Skip to content
October 16, 2026
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube

Daily CyberSecurity

Zero-hour alerts. Unmatched analysis.

Primary Menu
  • Home
  • CVE Data
    • CVE Watchtower
    • Top Exploited CVEs
    • CVE Stats by Vendor
    • Q2 2026 Report
    • CVE Alerts
    • CVE Alert Settings
    • Pricing
  • Cyber Criminals
  • Data Leak
  • Free Tools
    • CVSS 3.1 Calculator
    • Certificate Viewer
    • DNS Lookup
    • Encoder & Hash Generator
    • IP / Subnet Calculator
    • Whois Lookup
  • Linux
  • Malware
  • Vulnerability
  • Submit Press Release
  • Weekly Recap
Light/Dark Button

Weekly Recap

Weekly CVE report Oct 5-11 2026 exploited vulnerabilities not yet on CISA KEV
  • Weekly Recap

Six Exploited Flaws Missing From CISA KEV Lead This Weekly CVE Report

Do Son October 12, 2026 0
Weekly CVE report on exploited vulnerabilities from Daily Cybersecurity and CISA KEV, September 28 to October 4, 2026
  • Weekly Recap

Weekly CVE Report Tracks 2,652 New Flaws and Seven Exploited Vulnerabilities (Sept. 28 – Oct. 4, 2026)

Do Son October 5, 2026 0
Weekly CVE report comparing exploited vulnerabilities from Daily Cybersecurity intelligence with the CISA KEV catalog for September 21-27, 2026
  • Weekly Recap

Weekly CVE Report: 2,825 New Flaws and 9 Exploited Bugs (Sept 21-27, 2026)

Do Son September 28, 2026 0
CVE-2023-50164 AEM Forms
  • Weekly Recap

Weekly CVE Report: 4,378 New Flaws and 10 Exploited Bugs

Do Son September 21, 2026 0
Weekly CVE report chart comparing Daily Cybersecurity exploited vulnerabilities against the CISA KEV catalog
  • Weekly Recap

Daily Cybersecurity Flagged 9 Exploited Flaws Before CISA KEV

Do Son September 14, 2026 0

Tech News

Anthropic Scion version control system architecture replacing Git for AI agents
  • Technology

Anthropic Replaces Git with Proprietary Scion Version Control

Do Son October 16, 2026 0
Cloudflare telemetry graph analyzing Russian bot traffic and Yandex crawler disruption
  • Technology

Russian Bot Traffic Resilient After Data Center Strikes

Do Son October 16, 2026 0
Google AI Plus changes removing Pro model access in Gemini interface
  • Technology

Google AI Plus Changes Drop Pro Model Access

Do Son October 16, 2026 0
Chrome VRP rewards update for Google Chrome memory corruption vulnerabilities
  • Technology

Google Updates Chrome VRP Rewards for Memory Flaws

Do Son October 15, 2026 0

Vulnerability

BeyondTrust Remote Support vulnerability attack chain showing ARMORY CASTLE zero-day exploitation of CVE-2026-102764
  • Vulnerability Report

Critical BeyondTrust Remote Support Vulnerability Exploited in the Wild by ARMORY CASTLE

Do Son October 16, 2026 0
Chrome security update fixes critical use after free flaw CVE-2026-110922
  • Vulnerability Report

Chrome 155 Update Fixes 10 Security Flaws, Including Critical Prerender Bug

Do Son October 16, 2026 0
Mitsubishi Electric security advisory for ICONICS Suite vulnerabilities including CVE-2026-16438, CVE-2023-4863, and CVE-2026-16436
  • Vulnerability Report

Mitsubishi Electric Patches Four Critical ICONICS Suite Vulnerabilities

Do Son October 16, 2026 0
Progress security bulletin detailing MOVEit Transfer vulnerabilities including CVE-2026-87093, CVE-2026-89067, and CVE-2026-89068
  • Vulnerability Report

Progress Software Patches Twelve High-Severity MOVEit Transfer Vulnerabilities

Do Son October 16, 2026 0

Cyber Security

UAT-6275 Threat Actor Targets CIS Governments Using WinRAR Exploit Victimology map showing UAT-6275 and UAT-6275 threat actor activity across CIS countries
  • Cybercriminals

UAT-6275 Threat Actor Targets CIS Governments Using WinRAR Exploit

October 16, 2026 0
Microsoft and Proofpoint Disrupt CoGUI Phishing Kit, YAM Store, and Iron Man Splash page displayed on seized domains from the CoGUI phishing kit and CoGUI phishing kit takedown
  • Cybercriminals

Microsoft and Proofpoint Disrupt CoGUI Phishing Kit, YAM Store, and Iron Man

October 15, 2026 0
Meta, Tech Firms and Police Hit West Africa Scam Centers in Joint Operation That Led to 28 Arrests West Africa scam centers targeted in a global scam crackdown by Meta, tech companies and law enforcement
  • Cybercriminals

Meta, Tech Firms and Police Hit West Africa Scam Centers in Joint Operation That Led to 28 Arrests

October 14, 2026 0
DOJ Charges Engineer After OpenAI Recording Device Arrest Federal evidence photo of an OpenAI recording device following the OpenAI recording device arrest
  • Cybercriminals

DOJ Charges Engineer After OpenAI Recording Device Arrest

October 14, 2026 0

Malware Alert

GhostBat RAT Uses Transparent Overlay to Steal PINs From 60 Indian Financial Apps GhostBat RAT and Android GhostBat RAT Ghost Overlay attack chain diagram
  • Malware

GhostBat RAT Uses Transparent Overlay to Steal PINs From 60 Indian Financial Apps

October 16, 2026 0
Hirudo Android Banking Trojan Replaces Genuine Banking Apps With Patched Copies CVE-2026-0075 Android elevation of privilege ContactsProvider2 SQL injection proof-of-concept exploit no user interaction
  • Malware

Hirudo Android Banking Trojan Replaces Genuine Banking Apps With Patched Copies

October 16, 2026 0
Fake WatchGuard VPN Site Steals Credentials Before Delivering Genuine Installer WatchGuard VPN phishing and WatchGuard VPN phishing site attack flow diagram
  • Malware

Fake WatchGuard VPN Site Steals Credentials Before Delivering Genuine Installer

October 15, 2026 0
CodeAudit AI VS Code Extension Captures Developer Source Code in the Background CodeAudit AI extension and VS Code CodeAudit AIextension activity flow diagram
  • Malware

CodeAudit AI VS Code Extension Captures Developer Source Code in the Background

October 15, 2026 0

Data Leak

Ricardo Data Leak Exposes User Contact Details Ricardo data leak illustration highlighting the SMG security vulnerability.
  • Data Leak

Ricardo Data Leak Exposes User Contact Details

October 9, 2026 0
The Growing Backlash Against Apple Intelligence Integration Apple Intelligence storage macOS 27 Golden Gate enterprise security
  • Data Leak

The Growing Backlash Against Apple Intelligence Integration

October 9, 2026 0
Trump Mobile Data Breach Exposes 3,615 Customers in BYOD Leak leak
  • Data Leak

Trump Mobile Data Breach Exposes 3,615 Customers in BYOD Leak

October 6, 2026 0
Denmark CPR Data Breach Exposes CPR Numbers of 8.8 Million People Denmark CPR data breach - CPR numbers exposed for 8.8 million people in the national register
  • Data Leak

Denmark CPR Data Breach Exposes CPR Numbers of 8.8 Million People

October 5, 2026 0
Turn “Things That Just Make Sense” into Relatable Comedy Skits 1280X1280 (3)
  • Technique

Turn “Things That Just Make Sense” into Relatable Comedy Skits

Do Son October 16, 2026 0
Some of the most consistently shareable short-form content isn’t built on an elaborate joke at all; it’s...
Read More Read more about Turn “Things That Just Make Sense” into Relatable Comedy Skits
Windows 11 Remote Desktop Fails with Admin Protection Windows 11 Remote Desktop error 0xC000000D triggered by Administrator Protection
  • Windows

Windows 11 Remote Desktop Fails with Admin Protection

Do Son October 16, 2026 0
Microsoft recently updated its release health dashboard to confirm an emerging remote connectivity defect. Specifically, Windows 11...
Read More Read more about Windows 11 Remote Desktop Fails with Admin Protection
Android 17 Bionic Bug Triggers String Parsing Flaw Android 17 Bionic bug causing wide character string parsing errors in libc
  • Android

Android 17 Bionic Bug Triggers String Parsing Flaw

Do Son October 16, 2026 0
Select September builds of Android 17 harbor a critical wide-character parsing flaw. Specifically, the wcscspn() and wcspbrk()...
Read More Read more about Android 17 Bionic Bug Triggers String Parsing Flaw
Backuply WordPress Plugin Patched for High-Severity SQL Injection Vulnerability Backuply WordPress plugin SQL injection vulnerability diagram showing CVE-2026-93953 privilege escalation impact
  • Vulnerability Report

Backuply WordPress Plugin Patched for High-Severity SQL Injection Vulnerability

Do Son October 16, 2026 0
TL;DR Wordfence disclosed a high-severity SQL injection vulnerability (CVE-2026-93953) in the Backuply WordPress plugin on October 15,...
Read More Read more about Backuply WordPress Plugin Patched for High-Severity SQL Injection Vulnerability
AWS Patches Critical Amazon Neptune Vulnerability in Apache TinkerPop Gremlin Amazon Neptune vulnerability diagram showing Apache TinkerPop Gremlin flaw CVE-2026-110812 impact
  • Vulnerability Report

AWS Patches Critical Amazon Neptune Vulnerability in Apache TinkerPop Gremlin

Do Son October 16, 2026 0
TL;DR Amazon Web Services (AWS) published security bulletin 2026-136-AWS on October 15, 2026, addressing a critical Amazon...
Read More Read more about AWS Patches Critical Amazon Neptune Vulnerability in Apache TinkerPop Gremlin
cURL Releases Version 8.23.0 to Fix Critical Flaw cURL CVE-2026-92392 vulnerability diagram illustrating HTTP/2 use-after-free flaw
  • Vulnerability Report

cURL Releases Version 8.23.0 to Fix Critical Flaw

Do Son October 15, 2026 0
The widely deployed open-source project cURL recently released version 8.23.0. This vital update remedies a use-after-free flaw...
Read More Read more about cURL Releases Version 8.23.0 to Fix Critical Flaw
Windows 11 Wi-Fi Authentication Broken by KB5127648 Windows 11 Wi-Fi authentication failure and enterprise 802.1X connection error
  • Windows

Windows 11 Wi-Fi Authentication Broken by KB5127648

Do Son October 15, 2026 0
Microsoft recently deployed the cumulative security update KB5127648 for Windows 11. However, newly released cumulative patches often...
Read More Read more about Windows 11 Wi-Fi Authentication Broken by KB5127648
Claude Code Linux Kernel Patch Triples Read Speeds Claude Code Linux kernel memory management optimization and Linus Torvalds benchmark results
  • Linux

Claude Code Linux Kernel Patch Triples Read Speeds

Do Son October 15, 2026 0
Linus Torvalds recently tasked the artificial intelligence tool Claude Code with authoring modifications for a vital Linux...
Read More Read more about Claude Code Linux Kernel Patch Triples Read Speeds
Next.js Fixes Two Critical Unauthenticated RCE Flaws in Out-of-Band Update Next.js security update fixes unauthenticated remote code execution flaws
  • Vulnerability Report

Next.js Fixes Two Critical Unauthenticated RCE Flaws in Out-of-Band Update

Do Son October 15, 2026 0
TL;DR Vercel shipped Next.js 16.4.1 and 15.5.28 on October 14, 2026, in an out-of-band release. The Next.js...
Read More Read more about Next.js Fixes Two Critical Unauthenticated RCE Flaws in Out-of-Band Update
Citrix Patches XenServer Host Escape Risks and UniconOS Privilege Escalation Flaws Citrix security update fixes XenServer and UniconOS privilege escalation vulnerabilities
  • Vulnerability Report

Citrix Patches XenServer Host Escape Risks and UniconOS Privilege Escalation Flaws

Do Son October 15, 2026 0
TL;DR Citrix released two high-severity bulletins covering seven flaws in XenServer and UniconOS. This Citrix security update...
Read More Read more about Citrix Patches XenServer Host Escape Risks and UniconOS Privilege Escalation Flaws
Windows 11 Mouse Stutter Fixed in KB5127648 Update Windows 11 mouse stutter fix in KB5127648 gaming update
  • Windows

Windows 11 Mouse Stutter Fixed in KB5127648 Update

Do Son October 15, 2026 0
In the recently deployed Windows 11 KB5127648 update, Microsoft resolved an issue causing mouse input lag during...
Read More Read more about Windows 11 Mouse Stutter Fixed in KB5127648 Update
SiteGuard Server Edition Flaw CVE-2026-106931 Exploited in the Wild for Root Access SiteGuard Server Edition vulnerability CVE-2026-106931 exploited in the wild for OS command injection
  • Vulnerability Report

SiteGuard Server Edition Flaw CVE-2026-106931 Exploited in the Wild for Root Access

Do Son October 15, 2026 0
TL;DR JPCERT/CC warned on October 14, 2026, that attackers are exploiting CVE-2026-106931 in SiteGuard Server Edition. The...
Read More Read more about SiteGuard Server Edition Flaw CVE-2026-106931 Exploited in the Wild for Root Access
Epic Games Launcher Update Sparks Vibe Coding Backlash Epic Games Launcher update interface and Linux support comparison
  • Linux

Epic Games Launcher Update Sparks Vibe Coding Backlash

Do Son October 15, 2026 0
For years, global PC gamers criticized the Epic Games Store desktop launcher as bloated, sluggish, and resource-heavy....
Read More Read more about Epic Games Launcher Update Sparks Vibe Coding Backlash
Windows Blocks ReFS Removable Storage Starting in 2027 ReFS removable storage mounting block policy in Windows 11 and Windows Server
  • Windows

Windows Blocks ReFS Removable Storage Starting in 2027

Do Son October 15, 2026 0
The Resilient File System (ReFS) has continually received feature enhancements across Windows 11 and Windows Server in...
Read More Read more about Windows Blocks ReFS Removable Storage Starting in 2027
npm Trusted Publishing Now Expires After 48 Hours npm trusted publishing configuration tied to a GitHub repository name, exposed to a repository name reuse attack before its first publish
  • Technology

npm Trusted Publishing Now Expires After 48 Hours

Do Son October 15, 2026 0
GitHub Tightens npm Trusted Publishing Rules GitHub has changed the rules for npm trusted publishing. A new...
Read More Read more about npm Trusted Publishing Now Expires After 48 Hours
Android Scam Protection Gets Gemini AI Upgrades Android scam protection warning in Google Messages powered by Gemini scam detection, flagging a suspicious wrong-number text
  • Android

Android Scam Protection Gets Gemini AI Upgrades

Do Son October 15, 2026 0
Google Takes On Tailored Scams With Gemini Telecom fraud and social engineering attacks are spreading worldwide, and...
Read More Read more about Android Scam Protection Gets Gemini AI Upgrades
Juniper Networks Patches Critical Junos OS Vulnerabilities Across Core Platforms Junos OS vulnerabilities overview showing Juniper security bulletin fixes for CVE-2026-102182, CVE-2026-101954, and CVE-2026-33792
  • Vulnerability Report

Juniper Networks Patches Critical Junos OS Vulnerabilities Across Core Platforms

Do Son October 15, 2026 0
TL;DR Juniper Networks published its October 2026 security bulletins on October 14, 2026, resolving dozens of critical...
Read More Read more about Juniper Networks Patches Critical Junos OS Vulnerabilities Across Core Platforms
CL-STA-0954 Deploys PEERSTITCH Malware on FortiGate Firewalls After FortiManager Breach PEERSTITCH malware and FortiOS PEERSTITCH malware memory injection diagram
  • Malware

CL-STA-0954 Deploys PEERSTITCH Malware on FortiGate Firewalls After FortiManager Breach

Do Son October 15, 2026 0
At a Glance Malware Family PEERSTITCH malware (64-bit Linux ARM64 in-memory process injector) Threat Actor Confirmed as...
Read More Read more about CL-STA-0954 Deploys PEERSTITCH Malware on FortiGate Firewalls After FortiManager Breach
Dell Patches Four Critical Wyse Management Suite XSS Vulnerabilities Dell Wyse Management Suite security update DSA-2026-405 fixing CVE-2026-82158, CVE-2026-82159, and CVE-2026-82161
  • Vulnerability Report

Dell Patches Four Critical Wyse Management Suite XSS Vulnerabilities

Do Son October 15, 2026 0
TL;DR Dell Technologies released security advisory DSA-2026-405 to address four cross-site scripting (XSS) flaws in Dell Wyse...
Read More Read more about Dell Patches Four Critical Wyse Management Suite XSS Vulnerabilities
NLnet Labs Patches Four NSD Stack Overwrite Vulnerabilities NSD stack overwrite vulnerability diagram showing CVE-2026-101341, CVE-2026-101339, and CVE-2026-101338 impact
  • Vulnerability Report

NLnet Labs Patches Four NSD Stack Overwrite Vulnerabilities

Do Son October 15, 2026 0
TL;DR NLnet Labs released NSD version 4.15.3 on October 14, 2026, to fix four high-severity flaws. Each...
Read More Read more about NLnet Labs Patches Four NSD Stack Overwrite Vulnerabilities
SonicWall Patches High-Severity SonicWall NSM On-Prem Access Control and Command Injection Flaws SonicWall NSM On-Prem vulnerabilities CVE-2026-96540 and CVE-2026-100232 security advisory
  • Vulnerability Report

SonicWall Patches High-Severity SonicWall NSM On-Prem Access Control and Command Injection Flaws

Do Son October 15, 2026 0
TL;DR SonicWall released security updates to fix two high-severity flaws in SonicWall NSM On-Prem deployments. Tracked as...
Read More Read more about SonicWall Patches High-Severity SonicWall NSM On-Prem Access Control and Command Injection Flaws
CERT/CC Discloses Three DataElement Bisheng Vulnerabilities Allowing Admin Account Takeover and Credential Abuse DataElement Bisheng vulnerabilities CVE-2026-96679 CVE-2026-96681 CVE-2026-100156 CERT/CC advisory
  • Vulnerability Report

CERT/CC Discloses Three DataElement Bisheng Vulnerabilities Allowing Admin Account Takeover and Credential Abuse

Do Son October 15, 2026 0
TL;DR CERT/CC and security researcher Louis Sanchez of Voke Cyber disclosed three high-risk Bisheng vulnerabilities affecting the...
Read More Read more about CERT/CC Discloses Three DataElement Bisheng Vulnerabilities Allowing Admin Account Takeover and Credential Abuse
Next Page ❯

Search

Translation

CVE ALERTS
📈

EPSS Spike Alerts
Catch risk spikes before they make headlines.

🎯

Custom EPSS/CVSS
Set score thresholds to effectively filter noise.

🛡️

Exploit Intel
Real-world exploit signals beyond the KEV catalog.

🐙

GitHub Issues
Auto-create alert tickets without duplication.

📬

Weekly Digest
Clean summaries, eliminating email spam.

🏷️

Watchlist Groups
Tag vulnerabilities by team (Infra/AppSec/SOC).

🔀

Smart Routing
Route chat channels based on severity levels.

🚨

RBP Tracker
Early warning detection and tracking system.

Subscribe – $7/mo or try free for 14 days →

🚨 Active Exploits in the Wild

  • CVE-2020-13125CVSS 7.2
    An issue was discovered in the "Ultimate Addons for Elementor" plugin before 1.24.2 for WordPress, as exploited in...
    Watchtower Verified📅 Updated: Oct 16, 2026
  • CVE-2020-13126CVSS 9.9
    An issue was discovered in the Elementor Pro plugin before 2.9.4 for WordPress, as exploited in the wild...
    Watchtower Verified📅 Updated: Oct 16, 2026
  • CVE-2019-20180CVSS 8.0
    The TablePress plugin for WordPress is vulnerable to CSV Injection in versions up to and including 1.14 via...
    Watchtower Verified📅 Updated: Oct 16, 2026
  • CVE-2026-102764CVSS 9.3
    The vulnerability exists within internal components of BeyondTrust’s Remote Support product. The components did not adequately validate the...
    Admin intel📅 Updated: Oct 16, 2026
  • CVE-2026-111357CVSS 7.0
    Ivanti Connect Secure 22.8R2.4 mishandles the manner in which the dsinvoked broker trusts DSCache configuration data, leading to...
    Watchtower Verified📅 Updated: Oct 16, 2026
  • CVE-2026-106931CVSS 8.5
    SiteGuard Server Edition contains an OS command injection vulnerability, which may allow an attacker to execute arbitrary OS...
    Admin intel📅 Updated: Oct 15, 2026
  • CVE-2025-61624CVSS 6.0
    An Improper Limitation of a Pathname to a Restricted Directory (\'Path Traversal\') [CWE-22] vulnerability in Fortinet FortiOS 7.6.0...
    Admin intel📅 Updated: Oct 15, 2026
  • CVE-2026-110447CVSS 9.2
    Collabora Online Built-in CODE Server before 26.4.303 (richdocumentscode), a Nextcloud app, allows remote code execution, as exploited in...
    Watchtower Verified📅 Updated: Oct 15, 2026
Powered by CVE Watchtower

Critical Vulnerabilities

  • CVE-2026-111472CVSS 9.3
    An SQL injection vulnerability has been discovered in TSG Profleet. The vulnerability could allow an attacker to retrieve,...
    📅 Updated: Oct 16, 2026
  • CVE-2026-102764CVSS 9.3
    The vulnerability exists within internal components of BeyondTrust’s Remote Support product. The components did not adequately validate the...
    Admin intel📅 Updated: Oct 16, 2026
  • CVE-2026-94169CVSS 10.0
    Improper Control of Generation of Code ('Code Injection') vulnerability in Theme-one The Grid the-grid allows Command Injection.This issue...
    📅 Updated: Oct 16, 2026
  • CVE-2026-94388CVSS 9.3
    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in halfdata Green Popups halfdata-green-popups...
    📅 Updated: Oct 16, 2026
  • CVE-2026-104730CVSS 9.8
    The Sunshine Photo Cart – Client Photo Gallery & Photo Proofing for Photographers plugin for WordPress is vulnerable...
    📅 Updated: Oct 16, 2026
  • CVE-2026-89079CVSS 9.8
    The Theme My Login plugin for WordPress is vulnerable to privilege escalation via account takeover in versions up...
    📅 Updated: Oct 16, 2026
  • CVE-2026-103768CVSS 9.8
    The ELEX WordPress HelpDesk & Customer Ticketing System plugin for WordPress is vulnerable to Arbitrary File Upload in...
    📅 Updated: Oct 16, 2026
  • CVE-2026-16438CVSS 9.4
    Incorrect Privilege Assignment vulnerability in Mitsubishi Electric GENESIS64 versions 10.97.3 and prior, ICONICS Suite versions 10.97.3 and prior,...
    📅 Updated: Oct 16, 2026
Powered by CVE Watchtower

Daily CyberSecurity

  • About SecurityOnline.info
  • Advertise with us
  • Announcement
  • Contact
  • Contributor Register
  • Login
  • Disclaimer
  • DCMA
  • Privacy Policy
  • About SecurityOnline.info
  • Advertise on SecurityOnline.info
  • Contact Us

When you purchase through links on our site, we may earn an affiliate commission. Here’s how it works

  • CVE Watchtower
  • CVE Statistics by Vendor 2026
  • Q3 2026 Report
  • Top Exploited CVEs
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube
© 2017 - 2026 Daily CyberSecurity. All Rights Reserved.