Skip to content
October 30, 2026
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube

Daily CyberSecurity

Zero-hour alerts. Unmatched analysis.

Primary Menu
  • Home
  • CVE Data
    • CVE Watchtower
    • Top Exploited CVEs
    • CVE Stats by Vendor
    • Q2 2026 Report
    • CVE Alerts
    • CVE Alert Settings
    • Pricing
  • Cyber Criminals
  • Data Leak
  • Free Tools
    • CVSS 3.1 Calculator
    • Certificate Viewer
    • DNS Lookup
    • Encoder & Hash Generator
    • IP / Subnet Calculator
    • Whois Lookup
  • Linux
  • Malware
  • Vulnerability
  • Submit Press Release
  • Weekly Recap
Light/Dark Button
LLM-Generated PhantomRaven Information Stealer Discovered Python NodeStealer malware upgraded with keylogging, clipboard monitoring, screenshot capture, and dual Telegram bot C2 for Facebook data theft
  • Malware

LLM-Generated PhantomRaven Information Stealer Discovered

Do Son September 21, 2026 0

Learn how the LLM-generated PhantomRaven information stealer targets developers. The PhantomRaven information stealer uses npm to hijack CI/CD secrets.

NightEagle APT GhostContainer Attacks Target Russia NightEagle APT GhostContainer attacks on Exchange servers
  • Cybercriminals

NightEagle APT GhostContainer Attacks Target Russia

Do Son September 21, 2026 0

Learn how the NightEagle APT GhostContainer attacks exploit Exchange servers in Russia. Protect your network from the NightEagle APT.

KREMLIN Banking Malware Targets Brazilian Banks Diagram of Brazilian KREMLIN banking malware showing how KREMLIN banking malware installs malicious browser extensions
  • Malware

KREMLIN Banking Malware Targets Brazilian Banks

Do Son September 21, 2026 0

Learn how Brazilian KREMLIN banking malware steals credentials using fake browser extensions. Elastic Security Labs details the KREMLIN banking malware.

Google Undercover Analyst Infiltrates Hacking Gang Google undercover analyst infiltrating the TeamPCP hacking gang network
  • Cybercriminals

Google Undercover Analyst Infiltrates Hacking Gang

Do Son September 21, 2026 0

Discover how a Google undercover analyst successfully infiltrated the TeamPCP hacking gang to prevent massive supply chain attacks and secure corporate data.

OpenAI Data Scraping Sparks Labor Theft Concerns OpenAI data scraping and copyright infringement lawsuit
  • Technology

OpenAI Data Scraping Sparks Labor Theft Concerns

Do Son September 21, 2026 0

Discover how OpenAI data scraping practices raise severe labor theft concerns. Read the latest insights on the ongoing copyright lawsuit and its impact.

FomoPeek App Hides an iOS Kernel Exploit to Steal Crypto FomoPeek iOS app hiding a kernel exploit framework to steal crypto private keys and seed phrases
  • Vulnerability Report

FomoPeek App Hides an iOS Kernel Exploit to Steal Crypto

Do Son September 21, 2026 0

SlowMist warns the FomoPeek malware hides an iOS kernel exploit that steals crypto private keys and seed phrases. Update iOS and move funds now.

Master the Windows 11 Cloud Recovery Feature Windows 11 cloud recovery interface options
  • Windows

Master the Windows 11 Cloud Recovery Feature

Do Son September 21, 2026 0

Discover how the new Windows 11 cloud recovery feature restores your PC without a USB drive. Learn about the latest data wiping options in preview builds.

EU Kids Act Would Ban Social Media for Under-13s EU Kids Act proposal banning under-13s from social media with a privacy-preserving age verification app
  • Technology

EU Kids Act Would Ban Social Media for Under-13s

Do Son September 21, 2026 0

The EU Kids Act would ban under-13s from social media and require age verification via a privacy-preserving open-source app across 27 countries.

Critical IBM Guardium Vulnerabilities Need Immediate Patching Security diagram highlighting critical IBM Guardium vulnerabilities and patch details
  • Vulnerability Report

Critical IBM Guardium Vulnerabilities Need Immediate Patching

Do Son September 21, 2026 0

Multiple critical IBM Guardium vulnerabilities expose servers to remote attacks. Update to fix these IBM Guardium vulnerabilities and secure your data.

Weekly CVE Report: 4,378 New Flaws and 10 Exploited Bugs CVE-2023-50164 AEM Forms
  • Weekly Recap

Weekly CVE Report: 4,378 New Flaws and 10 Exploited Bugs

Do Son September 21, 2026 0

This weekly CVE report tracks 4,378 new flaws and 10 exploited vulnerabilities, checked against the live CISA KEV catalog. See which bugs to patch first.

Critical MongoDB Driver Vulnerabilities Require Immediate Patching Graphic illustrating MongoDB driver vulnerabilities including CVE-2026-93762, CVE-2026-93393, and CVE-2026-93759
  • Vulnerability Report

Critical MongoDB Driver Vulnerabilities Require Immediate Patching

Do Son September 21, 2026 0

Critical MongoDB driver vulnerabilities, including CVE-2026-93762, expose systems to data loss and DoS. Learn about these flaws and patch immediately.

Plugin4Shell: Zero-Click RCE Hits Four AI Coding Agents Plugin4Shell zero-click RCE vulnerability affecting Claude Code, Codex, GitHub Copilot, and Gemini CLI through an AI coding agent SHA-pinning bypass
  • Vulnerability Report

Plugin4Shell: Zero-Click RCE Hits Four AI Coding Agents

Do Son September 21, 2026 0

Plugin4Shell is a zero-click RCE hitting every major AI coding agent via a SHA pinning bypass. Claude Code and Codex are patched; Copilot and Gemini CLI are not.

WordPress Click2Shell Vulnerability Triggers Core RCE, PoC Published Diagram illustrating the WordPress Click2Shell vulnerability in WordPress Core
  • Vulnerability Report

WordPress Click2Shell Vulnerability Triggers Core RCE, PoC Published

Do Son September 21, 2026 0

The WordPress Click2Shell vulnerability enables remote code execution via theme preview injection. Learn how this flaw works and update to version 7.1.1.

Exim 4.100.1 Patches Four Security Vulnerabilities Exim 4.100.1 security update patching four vulnerabilities including Proxy Protocol heap corruption and SMTP smuggling
  • Vulnerability Report

Exim 4.100.1 Patches Four Security Vulnerabilities

Do Son September 21, 2026 0

Exim 4.100.1 patches a serious Exim vulnerability set: Proxy Protocol heap flaws, a GnuTLS use-after-free, and SMTP smuggling (CVE-2026-94054). Upgrade now.

Microsoft Edge IE Mode Retirement in 2029 Microsoft Edge IE mode retirement timeline and enterprise migration guide
  • Technology

Microsoft Edge IE Mode Retirement in 2029

Do Son September 20, 2026 0

Prepare for the Microsoft Edge IE mode retirement by 2029. Learn how to migrate your legacy applications and modernize your enterprise infrastructure today.

Resolve Microsoft Excel Copy Paste Issues Now Microsoft Excel copy paste issue fix and update guide
  • Windows

Resolve Microsoft Excel Copy Paste Issues Now

Do Son September 20, 2026 0

Discover how to fix the latest Microsoft Excel copy paste issue. Update your Office software now to resolve formula errors and restore normal functionality.

Windows Server 2022 Mainstream Support Ends Soon Windows Server 2022 mainstream support lifecycle and upgrade path
  • Windows

Windows Server 2022 Mainstream Support Ends Soon

Do Son September 20, 2026 0

Microsoft ends Windows Server 2022 mainstream support this October. Discover the extended support timeline and learn how to upgrade to version 2025.

Critical IBM MQ Vulnerabilities CVE-2026-10747 Hit 10 CVSS Diagram showing critical IBM MQ vulnerabilities affecting message processing via CVE-2026-10747 and CVE-2026-10858
  • Vulnerability Report

Critical IBM MQ Vulnerabilities CVE-2026-10747 Hit 10 CVSS

Do Son September 20, 2026 0

Critical IBM MQ vulnerabilities allow remote code execution. Learn how CVE-2026-10747 and CVE-2026-10858 hit 10.0 CVSS and require urgent patching.

Microsoft Defender False Alarm: A Complete Resolution micro-defender
  • Windows

Microsoft Defender False Alarm: A Complete Resolution

Do Son September 20, 2026 0

Discover how to permanently resolve the Microsoft Defender false alarm on Windows. Update your system now to stop inaccurate antivirus notifications.

Ubuntu Desktop Stability Under Memory Pressure Ubuntu desktop stability enhancements under memory pressure
  • Linux

Ubuntu Desktop Stability Under Memory Pressure

Do Son September 20, 2026 0

Discover how the upcoming Ubuntu 26.10 release enhances Ubuntu desktop stability under memory pressure by refining OOM killer priorities.

Google Gemini Escapes Sandbox During Security Testing Google Gemini AI logo superimposed over binary code representing a network breach
  • Technology

Google Gemini Escapes Sandbox During Security Testing

Do Son September 20, 2026 0

Discover how Google Gemini AI escaped its sandbox during security testing and hacked three real-world companies. Learn about the implications for AI safety.

Linux Kernel Vulnerabilities Exploited in the Wild Diagram showing exploited Linux kernel vulnerabilities and Linux kernel vulnerabilities architecture
  • Vulnerability Report

Linux Kernel Vulnerabilities Exploited in the Wild

Do Son September 18, 2026 0

CISA warned of exploited Linux kernel vulnerabilities in the KEV catalog. Patch these Linux kernel vulnerabilities to block privilege escalation.

❮ Prev Page
Next Page ❯

Search

CVE ALERTS
📈

EPSS Spike Alerts
Catch risk spikes before they make headlines.

🎯

Custom EPSS/CVSS
Set score thresholds to effectively filter noise.

🛡️

Exploit Intel
Real-world exploit signals beyond the KEV catalog.

🐙

GitHub Issues
Auto-create alert tickets without duplication.

📬

Weekly Digest
Clean summaries, eliminating email spam.

🏷️

Watchlist Groups
Tag vulnerabilities by team (Infra/AppSec/SOC).

🔀

Smart Routing
Route chat channels based on severity levels.

🚨

RBP Tracker
Early warning detection and tracking system.

Subscribe – $7/mo or try free for 14 days →

🚨 Active Exploits in the Wild

  • CVE-2010-20125CVSS 8.7
    DedeCMS before 5.7 contains a file inclusion vulnerability in plus/carbuyaction.php that allows remote unauthenticated attackers to control the...
    Watchtower Verified📅 Updated: Oct 30, 2026
  • CVE-2015-20130CVSS 5.1
    Netsweeper before 4.0.11 and 4.1.0 before 4.1.5 contains a reflected cross-site scripting vulnerability in webadmin/reporter/view_server_log.php that allows remote...
    Watchtower Verified📅 Updated: Oct 30, 2026
  • CVE-2026-118527CVSS 4.3
    Use of predictable filenames in Ivanti Connect Secure before versions 25.1.1.3 and 22.8R2.6 allows a remote authenticated attacker...
    Admin intel📅 Updated: Oct 30, 2026
  • CVE-2026-118539
    This module enables you to sell goods and services to customers through an included shopping cart and checkout...
    Admin intel📅 Updated: Oct 29, 2026
  • CVE-2022-31034CVSS 8.3
    Impact All versions of Argo CD starting with v0.11.0 are vulnerable to a variety of attacks when an...
    Watchtower Verified📅 Updated: Oct 29, 2026
  • CVE-2026-112353CVSS 6.2
    GFI KerioConnect (Kerio Connect) before 10.0.8 Patch 2 contains a stored cross-site scripting vulnerability in the Webmail component...
    Watchtower Verified📅 Updated: Oct 29, 2026
  • CVE-2026-116779CVSS 9.8
    Summary `sofia_presence_handle_sip_i_message()` splits the To user of an inbound SIP MESSAGE on `+` and treats the left half...
    Admin intel📅 Updated: Oct 29, 2026
  • CVE-2026-97229CVSS 10.0
    GitLab has remediated an issue that, under certain conditions, could have allowed an unauthenticated user to execute arbitrary...
    CISA KEV📅 Added to KEV: Oct 29, 2026
Powered by CVE Watchtower

Critical Vulnerabilities

  • CVE-2026-118333CVSS 9.3
    Missing authorization in Video in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to bypass web origin...
    📅 Updated: Oct 30, 2026
  • CVE-2026-118337CVSS 9.3
    Improper access control in Forms in Google Chrome prior to 156.0.8078.73 allowed a remote attacker to bypass web...
    📅 Updated: Oct 30, 2026
  • CVE-2026-104339CVSS 9.8
    IBM Langflow OSS 1.0.0 through 1.12.3 could allow a remote attacker to execute arbitrary code due to improper...
    📅 Updated: Oct 30, 2026
  • CVE-2026-107327CVSS 9.9
    IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote authenticated attacker to execute arbitrary code due to...
    📅 Updated: Oct 30, 2026
  • CVE-2026-107328CVSS 9.9
    IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote authenticated attacker to execute arbitrary code due to...
    📅 Updated: Oct 30, 2026
  • CVE-2026-107329CVSS 9.9
    IBM Langflow OSS 1.0.0 through 1.12.4 could allow a remote authenticated attacker to execute arbitrary code due to...
    📅 Updated: Oct 30, 2026
  • CVE-2026-110186CVSS 9.8
    IBM Langflow OSS 1.0.0 through 1.12.8 could allow a remote attacker to execute arbitrary code due to improper...
    📅 Updated: Oct 30, 2026
  • CVE-2026-93680CVSS 9.8
    IBM Langflow OSS 1.0.0 through 1.12.8 could allow a remote attacker to bypass security restrictions due to improper...
    📅 Updated: Oct 30, 2026
Powered by CVE Watchtower

Daily CyberSecurity

  • About SecurityOnline.info
  • Advertise with us
  • Announcement
  • Contact
  • Contributor Register
  • Login
  • Disclaimer
  • DCMA
  • Privacy Policy
  • About SecurityOnline.info
  • Advertise on SecurityOnline.info
  • Contact Us

When you purchase through links on our site, we may earn an affiliate commission. Here’s how it works

  • CVE Watchtower
  • CVE Statistics by Vendor 2026
  • Q3 2026 Report
  • Top Exploited CVEs
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube
© 2017 - 2026 Daily CyberSecurity. All Rights Reserved.