Skip to content
October 4, 2026
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube

Daily CyberSecurity

Zero-hour alerts. Unmatched analysis.

Primary Menu
  • Home
  • CVE Data
    • CVE Watchtower
    • Top Exploited CVEs
    • CVE Stats by Vendor
    • Q2 2026 Report
    • CVE Alerts
    • CVE Alert Settings
    • Pricing
  • Cyber Criminals
  • Data Leak
  • Free Tools
    • CVSS 3.1 Calculator
    • Certificate Viewer
    • DNS Lookup
    • Encoder & Hash Generator
    • IP / Subnet Calculator
    • Whois Lookup
  • Linux
  • Malware
  • Vulnerability
  • Submit Press Release
  • Weekly Recap
Light/Dark Button
CryptoLib Vulnerability: Heap Overflow Threatens Space Communications CVE-2025-30216
  • Vulnerability

CryptoLib Vulnerability: Heap Overflow Threatens Space Communications

Do Son March 27, 2025 0
Read More Read more about CryptoLib Vulnerability: Heap Overflow Threatens Space Communications
ReaderUpdate Malware Evolves: macOS Loader Resurfaces with Go-Based Variants GuLoader Malware CloudEye Obfuscation npm, malware Ethereum, npm supply chain OAST techniques StilachiRAT macOS Malware PasivRobber
  • Malware

ReaderUpdate Malware Evolves: macOS Loader Resurfaces with Go-Based Variants

Do Son March 27, 2025 0
Read More Read more about ReaderUpdate Malware Evolves: macOS Loader Resurfaces with Go-Based Variants
BlackLock Ransomware Disrupted: Resecurity’s Infiltration Exposes Operations Blacklock Ransomware
  • Malware

BlackLock Ransomware Disrupted: Resecurity’s Infiltration Exposes Operations

Do Son March 27, 2025 0
Read More Read more about BlackLock Ransomware Disrupted: Resecurity’s Infiltration Exposes Operations
Mass Reboots and Exploit Attempts Plague DrayTek Routers Across the Globe CVE-2021-20123 & CVE-2021-20124 CVE-2020-8515
  • Vulnerability

Mass Reboots and Exploit Attempts Plague DrayTek Routers Across the Globe

Do Son March 27, 2025 0
Read More Read more about Mass Reboots and Exploit Attempts Plague DrayTek Routers Across the Globe
CVE-2024-55963: Appsmith’s Default PostgreSQL Misconfiguration Leads to RCE, PoC Releases CVE-2024-55963 PoC
  • Vulnerability

CVE-2024-55963: Appsmith’s Default PostgreSQL Misconfiguration Leads to RCE, PoC Releases

Do Son March 27, 2025 0
Read More Read more about CVE-2024-55963: Appsmith’s Default PostgreSQL Misconfiguration Leads to RCE, PoC Releases
LockBit 4.0: A Deep Dive into the Evolving Ransomware LockBit 4.0
  • Malware

LockBit 4.0: A Deep Dive into the Evolving Ransomware

Do Son March 27, 2025 0
Read More Read more about LockBit 4.0: A Deep Dive into the Evolving Ransomware
Raspberry Robin: From Copy Shop Worm to Russian GRU Cyber Tool Copy Shop Worm
  • Cyber Security

Raspberry Robin: From Copy Shop Worm to Russian GRU Cyber Tool

Do Son March 27, 2025 0
Read More Read more about Raspberry Robin: From Copy Shop Worm to Russian GRU Cyber Tool
GitLab Alert: Patch Now! XSS & Privilege Escalation Risks CVE-2024-3092 CVE-2025-2255 & CVE-2025-0811
  • Vulnerability

GitLab Alert: Patch Now! XSS & Privilege Escalation Risks

Do Son March 26, 2025 0
Read More Read more about GitLab Alert: Patch Now! XSS & Privilege Escalation Risks
Gemini 2.5 Pro: Google’s Enhanced AI, Advanced Capabilities Gemini 2.5 Pro Gemini video analysis
  • Technology

Gemini 2.5 Pro: Google’s Enhanced AI, Advanced Capabilities

Do Son March 26, 2025 0
Read More Read more about Gemini 2.5 Pro: Google’s Enhanced AI, Advanced Capabilities
Qualcomm vs. Arm: Monopoly Accusations, Global Complaints Filed Qualcomm support updates vs. Arm
  • Technology

Qualcomm vs. Arm: Monopoly Accusations, Global Complaints Filed

Do Son March 26, 2025 0
Read More Read more about Qualcomm vs. Arm: Monopoly Accusations, Global Complaints Filed
R2 Down: Cloudflare’s Object Storage Hit by 1-Hour Outage Cloudflare layoffs 2026 AI bot traffic surge Content Signals Policy, AI Content Usage Cloudflare, Certificate Misissuance Salesforce, supply chain attack DDoS attack, Cloudflare Perplexity AI, Web Scraping Pay Per Crawl Cloudflare abuse R2 outage HTTP Cloudflare Blocking
  • Technology

R2 Down: Cloudflare’s Object Storage Hit by 1-Hour Outage

Do Son March 26, 2025 0
Read More Read more about R2 Down: Cloudflare’s Object Storage Hit by 1-Hour Outage
Apple WWDC 2025: June Dates, iOS 19, AI Siri Expected Apple WWDC 2025
  • Technology

Apple WWDC 2025: June Dates, iOS 19, AI Siri Expected

Do Son March 26, 2025 0
Read More Read more about Apple WWDC 2025: June Dates, iOS 19, AI Siri Expected
Chrome Installer Bug: ARM Version Delivered to x86 Users CVE-2024-4947 PoC Chrome Installer Bug OpenAI Chrome Google antitrust
  • Technology
  • Windows

Chrome Installer Bug: ARM Version Delivered to x86 Users

Do Son March 26, 2025 0
Read More Read more about Chrome Installer Bug: ARM Version Delivered to x86 Users
CVE-2025-30091: Critical RCE Flaw Found in MoxieManager CVE-2025-30091
  • Vulnerability

CVE-2025-30091: Critical RCE Flaw Found in MoxieManager

Do Son March 26, 2025 0
Read More Read more about CVE-2025-30091: Critical RCE Flaw Found in MoxieManager
VMware Tools for Windows Hit by CVE-2025-22230 Auth Bypass Flaw VMware SD-WAN Vulnerabilities CVE-2025-22230
  • Vulnerability

VMware Tools for Windows Hit by CVE-2025-22230 Auth Bypass Flaw

Do Son March 26, 2025 0
Read More Read more about VMware Tools for Windows Hit by CVE-2025-22230 Auth Bypass Flaw
Unmasking Kimsuky’s Latest Tactics: A Deep Dive into Malicious Scripts and Payloads North Korean Laptop Farm DPRK Insider Threat North Korea WMD Cyber Funding, Australia Sanctions Insider threat, North Korean hackers Kimsuky, cyber-espionage NPM Malware, North Korea Cyber-espionage North Korea, Remote IT Job Scam Laptop Farm - DriverEasy - Kimsuky Watering Hole Attack
  • Cyber Security

Unmasking Kimsuky’s Latest Tactics: A Deep Dive into Malicious Scripts and Payloads

Do Son March 26, 2025 0
Read More Read more about Unmasking Kimsuky’s Latest Tactics: A Deep Dive into Malicious Scripts and Payloads
Beware Brand Deals: “Clickflix” Malware Targets YouTube Clickflix Malware
  • Malware

Beware Brand Deals: “Clickflix” Malware Targets YouTube

Do Son March 26, 2025 0
Read More Read more about Beware Brand Deals: “Clickflix” Malware Targets YouTube
SectopRAT: A Deep Dive into a Stealthy .NET-Based Trojan SectopRAT Trojan
  • Malware

SectopRAT: A Deep Dive into a Stealthy .NET-Based Trojan

Do Son March 26, 2025 0
Read More Read more about SectopRAT: A Deep Dive into a Stealthy .NET-Based Trojan
NetApp SnapCenter Users at Risk: CVSS 9.9 Privilege Escalation Alert CVE-2025-26512
  • Vulnerability

NetApp SnapCenter Users at Risk: CVSS 9.9 Privilege Escalation Alert

Do Son March 26, 2025 0
Read More Read more about NetApp SnapCenter Users at Risk: CVSS 9.9 Privilege Escalation Alert
New Android Malware Campaign Uses .NET MAUI to Evade Detection Android CVE-2024-23700 Zero-Interaction Exploit Candiru spyware Android vulnerability, security update
  • Malware

New Android Malware Campaign Uses .NET MAUI to Evade Detection

Do Son March 26, 2025 0
Read More Read more about New Android Malware Campaign Uses .NET MAUI to Evade Detection
Apache VCL Hit by SQL Injection (CVE-2024-53678) and XSS (CVE-2024-53679) Vulnerabilities CVE-2024-53678 & CVE-2024-53679
  • Vulnerability

Apache VCL Hit by SQL Injection (CVE-2024-53678) and XSS (CVE-2024-53679) Vulnerabilities

Do Son March 26, 2025 0
Read More Read more about Apache VCL Hit by SQL Injection (CVE-2024-53678) and XSS (CVE-2024-53679) Vulnerabilities
Cybercriminals Target Gamers with Browser-in-the-Browser Phishing Attacks Browser-in-the-Browser Phishing
  • Cyber Security

Cybercriminals Target Gamers with Browser-in-the-Browser Phishing Attacks

Do Son March 26, 2025 0
Read More Read more about Cybercriminals Target Gamers with Browser-in-the-Browser Phishing Attacks
❮ Prev Page
Next Page ❯

Search

Translation

CVE ALERTS
📈

EPSS Spike Alerts
Catch risk spikes before they make headlines.

🎯

Custom EPSS/CVSS
Set score thresholds to effectively filter noise.

🛡️

Exploit Intel
Real-world exploit signals beyond the KEV catalog.

🐙

GitHub Issues
Auto-create alert tickets without duplication.

📬

Weekly Digest
Clean summaries, eliminating email spam.

🏷️

Watchlist Groups
Tag vulnerabilities by team (Infra/AppSec/SOC).

🔀

Smart Routing
Route chat channels based on severity levels.

🚨

RBP Tracker
Early warning detection and tracking system.

Subscribe – $7/mo or try free for 14 days →

🚨 Active Exploits in the Wild

  • CVE-2026-88779CVSS 8.7
    Vulnerability in NetScaler ADC and NetScaler Gateway. This issue affects ADC: before 14.1-73.41, before 13.1-64.28, before 14.1-73.41 FIPS,...
    Admin intel📅 Updated: Oct 4, 2026
  • CVE-2026-102490CVSS 8.5
    All versions of Zammad including the latest alpha enable the local zammad user to escalate privileges to root.
    Admin intelCISA KEV📅 Added to KEV: Oct 2, 2026📅 Updated: Oct 2, 2026
  • CVE-2026-102489CVSS 8.7
    Zammad versions 6.3.0 to 6.5.4 are vulnerable a session hijack vulnerability that leads to remote code execution as...
    Admin intelCISA KEV📅 Added to KEV: Oct 2, 2026📅 Updated: Oct 2, 2026
  • CVE-2026-100382CVSS 10.0
    Improper Neutralization of Special Elements used in an OS Command (\'OS Command Injection\') vulnerability in Wikimedia Foundation Mediawiki...
    Admin intel📅 Updated: Oct 1, 2026
  • CVE-2026-104286CVSS 9.8
    An improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiMail 8.0.0 through...
    CISA KEV📅 Added to KEV: Oct 1, 2026
  • CVE-2026-76504CVSS 9.8
    A vulnerability in the API session-based authentication management of Cisco Catalyst SD-WAN Manager could allow an unauthenticated, remote...
    Admin intelCISA KEV📅 Added to KEV: Sep 30, 2026📅 Updated: Sep 30, 2026
  • CVE-2026-86950CVSS 8.8
    An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7.1 and...
    Admin intelCISA KEV📅 Added to KEV: Sep 29, 2026📅 Updated: Sep 29, 2026
  • CVE-2026-88772
    Memory overflow vulnerability leading to remote code execution or denial of service.
    Admin intelCISA KEV📅 Added to KEV: Sep 27, 2026📅 Updated: Sep 27, 2026
Powered by CVE Watchtower

Critical Vulnerabilities

  • CVE-2026-105218CVSS 9.1
    gopay before 1.5.119 disables TLS certificate verification in defaultClient() in pkg/xhttp/client.go, allowing man-in-the-middle attackers to impersonate payment provider...
    📅 Updated: Oct 4, 2026
  • CVE-2026-105216CVSS 9.1
    go-micro before 6.0.0 contains an improper certificate validation vulnerability that allows network attackers to impersonate services because the...
    📅 Updated: Oct 4, 2026
  • CVE-2026-105086CVSS 9.3
    WWBN AVideo 12.4 through 29.2.0 contains a stored cross-site scripting vulnerability that allows authenticated uploaders to inject HTML...
    📅 Updated: Oct 4, 2026
  • CVE-2026-105089CVSS 9.3
    WWBN AVideo through 29.2.0 contains a stored cross-site scripting vulnerability that allows users with upload permission to inject...
    📅 Updated: Oct 4, 2026
  • CVE-2026-82042CVSS 9.3
    UTMStack before 11.2.16 contains an authentication bypass vulnerability that allows remote attackers to gain full administrative API access...
    📅 Updated: Oct 4, 2026
  • CVE-2026-105215CVSS 9.3
    ZITADEL before 3.4.14 and 4.x before 4.16.2 contains an authentication bypass in the hosted Login V1 UI because...
    📅 Updated: Oct 4, 2026
  • CVE-2026-105211CVSS 9.2
    ZITADEL before 4.17.1 contains an authentication bypass vulnerability in Login V2 that allows unauthenticated attackers to take over...
    📅 Updated: Oct 4, 2026
  • CVE-2026-105209CVSS 9.3
    ZITADEL 3.x before 3.4.15 and 4.x before 4.17.1 contains an improper authorization vulnerability: when issuing passkey or passwordless...
    📅 Updated: Oct 4, 2026
Powered by CVE Watchtower

Daily CyberSecurity

  • About SecurityOnline.info
  • Advertise with us
  • Announcement
  • Contact
  • Contributor Register
  • Login
  • Disclaimer
  • DCMA
  • Privacy Policy
  • About SecurityOnline.info
  • Advertise on SecurityOnline.info
  • Contact Us

When you purchase through links on our site, we may earn an affiliate commission. Here’s how it works

  • CVE Watchtower
  • CVE Statistics by Vendor 2026
  • Q2 2026 Report
  • Top Exploited CVEs
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube
© 2017 - 2026 Daily CyberSecurity. All Rights Reserved.