Skip to content
October 19, 2026
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube

Daily CyberSecurity

Zero-hour alerts. Unmatched analysis.

Primary Menu
  • Home
  • CVE Data
    • CVE Watchtower
    • Top Exploited CVEs
    • CVE Stats by Vendor
    • Q2 2026 Report
    • CVE Alerts
    • CVE Alert Settings
    • Pricing
  • Cyber Criminals
  • Data Leak
  • Free Tools
    • CVSS 3.1 Calculator
    • Certificate Viewer
    • DNS Lookup
    • Encoder & Hash Generator
    • IP / Subnet Calculator
    • Whois Lookup
  • Linux
  • Malware
  • Vulnerability
  • Submit Press Release
  • Weekly Recap
Light/Dark Button
  • Home
  • News
  • Cyber Security
  • British GCHQ Director: U.K. has launched a major cyberattack on the Islamic State (IS) terrorist organization
  • Cyber Security

British GCHQ Director: U.K. has launched a major cyberattack on the Islamic State (IS) terrorist organization

Do Son April 17, 2018 2 minutes read
Cybercrime activity
Add Daily CyberSecurity as a preferred source on Google

According to securityaffairs reports recently, British intelligence agency GCHQ director Jeremy Fleming announced last week that the United Kingdom has launched a major cyber attack against Islamic State (IS) terrorist organizations. Fleming said at an online UK conference in Manchester that these actions have contributed greatly to the coalition’s suppression of Daesh’s propaganda activities, such as hindering his ability to coordinate attacks and protecting coalition forces on the battlefield.

It is reported that the attack was initiated by GCHQ in cooperation with the British Ministry of National Defense. They conducted distributed operations against the Islamic State. GCHQ believes that this cyber attack is the first systematic and continuous reduction of an opponent’s online operations and also as part of a broader military operation.

Although Fleming did not disclose too many details about the attack, he stated that the attack showed a targeted and effective offensive network and believed that the success of the attack was a threat against the misuse of technical communication and propaganda. Make an example. In addition to the British GCHQ, U.S. Internet Communication and Europol have also been conducting cyber attacks against Islamic countries.

Fleming also talked about Russia’s definition of cyber activities as “unacceptable cyber behavior,” which is a “growing threat” to the West. Therefore, Britain indicated that it will continue to cooperate with international partners such as the United States to deal with malicious network activities together.

Fleming believes that in addition to facing bold Russia, they also notice that the tectonic plates of the Middle East are moving. They saw Iran and its agents intervene in the entire region and used chemical weapons in Syria.

Finally, Flaming quoted a summary of the events in the United Kingdom and the United States attributed to Russia’s NotPetya ransomware attack on Ukraine:

“They’re not playing to the same rules, they’re blurring the boundaries between criminal and state activity.”

Source: SecurityAffairs 

Related coverage

  • UNC5812: Unmasking the Russian Operation to Sabotage Ukraine’s Military Recruitment
  • North Korean Cyber Espionage Group Kimsuky Exploits University Website in Watering Hole Attack
  • .Gov No More: Government Domains Weaponized in Phishing Surge
  • Fake DocuSign Emails: Don’t Get Hooked by Phishing Scams
  • APT-C-60 Targets Japan: New SpyGlace Malware Uses VHDX LNK and GitHub Tasking for Persistent Espionage
  • Watch Out for Latrodectus: New Malware from Suspected IcedID Developers Targeting Businesses
Track all actively exploited CVEs →

Support Our Threat Intelligence

Find our threat intelligence and malware analysis helpful? Support our work today and unlock a 100% ad-free reading experience!

Buy Me a Coffee Logo Buy Me a Coffee
Select your plan
Free Pro Team

Hover over a plan to see its benefits.

Get Zero-Hour Vulnerability Alerts

Critical CVEs, CVSS scores, and PoC updates — straight to your inbox every week.

We respect your inbox. Unsubscribe anytime.

SHARE
Share on FacebookShare on XShare on LinkedInShare on TelegramShare on BlueskyShare on Mastodon
Written by
@DdoS · Security Researcher

Do Son

Do Son is the Founder and Editor of SecurityOnline.info. Working in cybersecurity since 2013, he reports on vulnerabilities, malware, and emerging threats, providing timely analysis to help organizations and individuals stay ahead of evolving risks.

Tags: cyberattack Islamic State

Search

Translation

CVE ALERTS
📈

EPSS Spike Alerts
Catch risk spikes before they make headlines.

🎯

Custom EPSS/CVSS
Set score thresholds to effectively filter noise.

🛡️

Exploit Intel
Real-world exploit signals beyond the KEV catalog.

🐙

GitHub Issues
Auto-create alert tickets without duplication.

📬

Weekly Digest
Clean summaries, eliminating email spam.

🏷️

Watchlist Groups
Tag vulnerabilities by team (Infra/AppSec/SOC).

🔀

Smart Routing
Route chat channels based on severity levels.

🚨

RBP Tracker
Early warning detection and tracking system.

Subscribe – $7/mo or try free for 14 days →

🚨 Active Exploits in the Wild

  • CVE-2020-13125CVSS 7.2
    An issue was discovered in the "Ultimate Addons for Elementor" plugin before 1.24.2 for WordPress, as exploited in...
    Watchtower Verified📅 Updated: Oct 19, 2026
  • CVE-2020-13126CVSS 9.9
    An issue was discovered in the Elementor Pro plugin before 2.9.4 for WordPress, as exploited in the wild...
    Watchtower Verified📅 Updated: Oct 19, 2026
  • CVE-2019-20180CVSS 8.0
    The TablePress plugin for WordPress is vulnerable to CSV Injection in versions up to and including 1.14 via...
    Watchtower Verified📅 Updated: Oct 19, 2026
  • CVE-2026-111862CVSS 9.8
    Rank Math SEO PRO for WordPress is affected by a supply-chain compromise in a subset of version 3.0.123...
    Admin intel📅 Updated: Oct 17, 2026
  • CVE-2026-111357CVSS 7.0
    Ivanti Connect Secure 22.8R2.4 mishandles the manner in which the dsinvoked broker trusts DSCache configuration data, leading to...
    Watchtower Verified📅 Updated: Oct 17, 2026
  • CVE-2025-61624CVSS 6.0
    An Improper Limitation of a Pathname to a Restricted Directory (\'Path Traversal\') [CWE-22] vulnerability in Fortinet FortiOS 7.6.0...
    CISA KEV📅 Added to KEV: Oct 16, 2026
  • CVE-2026-102764CVSS 9.3
    The vulnerability exists within internal components of BeyondTrust’s Remote Support product. The components did not adequately validate the...
    CISA KEV📅 Added to KEV: Oct 16, 2026
  • CVE-2026-106931CVSS 8.5
    SiteGuard Server Edition contains an OS command injection vulnerability, which may allow an attacker to execute arbitrary OS...
    Admin intel📅 Updated: Oct 15, 2026
Powered by CVE Watchtower

Critical Vulnerabilities

  • CVE-2025-39496CVSS 9.3
    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WBW WooBeWoo Product Filter...
    📅 Updated: Oct 18, 2026
  • CVE-2025-48100CVSS 9.1
    Improper Control of Generation of Code ('Code Injection') vulnerability in extremeidea bidorbuy Store Integrator bidorbuystoreintegrator allows Remote Code...
    📅 Updated: Oct 18, 2026
  • CVE-2025-49387CVSS 10.0
    Unrestricted Upload of File with Dangerous Type vulnerability in add-ons.org Drag and Drop File Upload for Elementor Forms...
    📅 Updated: Oct 18, 2026
  • CVE-2025-49388CVSS 9.8
    Incorrect Privilege Assignment vulnerability in kamleshyadav Miraculous Core Plugin miraculouscore allows Privilege Escalation.This issue affects Miraculous Core Plugin:...
    📅 Updated: Oct 18, 2026
  • CVE-2025-52761CVSS 9.8
    Deserialization of Untrusted Data vulnerability in manfcarlo WP Funnel Manager wp-funnel-manager allows Object Injection.This issue affects WP Funnel...
    📅 Updated: Oct 18, 2026
  • CVE-2025-58159CVSS 9.9
    WeGIA is a Web manager for charitable institutions. Prior to version 3.4.11, a remote code execution vulnerability was...
    📅 Updated: Oct 18, 2026
  • CVE-2025-31100CVSS 9.9
    Unrestricted Upload of File with Dangerous Type vulnerability in Mojoomla School Management allows Upload a Web Shell to...
    📅 Updated: Oct 18, 2026
  • CVE-2025-53693CVSS 9.8
    Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection') vulnerability in Sitecore Sitecore Experience Manager (XM),...
    📅 Updated: Oct 18, 2026
Powered by CVE Watchtower

Daily CyberSecurity

  • About SecurityOnline.info
  • Advertise with us
  • Announcement
  • Contact
  • Contributor Register
  • Login
  • Disclaimer
  • DCMA
  • Privacy Policy
  • About SecurityOnline.info
  • Advertise on SecurityOnline.info
  • Contact Us

When you purchase through links on our site, we may earn an affiliate commission. Here’s how it works

  • CVE Watchtower
  • CVE Statistics by Vendor 2026
  • Q3 2026 Report
  • Top Exploited CVEs
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube
© 2017 - 2026 Daily CyberSecurity. All Rights Reserved.