpyCloud Report Finds Phishing Attacks Surge as Employee Data Is Exposed at 86% of Fortune 100 Companies

cybernewswire June 17, 2026 0
Austin, TX, USA, 17th June 2026, CyberNewswire
Read More Read more about SpyCloud Report Finds Phishing Attacks Surge as Employee Data Is Exposed at 86% of Fortune 100 Companies
Heimdal Survey: Executives Four Times More Confident About AI Risk Than the Teams Managing It PR_Communicat_-_AI_Risk_Management_Report_1781617772Ho43XezgAG
  • Press Release

Heimdal Survey: Executives Four Times More Confident About AI Risk Than the Teams Managing It

cybernewswire June 17, 2026 0
London, United Kingdom, 17th June 2026, CyberNewswire
Read More Read more about Heimdal Survey: Executives Four Times More Confident About AI Risk Than the Teams Managing It
GoFlateLoader: The Bloated Golang Malware Smuggling Infostealers Past Scanners GoFlateLoader malware Golang loader, infostealer delivery, PE overlay evasion
  • Malware

GoFlateLoader: The Bloated Golang Malware Smuggling Infostealers Past Scanners

Do Son June 17, 2026 0

GoFlateLoader malware, a Golang loader, uses a giant PE overlay to evade scanners and deliver infostealers like Lumma, Vidar, and StealC.

Microsoft Copilot Cowork: Agentic AI System Launch Microsoft Copilot Cowork agentic AI system dashboard and features
  • Technology

Microsoft Copilot Cowork: Agentic AI System Launch

Do Son June 17, 2026 0

Microsoft officially launched Copilot Cowork, a revolutionary agentic AI system for enterprise tasks. Discover its features, pricing, and capabilities.

JDY Botnet Resurges: China-Nexus IoT Army Hunts New Vulnerabilities Within Hours JDY botnet Volt Typhoon, SOHO botnet, CVE-2026-35616
  • Malware

JDY Botnet Resurges: China-Nexus IoT Army Hunts New Vulnerabilities Within Hours

Do Son June 17, 2026 0

The JDY botnet, a China-nexus IoT network tied to Volt Typhoon, now spans 1,500+ devices and scans for new bugs like CVE-2026-35616 within hours.

Mastra Supply Chain Attack Compromises 140+ npm Packages Mastra supply chain attack delivering an npm infostealer through the typosquatted easy-day-js dependency during npm install
  • Malware

Mastra Supply Chain Attack Compromises 140+ npm Packages

Do Son June 17, 2026 0

A Mastra supply chain attack compromised 140+ npm packages, using the typosquatted easy-day-js dependency to drop a crypto-stealing infostealer.

AdGuard Email Tracking Protection: Stop Hidden Pixels AdGuard email tracking protection blocking hidden 1x1 pixel trackers
  • Technology

AdGuard Email Tracking Protection: Stop Hidden Pixels

Do Son June 17, 2026 0

Discover how the new AdGuard email tracking protection feature blocks hidden 1x1 pixels. Safeguard your inbox privacy and prevent covert surveillance today.

UK to Ban Social Media for Under-16s by Spring 2027 UK social media ban for under-16s with age verification requirements on Instagram TikTok and Snapchat
  • Technology

UK to Ban Social Media for Under-16s by Spring 2027

Do Son June 17, 2026 0

The UK will ban social media for under-16s by spring 2027, requiring age verification on platforms like Instagram, TikTok, and Snapchat.

SilabRAT Malware: The $5,000-a-Month Crypto-Hunting RAT Hiding Behind HijackLoader SilabRAT malware SnappyClient, HijackLoader, Malware-as-a-Service
  • Malware

SilabRAT Malware: The $5,000-a-Month Crypto-Hunting RAT Hiding Behind HijackLoader

Do Son June 17, 2026 0

SilabRAT malware, aka SnappyClient, is a $5K/month MaaS RAT flagged as HijackLoader. It uses HVNC and cracks crypto wallets, per Group-IB.

WooCommerce Payment Skimmer Mimics Stripe to Steal Cards at Real Checkouts WooCommerce payment skimmer Magecart attack, card data theft, checkout backdoor
  • Cybercriminals

WooCommerce Payment Skimmer Mimics Stripe to Steal Cards at Real Checkouts

Do Son June 17, 2026 0

A WooCommerce payment skimmer mimics Stripe to steal card data during real checkouts. Inside this Magecart-style attack and how merchants can fight back.

Google Wear OS 7 Update: Gemini AI & Live Updates Google Wear OS 7 update featuring Live Updates and Gemini AI
  • Android

Google Wear OS 7 Update: Gemini AI & Live Updates

Do Son June 17, 2026 0

Discover the Google Wear OS 7 update. Explore new Live Updates, cross-device control, and Gemini AI integration for a smarter wearable experience.

ChatGPT Market Share Slips Below 50% As Rivals Grow ChatGPT market share graph showing competition from Gemini and Claude
  • Technology

ChatGPT Market Share Slips Below 50% As Rivals Grow

Do Son June 17, 2026 0

Discover why ChatGPT market share recently dropped below 50 percent. Explore how rival AI assistants like Gemini and Claude capture new active users.

Cloudflare DMARC Management Reaches General Availability Cloudflare DMARC Management dashboard for email authentication protocol
  • Technology

Cloudflare DMARC Management Reaches General Availability

Do Son June 17, 2026 0

Discover how Cloudflare DMARC Management enhances email security. Learn about the new general availability update, SPF auditing, and simplified remediation.

Google Unveils Android 17 and Innovative June Pixel Drop Google Android 17 features and June Pixel Drop multitasking bubbles
  • Android

Google Unveils Android 17 and Innovative June Pixel Drop

Do Son June 17, 2026 0

Discover how the new Android 17 operating system and June Pixel Drop redefine mobile productivity, privacy protection, and Gemini AI creativity.

Chrome Security Update Fixes 33 Flaws, Seven Critical Chrome security update patching a critical use-after-free vulnerability (CVE-2026-12437) in the Google Chrome 149 desktop browser
  • Vulnerability Report

Chrome Security Update Fixes 33 Flaws, Seven Critical

Do Son June 17, 2026 0

A new Chrome security update fixes 33 flaws, including critical use-after-free bugs like CVE-2026-12437. Update Chrome 149 now to stay safe.

Fortra BoKS Vulnerability Opens Door to Remote Command Injection Fortra BoKS vulnerability OS command injection, CVE-2026-9862 Altium Enterprise Server Vulnerability CVE-2026-9129 Path Traversal Patreon OAuth Vulnerability Identity Collision DRC INSIGHT Vulnerability Exam Data Hijacking Horner Automation PLC Industrial Brute Force Honeywell IQ4x Vulnerability CVE-2026-3611 DJI Romo vacuum security flaw Python Cryptography Vulnerability CVE-2026-26007 Open5GS Vulnerability CVE-2026-0622 Vivotek IP7137 Vulnerabilities CVE-2025-66049 Forcepoint DLP Vulnerability CVE-2025-14026 Cellopoint Secure Email Gateway - CVE-2024-9043
  • Vulnerability Report

Fortra BoKS Vulnerability Opens Door to Remote Command Injection

Do Son June 17, 2026 0

A critical Fortra BoKS vulnerability (CVE-2026-9862) enables remote OS command injection via the autoregistration service. Mitigate now.

GitHub Overload: Microsoft Rents Amazon Cloud Capacity Microsoft rents Amazon cloud infrastructure to resolve GitHub server capacity limits
  • Technology

GitHub Overload: Microsoft Rents Amazon Cloud Capacity

Do Son June 17, 2026 0

Discover why explosive AI coding growth forces GitHub to seek help. Microsoft rents Amazon cloud infrastructure to resolve severe Azure server capacity limits.

Critical Yarbo Robot Vulnerability Exposes Global Fleet Yarbo robot vulnerability hard-coded MQTT credentials, CVE-2026-10557, CVE-2026-7368 command injection vulnerabilities InHand router flaws
  • Vulnerability Report

Critical Yarbo Robot Vulnerability Exposes Global Fleet

Do Son June 17, 2026 0

A critical Yarbo robot vulnerability lets attackers extract hard-coded MQTT credentials and command the global fleet via CVE-2026-10557.

SpaceX Acquires Cursor for $60 Billion in AI Tech Buyout SpaceX acquires Cursor to dominate the AI coding tools market
  • Technology

SpaceX Acquires Cursor for $60 Billion in AI Tech Buyout

Do Son June 17, 2026 0

Discover why SpaceX acquires Cursor for $60 billion. Explore how this monumental Anysphere buyout transforms AI programming and elevates Grok models.

❮ Prev Page
Next Page ❯

Search

CVE ALERTS
📈

EPSS Spike Alerts
Catch risk spikes before they make headlines.

🎯

Custom EPSS/CVSS
Set score thresholds to effectively filter noise.

🛡️

Exploit Intel
Real-world exploit signals beyond the KEV catalog.

🐙

GitHub Issues
Auto-create alert tickets without duplication.

📬

Weekly Digest
Clean summaries, eliminating email spam.

🏷️

Watchlist Groups
Tag vulnerabilities by team (Infra/AppSec/SOC).

🔀

Smart Routing
Route chat channels based on severity levels.

🚨

RBP Tracker
Early warning detection and tracking system.

Subscribe – $7/mo or try free for 14 days →

🚨 Active Exploits in the Wild

  • CVE-2026-20051CVSS 7.4
    A vulnerability with the Ethernet VPN (EVPN) Layer 2 ingress packet processing of Cisco Nexus 3600 Platform Switches...
    Watchtower Verified📅 Updated: Nov 1, 2026
  • CVE-2026-20118CVSS 6.8
    A vulnerability in the handling of an Egress Packet Network Interface (EPNI) Aligner interrupt in Cisco IOS XR...
    Watchtower Verified📅 Updated: Nov 1, 2026
  • CVE-2010-20125CVSS 8.7
    DedeCMS before 5.7 contains a file inclusion vulnerability in plus/carbuyaction.php that allows remote unauthenticated attackers to control the...
    Watchtower Verified📅 Updated: Oct 30, 2026
  • CVE-2015-20130CVSS 5.1
    Netsweeper before 4.0.11 and 4.1.0 before 4.1.5 contains a reflected cross-site scripting vulnerability in webadmin/reporter/view_server_log.php that allows remote...
    Watchtower Verified📅 Updated: Oct 30, 2026
  • CVE-2026-111357CVSS 7.0
    Ivanti Connect Secure 22.8R2.4 mishandles the manner in which the dsinvoked broker trusts DSCache configuration data, leading to...
    CISA KEV📅 Added to KEV: Oct 30, 2026
  • CVE-2026-118527CVSS 4.3
    Use of predictable filenames in Ivanti Connect Secure before versions 25.1.1.3 and 22.8R2.6 allows a remote authenticated attacker...
    CISA KEV📅 Added to KEV: Oct 30, 2026
  • CVE-2026-118539
    This module enables you to sell goods and services to customers through an included shopping cart and checkout...
    Admin intel📅 Updated: Oct 29, 2026
  • CVE-2022-31034CVSS 8.3
    Impact All versions of Argo CD starting with v0.11.0 are vulnerable to a variety of attacks when an...
    Watchtower Verified📅 Updated: Oct 29, 2026
Powered by CVE Watchtower

Critical Vulnerabilities

  • CVE-2026-91265CVSS 9.1
    Vulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Enterprise Infrastructure SEC). Supported versions...
    📅 Updated: Nov 2, 2026
  • CVE-2026-73697CVSS 9.3
    Control Web Panel (CWP) before webpanel_version 1.16 contains an arbitrary file write and OS command injection vulnerability in...
    📅 Updated: Nov 2, 2026
  • CVE-2026-73696CVSS 9.3
    Control Web Panel (CWP) before webpanel_version 1.12 contains an execution after redirect vulnerability in the user panel authentication...
    📅 Updated: Nov 2, 2026
  • CVE-2026-73695CVSS 9.3
    Control Web Panel (CWP) before webpanel_version 1.16 contains a path traversal vulnerability in services/users/index.php, where an attacker-supplied module...
    📅 Updated: Nov 2, 2026
  • CVE-2026-120209CVSS 9.3
    AJ-Report through 1.7.1 signs share tokens with a hard-coded JWT secret, allowing attackers to forge valid Share-Tokens offline....
    📅 Updated: Nov 2, 2026
  • CVE-2026-120201CVSS 9.3
    Jpom 2.10.0 through 2.11.12 contains an authentication bypass vulnerability that allows unauthenticated attackers to gain super-administrator access by...
    📅 Updated: Nov 2, 2026
  • CVE-2026-120228CVSS 9.4
    A flaw has been found in WAVLINK WN553X1-B V260403_2.0.0. This vulnerability affects the function sub_416D88 of the file...
    📅 Updated: Nov 2, 2026
  • CVE-2026-120232CVSS 9.3
    A vulnerability was identified in Horizon DataSys Reboot Restore Standard up to 13.2. The impacted element is the...
    📅 Updated: Nov 2, 2026
Powered by CVE Watchtower

Daily CyberSecurity

  • About SecurityOnline.info
  • Advertise with us
  • Announcement
  • Contact
  • Contributor Register
  • Login
  • Disclaimer
  • DCMA
  • Privacy Policy
  • About SecurityOnline.info
  • Advertise on SecurityOnline.info
  • Contact Us

When you purchase through links on our site, we may earn an affiliate commission. Here’s how it works

  • CVE Watchtower
  • CVE Statistics by Vendor 2026
  • Q3 2026 Report
  • Top Exploited CVEs
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube
© 2017 - 2026 Daily CyberSecurity. All Rights Reserved.