Skip to content
November 2, 2026
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube

Daily CyberSecurity

Zero-hour alerts. Unmatched analysis.

Primary Menu
  • Home
  • CVE Data
    • CVE Watchtower
    • Top Exploited CVEs
    • CVE Stats by Vendor
    • Q2 2026 Report
    • CVE Alerts
    • CVE Alert Settings
    • Pricing
  • Cyber Criminals
  • Data Leak
  • Free Tools
    • CVSS 3.1 Calculator
    • Certificate Viewer
    • DNS Lookup
    • Encoder & Hash Generator
    • IP / Subnet Calculator
    • Whois Lookup
  • Linux
  • Malware
  • Vulnerability
  • Submit Press Release
  • Weekly Recap
Light/Dark Button
  • Home
  • Technique
  • Main Types of Malware and Tools to Protect Yourself Online Better
  • Technique

Main Types of Malware and Tools to Protect Yourself Online Better

Do Son December 8, 2022 3 minutes read
tech-security

Today technology is an inevitable part of modern life. Computers changed how we receive information, communicate, and impact spending habits. According to statistics, more than a quarter of the world’s population shop online.

It doesn’t take Sherlock Holmes to correlate online financial transactions with increased cybercrime rates. Currently, the Internet is plagued by cybercrime, and it’s not improving. It is getting worse. In this article, you will find the most common types of malware in 2022, with tools to protect your online valuables.

Phishing

Phishing is an old hacking and social engineering technique dating back to the early 90s. In 2021, more than 80% of reported security issues involved Phishing. Most often, Phishing is carried out via fraudulent emails. Cybercriminals send thousands of emails asking to confirm banking details, call a specific number, or click on an infectious link.

Cybercriminals successfully exploited the Covid-19 crisis to improve email legitimacy and pose a sense of urgency regarding healthcare. Social networks do not help by providing hackers with personalized data to use in Phishing scams.

Paradoxically, the best defense against Phishing does not involve software. Cybersecurity training focused on identifying Phishing scams is the first line of defense. Participants will learn to identify fraudulent emails, infectious backlinks, most common Phishing tactics, mobile device security, and more. Phishing heavily relies on human error. If people become more aware of online dangers, they will be less likely to fall victim to social engineering.

Ransomware

In 2022, ransomware is by far the most damaging cyber threat. In the last couple of years, ransomware managed to paralyze Ireland’s healthcare sector, halt U.S. Colonial Pipeline operations, breach Baltimore’s government servers, and more. These relatively recent attacks are against crucial public sectors. However, the most prominent WannaCry ransomware attack infected over 200,000 devices running Microsoft Windows, whether a business or a casual Internet user.

Ransomware is frequently delivered via Phishing scams, so the discussed Phishing protection training applies here as well. However, it is essential to back up data regularly. Ransomware encrypts data on a device and then blackmails the user for ransom. You can restore the data and report the incident to the local authorities if you have a secure and recent backup.

Regarding backups, apply the golden 3-2-1 rule. Have one primary backup and two copies of your data, and save them on two different media with one backup file offsite and offline. This will make ransomware attacks less likely to damage your data.

Online Account Security

One of the most common threats casual Internet users face is the security of their online accounts. Social media accounts store a lot of private information, Steam accounts can be worth thousands of dollars, and Instagram accounts are a primary source of income for many people. In 2021, a spike in Credential Stuffing Attacks attempted to take over named accounts and extract valuable information.

The best way to protect your online accounts is to improve password management habits. First, choose a reliable password manager to store dozens of unique and strong passwords. Avoid using the same password twice, and don’t use easy-to-guess passwords. Whenever possible, enable two or multi-factor authentication. These easy steps will protect against most password-hacking attempts.

This list is by no means exhaustive, but it focuses on the most common cyber threats in 2022. Discussed software and cybersecurity training will significantly decrease the chances of getting hacked because most people still don’t use any online protection.

Search

CVE ALERTS
📈

EPSS Spike Alerts
Catch risk spikes before they make headlines.

🎯

Custom EPSS/CVSS
Set score thresholds to effectively filter noise.

🛡️

Exploit Intel
Real-world exploit signals beyond the KEV catalog.

🐙

GitHub Issues
Auto-create alert tickets without duplication.

📬

Weekly Digest
Clean summaries, eliminating email spam.

🏷️

Watchlist Groups
Tag vulnerabilities by team (Infra/AppSec/SOC).

🔀

Smart Routing
Route chat channels based on severity levels.

🚨

RBP Tracker
Early warning detection and tracking system.

Subscribe – $7/mo or try free for 14 days →

🚨 Active Exploits in the Wild

  • CVE-2026-58115CVSS 10.0
    A vulnerability has been identified in SIMATIC IoT2050 Advanced (6ES7647-0BA00-1YA2) (All versions < V4.3.4.1 running Industrial OS with...
    Admin intel📅 Updated: Nov 2, 2026
  • CVE-2026-20051CVSS 7.4
    A vulnerability with the Ethernet VPN (EVPN) Layer 2 ingress packet processing of Cisco Nexus 3600 Platform Switches...
    Watchtower Verified📅 Updated: Nov 1, 2026
  • CVE-2026-20118CVSS 6.8
    A vulnerability in the handling of an Egress Packet Network Interface (EPNI) Aligner interrupt in Cisco IOS XR...
    Watchtower Verified📅 Updated: Nov 1, 2026
  • CVE-2010-20125CVSS 8.7
    DedeCMS before 5.7 contains a file inclusion vulnerability in plus/carbuyaction.php that allows remote unauthenticated attackers to control the...
    Watchtower Verified📅 Updated: Oct 30, 2026
  • CVE-2015-20130CVSS 5.1
    Netsweeper before 4.0.11 and 4.1.0 before 4.1.5 contains a reflected cross-site scripting vulnerability in webadmin/reporter/view_server_log.php that allows remote...
    Watchtower Verified📅 Updated: Oct 30, 2026
  • CVE-2026-111357CVSS 7.0
    Ivanti Connect Secure 22.8R2.4 mishandles the manner in which the dsinvoked broker trusts DSCache configuration data, leading to...
    CISA KEV📅 Added to KEV: Oct 30, 2026
  • CVE-2026-118527CVSS 4.3
    Use of predictable filenames in Ivanti Connect Secure before versions 25.1.1.3 and 22.8R2.6 allows a remote authenticated attacker...
    CISA KEV📅 Added to KEV: Oct 30, 2026
  • CVE-2026-118539
    This module enables you to sell goods and services to customers through an included shopping cart and checkout...
    Admin intel📅 Updated: Oct 29, 2026
Powered by CVE Watchtower

Critical Vulnerabilities

  • CVE-2026-58115CVSS 10.0
    A vulnerability has been identified in SIMATIC IoT2050 Advanced (6ES7647-0BA00-1YA2) (All versions < V4.3.4.1 running Industrial OS with...
    Admin intel📅 Updated: Nov 2, 2026
  • CVE-2026-77876CVSS 9.3
    Control Web Panel (CWP) before webpanel_version 1.16 contains an OS command injection vulnerability in the protected_directory user panel...
    📅 Updated: Nov 2, 2026
  • CVE-2026-79873CVSS 9.3
    Authentication bypass vulnerabilities in the PAPI protocol of AOS-10 could allow an unauthenticated adjacent attacker to circumvent existing...
    📅 Updated: Nov 2, 2026
  • CVE-2026-79874CVSS 9.3
    An authentication bypass in the API of AOS-10 allows an unauthenticated adjacent attacker to circumvent existing authentication controls....
    📅 Updated: Nov 2, 2026
  • CVE-2026-79872CVSS 9.4
    A buffer overflow vulnerability exists in the underlying operating system of AOS that could lead to unauthenticated remote...
    📅 Updated: Nov 2, 2026
  • CVE-2026-55981CVSS 9.6
    A firmware verification vulnerability in Creative Sound Blaster Katana could allow an attacker to modify a legitimate firmware...
    📅 Updated: Nov 2, 2026
  • CVE-2026-118235CVSS 9.8
    The SimpleForm – Form Maker to Chat Apps with Quiz, Poll and Multi Lead Notifications plugin for WordPress...
    📅 Updated: Nov 2, 2026
  • CVE-2026-116512CVSS 9.8
    The Project Manager – AI Powered Project Management, Task Management, Kanban Board & Time Tracker plugin for WordPress...
    📅 Updated: Nov 2, 2026
Powered by CVE Watchtower

Daily CyberSecurity

  • About SecurityOnline.info
  • Advertise with us
  • Announcement
  • Contact
  • Contributor Register
  • Login
  • Disclaimer
  • DCMA
  • Privacy Policy
  • About SecurityOnline.info
  • Advertise on SecurityOnline.info
  • Contact Us

When you purchase through links on our site, we may earn an affiliate commission. Here’s how it works

  • CVE Watchtower
  • CVE Statistics by Vendor 2026
  • Q3 2026 Report
  • Top Exploited CVEs
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube
© 2017 - 2026 Daily CyberSecurity. All Rights Reserved.