Skip to content
October 4, 2026
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube

Daily CyberSecurity

Zero-hour alerts. Unmatched analysis.

Primary Menu
  • Home
  • CVE Data
    • CVE Watchtower
    • Top Exploited CVEs
    • CVE Stats by Vendor
    • Q2 2026 Report
    • CVE Alerts
    • CVE Alert Settings
    • Pricing
  • Cyber Criminals
  • Data Leak
  • Free Tools
    • CVSS 3.1 Calculator
    • Certificate Viewer
    • DNS Lookup
    • Encoder & Hash Generator
    • IP / Subnet Calculator
    • Whois Lookup
  • Linux
  • Malware
  • Vulnerability
  • Submit Press Release
  • Weekly Recap
Light/Dark Button
VMware Addresses Local Privilege Escalation Vulnerability (CVE-2025-22231) VMware Fusion and Workstation Now Free CVE-2025-22231
  • Vulnerability

VMware Addresses Local Privilege Escalation Vulnerability (CVE-2025-22231)

Do Son April 1, 2025 0
Read More Read more about VMware Addresses Local Privilege Escalation Vulnerability (CVE-2025-22231)
Windows 11 OOBE: Registry Hack Bypasses Microsoft Account bypass Windows OOBE
  • Technology
  • Windows

Windows 11 OOBE: Registry Hack Bypasses Microsoft Account

Do Son April 1, 2025 0
Read More Read more about Windows 11 OOBE: Registry Hack Bypasses Microsoft Account
Inside Claude’s Mind: Anthropic Reveals AI Reasoning Secrets Anthropic Vercept acquisition Claude AI model Anthropic ad-free Claude
  • Technology

Inside Claude’s Mind: Anthropic Reveals AI Reasoning Secrets

Do Son April 1, 2025 0
Read More Read more about Inside Claude’s Mind: Anthropic Reveals AI Reasoning Secrets
Nadella: Microsoft’s Own AI Models to Fill Gaps Microsoft Developer Account Suspension Microsoft Web Activation Portal Driver Signing Account Suspension Windows 11 Smart App Control Windows 11 SE end of support, Microsoft education hardware pivot Microsoft Product Activation Portal 2025, Windows telephone activation discontinued Windows Update Naming, Microsoft Update Microsoft earnings, OpenAI valuation VBScript deprecation Microsoft Pakistan, Office Closure Microsoft job cuts Microsoft Own AI Models
  • Technology

Nadella: Microsoft’s Own AI Models to Fill Gaps

Do Son April 1, 2025 0
Read More Read more about Nadella: Microsoft’s Own AI Models to Fill Gaps
Pro vs. Free: Gemini 2.5’s Tiered AI Power Gemini Code Assist Android free electrician training, AI energy demand
  • Technology

Pro vs. Free: Gemini 2.5’s Tiered AI Power

Do Son April 1, 2025 0
Read More Read more about Pro vs. Free: Gemini 2.5’s Tiered AI Power
CVE-2025-27095: Token Theft Flaw in JumpServer Exposes Kubernetes Clusters to Unauthorized Access CVE-2025-27095
  • Vulnerability

CVE-2025-27095: Token Theft Flaw in JumpServer Exposes Kubernetes Clusters to Unauthorized Access

Do Son April 1, 2025 0
Read More Read more about CVE-2025-27095: Token Theft Flaw in JumpServer Exposes Kubernetes Clusters to Unauthorized Access
Apple Backports Fixes for Three Actively Exploited Zero-Days Targeting Older Devices Apple Foldable, iPhone Fold WorkflowKit, CVE-2024-27821 Zero-Days
  • Vulnerability

Apple Backports Fixes for Three Actively Exploited Zero-Days Targeting Older Devices

Do Son April 1, 2025 0
Read More Read more about Apple Backports Fixes for Three Actively Exploited Zero-Days Targeting Older Devices
CISA Warns of Active Exploitation of Cisco Smart Licensing Utility Flaw Cisco CCX RCE and Java RMI Flaw CVE-2024-20458 - CVE-2025-20111 Cisco Smart Licensing Utility Flaw
  • Vulnerability

CISA Warns of Active Exploitation of Cisco Smart Licensing Utility Flaw

Do Son April 1, 2025 0
Read More Read more about CISA Warns of Active Exploitation of Cisco Smart Licensing Utility Flaw
Earth Alux APT Group: Unveiling Its Espionage Toolkit Earth Alux APT
  • Cyber Security

Earth Alux APT Group: Unveiling Its Espionage Toolkit

Do Son April 1, 2025 0
Read More Read more about Earth Alux APT Group: Unveiling Its Espionage Toolkit
Browser Cache Smuggling 2.0: How Attackers Weaponize the Web to Deliver Stealthy Malware call-cal
  • Malware

Browser Cache Smuggling 2.0: How Attackers Weaponize the Web to Deliver Stealthy Malware

Do Son April 1, 2025 0
Read More Read more about Browser Cache Smuggling 2.0: How Attackers Weaponize the Web to Deliver Stealthy Malware
Morphing Meerkat’s Phishing Tactics: Abusing DNS MX Records Morphing Meerkat attack chain
  • Cyber Security

Morphing Meerkat’s Phishing Tactics: Abusing DNS MX Records

Do Son April 1, 2025 0
Read More Read more about Morphing Meerkat’s Phishing Tactics: Abusing DNS MX Records
CVE-2025-1449 (CVSS 9.1): Vulnerability in Verve Asset Manager Allows Admin Shell Access Rockwell Automation ThinManager ThinServer CVE-2024-7988 CVE-2025-1449
  • Vulnerability

CVE-2025-1449 (CVSS 9.1): Vulnerability in Verve Asset Manager Allows Admin Shell Access

Do Son April 1, 2025 0
Read More Read more about CVE-2025-1449 (CVSS 9.1): Vulnerability in Verve Asset Manager Allows Admin Shell Access
KoiLoader Reloaded: New Variant Uses LNK Abuse, Script Chains, and PowerShell to Deliver Stealer Payload KoiLoader - KoiStealer
  • Malware

KoiLoader Reloaded: New Variant Uses LNK Abuse, Script Chains, and PowerShell to Deliver Stealer Payload

Do Son April 1, 2025 0
Read More Read more about KoiLoader Reloaded: New Variant Uses LNK Abuse, Script Chains, and PowerShell to Deliver Stealer Payload
KNIME Business Hub Hit by Critical Bugs, Including Hard-Coded Password and XSS Flaws KNIME Business Hub vulnerability
  • Vulnerability

KNIME Business Hub Hit by Critical Bugs, Including Hard-Coded Password and XSS Flaws

Do Son April 1, 2025 0
Read More Read more about KNIME Business Hub Hit by Critical Bugs, Including Hard-Coded Password and XSS Flaws
Konni RAT Resurfaces: North Korean Espionage Malware Evolves with Stealth and Persistence North Korean Laptop Farm DPRK Insider Threat North Korea WMD Cyber Funding, Australia Sanctions Insider threat, North Korean hackers Kimsuky, cyber-espionage NPM Malware, North Korea Cyber-espionage North Korea, Remote IT Job Scam Laptop Farm - DriverEasy - Kimsuky Watering Hole Attack
  • Malware

Konni RAT Resurfaces: North Korean Espionage Malware Evolves with Stealth and Persistence

Do Son April 1, 2025 0
Read More Read more about Konni RAT Resurfaces: North Korean Espionage Malware Evolves with Stealth and Persistence
Bulletproof Hosting Fuels Russia-Linked Intrusion Sets’ Global Cyber Campaign UAC-0006 Espionage
  • Cyber Security

Bulletproof Hosting Fuels Russia-Linked Intrusion Sets’ Global Cyber Campaign

Do Son April 1, 2025 0
Read More Read more about Bulletproof Hosting Fuels Russia-Linked Intrusion Sets’ Global Cyber Campaign
Android Under Attack: Crocodilus Trojan Captures OTPs from Google Authenticator Crocodilus malware
  • Malware

Android Under Attack: Crocodilus Trojan Captures OTPs from Google Authenticator

Do Son April 1, 2025 0
Read More Read more about Android Under Attack: Crocodilus Trojan Captures OTPs from Google Authenticator
OKALIO Mining :Meme Coin Mania Fuels a New Wave of Profitability for Crypto Miners Strategic Bitcoin Reserve
  • Technique

OKALIO Mining :Meme Coin Mania Fuels a New Wave of Profitability for Crypto Miners

Do Son March 31, 2025 0
Read More Read more about OKALIO Mining :Meme Coin Mania Fuels a New Wave of Profitability for Crypto Miners
Massive X (Twitter) Data Leak Exposes Over 200 Million User Records X Data Leak
  • Data Leak

Massive X (Twitter) Data Leak Exposes Over 200 Million User Records

Do Son March 31, 2025 0
Read More Read more about Massive X (Twitter) Data Leak Exposes Over 200 Million User Records
Canon Fixes Critical Printer Driver Flaw: CVE-2025-1268 Alert CVE-2024-47406 CVE-2025-1268 Canon Printer Vulnerability CVE-2025-14231
  • Vulnerability

Canon Fixes Critical Printer Driver Flaw: CVE-2025-1268 Alert

Do Son March 31, 2025 0
Read More Read more about Canon Fixes Critical Printer Driver Flaw: CVE-2025-1268 Alert
Fake Zoom, Real Ransom: Nine-Day Malware Intrusion Ends with BlackSuit Ransomware Blast INC Ransom Pacific Cyber Threats OysterLoader Malware Rhysida Ransomware Black Basta Ransomware BYOVD Technique Velociraptor Abuse, Storm-2603 Ransomware Crypto24, Ransomware Ransomware Payments, UK Legislation ZACROS data breach
  • Malware

Fake Zoom, Real Ransom: Nine-Day Malware Intrusion Ends with BlackSuit Ransomware Blast

Do Son March 31, 2025 0
Read More Read more about Fake Zoom, Real Ransom: Nine-Day Malware Intrusion Ends with BlackSuit Ransomware Blast
CrushFTP Hacked: Exploit CVE-2025-2825 with PoC and Nuclei Template critical-temaple
  • Vulnerability

CrushFTP Hacked: Exploit CVE-2025-2825 with PoC and Nuclei Template

Do Son March 31, 2025 0
Read More Read more about CrushFTP Hacked: Exploit CVE-2025-2825 with PoC and Nuclei Template
❮ Prev Page
Next Page ❯

Search

Translation

CVE ALERTS
📈

EPSS Spike Alerts
Catch risk spikes before they make headlines.

🎯

Custom EPSS/CVSS
Set score thresholds to effectively filter noise.

🛡️

Exploit Intel
Real-world exploit signals beyond the KEV catalog.

🐙

GitHub Issues
Auto-create alert tickets without duplication.

📬

Weekly Digest
Clean summaries, eliminating email spam.

🏷️

Watchlist Groups
Tag vulnerabilities by team (Infra/AppSec/SOC).

🔀

Smart Routing
Route chat channels based on severity levels.

🚨

RBP Tracker
Early warning detection and tracking system.

Subscribe – $7/mo or try free for 14 days →

🚨 Active Exploits in the Wild

  • CVE-2026-88779CVSS 8.7
    Vulnerability in NetScaler ADC and NetScaler Gateway. This issue affects ADC: before 14.1-73.41, before 13.1-64.28, before 14.1-73.41 FIPS,...
    Admin intel📅 Updated: Oct 4, 2026
  • CVE-2026-102490CVSS 8.5
    All versions of Zammad including the latest alpha enable the local zammad user to escalate privileges to root.
    Admin intelCISA KEV📅 Added to KEV: Oct 2, 2026📅 Updated: Oct 2, 2026
  • CVE-2026-102489CVSS 8.7
    Zammad versions 6.3.0 to 6.5.4 are vulnerable a session hijack vulnerability that leads to remote code execution as...
    Admin intelCISA KEV📅 Added to KEV: Oct 2, 2026📅 Updated: Oct 2, 2026
  • CVE-2026-100382CVSS 10.0
    Improper Neutralization of Special Elements used in an OS Command (\'OS Command Injection\') vulnerability in Wikimedia Foundation Mediawiki...
    Admin intel📅 Updated: Oct 1, 2026
  • CVE-2026-104286CVSS 9.8
    An improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiMail 8.0.0 through...
    CISA KEV📅 Added to KEV: Oct 1, 2026
  • CVE-2026-76504CVSS 9.8
    A vulnerability in the API session-based authentication management of Cisco Catalyst SD-WAN Manager could allow an unauthenticated, remote...
    Admin intelCISA KEV📅 Added to KEV: Sep 30, 2026📅 Updated: Sep 30, 2026
  • CVE-2026-86950CVSS 8.8
    An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7.1 and...
    Admin intelCISA KEV📅 Added to KEV: Sep 29, 2026📅 Updated: Sep 29, 2026
  • CVE-2026-88772
    Memory overflow vulnerability leading to remote code execution or denial of service.
    Admin intelCISA KEV📅 Added to KEV: Sep 27, 2026📅 Updated: Sep 27, 2026
Powered by CVE Watchtower

Critical Vulnerabilities

  • CVE-2026-105086CVSS 9.3
    WWBN AVideo 12.4 through 29.2.0 contains a stored cross-site scripting vulnerability that allows authenticated uploaders to inject HTML...
    📅 Updated: Oct 4, 2026
  • CVE-2026-105089CVSS 9.3
    WWBN AVideo through 29.2.0 contains a stored cross-site scripting vulnerability that allows users with upload permission to inject...
    📅 Updated: Oct 4, 2026
  • CVE-2026-82042CVSS 9.3
    UTMStack before 11.2.16 contains an authentication bypass vulnerability that allows remote attackers to gain full administrative API access...
    📅 Updated: Oct 4, 2026
  • CVE-2026-105215CVSS 9.3
    ZITADEL before 3.4.14 and 4.x before 4.16.2 contains an authentication bypass in the hosted Login V1 UI because...
    📅 Updated: Oct 4, 2026
  • CVE-2026-105211CVSS 9.2
    ZITADEL before 4.17.1 contains an authentication bypass vulnerability in Login V2 that allows unauthenticated attackers to take over...
    📅 Updated: Oct 4, 2026
  • CVE-2026-105209CVSS 9.3
    ZITADEL 3.x before 3.4.15 and 4.x before 4.17.1 contains an improper authorization vulnerability: when issuing passkey or passwordless...
    📅 Updated: Oct 4, 2026
  • CVE-2026-105207CVSS 9.3
    ZITADEL 3.0.0 through 3.4.15 and 4.0.0 before 4.17.3 creates links between user accounts and external identity providers without...
    📅 Updated: Oct 4, 2026
  • CVE-2026-103355CVSS 9.3
    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Unlimited Elements Unlimited Elements...
    📅 Updated: Oct 4, 2026
Powered by CVE Watchtower

Daily CyberSecurity

  • About SecurityOnline.info
  • Advertise with us
  • Announcement
  • Contact
  • Contributor Register
  • Login
  • Disclaimer
  • DCMA
  • Privacy Policy
  • About SecurityOnline.info
  • Advertise on SecurityOnline.info
  • Contact Us

When you purchase through links on our site, we may earn an affiliate commission. Here’s how it works

  • CVE Watchtower
  • CVE Statistics by Vendor 2026
  • Q2 2026 Report
  • Top Exploited CVEs
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube
© 2017 - 2026 Daily CyberSecurity. All Rights Reserved.