Skip to content
October 13, 2026
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube

Daily CyberSecurity

Zero-hour alerts. Unmatched analysis.

Primary Menu
  • Home
  • CVE Data
    • CVE Watchtower
    • Top Exploited CVEs
    • CVE Stats by Vendor
    • Q2 2026 Report
    • CVE Alerts
    • CVE Alert Settings
    • Pricing
  • Cyber Criminals
  • Data Leak
  • Free Tools
    • CVSS 3.1 Calculator
    • Certificate Viewer
    • DNS Lookup
    • Encoder & Hash Generator
    • IP / Subnet Calculator
    • Whois Lookup
  • Linux
  • Malware
  • Vulnerability
  • Submit Press Release
  • Weekly Recap
Light/Dark Button
  • Home
  • Technique
  • Main Types of Malware and Tools to Protect Yourself Online Better
  • Technique

Main Types of Malware and Tools to Protect Yourself Online Better

Do Son December 8, 2022 3 minutes read
tech-security

Today technology is an inevitable part of modern life. Computers changed how we receive information, communicate, and impact spending habits. According to statistics, more than a quarter of the world’s population shop online.

It doesn’t take Sherlock Holmes to correlate online financial transactions with increased cybercrime rates. Currently, the Internet is plagued by cybercrime, and it’s not improving. It is getting worse. In this article, you will find the most common types of malware in 2022, with tools to protect your online valuables.

Phishing

Phishing is an old hacking and social engineering technique dating back to the early 90s. In 2021, more than 80% of reported security issues involved Phishing. Most often, Phishing is carried out via fraudulent emails. Cybercriminals send thousands of emails asking to confirm banking details, call a specific number, or click on an infectious link.

Cybercriminals successfully exploited the Covid-19 crisis to improve email legitimacy and pose a sense of urgency regarding healthcare. Social networks do not help by providing hackers with personalized data to use in Phishing scams.

Paradoxically, the best defense against Phishing does not involve software. Cybersecurity training focused on identifying Phishing scams is the first line of defense. Participants will learn to identify fraudulent emails, infectious backlinks, most common Phishing tactics, mobile device security, and more. Phishing heavily relies on human error. If people become more aware of online dangers, they will be less likely to fall victim to social engineering.

Ransomware

In 2022, ransomware is by far the most damaging cyber threat. In the last couple of years, ransomware managed to paralyze Ireland’s healthcare sector, halt U.S. Colonial Pipeline operations, breach Baltimore’s government servers, and more. These relatively recent attacks are against crucial public sectors. However, the most prominent WannaCry ransomware attack infected over 200,000 devices running Microsoft Windows, whether a business or a casual Internet user.

Ransomware is frequently delivered via Phishing scams, so the discussed Phishing protection training applies here as well. However, it is essential to back up data regularly. Ransomware encrypts data on a device and then blackmails the user for ransom. You can restore the data and report the incident to the local authorities if you have a secure and recent backup.

Regarding backups, apply the golden 3-2-1 rule. Have one primary backup and two copies of your data, and save them on two different media with one backup file offsite and offline. This will make ransomware attacks less likely to damage your data.

Online Account Security

One of the most common threats casual Internet users face is the security of their online accounts. Social media accounts store a lot of private information, Steam accounts can be worth thousands of dollars, and Instagram accounts are a primary source of income for many people. In 2021, a spike in Credential Stuffing Attacks attempted to take over named accounts and extract valuable information.

The best way to protect your online accounts is to improve password management habits. First, choose a reliable password manager to store dozens of unique and strong passwords. Avoid using the same password twice, and don’t use easy-to-guess passwords. Whenever possible, enable two or multi-factor authentication. These easy steps will protect against most password-hacking attempts.

This list is by no means exhaustive, but it focuses on the most common cyber threats in 2022. Discussed software and cybersecurity training will significantly decrease the chances of getting hacked because most people still don’t use any online protection.

SHARE
Share on FacebookShare on XShare on LinkedInShare on TelegramShare on BlueskyShare on Mastodon

Search

Translation

CVE ALERTS
πŸ“ˆ

EPSS Spike Alerts
Catch risk spikes before they make headlines.

🎯

Custom EPSS/CVSS
Set score thresholds to effectively filter noise.

πŸ›‘οΈ

Exploit Intel
Real-world exploit signals beyond the KEV catalog.

πŸ™

GitHub Issues
Auto-create alert tickets without duplication.

πŸ“¬

Weekly Digest
Clean summaries, eliminating email spam.

🏷️

Watchlist Groups
Tag vulnerabilities by team (Infra/AppSec/SOC).

πŸ”€

Smart Routing
Route chat channels based on severity levels.

🚨

RBP Tracker
Early warning detection and tracking system.

Subscribe – $7/mo or try free for 14 days β†’

🚨 Active Exploits in the Wild

  • CVE-2026-104935CVSS 8.6
    Authentication bypass by spoofing in ICS before version 25.1.3.0 allows a remote unauthenticated attacker to execute arbitrary commands....
    Admin intel📅 Updated: Oct 13, 2026
  • CVE-2026-102255CVSS 10.0
    A Pre-authentication SSRF vulnerability exists in the SMA1000 Appliance Work Place interface due to an unintended alternate access...
    Admin intel📅 Updated: Oct 9, 2026
  • CVE-2026-105133CVSS 6.9
    A vulnerability was detected in Ahsay AhsayCBS up to 10.3.2. This affects the function checkSysPwd of the file...
    Admin intel📅 Updated: Oct 9, 2026
  • CVE-2023-22894CVSS 4.9
    Strapi through 4.5.5 allows attackers (with access to the admin panel) to discover sensitive user details by exploiting...
    CISA KEV📅 Added to KEV: Oct 8, 2026
  • CVE-2016-3081CVSS 8.1
    Apache Struts 2.3.19 to 2.3.20.2, 2.3.21 to 2.3.24.1, and 2.3.25 to 2.3.28, when Dynamic Method Invocation is enabled,...
    CISA KEV📅 Added to KEV: Oct 8, 2026
  • CVE-2015-3306CVSS 10.0
    The mod_copy module in ProFTPD 1.3.5 allows remote attackers to read and write to arbitrary files via the...
    CISA KEV📅 Added to KEV: Oct 8, 2026
  • CVE-2015-5477CVSS 7.5
    named in ISC BIND 9.x before 9.9.7-P2 and 9.10.x before 9.10.2-P3 allows remote attackers to cause a denial...
    CISA KEV📅 Added to KEV: Oct 8, 2026
  • CVE-2021-3199CVSS 9.8
    Directory traversal with remote code execution can occur in /upload in ONLYOFFICE Document Server before 5.6.3, when JWT...
    CISA KEV📅 Added to KEV: Oct 8, 2026
Powered by CVE Watchtower

Critical Vulnerabilities

  • CVE-2026-96119CVSS 9.9
    IBM i 7.3, 7.4, 7.5, and 7.6 could allow a remote authenticated attacker to obtain sensitive information or...
    📅 Updated: Oct 13, 2026
  • CVE-2026-90920CVSS 9.8
    IBM Maximo AI Service 9.1.0, and 9.2.0 could allow a remote attacker to execute arbitrary code due to...
    📅 Updated: Oct 13, 2026
  • CVE-2026-82103CVSS 9.6
    IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to obtain sensitive information...
    📅 Updated: Oct 13, 2026
  • CVE-2026-65162CVSS 10.0
    NVIDIA AIStore for Linux contains a vulnerability in the legacy ETL Kubernetes PodSpec initialization API where a remote...
    📅 Updated: Oct 13, 2026
  • CVE-2026-65173CVSS 9.1
    NVIDIA AIStore for Linux contains a missing authentication vulnerability in the token-revocation endpoint where an unauthenticated remote attacker...
    📅 Updated: Oct 13, 2026
  • CVE-2026-53709CVSS 9.8
    MCP Context Forge is an MCP gateway and administrative platform. Prior to 1.0.2, mcpgateway/config.py and .env.example ship a...
    📅 Updated: Oct 13, 2026
  • CVE-2026-49243CVSS 9.6
    Webmin is a web-based system administration tool for Unix-like servers. Prior to version 2.650, Webmin users who click...
    📅 Updated: Oct 13, 2026
  • CVE-2026-109707CVSS 9.6
    Sandbox escape due to use-after-free in the Networking component. This vulnerability was fixed in Firefox 158 and Firefox...
    📅 Updated: Oct 13, 2026
Powered by CVE Watchtower

Daily CyberSecurity

  • About SecurityOnline.info
  • Advertise with us
  • Announcement
  • Contact
  • Contributor Register
  • Login
  • Disclaimer
  • DCMA
  • Privacy Policy
  • About SecurityOnline.info
  • Advertise on SecurityOnline.info
  • Contact Us

When you purchase through links on our site, we may earn an affiliate commission. Here’s how it works

  • CVE Watchtower
  • CVE Statistics by Vendor 2026
  • Q3 2026 Report
  • Top Exploited CVEs
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube
Β© 2017 - 2026 Daily CyberSecurity. All Rights Reserved.