Skip to content
July 29, 2026
  • Linkedin
  • Twitter
  • Facebook
  • Youtube

Daily CyberSecurity

Zero-hour alerts. Unmatched analysis.

Primary Menu
  • Home
  • CVE Data
    • CVE Watchtower
    • Top Exploited CVEs
    • CVE Stats by Vendor
    • Q2 2026 Report
  • Cyber Criminals
  • Data Leak
  • Linux
  • Malware
  • Vulnerability
  • Submit Press Release
  • Weekly Recap
Light/Dark Button
Grok 4.1 Thinking Steals #1 Spot on LMArena, Surpassing Google Gemini 2.5 Pro Grok 4.1 Thinking LMArena Elo Score
  • Technology

Grok 4.1 Thinking Steals #1 Spot on LMArena, Surpassing Google Gemini 2.5 Pro

Do Son November 19, 2025 0
Read More Read more about Grok 4.1 Thinking Steals #1 Spot on LMArena, Surpassing Google Gemini 2.5 Pro
AI Mode Upgraded: Google Launches Canvas for Planning and Agentic Booking for Reservations Google AI Mode Canvas Agentic Travel Booking
  • Technology

AI Mode Upgraded: Google Launches Canvas for Planning and Agentic Booking for Reservations

Do Son November 19, 2025 0
Read More Read more about AI Mode Upgraded: Google Launches Canvas for Planning and Agentic Booking for Reservations
CISA KEV Alert: FortiWeb RCE Flaw (CVE-2025-58034) Under Active Exploitation for Command Injection Cisco SD-WAN Vulnerability CVE-2026-20133 FortiGate Compromise Ivanti EPMM Zero-Day CVE-2026-1281 SmarterMail Vulnerability Storm-2603 WatchGuard Zero-Day, IKEv2 Out-of-Bounds Write Cisco Zero-Day, UAT-9686 Chinese APT FortiWeb RCE Exploitation CVE-2025-58034 VMware Zero-Day, Privilege Escalation Sitecore, remote code execution CVE-2025-53690 Windows CLFS, Privilege Escalation CVE-2024-47575 & CVE-2024-11120 CVE-2025-24983 vulnerability
  • Vulnerability Report

CISA KEV Alert: FortiWeb RCE Flaw (CVE-2025-58034) Under Active Exploitation for Command Injection

Do Son November 19, 2025 0
Read More Read more about CISA KEV Alert: FortiWeb RCE Flaw (CVE-2025-58034) Under Active Exploitation for Command Injection
AI-Generated Malware Attacks 230,000 Exposed Ray AI Clusters in Massive ShadowRay 2.0 Botnet Campaign FortiClient EMS exploitation Cisco FIRESTARTER Backdoor Arcane Door Campaign Dell RecoverPoint Zero-Day UNC6201 Espionage Notepad++ Compromise Supply Chain Attack Magento SessionReaper CVE-2025-54236 ShadowRay 2.0, AI-Generated Malware WordPress Auth Bypass, CVE-2025-5947 Exploited EcoStruxure Vulnerabilities, Industrial Control System UNC5820 - CVE-2014-2120 - CVE-2021-44207
  • Malware
  • Vulnerability Report

AI-Generated Malware Attacks 230,000 Exposed Ray AI Clusters in Massive ShadowRay 2.0 Botnet Campaign

Do Son November 19, 2025 0
Read More Read more about AI-Generated Malware Attacks 230,000 Exposed Ray AI Clusters in Massive ShadowRay 2.0 Botnet Campaign
D-Link DIR-878 Reaches EOL: 3 Unpatched RCE Flaws Allow Unauthenticated Remote Command Execution D-Link DIR-816, Critical Vulnerabilities D-Link EOL RCE, Unauthenticated Command Injection
  • Vulnerability Report

D-Link DIR-878 Reaches EOL: 3 Unpatched RCE Flaws Allow Unauthenticated Remote Command Execution

Do Son November 19, 2025 0
Read More Read more about D-Link DIR-878 Reaches EOL: 3 Unpatched RCE Flaws Allow Unauthenticated Remote Command Execution
Critical METZ CONNECT Flaws (CVSS 9.8) Allow Unauthenticated RCE and Admin Takeover on Industrial Controllers METZ CONNECT RCE, Unauthenticated Admin Takeover
  • Vulnerability Report

Critical METZ CONNECT Flaws (CVSS 9.8) Allow Unauthenticated RCE and Admin Takeover on Industrial Controllers

Do Son November 19, 2025 0
Read More Read more about Critical METZ CONNECT Flaws (CVSS 9.8) Allow Unauthenticated RCE and Admin Takeover on Industrial Controllers
9 Million Installs: Malicious Chrome VPN Extensions Hijack User Traffic Via Remote PAC Proxy Injection Chrome VPN Malware, Traffic Hijacking
  • Data Leak
  • Malware

9 Million Installs: Malicious Chrome VPN Extensions Hijack User Traffic Via Remote PAC Proxy Injection

Do Son November 19, 2025 0
Read More Read more about 9 Million Installs: Malicious Chrome VPN Extensions Hijack User Traffic Via Remote PAC Proxy Injection
Critical SolarWinds Serv-U Flaws (CVSS 9.1) Allow Authenticated Admin RCE and Path Bypass Serv-U RCE, Authenticated RCE CVE-2024-0692 Salesforce breach
  • Vulnerability Report

Critical SolarWinds Serv-U Flaws (CVSS 9.1) Allow Authenticated Admin RCE and Path Bypass

Do Son November 19, 2025 0
Read More Read more about Critical SolarWinds Serv-U Flaws (CVSS 9.1) Allow Authenticated Admin RCE and Path Bypass
npm Supply Chain Attack: Hackers Use Adspect Cloaking and Fake Crypto CAPTCHA to Deceive Victims and Researchers npm Adspect Cloaking, Fake Crypto CAPTCHA
  • Malware

npm Supply Chain Attack: Hackers Use Adspect Cloaking and Fake Crypto CAPTCHA to Deceive Victims and Researchers

Do Son November 19, 2025 0
Read More Read more about npm Supply Chain Attack: Hackers Use Adspect Cloaking and Fake Crypto CAPTCHA to Deceive Victims and Researchers
Iranian APT UNC1549 Infiltrates Aerospace by Hijacking Trusted DLLs and Executing VDI Breakouts PromptMink Campaign AI Agent Deception LIMINAL PANDA UNC1549 DLL Hijacking, VDI Breakout
  • Cyber Security
  • Malware

Iranian APT UNC1549 Infiltrates Aerospace by Hijacking Trusted DLLs and Executing VDI Breakouts

Do Son November 19, 2025 0
Read More Read more about Iranian APT UNC1549 Infiltrates Aerospace by Hijacking Trusted DLLs and Executing VDI Breakouts
Stealth Stealer: New .NET Loader Hides LokiBot Payload in BMP/PNG Images Using Advanced Steganography LokiBot Steganography, .NET Loader PlugX malware YiBackdoor, ransomware
  • Malware

Stealth Stealer: New .NET Loader Hides LokiBot Payload in BMP/PNG Images Using Advanced Steganography

Do Son November 19, 2025 0
Read More Read more about Stealth Stealer: New .NET Loader Hides LokiBot Payload in BMP/PNG Images Using Advanced Steganography
macOS Wallet Stealer Uncovered: “Nova” Malware Replaces Ledger/Trezor Apps with Phishing Clones for Seed Theft macOS Wallet Stealer, Trezor Ledger Phishing
  • Malware

macOS Wallet Stealer Uncovered: “Nova” Malware Replaces Ledger/Trezor Apps with Phishing Clones for Seed Theft

Do Son November 19, 2025 0
Read More Read more about macOS Wallet Stealer Uncovered: “Nova” Malware Replaces Ledger/Trezor Apps with Phishing Clones for Seed Theft
SecurityMetrics Wins “Data Leak Detection Solution of the Year” in 2025 CyberSecurity Breakthrough Awards Program cybersecurity-breakthrough-award_1_17634188558wSIYesKXD
  • Press Release

SecurityMetrics Wins “Data Leak Detection Solution of the Year” in 2025 CyberSecurity Breakthrough Awards Program

cybernewswire November 18, 2025 0
Read More Read more about SecurityMetrics Wins “Data Leak Detection Solution of the Year” in 2025 CyberSecurity Breakthrough Awards Program
SpyCloud Unveils Top 10 Cybersecurity Predictions Poised to Disrupt Identity Security in 2026
  • Press Release

SpyCloud Unveils Top 10 Cybersecurity Predictions Poised to Disrupt Identity Security in 2026

cybernewswire November 18, 2025 0
Read More Read more about SpyCloud Unveils Top 10 Cybersecurity Predictions Poised to Disrupt Identity Security in 2026
Cloudflare Outage Crashes the Internet: X, ChatGPT, and Major Websites Inaccessible Cloudflare layoffs 2026 AI bot traffic surge Content Signals Policy, AI Content Usage Cloudflare, Certificate Misissuance Salesforce, supply chain attack DDoS attack, Cloudflare Perplexity AI, Web Scraping Pay Per Crawl Cloudflare abuse R2 outage HTTP Cloudflare Blocking
  • Technology

Cloudflare Outage Crashes the Internet: X, ChatGPT, and Major Websites Inaccessible

Do Son November 18, 2025 0
Read More Read more about Cloudflare Outage Crashes the Internet: X, ChatGPT, and Major Websites Inaccessible
Critical Flowise Flaw Allows Unauthenticated Remote Admin Takeover via Exposed Registration Endpoint Flowise Sandbox Escape CVE-2026-46442 Flowise RCE Flowise Auth Bypass, Unauthenticated Registration Flowise RCE, WriteFileTool FlowiseAI, account takeover CVE-2025-58434
  • Vulnerability

Critical Flowise Flaw Allows Unauthenticated Remote Admin Takeover via Exposed Registration Endpoint

Do Son November 18, 2025 0
Read More Read more about Critical Flowise Flaw Allows Unauthenticated Remote Admin Takeover via Exposed Registration Endpoint
Red Sea Crisis Halts Major Fiber Projects: Meta’s 2Africa & Google’s Blue-Raman Delayed Red Sea Cable Delays Geopolitical Subsea Risk
  • Technology

Red Sea Crisis Halts Major Fiber Projects: Meta’s 2Africa & Google’s Blue-Raman Delayed

Do Son November 18, 2025 0
Read More Read more about Red Sea Crisis Halts Major Fiber Projects: Meta’s 2Africa & Google’s Blue-Raman Delayed
Reels Stolen? Meta Launches Content Protection to Track & Block Reposts on Facebook/Instagram Meta Content Protection Reels Video Theft
  • Technology

Reels Stolen? Meta Launches Content Protection to Track & Block Reposts on Facebook/Instagram

Do Son November 18, 2025 0
Read More Read more about Reels Stolen? Meta Launches Content Protection to Track & Block Reposts on Facebook/Instagram
MacBook’s Virtual Ring Light May Come to Windows 11 via PowerToys Edge Light Windows 11 FAT32 limit Microsoft OOB update January 2026, Remote Desktop login shutdown bug Windows Edge Light PowerToys Ring Light
  • Windows

MacBook’s Virtual Ring Light May Come to Windows 11 via PowerToys Edge Light

Do Son November 18, 2025 0
Read More Read more about MacBook’s Virtual Ring Light May Come to Windows 11 via PowerToys Edge Light
DeepMind’s WeatherNext 2: AI Model Forecasts Global Weather Two Weeks Ahead, 8X Faster DeepMind WeatherNext 2 Two-Week Global Forecast
  • Technology

DeepMind’s WeatherNext 2: AI Model Forecasts Global Weather Two Weeks Ahead, 8X Faster

Do Son November 18, 2025 0
Read More Read more about DeepMind’s WeatherNext 2: AI Model Forecasts Global Weather Two Weeks Ahead, 8X Faster
Jeff Bezos Returns to Leadership: Co-CEO of $6.2 Billion AI Startup Project Prometheus Jeff Bezos AI Co-CEO Project Prometheus
  • Technology

Jeff Bezos Returns to Leadership: Co-CEO of $6.2 Billion AI Startup Project Prometheus

Do Son November 18, 2025 0
Read More Read more about Jeff Bezos Returns to Leadership: Co-CEO of $6.2 Billion AI Startup Project Prometheus
Microsoft Fixes Task Manager That Wouldn’t Close in Windows 11 Task Manager Ghost Process WinRE Input Fix Windows Search Copilot+ PCs
  • Windows

Microsoft Fixes Task Manager That Wouldn’t Close in Windows 11

Do Son November 18, 2025 0
Read More Read more about Microsoft Fixes Task Manager That Wouldn’t Close in Windows 11
❮ Prev Page
Next Page ❯

Search

Translation

CVE WATCHTOWER
🚨

Receive alerts for vulnerabilities being exploited in the wild.

⚡

Get notified instantly when a Proof of Concept (PoC) exploit is published.

🔍

Access critical info on vulnerabilities even when marked as "RESERVED".

🧠

Insights powered by decades of expertise and global intelligence sources.

🎯

Customize alerts with up to 10 keywords for your specific tech stack.

📊

Export the raw CVE database for SIEM integration and reporting.

Upgrade Package

🚨 Active Exploits in the Wild

  • CVE-2026-18072CVSS 9.8
    The Advanced Responsive Video Embedder for Rumble, Odysee, YouTube, Vimeo, Kick … plugin for WordPress is vulnerable to...
    Admin intel📅 Updated: Jul 29, 2026
  • CVE-2026-16812CVSS 10.0
    VeloCloud Orchestrator (VCO) on-prem has a security issue where this issue may allow a remote attacker to access...
    Admin intelCISA KEV📅 Added to KEV: Jul 27, 2026📅 Updated: Jul 27, 2026
  • CVE-2025-68686CVSS 5.9
    An Exposure of Sensitive Information to an Unauthorized Actor vulnerability [CWE-200] vulnerability in Fortinet FortiOS 7.6.0 through 7.6.1,...
    CISA KEV📅 Added to KEV: Jul 27, 2026
  • CVE-2026-16723CVSS 9.0
    A remote code execution (RCE) vulnerability exists in fastjson 1.2.68 through 1.2.83. This vulnerability is exploitable under fastjson\'s stock...
    Admin intel📅 Updated: Jul 25, 2026
  • CVE-2026-16232CVSS 9.1
    An authentication bypass vulnerability in the Check Point SmartConsole login process allows an unauthenticated remote attacker to obtain...
    CISA KEV📅 Added to KEV: Jul 22, 2026
  • CVE-2026-50522CVSS 9.8
    Deserialization of untrusted data in Microsoft Office SharePoint allows an unauthorized attacker to execute code over a network.
    Admin intelCISA KEV📅 Added to KEV: Jul 22, 2026📅 Updated: Jul 21, 2026
  • CVE-2026-63030CVSS 9.8
    WordPress 6.9.x before 6.9.5 and 7.0.x before 7.0.2 is affected by a REST API batch endpoint route confusion...
    Admin intelCISA KEV📅 Added to KEV: Jul 21, 2026📅 Updated: Jul 21, 2026
  • CVE-2026-60137CVSS 5.9
    WordPress 6.8.x before 6.8.6, 6.9.x before 6.9.5, and 7.0.x before 7.0.2 does not properly sanitise the author__not_in parameter...
    Admin intelCISA KEV📅 Added to KEV: Jul 21, 2026📅 Updated: Jul 21, 2026
Powered by CVE Watchtower

🔴 Live Critical Threats

  • CVE-2026-14900CVSS 9.8
    The Cost Calculator Builder PRO plugin for WordPress is vulnerable to Remote...
  • CVE-2026-14488CVSS 9.1
    The Meta Box AIO plugin for WordPress is vulnerable to Missing Authorization...
  • CVE-2025-10656CVSS 9.8
    The Spreadsheet Price Changer for WooCommerce and WP E-commerce – Light plugin...
  • CVE-2026-58162CVSS 10.0
    The Apache Traffic Server certifier plugin generates certificates based on attacker-controlled client...
  • CVE-2026-58155CVSS 9.3
    Apache Traffic Server truncates over-long header names, allowing header aliasing, request smuggling,...
  • CVE-2026-58150CVSS 10.0
    Apache Traffic Server does not reject Transfer-Encoding in HTTP/2 requests, allowing downgrade...
  • CVE-2026-57834CVSS 10.0
    Apache Traffic Server allows request smuggling if chunked messages are malformed. This...
  • CVE-2026-33267CVSS 10.0
    Improper Input Validation vulnerability in Apache Traffic Server. This issue affects Apache...
  • CVE-2026-41920CVSS 9.3
    Improper Access Control vulnerability in Apache Traffic Server. This issue affects Apache...
  • CVE-2026-63234CVSS 9.9
    A SQL injection and unsafe deserialisation vulnerability in Koollab LMS allowed an...
Powered by CVE WATCHTOWER

Our Websites
  • Penetration Testing Tools
  • The Daily Information Technology
  • Top Exploited CVEs
  • Daily CyberSecurity

    • About SecurityOnline.info
    • Advertise with us
    • Announcement
    • Contact
    • Contributor Register
    • Login
    • Disclaimer
    • DCMA
    • Privacy Policy
    • About SecurityOnline.info
    • Advertise on SecurityOnline.info
    • Contact Us

    When you purchase through links on our site, we may earn an affiliate commission. Here’s how it works

    • CVE Watchtower
    • CVE Statistics by Vendor 2026
    • Q2 2026 Report
    • Top Exploited CVEs
    • Linkedin
    • Twitter
    • Facebook
    • Youtube
    © 2017 - 2026 Daily CyberSecurity. All Rights Reserved.