Skip to content
September 18, 2026
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube

Daily CyberSecurity

Zero-hour alerts. Unmatched analysis.

Primary Menu
  • Home
  • CVE Data
    • CVE Watchtower
    • Top Exploited CVEs
    • CVE Stats by Vendor
    • Q2 2026 Report
    • CVE Alerts
    • CVE Alert Settings
    • Pricing
  • Cyber Criminals
  • Data Leak
  • Free Tools
    • CVSS 3.1 Calculator
    • Certificate Viewer
    • DNS Lookup
    • Encoder & Hash Generator
    • IP / Subnet Calculator
    • Whois Lookup
  • Linux
  • Malware
  • Vulnerability
  • Submit Press Release
  • Weekly Recap
Light/Dark Button
Popular ‘is’ JavaScript Library & Others Compromised in npm Supply Chain Attack Cemu emulator Linux malware Blitz Brigantine AOBackdoor GitHub Malware Campaign StealC Infostealer TamperedChef Malware, SEO Poisoning Carbanak malware RubyGems Supply Chain, Infostealer
  • Malware

Popular ‘is’ JavaScript Library & Others Compromised in npm Supply Chain Attack

Do Son July 26, 2025 0
Read More Read more about Popular ‘is’ JavaScript Library & Others Compromised in npm Supply Chain Attack
Android Now Runs Full Graphical Linux Apps: Google Unleashes Desktop Experience in Terminal VM Android CLI Android Security Zero-Interaction DoS CVE-2026-21385 Android Security Update UK CMA Apple Google regulation Google Aluminum OS Android 16 leak, ALOS Android ChromeOS merger Android sideloading certification 2026, Google developer verification APK Android AOSP biannual release, AOSP source code latency 2026 Android Zero-Day, Critical DoS Flaw Android Universal Clipboard Cross-Device Sync Gemini Nano Block, Unlocked Bootloader Android, Calling Cards Android Security Bulletin, RCE Vulnerability Android Linux GUI, Debian VM Android System Services, Google Transparency Android 16, Pixel Update
  • Android

Android Now Runs Full Graphical Linux Apps: Google Unleashes Desktop Experience in Terminal VM

Do Son July 26, 2025 0
Read More Read more about Android Now Runs Full Graphical Linux Apps: Google Unleashes Desktop Experience in Terminal VM
Microsoft Phone Link Adds Cross-Device Clipboard & Remote PC Lock for Android Users Phone Link, Cross-Device Clipboard
  • Android
  • Windows

Microsoft Phone Link Adds Cross-Device Clipboard & Remote PC Lock for Android Users

Do Son July 26, 2025 0
Read More Read more about Microsoft Phone Link Adds Cross-Device Clipboard & Remote PC Lock for Android Users
Broadcom Blocks VMware Security Updates for Perpetual License Holders VMware Telco Cloud Platform 9 Tesco, Broadcom, VMware Walmart Broadcom Jericho4, Distributed AI Infrastructure Broadcom VMware, Perpetual Licenses AI Data Centers, Network Switch Unix automation security, Broadcom vulnerability
  • Technology

Broadcom Blocks VMware Security Updates for Perpetual License Holders

Do Son July 26, 2025 0
Read More Read more about Broadcom Blocks VMware Security Updates for Perpetual License Holders
NVIDIA Update: 14 Vulnerabilities Patched in GPU Drivers & vGPU Software NVIDIA acquisition rumors NVIDIA AI Security AI Framework Vulnerabilities Nvidia 595.76 Hotfix NVIDIA Megatron Bridge vulnerability GPU vs ASIC AI battle NVIDIA Driver Vulnerability CVE-2025-33217 NVIDIA biggest TSMC customer 2026, NVIDIA vs Apple TSMC revenue share NVIDIA CUDA Toolkit CVE-2025-33228 Groq NVIDIA licensing deal, Jonathan Ross acquihire 2025 NeMo Code Injection, AI Framework RCE NVIDIA App Privilege Escalation, CVE-2025-23358 NVIDIA Security Update, DLS Vulnerability CVE-2025-23316 NVIDIA NVDebug, vulnerabilities NVIDIA Driver Vulnerabilities, vGPU Security Nvidia Jetson, UEFI Vulnerabilities CVE-2024-0130 - CVE-2024-0136 CVE-2024-0148 NVIDIA Driver Support, Windows 10 EOL
  • Vulnerability Report

NVIDIA Update: 14 Vulnerabilities Patched in GPU Drivers & vGPU Software

Do Son July 26, 2025 0
Read More Read more about NVIDIA Update: 14 Vulnerabilities Patched in GPU Drivers & vGPU Software
Europol Dismantles Romanian Gang Behind €580K ATM Fraud, Skimming, and Bold Police Taunts EU Education Scams, .edu.eu Domain App Store security Refund Schemes - Texas Pharmacist's Fraudulent
  • Cybercriminals

Europol Dismantles Romanian Gang Behind €580K ATM Fraud, Skimming, and Bold Police Taunts

Do Son July 25, 2025 0
Read More Read more about Europol Dismantles Romanian Gang Behind €580K ATM Fraud, Skimming, and Bold Police Taunts
Massive Data Leak: Misconfigured Elasticsearch Server Exposes Hundreds of Millions of Swedish Records Fiverr Data Leak Claude Code Leak Anthropic DMCA Takedown Coupang 33.7M Breach South Korea Data Leak Red Hat Breach, Customer Data Theft Farmers Insurance, Salesforce ESLint Plugin -Mamont Android banking Trojan
  • Data Leak

Massive Data Leak: Misconfigured Elasticsearch Server Exposes Hundreds of Millions of Swedish Records

Do Son July 25, 2025 0
Read More Read more about Massive Data Leak: Misconfigured Elasticsearch Server Exposes Hundreds of Millions of Swedish Records
xonPlus Launches Real-Time Breach Alerting Platform for Enterprise Credential Exposure xonPlus_Press_Release-1200x675_1752673300QoIKs8vhHw
  • Press Release

xonPlus Launches Real-Time Breach Alerting Platform for Enterprise Credential Exposure

cybernewswire July 25, 2025 0
Read More Read more about xonPlus Launches Real-Time Breach Alerting Platform for Enterprise Credential Exposure
Apple Unleashes iOS 26, macOS Tahoe 26 Public Betas: Experience “Liquid Glass” & Major OS Overhauls MacBook Touchscreen Apple OS Betas, Liquid Glass Design
  • Technology

Apple Unleashes iOS 26, macOS Tahoe 26 Public Betas: Experience “Liquid Glass” & Major OS Overhauls

Do Son July 25, 2025 0
Read More Read more about Apple Unleashes iOS 26, macOS Tahoe 26 Public Betas: Experience “Liquid Glass” & Major OS Overhauls
Amazon Expands Kindle Colorsoft Lineup with More Affordable 16GB Model & First Kids’ Edition Kindle Colorsoft, Kids E-reader
  • Technology

Amazon Expands Kindle Colorsoft Lineup with More Affordable 16GB Model & First Kids’ Edition

Do Son July 25, 2025 0
Read More Read more about Amazon Expands Kindle Colorsoft Lineup with More Affordable 16GB Model & First Kids’ Edition
Apple Leverages Supreme Court Ruling to Fight App Store External Payment Links Mandate Vibe Coding apps Vibe Coding App Store surge Vibe Coding App Store Apple 50th Anniversary hardware Brazil CADE Apple settlement, iOS third-party app stores Brazil Tim Cook Succession Apple CEO Rumors App Store Mini Apps 15% Commission Fee iOS Japan Sideloading, Third-Party App Stores Web App Store, App Discovery Apple Age Verification, Texas SB2420 Apple AI acquisitions App Store, Antitrust Apple WebKit, Japan Regulations App Store Age Ratings, Parental Controls Apple App Store, Epic Games Lawsuit
  • Technology

Apple Leverages Supreme Court Ruling to Fight App Store External Payment Links Mandate

Do Son July 25, 2025 0
Read More Read more about Apple Leverages Supreme Court Ruling to Fight App Store External Payment Links Mandate
Alphabet Soars in Q2: AI Fuels 14% Revenue Jump to $96.4B, Google Cloud Profits Skyrocket Google Arkansas Investment, AI Data Center Google, privacy fine Ecosia Google Chrome Alphabet Earnings, AI Growth Google Hydropower, AI Data Centers Google Breakup Antitrust Workspace Flows Google Workspace Google remote work, return to office
  • Technology

Alphabet Soars in Q2: AI Fuels 14% Revenue Jump to $96.4B, Google Cloud Profits Skyrocket

Do Son July 25, 2025 0
Read More Read more about Alphabet Soars in Q2: AI Fuels 14% Revenue Jump to $96.4B, Google Cloud Profits Skyrocket
Trump Unleashes “AI Action Plan”: Deregulation Push, “Ideological Bias” Crackdown & Federal Lands for Data Centers Yoshua Bengio AI sycophancy, reverse deception AI feedback AI chatbots, FTC investigation AI-generated content Trump AI Policy, AI Deregulation Military AI, DoD Funding Stargate Project AI Art Restoration
  • Technology

Trump Unleashes “AI Action Plan”: Deregulation Push, “Ideological Bias” Crackdown & Federal Lands for Data Centers

Do Son July 25, 2025 0
Read More Read more about Trump Unleashes “AI Action Plan”: Deregulation Push, “Ideological Bias” Crackdown & Federal Lands for Data Centers
Qi2 25W Unleashed: WPC Boosts Wireless Charging to 25W, iPhone 17 & Android Adoption Confirmed Qi2 25W, Wireless Charging
  • Technology

Qi2 25W Unleashed: WPC Boosts Wireless Charging to 25W, iPhone 17 & Android Adoption Confirmed

Do Son July 25, 2025 0
Read More Read more about Qi2 25W Unleashed: WPC Boosts Wireless Charging to 25W, iPhone 17 & Android Adoption Confirmed
Toptal GitHub Organization Compromised: Malicious npm Packages Steal Tokens & Wipe Systems libheif Vulnerability CVE-2025-65586 Trend Micro RCE CVE-2025-69258 SessionReaper CVE-2025-54236 VS Code Marketplace, supply chain attack npm Supply Chain, Toptal Compromise Ruckus AP Vulnerability
  • Malware

Toptal GitHub Organization Compromised: Malicious npm Packages Steal Tokens & Wipe Systems

Do Son July 25, 2025 0
Read More Read more about Toptal GitHub Organization Compromised: Malicious npm Packages Steal Tokens & Wipe Systems
Operation GhostChat & PhantomPrayers: China-Linked APTs Target Tibetan Community with Stealthy Spyware Cyber-espionage, Tibetan Community
  • Cyber Security

Operation GhostChat & PhantomPrayers: China-Linked APTs Target Tibetan Community with Stealthy Spyware

Do Son July 25, 2025 0
Read More Read more about Operation GhostChat & PhantomPrayers: China-Linked APTs Target Tibetan Community with Stealthy Spyware
Critical Axios Flaw (CVE-2025-54371) in Form-Data Dependency Exposes Millions to HTTP Manipulation Axios proxy vulnerabilities prototype pollution gadget Axios Vulnerability Cloud Hijacking Axios npm supply chain attack Axios Vulnerability Node.js DoS CVE-2025-58754 CVE-2025-27152 Axios Vulnerability, Form-Data Flaw
  • Vulnerability Report

Critical Axios Flaw (CVE-2025-54371) in Form-Data Dependency Exposes Millions to HTTP Manipulation

Do Son July 25, 2025 0
Read More Read more about Critical Axios Flaw (CVE-2025-54371) in Form-Data Dependency Exposes Millions to HTTP Manipulation
Dropping Elephant Targets Türkiye’s Missile Industry with Stealthy Conference Lures & VLC DLL Sideloading Cyber-espionage, Dropping Elephant
  • Cyber Security

Dropping Elephant Targets Türkiye’s Missile Industry with Stealthy Conference Lures & VLC DLL Sideloading

Do Son July 25, 2025 0
Read More Read more about Dropping Elephant Targets Türkiye’s Missile Industry with Stealthy Conference Lures & VLC DLL Sideloading
400,000 WordPress Sites at Risk: CVE-2025-24000 in Post SMTP Plugin Allows Full Site Takeover WordPress Vulnerability, Post SMTP
  • Vulnerability Report

400,000 WordPress Sites at Risk: CVE-2025-24000 in Post SMTP Plugin Allows Full Site Takeover

Do Son July 25, 2025 0
Read More Read more about 400,000 WordPress Sites at Risk: CVE-2025-24000 in Post SMTP Plugin Allows Full Site Takeover
4 Open-Source Packages Infect 56,000+ Downloads with Stealthy Spyware Open Source Spyware, Supply Chain Surveillance
  • Malware

4 Open-Source Packages Infect 56,000+ Downloads with Stealthy Spyware

Do Son July 25, 2025 0
Read More Read more about 4 Open-Source Packages Infect 56,000+ Downloads with Stealthy Spyware
Soco404: New Stealthy Cryptojacking Campaign Exploits Cloud Misconfigurations and PostgreSQL to Mine Crypto cloud-attack-flow
  • Malware

Soco404: New Stealthy Cryptojacking Campaign Exploits Cloud Misconfigurations and PostgreSQL to Mine Crypto

Do Son July 25, 2025 0
Read More Read more about Soco404: New Stealthy Cryptojacking Campaign Exploits Cloud Misconfigurations and PostgreSQL to Mine Crypto
High-Severity SQL Injection (CVE-2025-52914) in Mitel MiCollab Allows Data Access, Command Execution CVE-2024-35285 & CVE-2024-35286 Mitel MiCollab, SQL Injection Vulnerability
  • Vulnerability Report

High-Severity SQL Injection (CVE-2025-52914) in Mitel MiCollab Allows Data Access, Command Execution

Do Son July 25, 2025 0
Read More Read more about High-Severity SQL Injection (CVE-2025-52914) in Mitel MiCollab Allows Data Access, Command Execution
❮ Prev Page
Next Page ❯

Search

Translation

CVE ALERTS
📧

Email Delivery
Get threat intel straight to your inbox.

♾️

Unlimited Vendors
Track every technology in your stack.

🚨

All New CVE Alerts
Be the first to know about new flaws.

⚙️

Custom EPSS Threshold
Filter noise, focus on real risks.

💬

Slack & Teams Webhook
Integrate directly into your SecOps.

🚫

100% Ad-Free
Enjoy an uninterrupted reading experience.

$7/mo
Subscribe Now

🚨 Active Exploits in the Wild

  • CVE-2025-39964CVSS 7.8
    In the Linux kernel, the following vulnerability has been resolved: crypto: af_alg - Disallow concurrent writes in af_alg_sendmsg...
    CISA KEV📅 Added to KEV: Sep 18, 2026
  • CVE-2026-53266CVSS 8.8
    In the Linux kernel, the following vulnerability has been resolved: netfilter: bridge: make ebt_snat ARP rewrite writable The...
    CISA KEV📅 Added to KEV: Sep 18, 2026
  • CVE-2026-76460CVSS 10.0
    A vulnerability in an API of Cisco Identity Services Engine (ISE) could allow an unauthenticated, remote attacker to...
    Admin intelCISA KEV📅 Added to KEV: Sep 16, 2026📅 Updated: Sep 16, 2026
  • CVE-2026-89026CVSS 9.8
    The Issabel Framework, the web framework supporting Issabel PBX software, before commit b97dbaf contains a hard-coded HS256 JWT...
    Admin intel📅 Updated: Sep 16, 2026
  • CVE-2026-58704
    In Cellular Modem, there is a possible permission bypass due to a logic error in the code. This...
    Admin intelCISA KEV📅 Added to KEV: Sep 16, 2026📅 Updated: Sep 16, 2026
  • CVE-2026-87886
    Exploitation of this vulnerability has been detected in the wild in limited, targeted attacks against Acronis Backup plugin...
    Admin intelCISA KEV📅 Added to KEV: Sep 16, 2026📅 Updated: Sep 16, 2026
  • CVE-2026-87827CVSS 10.0
    Certain KGUARD DVR devices running vulnerable firmware expose a system command execution service on all network interfaces without...
    Admin intel📅 Updated: Sep 15, 2026
  • CVE-2026-78006CVSS 9.8
    The The Events Calendar plugin for WordPress is vulnerable to Remote Code Execution in all versions up to,...
    Admin intel📅 Updated: Sep 15, 2026
Powered by CVE Watchtower

Critical Vulnerabilities

  • CVE-2026-59163CVSS 9.1
    Mnemosyne is a memory layer for artificial intelligence agents. Prior to v3.10.1, the auth check in mnemosyne/core/sync_server.py parsed...
    📅 Updated: Sep 18, 2026
  • CVE-2026-92489CVSS 9.8
    In the Linux kernel, the following vulnerability has been resolved: xfrm: Fix skb double-free in xfrm_dev_direct_output() A return...
    📅 Updated: Sep 18, 2026
  • CVE-2026-90414CVSS 9.1
    In the Linux kernel, the following vulnerability has been resolved: IB/isert: reject PDUs declaring more data than was...
    📅 Updated: Sep 18, 2026
  • CVE-2026-90413CVSS 9.1
    In the Linux kernel, the following vulnerability has been resolved: IB/isert: reject login PDUs declaring more data than...
    📅 Updated: Sep 18, 2026
  • CVE-2026-90235CVSS 9.8
    In the Linux kernel, the following vulnerability has been resolved: sunrpc: xprtsock: annotate shared socket callbacks with READ_ONCE/WRITE_ONCE...
    📅 Updated: Sep 18, 2026
  • CVE-2026-90230CVSS 9.1
    In the Linux kernel, the following vulnerability has been resolved: nvmet: fix heap out-of-bounds read in nvmet_auth_negotiate() nvmet_execute_auth_send()...
    📅 Updated: Sep 18, 2026
  • CVE-2026-90173CVSS 9.8
    In the Linux kernel, the following vulnerability has been resolved: smb: smbdirect: free completion queues with ib_free_cq() smbdirect_connection_destroy_qp()...
    📅 Updated: Sep 18, 2026
  • CVE-2026-90151CVSS 9.8
    In the Linux kernel, the following vulnerability has been resolved: NFSv4: remove callback IDR entry on client allocation...
    📅 Updated: Sep 18, 2026
Powered by CVE Watchtower

Daily CyberSecurity

  • About SecurityOnline.info
  • Advertise with us
  • Announcement
  • Contact
  • Contributor Register
  • Login
  • Disclaimer
  • DCMA
  • Privacy Policy
  • About SecurityOnline.info
  • Advertise on SecurityOnline.info
  • Contact Us

When you purchase through links on our site, we may earn an affiliate commission. Here’s how it works

  • CVE Watchtower
  • CVE Statistics by Vendor 2026
  • Q2 2026 Report
  • Top Exploited CVEs
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube
© 2017 - 2026 Daily CyberSecurity. All Rights Reserved.