Skip to content
October 4, 2026
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube

Daily CyberSecurity

Zero-hour alerts. Unmatched analysis.

Primary Menu
  • Home
  • CVE Data
    • CVE Watchtower
    • Top Exploited CVEs
    • CVE Stats by Vendor
    • Q2 2026 Report
    • CVE Alerts
    • CVE Alert Settings
    • Pricing
  • Cyber Criminals
  • Data Leak
  • Free Tools
    • CVSS 3.1 Calculator
    • Certificate Viewer
    • DNS Lookup
    • Encoder & Hash Generator
    • IP / Subnet Calculator
    • Whois Lookup
  • Linux
  • Malware
  • Vulnerability
  • Submit Press Release
  • Weekly Recap
Light/Dark Button
Cyber Guardians: INE Security Champions Cybersecurity Training During National Physicians Week 2025 Cyberwire_Logo_-_INE_Security_-_1200x720px_1742828372al7h3tGvsc
  • Press Release

Cyber Guardians: INE Security Champions Cybersecurity Training During National Physicians Week 2025

cybernewswire March 24, 2025 0
Read More Read more about Cyber Guardians: INE Security Champions Cybersecurity Training During National Physicians Week 2025
Arsen Introduces AI-Powered Phishing Tests to Improve Social Engineering Resilience Reduced-ConvPhishing_17425660787SwvL3WbiN
  • Press Release

Arsen Introduces AI-Powered Phishing Tests to Improve Social Engineering Resilience

cybernewswire March 24, 2025 0
Read More Read more about Arsen Introduces AI-Powered Phishing Tests to Improve Social Engineering Resilience
FCC Hunts Hidden Chinese Tech: Security Threat Investigation FCC Huawei
  • Technology

FCC Hunts Hidden Chinese Tech: Security Threat Investigation

Do Son March 24, 2025 0
Read More Read more about FCC Hunts Hidden Chinese Tech: Security Threat Investigation
Google’s News Experiment: No Ad Revenue Hit, Legal Battles Emerge Google Self-Preferencing Fine Idealo Antitrust Damages Anthropic, Google TPUs Google DMA Compliance, Search Self-Preferencing Google Play Store Ruling, Epic Games Victory Google fine, ad tech Google lawsuit, privacy violation Gmail security, false alarm Google Play EU regulation Google Security, Phone Number Leak Google 2025 - Google China’s Anti-Monopoly Law Google monopoly, ad tech Pixel 7a battery, battery swelling
  • Technology

Google’s News Experiment: No Ad Revenue Hit, Legal Battles Emerge

Do Son March 24, 2025 0
Read More Read more about Google’s News Experiment: No Ad Revenue Hit, Legal Battles Emerge
OneNote Windows 10: Support Ends October 2025, Migrate Now Windows 10 OneNote app
  • Technology

OneNote Windows 10: Support Ends October 2025, Migrate Now

Do Son March 24, 2025 0
Read More Read more about OneNote Windows 10: Support Ends October 2025, Migrate Now
Fighting AI Crawlers: Cloudflare Unleashes the AI Labyrinth CloudFlare AI Labyrinth
  • Technology

Fighting AI Crawlers: Cloudflare Unleashes the AI Labyrinth

Do Son March 24, 2025 0
Read More Read more about Fighting AI Crawlers: Cloudflare Unleashes the AI Labyrinth
Gmail Search Gets Smart: AI-Powered Results to Find Emails Faster Gmail AI Training Google Privacy Policy Gmail search results
  • Technology

Gmail Search Gets Smart: AI-Powered Results to Find Emails Faster

Do Son March 24, 2025 0
Read More Read more about Gmail Search Gets Smart: AI-Powered Results to Find Emails Faster
Urgent: Patch Your Next.js for Authorization Bypass (CVE-2025-29927) CVE-2024-56332 - CVE-2025-29927 Next.js, Cache Poisoning
  • Vulnerability

Urgent: Patch Your Next.js for Authorization Bypass (CVE-2025-29927)

Do Son March 24, 2025 0
Read More Read more about Urgent: Patch Your Next.js for Authorization Bypass (CVE-2025-29927)
Inside Hunters International Group: How a Retailer Became the Latest Ransomware Victim Attack Flow Diagram
  • Malware

Inside Hunters International Group: How a Retailer Became the Latest Ransomware Victim

Do Son March 24, 2025 0
Read More Read more about Inside Hunters International Group: How a Retailer Became the Latest Ransomware Victim
Critical Vulnerability Discovered in Popular WordPress Security Plugin WP Ghost CVE-2025-26909
  • Vulnerability

Critical Vulnerability Discovered in Popular WordPress Security Plugin WP Ghost

Do Son March 24, 2025 0
Read More Read more about Critical Vulnerability Discovered in Popular WordPress Security Plugin WP Ghost
CVE-2025-29922: Critical Flaw in kcp Lets Attackers Manipulate Any Workspace CVE-2025-29922
  • Vulnerability

CVE-2025-29922: Critical Flaw in kcp Lets Attackers Manipulate Any Workspace

Do Son March 24, 2025 0
Read More Read more about CVE-2025-29922: Critical Flaw in kcp Lets Attackers Manipulate Any Workspace
Unmasking ALTDOS, DESORDEN, GHOSTR, and Omid16B: The Saga of a Cybercriminal Cybercriminal
  • Cyber Security

Unmasking ALTDOS, DESORDEN, GHOSTR, and Omid16B: The Saga of a Cybercriminal

Do Son March 24, 2025 0
Read More Read more about Unmasking ALTDOS, DESORDEN, GHOSTR, and Omid16B: The Saga of a Cybercriminal
Don’t Click! Fake Chat Used in Meta Business Account Phishing Layoff Phishing Scam Remcos RAT Malware Aruba Phishing, Phishing-as-a-Service PyPI, phishing CVE-2024-25608 PyPI Phishing, Credential Theft
  • Cyber Security

Don’t Click! Fake Chat Used in Meta Business Account Phishing

Do Son March 24, 2025 0
Read More Read more about Don’t Click! Fake Chat Used in Meta Business Account Phishing
Critical Remote Code Execution Vulnerability in vLLM via Mooncake Integration vLLM Vulnerability CVE-2026-22778 vLLM Memory Corruption, AI Inference RCE CVE-2025-29783 CVE-2025-32444 vLLM vulnerability vLLM, Remote Code Execution
  • Vulnerability

Critical Remote Code Execution Vulnerability in vLLM via Mooncake Integration

Do Son March 24, 2025 0
Read More Read more about Critical Remote Code Execution Vulnerability in vLLM via Mooncake Integration
AMOS Stealer Reloaded: Inside a Fully Undetected macOS Data Heist Open
  • Malware

AMOS Stealer Reloaded: Inside a Fully Undetected macOS Data Heist

Do Son March 24, 2025 0
Read More Read more about AMOS Stealer Reloaded: Inside a Fully Undetected macOS Data Heist
Nuxt Users Beware: CVE-2025-27415 Opens the Door to Cache Poisoning Attacks CVE-2025-27415
  • Vulnerability

Nuxt Users Beware: CVE-2025-27415 Opens the Door to Cache Poisoning Attacks

Do Son March 24, 2025 0
Read More Read more about Nuxt Users Beware: CVE-2025-27415 Opens the Door to Cache Poisoning Attacks
ABYSSWORKER: The EDR-Killing Driver Lurking in the Shadows Fortinet EMS - CVE-2023-48788 Medusa Ransomware TTPs
  • Malware

ABYSSWORKER: The EDR-Killing Driver Lurking in the Shadows

Do Son March 24, 2025 0
Read More Read more about ABYSSWORKER: The EDR-Killing Driver Lurking in the Shadows
Why Security Simulation Training Is Crucial to Preventing Fraud Attacks fraud
  • Technique

Why Security Simulation Training Is Crucial to Preventing Fraud Attacks

Do Son March 23, 2025 0
Read More Read more about Why Security Simulation Training Is Crucial to Preventing Fraud Attacks
Fake Cloudflare Verification Prompts Deliver LummaStealer Trojan Through Infected WordPress Sites Cloudflare
  • Malware

Fake Cloudflare Verification Prompts Deliver LummaStealer Trojan Through Infected WordPress Sites

Do Son March 23, 2025 0
Read More Read more about Fake Cloudflare Verification Prompts Deliver LummaStealer Trojan Through Infected WordPress Sites
CVE-2025-27888: Apache Druid Flaw Opens Door to SSRF and XSS Risks in Real-Time Analytics Platforms CVE-2025-27888
  • Vulnerability

CVE-2025-27888: Apache Druid Flaw Opens Door to SSRF and XSS Risks in Real-Time Analytics Platforms

Do Son March 23, 2025 0
Read More Read more about CVE-2025-27888: Apache Druid Flaw Opens Door to SSRF and XSS Risks in Real-Time Analytics Platforms
CVE-2025-1758: Critical Buffer Overflow in Kemp LoadMaster Opens Door to Remote Code Execution Sitefinity critical vulnerabilities Sitefinity security update CVE-2024-7763 - CVE-2024-8785 exploit CVE-2025-1758
  • Vulnerability

CVE-2025-1758: Critical Buffer Overflow in Kemp LoadMaster Opens Door to Remote Code Execution

Do Son March 23, 2025 0
Read More Read more about CVE-2025-1758: Critical Buffer Overflow in Kemp LoadMaster Opens Door to Remote Code Execution
Operation Zero Offers Millions for Telegram Zero-Click Exploits Telegram Bot Formatting HTML formatting, Markdown update, bot development Telegram Passkey SMS Login Replacement Telegram Zero-Click Vulnerability
  • Technology
  • Vulnerability

Operation Zero Offers Millions for Telegram Zero-Click Exploits

Do Son March 23, 2025 0
Read More Read more about Operation Zero Offers Millions for Telegram Zero-Click Exploits
❮ Prev Page
Next Page ❯

Search

Translation

CVE ALERTS
📈

EPSS Spike Alerts
Catch risk spikes before they make headlines.

🎯

Custom EPSS/CVSS
Set score thresholds to effectively filter noise.

🛡️

Exploit Intel
Real-world exploit signals beyond the KEV catalog.

🐙

GitHub Issues
Auto-create alert tickets without duplication.

📬

Weekly Digest
Clean summaries, eliminating email spam.

🏷️

Watchlist Groups
Tag vulnerabilities by team (Infra/AppSec/SOC).

🔀

Smart Routing
Route chat channels based on severity levels.

🚨

RBP Tracker
Early warning detection and tracking system.

Subscribe – $7/mo or try free for 14 days →

🚨 Active Exploits in the Wild

  • CVE-2026-88779CVSS 8.7
    Vulnerability in NetScaler ADC and NetScaler Gateway. This issue affects ADC: before 14.1-73.41, before 13.1-64.28, before 14.1-73.41 FIPS,...
    Admin intel📅 Updated: Oct 4, 2026
  • CVE-2026-102490CVSS 8.5
    All versions of Zammad including the latest alpha enable the local zammad user to escalate privileges to root.
    Admin intelCISA KEV📅 Added to KEV: Oct 2, 2026📅 Updated: Oct 2, 2026
  • CVE-2026-102489CVSS 8.7
    Zammad versions 6.3.0 to 6.5.4 are vulnerable a session hijack vulnerability that leads to remote code execution as...
    Admin intelCISA KEV📅 Added to KEV: Oct 2, 2026📅 Updated: Oct 2, 2026
  • CVE-2026-100382CVSS 10.0
    Improper Neutralization of Special Elements used in an OS Command (\'OS Command Injection\') vulnerability in Wikimedia Foundation Mediawiki...
    Admin intel📅 Updated: Oct 1, 2026
  • CVE-2026-104286CVSS 9.8
    An improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiMail 8.0.0 through...
    CISA KEV📅 Added to KEV: Oct 1, 2026
  • CVE-2026-76504CVSS 9.8
    A vulnerability in the API session-based authentication management of Cisco Catalyst SD-WAN Manager could allow an unauthenticated, remote...
    Admin intelCISA KEV📅 Added to KEV: Sep 30, 2026📅 Updated: Sep 30, 2026
  • CVE-2026-86950CVSS 8.8
    An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7.1 and...
    Admin intelCISA KEV📅 Added to KEV: Sep 29, 2026📅 Updated: Sep 29, 2026
  • CVE-2026-88772
    Memory overflow vulnerability leading to remote code execution or denial of service.
    Admin intelCISA KEV📅 Added to KEV: Sep 27, 2026📅 Updated: Sep 27, 2026
Powered by CVE Watchtower

Critical Vulnerabilities

  • CVE-2026-105218CVSS 9.1
    gopay before 1.5.119 disables TLS certificate verification in defaultClient() in pkg/xhttp/client.go, allowing man-in-the-middle attackers to impersonate payment provider...
    📅 Updated: Oct 4, 2026
  • CVE-2026-105216CVSS 9.1
    go-micro before 6.0.0 contains an improper certificate validation vulnerability that allows network attackers to impersonate services because the...
    📅 Updated: Oct 4, 2026
  • CVE-2026-105086CVSS 9.3
    WWBN AVideo 12.4 through 29.2.0 contains a stored cross-site scripting vulnerability that allows authenticated uploaders to inject HTML...
    📅 Updated: Oct 4, 2026
  • CVE-2026-105089CVSS 9.3
    WWBN AVideo through 29.2.0 contains a stored cross-site scripting vulnerability that allows users with upload permission to inject...
    📅 Updated: Oct 4, 2026
  • CVE-2026-82042CVSS 9.3
    UTMStack before 11.2.16 contains an authentication bypass vulnerability that allows remote attackers to gain full administrative API access...
    📅 Updated: Oct 4, 2026
  • CVE-2026-105215CVSS 9.3
    ZITADEL before 3.4.14 and 4.x before 4.16.2 contains an authentication bypass in the hosted Login V1 UI because...
    📅 Updated: Oct 4, 2026
  • CVE-2026-105211CVSS 9.2
    ZITADEL before 4.17.1 contains an authentication bypass vulnerability in Login V2 that allows unauthenticated attackers to take over...
    📅 Updated: Oct 4, 2026
  • CVE-2026-105209CVSS 9.3
    ZITADEL 3.x before 3.4.15 and 4.x before 4.17.1 contains an improper authorization vulnerability: when issuing passkey or passwordless...
    📅 Updated: Oct 4, 2026
Powered by CVE Watchtower

Daily CyberSecurity

  • About SecurityOnline.info
  • Advertise with us
  • Announcement
  • Contact
  • Contributor Register
  • Login
  • Disclaimer
  • DCMA
  • Privacy Policy
  • About SecurityOnline.info
  • Advertise on SecurityOnline.info
  • Contact Us

When you purchase through links on our site, we may earn an affiliate commission. Here’s how it works

  • CVE Watchtower
  • CVE Statistics by Vendor 2026
  • Q2 2026 Report
  • Top Exploited CVEs
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube
© 2017 - 2026 Daily CyberSecurity. All Rights Reserved.