Skip to content
June 2, 2026
  • Linkedin
  • Twitter
  • Facebook
  • Youtube

Daily CyberSecurity

Zero-hour alerts. Unmatched analysis.

Primary Menu
  • Home
  • CVE Watchtower
  • Cyber Criminals
  • Data Leak
  • Linux
  • Malware
  • Vulnerability
  • Submit Press Release
  • Vulnerability Report
Light/Dark Button

LATEST NEWS

XCharge C6 vulnerabilities EV charger security flaws GNU libtasn1 Vulnerability CVE-2025-13151 Credit Card Skimmer Malware CVE-2024-13892
  • Vulnerability Report

Critical XCharge C6 Vulnerabilities Expose Electric Vehicle Chargers

Ddos June 2, 2026 0
ActiveMQ security flaws Jolokia web console exploit ActiveMQ RCE Jolokia Spring Vulnerability ActiveMQ MQTT Vulnerability CVE-2025-66168 Apache Artemis Vulnerability CVE-2026-27446
  • Vulnerability Report

Critical ActiveMQ Security Flaws Threaten Enterprise Message Brokers

Ddos June 2, 2026 0
Kirki plugin vulnerability WordPress account takeover
  • Vulnerability Report

Kirki Plugin Vulnerability: 150K WordPress Sites Face Critical 9.8 CVSS Privilege Escalation in the Wild

Ddos June 2, 2026 0
Ivanti ITSM vulnerability authenticated privilege escalation Ivanti Xtraction vulnerability CVE-2026-8043 Ivanti EPM RCE, SQL Injection Ivanti EPM, remote code execution CVE-2024-50330 - CVE-2025-0282 and CVE-2025-0283
  • Vulnerability Report

High-Severity Ivanti ITSM Vulnerability Exposes IT Systems

Ddos June 2, 2026 0
Apache Fesod SSRF vulnerability CVE-2026-49328 patch
  • Vulnerability Report

Apache Fesod SSRF Vulnerability Exposes Internal Networks

Ddos June 2, 2026 0

Tech News

AMD AM5 platform support AMD Embedded Processors Vulnerabilities
  • Technology

The Longevity Gambit: AMD Extends AM5 and Reshapes the Silicon Landscape

Ddos June 2, 2026 0
Anthropic confidential IPO filing Anthropic Google $200 billion deal Anthropic Mythos Preview Anthropic Pentagon blacklist Claude Max 20x open-source Model Distillation Anthropic vs DeepSeek Claude Free tier update 2026
  • Technology

Anthropic Approaches IPO: The Leap to Public Capital

Ddos June 2, 2026 0
Windows 10 extended support Windows 10 MSMQ Bug, KB5071546 Write Permissions Windows 10 EOL, LTSB Support Windows User Base, Active Devices KB5052819
  • Technology
  • Windows

The Windows 10 Sunset: HP’s Market Opportunity and the Consumer ESU Deadline

Ddos June 1, 2026 0
AV2 codec v1.0.0 release
  • Technology

The Dawn of AV2: AOMedia Finalizes Next-Generation Video Compression

Ddos June 1, 2026 0

Vulnerability

FreeBSD kernel buffer overflow public exploit code released
  • Vulnerability

Critical FreeBSD Kernel Buffer Overflow Disclosed: Public Details & PoC Out

Ddos June 1, 2026 0
Windows DNS Client RCE .NET 10 Auth Bypass CVE-2026-40372
  • Vulnerability

Windows DNS Client RCE: 9.8 CVSS & Public PoC Disclosed

Ddos May 28, 2026 0
Dell Container Storage Modules vulnerability
  • Vulnerability

Critical Dell Container Storage Modules Vulnerability Exposes Infrastructure

Ddos May 26, 2026 0
VMware Fusion TOCTOU Exploit CVE-2026-41702 PoC
  • Vulnerability

Public Exploit Exposes Root Privilege Escalation Flaw in VMware Fusion

Ddos May 21, 2026 0

Cyber Security

BlackToad Threat Actors Deploy Stealthy Phishing Lures Remcos RAT phishing campaign Network blackout technique
  • Cybercriminals

BlackToad Threat Actors Deploy Stealthy Phishing Lures

June 2, 2026 0
FIFA Website Spoofing Scams: FBI Issues Major World Cup Warning FIFA website spoofing scams FBI World Cup alert Pig Butchering Scam Jingliang Su Sentencing Meta China Scam Ads, Zuckerberg Revenue Conflict Trading Bot Scam BEC Scam Rental Payment Fraud
  • Cybercriminals

FIFA Website Spoofing Scams: FBI Issues Major World Cup Warning

May 31, 2026 0
Inside a Massive Elderly Lottery Fraud Scam Elderly lottery fraud scam DOJ wire fraud conspiracy ALPHV BlackCat, Insider Threat Nefilim ransomware Artem Stryzhak guilty plea, Volodymyr Tymoshchuk $11M reward CoinDCX, Employee Arrest Operation PowerOFF Cybercrime, Self-Promotion Hacking
  • Cybercriminals

Inside a Massive Elderly Lottery Fraud Scam

May 31, 2026 0
Football Fan Scams Surge Ahead of World Cup 2026 TASPEN, mobile malware North Korean IT Worker Fraud
  • Cybercriminals

Football Fan Scams Surge Ahead of World Cup 2026

May 31, 2026 0

Malware Alert

Sophisticated SilentCryptoMiner Variant Delivered via Fake Plugin Overlays Miner-and-RAT
  • Malware

Sophisticated SilentCryptoMiner Variant Delivered via Fake Plugin Overlays

June 2, 2026 0
Fake RVTools Installer Deploys Modular Python RAT Fake RVTools installer Modular Python RAT
  • Malware

Fake RVTools Installer Deploys Modular Python RAT

June 2, 2026 0
Grandoreiro Banking Trojan Evades Defense via Lookalike Software TanStack Typosquatting npm Supply Chain Attack Axios Supply Chain Attack npm Poisoning eScan Supply Chain Attack Antivirus Compromise APT-36, NCERT WhatsApp Advisory FBI alert, Salesforce Salt Typhoon, APT group ConnectWise ScreenConnect hack Nation-state cyberattack FortiGate Leak - zkLend vulnerability - TRIPLESTRENGTH Threat Actor Group Dark Storm
  • Malware

Grandoreiro Banking Trojan Evades Defense via Lookalike Software

June 2, 2026 0
The Shai-Hulud Infiltration: Red Hat Exploited in Sovereign Supply Chain Breach Red Hat NPM attack
  • Malware

The Shai-Hulud Infiltration: Red Hat Exploited in Sovereign Supply Chain Breach

June 2, 2026 0

Data Leak

Inside the Breach: How TeamPCP Poisoned a VS Code Extension to Exfiltrate 3,800 GitHub Repositories GitHub source code breach TeamPCP 2026
  • Data Leak

Inside the Breach: How TeamPCP Poisoned a VS Code Extension to Exfiltrate 3,800 GitHub Repositories

May 20, 2026 0
The Missed Token: Grafana Labs Suffers Source Code Theft via Shai-Hulud npm Worm Campaign CVE-2023-1550 Grafana Labs Cyberattack Mini Shai-Hulud npm Worm
  • Data Leak

The Missed Token: Grafana Labs Suffers Source Code Theft via Shai-Hulud npm Worm Campaign

May 20, 2026 0
Unmasked: 16GB “Rocket” Database Leak Exposes The Gentlemen Ransomware Cartel The Gentlemen Ransomware Leak Rocket Database RaaS
  • Data Leak

Unmasked: 16GB “Rocket” Database Leak Exposes The Gentlemen Ransomware Cartel

May 18, 2026 0
OpenAI Forces Code Signing Certificate Rotation After TanStack Supply Chain Breach OpenAI code signing certificate rotation AI private equity joint ventures OpenAI Axios Supply Chain Attack OpenAI Promptfoo acquisition OpenAI military resignation ChatGPT Plus military fraud OpenAI smart speaker Jony Ive OpenAI Frontier platform ChatGPT AI age prediction 2026, OpenAI Persona age verification Sarah Friar OpenAI infrastructure, AI Scaling Law revenue OpenAI Gumdrop AI pen, Jony Ive OpenAI hardware 2027 OpenAI New CRO, Denise Dresser Monetization Strategy OpenAI Competitive Pressure Gemini 3 Overtake OpenAI Infrastructure, AI Closed Loop Economy
  • Data Leak

OpenAI Forces Code Signing Certificate Rotation After TanStack Supply Chain Breach

May 15, 2026 0
Critical ActiveMQ Security Flaws Threaten Enterprise Message Brokers ActiveMQ security flaws Jolokia web console exploit ActiveMQ RCE Jolokia Spring Vulnerability ActiveMQ MQTT Vulnerability CVE-2025-66168 Apache Artemis Vulnerability CVE-2026-27446
  • Vulnerability Report

Critical ActiveMQ Security Flaws Threaten Enterprise Message Brokers

Ddos June 2, 2026 0
Developers recently discovered several dangerous ActiveMQ security flaws inside the popular Java-based messaging system. These fresh vulnerabilities...
Read More Read more about Critical ActiveMQ Security Flaws Threaten Enterprise Message Brokers
Halo Security Honored with 2026 MSP Today Product of the Year Award halo-security-msp-today-2026_1780097763dObw3SFnsr
  • Press Release

Halo Security Honored with 2026 MSP Today Product of the Year Award

cybernewswire June 2, 2026 0
Miami Beach, FL, USA, 2nd June 2026, CyberNewswire
Read More Read more about Halo Security Honored with 2026 MSP Today Product of the Year Award
Kirki Plugin Vulnerability: 150K WordPress Sites Face Critical 9.8 CVSS Privilege Escalation in the Wild Kirki plugin vulnerability WordPress account takeover
  • Vulnerability Report

Kirki Plugin Vulnerability: 150K WordPress Sites Face Critical 9.8 CVSS Privilege Escalation in the Wild

Ddos June 2, 2026 0
An active cyber threat is targeting thousands of website environments globally. Specifically, a critical Kirki plugin vulnerability...
Read More Read more about Kirki Plugin Vulnerability: 150K WordPress Sites Face Critical 9.8 CVSS Privilege Escalation in the Wild
High-Severity Ivanti ITSM Vulnerability Exposes IT Systems Ivanti ITSM vulnerability authenticated privilege escalation Ivanti Xtraction vulnerability CVE-2026-8043 Ivanti EPM RCE, SQL Injection Ivanti EPM, remote code execution CVE-2024-50330 - CVE-2025-0282 and CVE-2025-0283
  • Vulnerability Report

High-Severity Ivanti ITSM Vulnerability Exposes IT Systems

Ddos June 2, 2026 0
Ivanti recently released urgent security updates to address a critical flaw in its IT service management platform....
Read More Read more about High-Severity Ivanti ITSM Vulnerability Exposes IT Systems
Twill Typhoon RAT Campaign Uses DLL Side Loading to Target APJ Networks Twill Typhoon RAT campaign DLL side loading tradecraft
  • Cyber Security
  • Malware

Twill Typhoon RAT Campaign Uses DLL Side Loading to Target APJ Networks

Ddos June 2, 2026 0
A stealthy cyber espionage operation is actively targeting organizations across the Asia-Pacific region. Specifically, security researchers recently...
Read More Read more about Twill Typhoon RAT Campaign Uses DLL Side Loading to Target APJ Networks
Apache Fesod SSRF Vulnerability Exposes Internal Networks Apache Fesod SSRF vulnerability CVE-2026-49328 patch
  • Vulnerability Report

Apache Fesod SSRF Vulnerability Exposes Internal Networks

Ddos June 2, 2026 0
A newly discovered security flaw has disrupted the Java development landscape this week. Specifically, a severe Apache...
Read More Read more about Apache Fesod SSRF Vulnerability Exposes Internal Networks
Critical KMW CCTV Vulnerability Exposes Live Surveillance Feeds KMW CCTV vulnerability unauthenticated password reset Xiongmai IP Camera Vulnerability CVE-2025-65856 CVE-2024-8956 (CVSS 9.1): PTZOptics Cameras
  • Vulnerability Report

Critical KMW CCTV Vulnerability Exposes Live Surveillance Feeds

Ddos June 2, 2026 0
A severe security bug has put smart surveillance devices at risk this week. Specifically, a critical KMW...
Read More Read more about Critical KMW CCTV Vulnerability Exposes Live Surveillance Feeds
Critical Fleet Security Vulnerabilities Threaten Multi-Tenant Clusters Fleet security vulnerabilities cross namespace secret disclosure Rancher, GitOps Rancher Fleet Critical Vulnerability CVE-2026-41050
  • Vulnerability Report

Critical Fleet Security Vulnerabilities Threaten Multi-Tenant Clusters

Ddos June 2, 2026 0
Cybersecurity researchers recently identified multiple critical Fleet security vulnerabilities within the popular GitOps platform. Specifically, these flaws...
Read More Read more about Critical Fleet Security Vulnerabilities Threaten Multi-Tenant Clusters
Severe Casdoor Identity Platform Flaws Expose Corporate Networks Casdoor authentication bypass flaws cross organization privilege escalation
  • Vulnerability Report

Severe Casdoor Identity Platform Flaws Expose Corporate Networks

Ddos June 2, 2026 0
Security researchers recently discovered critical security gaps in a popular open-source platform. Specifically, multiple Casdoor authentication bypass...
Read More Read more about Severe Casdoor Identity Platform Flaws Expose Corporate Networks
Android Zero-Day Flaw Exploited in the Wild: June 2026 Patches Released Android zero day flaw June 2026 security bulletin RuTaxi Trojan Android Banking Malware Pixel 9 zero-click exploit, Dolby UDC vulnerability CVE-2025-54957 NexusRoute Android RAT, India E-Challan Phishing ClayRat Self-Defense, Android Accessibility Abuse Android Trojan, AntiDot Android Malware "BadPack"
  • Android
  • Vulnerability Report

Android Zero-Day Flaw Exploited in the Wild: June 2026 Patches Released

Ddos June 2, 2026 0
Google recently released a critical security patch to address a dangerous Android zero day flaw. Specifically, this...
Read More Read more about Android Zero-Day Flaw Exploited in the Wild: June 2026 Patches Released
Rancher Security Flaws: Multiple Vulnerabilities Threaten Kubernetes Clusters Rancher security flaws cluster privilege escalation Rancher Path Traversal CVE-2026-25705 Rancher Vulnerabilities, SAML Phishing CVE-2024-22036 Rancher, vulnerability
  • Vulnerability Report

Rancher Security Flaws: Multiple Vulnerabilities Threaten Kubernetes Clusters

Ddos June 2, 2026 0
Security researchers recently discovered multiple high-severity Rancher security flaws inside the popular container management platform. These newly...
Read More Read more about Rancher Security Flaws: Multiple Vulnerabilities Threaten Kubernetes Clusters
Critical TP-Link Router Vulnerability Demands Immediate Patching TP-Link router vulnerability CVE-2026-5509 patch Archer AX53 Vulnerability TP-Link Router Security Tapo C520WS Vulnerability TP-Link Security Patch TP-Link Archer NX Router Vulnerability TP-Link Archer Vulnerability CVE-2025-15568 TP-Link Archer BE230 Vulnerability Command Injection TP-Link Omada Vulnerability CVE-2025-9520 TP-Link Archer MR600 Vulnerability CVE-2025-14756 CVE-2026-0629 TP-Link Omada RCE, CVE-2025-6542 TP-Link, Smart plug vulnerability TP-Link Archer C50, Hardcoded DES Key TP-Link NVR, Command Injection TP-Link Routers cybersecurity
  • Vulnerability Report

Critical TP-Link Router Vulnerability Demands Immediate Patching

Ddos June 2, 2026 0
A serious security flaw has recently put home and enterprise networks at risk. Specifically, a newly discovered...
Read More Read more about Critical TP-Link Router Vulnerability Demands Immediate Patching
Critical ArcGIS Server Security Patch Fixes Severe Flaws ArcGIS Server security patch directory traversal vulnerability ArcGIS Vulnerability GIS Security
  • Vulnerability Report

Critical ArcGIS Server Security Patch Fixes Severe Flaws

Ddos June 2, 2026 0
Esri recently launched an urgent ArcGIS Server security patch to address critical vulnerabilities within its core application...
Read More Read more about Critical ArcGIS Server Security Patch Fixes Severe Flaws
Building confidence in the digital age with a digital trust platform AISelect_20260602_042531_Docs
  • Technique

Building confidence in the digital age with a digital trust platform

Ddos June 1, 2026 0
In an era where connectivity shapes personal and professional lives, the demand for reliable solutions to manage identity, secure...
Read More Read more about Building confidence in the digital age with a digital trust platform
Cache Warmer RCE Flaw Patched in Magento Extension Cache Warmer RCE flaw Magento PHP object injection
  • Vulnerability Report

Cache Warmer RCE Flaw Patched in Magento Extension

Ddos June 1, 2026 0
A critical security vulnerability now threatens thousands of e-commerce storefronts globally. Specifically, security researchers uncovered a severe...
Read More Read more about Cache Warmer RCE Flaw Patched in Magento Extension
Advanced China-Nexus Group Strikes Southeast Asian Networks custom Linux router implant router DNS hijacking
  • Cyber Security

Advanced China-Nexus Group Strikes Southeast Asian Networks

Ddos June 1, 2026 0
A sophisticated cyber espionage campaign is currently striking enterprise operations across Southeast Asia. Specifically, a China-nexus group...
Read More Read more about Advanced China-Nexus Group Strikes Southeast Asian Networks
Sophisticated Android Banking Trojan Threat Evades Detection via High-Trust Lures Android banking trojan threat credential harvesting overlays
  • Malware

Sophisticated Android Banking Trojan Threat Evades Detection via High-Trust Lures

Ddos June 1, 2026 0
Recently, global cybersecurity researchers uncovered a massive wave of mobile fraud hitting international consumers. This hazardous operation...
Read More Read more about Sophisticated Android Banking Trojan Threat Evades Detection via High-Trust Lures
Sophisticated GPU Cryptojacking Campaign Surfaced by Microsoft Experts Cemu emulator Linux malware Blitz Brigantine AOBackdoor GitHub Malware Campaign StealC Infostealer TamperedChef Malware, SEO Poisoning Carbanak malware RubyGems Supply Chain, Infostealer
  • Malware

Sophisticated GPU Cryptojacking Campaign Surfaced by Microsoft Experts

Ddos June 1, 2026 0
Microsoft Defender Experts recently identified a highly targeted digital threat spreading across the internet. Specifically, a dangerous...
Read More Read more about Sophisticated GPU Cryptojacking Campaign Surfaced by Microsoft Experts
AI Honeypots Snare Decentralized Cryptominer Dropper P2P cryptominer malware threat Ollama endpoint attacks IoT Botnets DDoS Attacks
  • Malware

AI Honeypots Snare Decentralized Cryptominer Dropper

Ddos June 1, 2026 0
Security analysts recently discovered a sophisticated digital hazard targeting artificial intelligence environments. Specifically, the Akamai Security Intelligence...
Read More Read more about AI Honeypots Snare Decentralized Cryptominer Dropper
Severe Plesk Privilege Escalation Flaw Patched in Linux Versions Plesk privilege escalation flaw CVE-2026-44962 patch Plesk LPE, Root Command Execution
  • Vulnerability Report

Severe Plesk Privilege Escalation Flaw Patched in Linux Versions

Ddos June 1, 2026 0
A dangerous security vulnerability has been uncovered within a widely used web hosting control panel. Specifically, a...
Read More Read more about Severe Plesk Privilege Escalation Flaw Patched in Linux Versions
Next Page ❯

Search

Translation

CVE WATCHTOWER
🚨

Receive alerts for vulnerabilities being exploited in the wild.

⚡

Get notified instantly when a Proof of Concept (PoC) exploit is published.

🔍

Access critical info on vulnerabilities even when marked as "RESERVED".

🧠

Insights powered by decades of expertise and global intelligence sources.

🎯

Customize alerts with up to 10 keywords for your specific tech stack.

📊

Export the raw CVE database for SIEM integration and reporting.

Upgrade Package

🔴 Live Critical Threats

  • CVE-2026-7312CVSS 10.0
    CWE‑522: Insufficiently Protected Credentials in web services in Progress Sitefinity version from...
  • CVE-2026-7198CVSS 9.8
    CWE-284: Improper Access Control in web services in Progress Sitefinity 15.4.8623 before...
  • CVE-2026-47117CVSS 9.8
    OpenMed before 1.5.2 contains a remote code execution vulnerability in the PII...
  • CVE-2026-42684CVSS 9.3
    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')...
  • CVE-2025-53209CVSS 9.8
    Incorrect Privilege Assignment vulnerability in Themeisle Masteriyo LMS PRO allows Privilege Escalation....
  • CVE-2026-8206CVSS 9.8
    The Kirki – Freeform Page Builder, Website Builder & Customizer plugin for...
  • CVE-2026-25879CVSS 9.8
    Langroid is a framework for building large-language-model-powered applications. Prior to version 0.63.0,...
  • CVE-2026-40965CVSS 10.0
    Cloud Foundry UAA versions v76.12.0 through v78.12.0 are vulnerable to a private...
  • CVE-2018-25427CVSS 9.8
    Arm Whois 3.11 contains a stack-based buffer overflow vulnerability that allows remote...
  • CVE-2026-9319CVSS 9.0
    IBM WebSphere Application Server 9.0, and 8.5 is vulnerable to potential remote...
Powered by CVE WATCHTOWER

Recent Zero-Day Vulnerabilities

  • Android Zero-Day Flaw Exploited in the Wild: June 2026 Patches Released
  • Exploited in the Wild: Critical OWA Spoofing Flaw (CVE-2026-42897) Hits On-Premises Exchange Servers
  • Exploited in the Wild: Maximum CVSS 10 SD-WAN Flaw (CVE-2026-20182) Grants Admin Control
  • Exploited in the Wild: Critical 9.8 CVSS RCE Hits Canon GUARDIANWALL MailSuite
  • Exploit Code Released: Public PoC Dumps for Windows BitLocker Bypass and SYSTEM Elevation Zero-Days
  • Exploited in the Wild: “Dirty Frag” Linux Vulnerability Grants Instant Root Access
Our Websites
  • Penetration Testing Tools
  • The Daily Information Technology
  • Daily CyberSecurity

    • About SecurityOnline.info
    • Advertise with us
    • Announcement
    • Contact
    • Contributor Register
    • Login
    • Disclaimer
    • Privacy Policy
    • About SecurityOnline.info
    • Advertise on SecurityOnline.info
    • Contact Us

    When you purchase through links on our site, we may earn an affiliate commission. Here’s how it works

    • Disclaimer
    • Privacy Policy
    • DMCA NOTICE
    • Linkedin
    • Twitter
    • Facebook
    • Youtube
    Copyright Daily CyberSecurity © All rights reserved.