Skip to content
October 4, 2026
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube

Daily CyberSecurity

Zero-hour alerts. Unmatched analysis.

Primary Menu
  • Home
  • CVE Data
    • CVE Watchtower
    • Top Exploited CVEs
    • CVE Stats by Vendor
    • Q2 2026 Report
    • CVE Alerts
    • CVE Alert Settings
    • Pricing
  • Cyber Criminals
  • Data Leak
  • Free Tools
    • CVSS 3.1 Calculator
    • Certificate Viewer
    • DNS Lookup
    • Encoder & Hash Generator
    • IP / Subnet Calculator
    • Whois Lookup
  • Linux
  • Malware
  • Vulnerability
  • Submit Press Release
  • Weekly Recap
Light/Dark Button
Microsoft Unleashes AI Agents to Supercharge Cybersecurity Defenses Microsoft Security Copilot agents
  • Technology

Microsoft Unleashes AI Agents to Supercharge Cybersecurity Defenses

Do Son March 26, 2025 0
Read More Read more about Microsoft Unleashes AI Agents to Supercharge Cybersecurity Defenses
CVE-2025-2783: Chrome Zero-Day Exploited in State-Sponsored Espionage Campaign CVE-2025-2783 - Operation ForumTroll
  • Cyber Security
  • Vulnerability

CVE-2025-2783: Chrome Zero-Day Exploited in State-Sponsored Espionage Campaign

Do Son March 25, 2025 0
Read More Read more about CVE-2025-2783: Chrome Zero-Day Exploited in State-Sponsored Espionage Campaign
IDT Corporation Partners with AccuKnox for Zero Trust Runtime IoT/Edge Security IDT_press_release_1200x720_1742834846eJTdmHpZMK
  • Press Release

IDT Corporation Partners with AccuKnox for Zero Trust Runtime IoT/Edge Security

cybernewswire March 25, 2025 0
Read More Read more about IDT Corporation Partners with AccuKnox for Zero Trust Runtime IoT/Edge Security
CVE-2025-26633: Water Gamayun Exploits Windows MMC in Active Zero-Day Campaign Cisco SD-WAN Vulnerability CVE-2026-20133 FortiGate Compromise Ivanti EPMM Zero-Day CVE-2026-1281 SmarterMail Vulnerability Storm-2603 WatchGuard Zero-Day, IKEv2 Out-of-Bounds Write Cisco Zero-Day, UAT-9686 Chinese APT FortiWeb RCE Exploitation CVE-2025-58034 VMware Zero-Day, Privilege Escalation Sitecore, remote code execution CVE-2025-53690 Windows CLFS, Privilege Escalation CVE-2024-47575 & CVE-2024-11120 CVE-2025-24983 vulnerability
  • Cyber Security
  • Vulnerability

CVE-2025-26633: Water Gamayun Exploits Windows MMC in Active Zero-Day Campaign

Do Son March 25, 2025 0
Read More Read more about CVE-2025-26633: Water Gamayun Exploits Windows MMC in Active Zero-Day Campaign
CYREBRO Recognized in Gartner Emerging Tech Report for Detection and Response Startups CYREBRO_G-5742-2048x1365-4_1742896933dsHX5Z5MJm
  • Press Release

CYREBRO Recognized in Gartner Emerging Tech Report for Detection and Response Startups

cybernewswire March 25, 2025 0
Read More Read more about CYREBRO Recognized in Gartner Emerging Tech Report for Detection and Response Startups
ARMO Launches First Cloud App Detection and Response to Unify Code to Cloud Runtime Security ARMO_CADR_screenshot_1742822321eLzJ1rpM8o
  • Press Release

ARMO Launches First Cloud App Detection and Response to Unify Code to Cloud Runtime Security

cybernewswire March 25, 2025 0
Read More Read more about ARMO Launches First Cloud App Detection and Response to Unify Code to Cloud Runtime Security
Microsoft Edge for Business Bolsters Security with Enhanced Data Protection for BYOD and AI Data Protection
  • Technology

Microsoft Edge for Business Bolsters Security with Enhanced Data Protection for BYOD and AI

Do Son March 25, 2025 0
Read More Read more about Microsoft Edge for Business Bolsters Security with Enhanced Data Protection for BYOD and AI
Digital Deception: Kubient CEO Sentenced for $1.3 Million Fraud Scheme EU Education Scams, .edu.eu Domain App Store security Refund Schemes - Texas Pharmacist's Fraudulent
  • Cyber Security

Digital Deception: Kubient CEO Sentenced for $1.3 Million Fraud Scheme

Do Son March 25, 2025 0
Read More Read more about Digital Deception: Kubient CEO Sentenced for $1.3 Million Fraud Scheme
DNMiner: New Opportunities for Wealth, Cloud Mining Helps Achieve Financial Goals CVE-2024-55563 - transaction-relay jamming attack
  • Technique

DNMiner: New Opportunities for Wealth, Cloud Mining Helps Achieve Financial Goals

Do Son March 25, 2025 0
Read More Read more about DNMiner: New Opportunities for Wealth, Cloud Mining Helps Achieve Financial Goals
Cloudflare Pulls the Plug on HTTP: API Now HTTPS-Only Cloudflare layoffs 2026 AI bot traffic surge Content Signals Policy, AI Content Usage Cloudflare, Certificate Misissuance Salesforce, supply chain attack DDoS attack, Cloudflare Perplexity AI, Web Scraping Pay Per Crawl Cloudflare abuse R2 outage HTTP Cloudflare Blocking
  • Technology

Cloudflare Pulls the Plug on HTTP: API Now HTTPS-Only

Do Son March 25, 2025 0
Read More Read more about Cloudflare Pulls the Plug on HTTP: API Now HTTPS-Only
Linux Kernel 6.14 Arrives: New Features and Improvements Unveiled Linux Kernel legacy driver removal Linux kernel x86 page fault, interrupt state asymmetry fix Linux ISO, false positive CVE-2023-6200 - Linux Kernel 6.12 LTS 6.14
  • Linux

Linux Kernel 6.14 Arrives: New Features and Improvements Unveiled

Do Son March 25, 2025 0
Read More Read more about Linux Kernel 6.14 Arrives: New Features and Improvements Unveiled
AlexNet Unleashed: Groundbreaking AI Model Now Open Source AlexNet open source
  • Technology

AlexNet Unleashed: Groundbreaking AI Model Now Open Source

Do Son March 25, 2025 0
Read More Read more about AlexNet Unleashed: Groundbreaking AI Model Now Open Source
ShibaCoin Ransom: Microsoft Disables Infected VS Code Extensions ShibaCoin Ransom
  • Malware

ShibaCoin Ransom: Microsoft Disables Infected VS Code Extensions

Do Son March 25, 2025 0
Read More Read more about ShibaCoin Ransom: Microsoft Disables Infected VS Code Extensions
CVE-2025-1974 (CVSS 9.8): Ingress NGINX Flaws Threaten Mass Kubernetes Compromise CVE-2025-1974 IngressNightmare
  • Vulnerability

CVE-2025-1974 (CVSS 9.8): Ingress NGINX Flaws Threaten Mass Kubernetes Compromise

Do Son March 25, 2025 0
Read More Read more about CVE-2025-1974 (CVSS 9.8): Ingress NGINX Flaws Threaten Mass Kubernetes Compromise
China Chopper & INMemory: Weaver Ant’s Arsenal of Advanced Web Shells Mercenary Akula European Financial Targeting AI-Generated Malware React2Shell Exploit UAT-8837 Critical Infrastructure Attack APT36, BOSS Linux BRICKSTORM Malware, China Espionage Curly COMrades, MucorAgent Chinese APT - HTTP Client Tools Shuckworm Cyber Espionage
  • Cyber Security

China Chopper & INMemory: Weaver Ant’s Arsenal of Advanced Web Shells

Do Son March 25, 2025 0
Read More Read more about China Chopper & INMemory: Weaver Ant’s Arsenal of Advanced Web Shells
BreachForums Claims: Millions of Oracle Cloud Records Stolen Oracle Cloud Records Stolen
  • Data Leak
  • Vulnerability

BreachForums Claims: Millions of Oracle Cloud Records Stolen

Do Son March 25, 2025 0
Read More Read more about BreachForums Claims: Millions of Oracle Cloud Records Stolen
CVE-2025-0927: Public Exploit Released for Linux Kernel Privilege Escalation Bug CVE-2025-0927 PoC
  • Linux
  • Vulnerability

CVE-2025-0927: Public Exploit Released for Linux Kernel Privilege Escalation Bug

Do Son March 25, 2025 0
Read More Read more about CVE-2025-0927: Public Exploit Released for Linux Kernel Privilege Escalation Bug
Semrush Impersonation Scam Targets Google Ads Semrush impersonation scam
  • Cyber Security

Semrush Impersonation Scam Targets Google Ads

Do Son March 25, 2025 0
Read More Read more about Semrush Impersonation Scam Targets Google Ads
VanHelsingRaaS: A New Player in the Ransomware Game VanHelsingRaaS
  • Malware

VanHelsingRaaS: A New Player in the Ransomware Game

Do Son March 25, 2025 0
Read More Read more about VanHelsingRaaS: A New Player in the Ransomware Game
Rilide: The Browser Extension Stealing Your Crypto information stealing browser Rilide
  • Malware

Rilide: The Browser Extension Stealing Your Crypto

Do Son March 25, 2025 0
Read More Read more about Rilide: The Browser Extension Stealing Your Crypto
Albabat Ransomware Group Eyes Expansion, Leverages GitHub for Operations AI ransomware, PromptLock Against Ransomware - RECOPE Ransomware Attack
  • Malware

Albabat Ransomware Group Eyes Expansion, Leverages GitHub for Operations

Do Son March 25, 2025 0
Read More Read more about Albabat Ransomware Group Eyes Expansion, Leverages GitHub for Operations
VanHelsing Ransomware Emerges as a Threat to Windows Systems INC Ransom Pacific Cyber Threats OysterLoader Malware Rhysida Ransomware Black Basta Ransomware BYOVD Technique Velociraptor Abuse, Storm-2603 Ransomware Crypto24, Ransomware Ransomware Payments, UK Legislation ZACROS data breach
  • Malware

VanHelsing Ransomware Emerges as a Threat to Windows Systems

Do Son March 25, 2025 0
Read More Read more about VanHelsing Ransomware Emerges as a Threat to Windows Systems
❮ Prev Page
Next Page ❯

Search

Translation

CVE ALERTS
📈

EPSS Spike Alerts
Catch risk spikes before they make headlines.

🎯

Custom EPSS/CVSS
Set score thresholds to effectively filter noise.

🛡️

Exploit Intel
Real-world exploit signals beyond the KEV catalog.

🐙

GitHub Issues
Auto-create alert tickets without duplication.

📬

Weekly Digest
Clean summaries, eliminating email spam.

🏷️

Watchlist Groups
Tag vulnerabilities by team (Infra/AppSec/SOC).

🔀

Smart Routing
Route chat channels based on severity levels.

🚨

RBP Tracker
Early warning detection and tracking system.

Subscribe – $7/mo or try free for 14 days →

🚨 Active Exploits in the Wild

  • CVE-2026-88779CVSS 8.7
    Vulnerability in NetScaler ADC and NetScaler Gateway. This issue affects ADC: before 14.1-73.41, before 13.1-64.28, before 14.1-73.41 FIPS,...
    Admin intel📅 Updated: Oct 4, 2026
  • CVE-2026-102490CVSS 8.5
    All versions of Zammad including the latest alpha enable the local zammad user to escalate privileges to root.
    Admin intelCISA KEV📅 Added to KEV: Oct 2, 2026📅 Updated: Oct 2, 2026
  • CVE-2026-102489CVSS 8.7
    Zammad versions 6.3.0 to 6.5.4 are vulnerable a session hijack vulnerability that leads to remote code execution as...
    Admin intelCISA KEV📅 Added to KEV: Oct 2, 2026📅 Updated: Oct 2, 2026
  • CVE-2026-100382CVSS 10.0
    Improper Neutralization of Special Elements used in an OS Command (\'OS Command Injection\') vulnerability in Wikimedia Foundation Mediawiki...
    Admin intel📅 Updated: Oct 1, 2026
  • CVE-2026-104286CVSS 9.8
    An improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiMail 8.0.0 through...
    CISA KEV📅 Added to KEV: Oct 1, 2026
  • CVE-2026-76504CVSS 9.8
    A vulnerability in the API session-based authentication management of Cisco Catalyst SD-WAN Manager could allow an unauthenticated, remote...
    Admin intelCISA KEV📅 Added to KEV: Sep 30, 2026📅 Updated: Sep 30, 2026
  • CVE-2026-86950CVSS 8.8
    An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7.1 and...
    Admin intelCISA KEV📅 Added to KEV: Sep 29, 2026📅 Updated: Sep 29, 2026
  • CVE-2026-88772
    Memory overflow vulnerability leading to remote code execution or denial of service.
    Admin intelCISA KEV📅 Added to KEV: Sep 27, 2026📅 Updated: Sep 27, 2026
Powered by CVE Watchtower

Critical Vulnerabilities

  • CVE-2026-105218CVSS 9.1
    gopay before 1.5.119 disables TLS certificate verification in defaultClient() in pkg/xhttp/client.go, allowing man-in-the-middle attackers to impersonate payment provider...
    📅 Updated: Oct 4, 2026
  • CVE-2026-105216CVSS 9.1
    go-micro before 6.0.0 contains an improper certificate validation vulnerability that allows network attackers to impersonate services because the...
    📅 Updated: Oct 4, 2026
  • CVE-2026-105086CVSS 9.3
    WWBN AVideo 12.4 through 29.2.0 contains a stored cross-site scripting vulnerability that allows authenticated uploaders to inject HTML...
    📅 Updated: Oct 4, 2026
  • CVE-2026-105089CVSS 9.3
    WWBN AVideo through 29.2.0 contains a stored cross-site scripting vulnerability that allows users with upload permission to inject...
    📅 Updated: Oct 4, 2026
  • CVE-2026-82042CVSS 9.3
    UTMStack before 11.2.16 contains an authentication bypass vulnerability that allows remote attackers to gain full administrative API access...
    📅 Updated: Oct 4, 2026
  • CVE-2026-105215CVSS 9.3
    ZITADEL before 3.4.14 and 4.x before 4.16.2 contains an authentication bypass in the hosted Login V1 UI because...
    📅 Updated: Oct 4, 2026
  • CVE-2026-105211CVSS 9.2
    ZITADEL before 4.17.1 contains an authentication bypass vulnerability in Login V2 that allows unauthenticated attackers to take over...
    📅 Updated: Oct 4, 2026
  • CVE-2026-105209CVSS 9.3
    ZITADEL 3.x before 3.4.15 and 4.x before 4.17.1 contains an improper authorization vulnerability: when issuing passkey or passwordless...
    📅 Updated: Oct 4, 2026
Powered by CVE Watchtower

Daily CyberSecurity

  • About SecurityOnline.info
  • Advertise with us
  • Announcement
  • Contact
  • Contributor Register
  • Login
  • Disclaimer
  • DCMA
  • Privacy Policy
  • About SecurityOnline.info
  • Advertise on SecurityOnline.info
  • Contact Us

When you purchase through links on our site, we may earn an affiliate commission. Here’s how it works

  • CVE Watchtower
  • CVE Statistics by Vendor 2026
  • Q2 2026 Report
  • Top Exploited CVEs
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube
© 2017 - 2026 Daily CyberSecurity. All Rights Reserved.