Skip to content
October 5, 2026
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube

Daily CyberSecurity

Zero-hour alerts. Unmatched analysis.

Primary Menu
  • Home
  • CVE Data
    • CVE Watchtower
    • Top Exploited CVEs
    • CVE Stats by Vendor
    • Q2 2026 Report
    • CVE Alerts
    • CVE Alert Settings
    • Pricing
  • Cyber Criminals
  • Data Leak
  • Free Tools
    • CVSS 3.1 Calculator
    • Certificate Viewer
    • DNS Lookup
    • Encoder & Hash Generator
    • IP / Subnet Calculator
    • Whois Lookup
  • Linux
  • Malware
  • Vulnerability
  • Submit Press Release
  • Weekly Recap
Light/Dark Button
Europol Cracks Down on €6.7M Hearing Aid Fraud Scheme Exploiting French Healthcare Hearing Aid Fraud
  • Cyber Security

Europol Cracks Down on €6.7M Hearing Aid Fraud Scheme Exploiting French Healthcare

Do Son March 22, 2025 0
Read More Read more about Europol Cracks Down on €6.7M Hearing Aid Fraud Scheme Exploiting French Healthcare
RansomHub Deploys Custom Backdoor ‘Betruger’ in Targeted Ransomware Attacks RansomHub ransomware gang - Betruger backdoor
  • Malware

RansomHub Deploys Custom Backdoor ‘Betruger’ in Targeted Ransomware Attacks

Do Son March 22, 2025 0
Read More Read more about RansomHub Deploys Custom Backdoor ‘Betruger’ in Targeted Ransomware Attacks
Critical Security Flaw in ArcGIS Enterprise Exposes Admin Accounts to Remote Takeover Ollama Heap Leak CVE-2026-5757 Anritsu Vulnerability Authentication Bypass Gootloader Malware Malformed ZIP Evasion Blender Malware, StealC V2 Lectora, XSS CVE-2025-9125 HFS RCE, Template Injection Arch Linux Malware, CHAOS RAT CVE-2024-56404 - CVE-2024-39327 CVE-2025-2538
  • Vulnerability

Critical Security Flaw in ArcGIS Enterprise Exposes Admin Accounts to Remote Takeover

Do Son March 22, 2025 0
Read More Read more about Critical Security Flaw in ArcGIS Enterprise Exposes Admin Accounts to Remote Takeover
Dragon RaaS: Pro-Russian Hacktivist Group Walks the Razor’s Edge Between Cybercrime and Propaganda Dragon Team ransom note
  • Malware

Dragon RaaS: Pro-Russian Hacktivist Group Walks the Razor’s Edge Between Cybercrime and Propaganda

Do Son March 22, 2025 0
Read More Read more about Dragon RaaS: Pro-Russian Hacktivist Group Walks the Razor’s Edge Between Cybercrime and Propaganda
CVE-2024-10442: Synology Replication Service Vulnerability Scores Maximum CVSS Rating Synology Chat Server vulnerabilities Synology security update Synology DSM Update NAS Security Vulnerability Synology VPN Update SSL VPN Vulnerability Synology Telnet Flaw DSM Security Update Synology DSM Telnet vulnerability BeeStation Zero-Day, Pwn2Own RCE CVE-2024-11131 & CVE-2024-10442 CVE-2025-2848 Synology, NAS
  • Vulnerability

CVE-2024-10442: Synology Replication Service Vulnerability Scores Maximum CVSS Rating

Do Son March 20, 2025 0
Read More Read more about CVE-2024-10442: Synology Replication Service Vulnerability Scores Maximum CVSS Rating
Spring Security Updates Address Authorization Bypass and Password Length Vulnerabilities CVE-2024-38821 - CVE-2025-22223 and CVE-2025-22228 Spring Framework vulnerability, Spring Security
  • Vulnerability

Spring Security Updates Address Authorization Bypass and Password Length Vulnerabilities

Do Son March 20, 2025 0
Read More Read more about Spring Security Updates Address Authorization Bypass and Password Length Vulnerabilities
Web Shell to Ransomware: New VMware Attack Vector Exposed by Sygnia Weaver E-cology RCE CVE-2026-22679 CVE-2026-20127 Cisco SD-WAN Exploitation AI-Driven Cyberattack ARXON Malware React Server Components Vulnerability CVE-2025-55182 FortiWeb Auth Bypass, Unauthenticated Admin Takeover RayInitiator Bootkit, LINE VIPER CVE-2025-59689 Department of the Treasury cybersecurity - CVE-2025-0108 PoC CVE-2025-31103 Dior Data Breach SK Telecom data breach, long-term intrusion
  • Vulnerability

Web Shell to Ransomware: New VMware Attack Vector Exposed by Sygnia

Do Son March 20, 2025 0
Read More Read more about Web Shell to Ransomware: New VMware Attack Vector Exposed by Sygnia
Critical WordPress Plugin Vulnerability Exposes Over 40,000 Websites to Code Execution Attacks CVE-2025-2505
  • Vulnerability

Critical WordPress Plugin Vulnerability Exposes Over 40,000 Websites to Code Execution Attacks

Do Son March 20, 2025 0
Read More Read more about Critical WordPress Plugin Vulnerability Exposes Over 40,000 Websites to Code Execution Attacks
New “Arcane Stealer” Malware Targets Gamers Through YouTube Cheats Arcane Stealer
  • Malware

New “Arcane Stealer” Malware Targets Gamers Through YouTube Cheats

Do Son March 20, 2025 0
Read More Read more about New “Arcane Stealer” Malware Targets Gamers Through YouTube Cheats
Rust Beacon Deploys Cobalt Strike in South Korean Cyber Intrusion Campaign
  • Malware

Rust Beacon Deploys Cobalt Strike in South Korean Cyber Intrusion Campaign

Do Son March 20, 2025 0
Read More Read more about Rust Beacon Deploys Cobalt Strike in South Korean Cyber Intrusion Campaign
IBM AIX Security Breach: CVE-2024-56346 (CVSS 10) & CVE-2024-56347 Explained IBM API Connect, CVE-2025-13915 IBM Privilege Escalation, CVE-2025-36356 IBM Power Systems - CVE-2024-45656 CVE-2024-49814 and CVE-2024-51450 CVE-2024-56346 and CVE-2024-56347 CVE-2025-1302
  • Vulnerability

IBM AIX Security Breach: CVE-2024-56346 (CVSS 10) & CVE-2024-56347 Explained

Do Son March 20, 2025 0
Read More Read more about IBM AIX Security Breach: CVE-2024-56346 (CVSS 10) & CVE-2024-56347 Explained
VenomRAT Malware Delivered via Virtual Hard Disk Images VenomRAT Malware
  • Malware

VenomRAT Malware Delivered via Virtual Hard Disk Images

Do Son March 20, 2025 0
Read More Read more about VenomRAT Malware Delivered via Virtual Hard Disk Images
CVE-2024-23943 (CVSS 9.1): Critical Flaw Found in Industrial Communication Devices Energy Meter RCE CVE-2025-41709 ICS Exposure, Power Grid Security CVE-2025-1393 & CVE-2024-23943
  • Vulnerability

CVE-2024-23943 (CVSS 9.1): Critical Flaw Found in Industrial Communication Devices

Do Son March 20, 2025 0
Read More Read more about CVE-2024-23943 (CVSS 9.1): Critical Flaw Found in Industrial Communication Devices
PoC Released: Windows Explorer CVE-2025-24071 Vulnerability Exposes NTLM Hashes CVE-2025-24071 PoC
  • Vulnerability

PoC Released: Windows Explorer CVE-2025-24071 Vulnerability Exposes NTLM Hashes

Do Son March 19, 2025 0
Read More Read more about PoC Released: Windows Explorer CVE-2025-24071 Vulnerability Exposes NTLM Hashes
CVE-2025-23120 (CVSS 9.9): Critical RCE Vulnerability Discovered in Veeam Backup & Replication CVE-2024-29855 CVE-2025-23120
  • Vulnerability

CVE-2025-23120 (CVSS 9.9): Critical RCE Vulnerability Discovered in Veeam Backup & Replication

Do Son March 19, 2025 0
Read More Read more about CVE-2025-23120 (CVSS 9.9): Critical RCE Vulnerability Discovered in Veeam Backup & Replication
ClearFake Malware Variant Exploits Web3 in New Attacks Mercenary Akula European Financial Targeting AI-Generated Malware React2Shell Exploit UAT-8837 Critical Infrastructure Attack APT36, BOSS Linux BRICKSTORM Malware, China Espionage Curly COMrades, MucorAgent Chinese APT - HTTP Client Tools Shuckworm Cyber Espionage
  • Malware

ClearFake Malware Variant Exploits Web3 in New Attacks

Do Son March 19, 2025 0
Read More Read more about ClearFake Malware Variant Exploits Web3 in New Attacks
CISA Warns of Three Actively Exploited Security Vulnerabilities in IoT, Backup, and Enterprise Systems CVE-2024-48248
  • Vulnerability

CISA Warns of Three Actively Exploited Security Vulnerabilities in IoT, Backup, and Enterprise Systems

Do Son March 19, 2025 0
Read More Read more about CISA Warns of Three Actively Exploited Security Vulnerabilities in IoT, Backup, and Enterprise Systems
Microsoft Uncovers Sophisticated StilachiRAT Malware GuLoader Malware CloudEye Obfuscation npm, malware Ethereum, npm supply chain OAST techniques StilachiRAT macOS Malware PasivRobber
  • Malware

Microsoft Uncovers Sophisticated StilachiRAT Malware

Do Son March 19, 2025 0
Read More Read more about Microsoft Uncovers Sophisticated StilachiRAT Malware
Multiple Vulnerabilities Patched in Dell SmartFabric OS10 Software Dell DD OS Vulnerability, Authentication Bypass Dell SmartFabric OS10 Vulnerabilities
  • Vulnerability

Multiple Vulnerabilities Patched in Dell SmartFabric OS10 Software

Do Son March 19, 2025 0
Read More Read more about Multiple Vulnerabilities Patched in Dell SmartFabric OS10 Software
JPHP Interpreter Used to Distribute Downloader Malware JPHP Malware
  • Malware

JPHP Interpreter Used to Distribute Downloader Malware

Do Son March 19, 2025 0
Read More Read more about JPHP Interpreter Used to Distribute Downloader Malware
Steganographic Campaign Distributes Multiple Malware Variants, Including Remcos and AsyncRAT Steganographic Campaign
  • Malware

Steganographic Campaign Distributes Multiple Malware Variants, Including Remcos and AsyncRAT

Do Son March 19, 2025 0
Read More Read more about Steganographic Campaign Distributes Multiple Malware Variants, Including Remcos and AsyncRAT
Web3 Laundering Fears: OKX Suspends Platform Amidst Scrutiny OKX Suspends Fined US market
  • Cyber Security

Web3 Laundering Fears: OKX Suspends Platform Amidst Scrutiny

Do Son March 19, 2025 0
Read More Read more about Web3 Laundering Fears: OKX Suspends Platform Amidst Scrutiny
❮ Prev Page
Next Page ❯

Search

Translation

CVE ALERTS
📈

EPSS Spike Alerts
Catch risk spikes before they make headlines.

🎯

Custom EPSS/CVSS
Set score thresholds to effectively filter noise.

🛡️

Exploit Intel
Real-world exploit signals beyond the KEV catalog.

🐙

GitHub Issues
Auto-create alert tickets without duplication.

📬

Weekly Digest
Clean summaries, eliminating email spam.

🏷️

Watchlist Groups
Tag vulnerabilities by team (Infra/AppSec/SOC).

🔀

Smart Routing
Route chat channels based on severity levels.

🚨

RBP Tracker
Early warning detection and tracking system.

Subscribe – $7/mo or try free for 14 days →

🚨 Active Exploits in the Wild

  • CVE-2026-88779CVSS 8.7
    Vulnerability in NetScaler ADC and NetScaler Gateway. This issue affects ADC: before 14.1-73.41, before 13.1-64.28, before 14.1-73.41 FIPS,...
    Admin intel📅 Updated: Oct 4, 2026
  • CVE-2026-102490CVSS 8.5
    All versions of Zammad including the latest alpha enable the local zammad user to escalate privileges to root.
    Admin intelCISA KEV📅 Added to KEV: Oct 2, 2026📅 Updated: Oct 2, 2026
  • CVE-2026-102489CVSS 8.7
    Zammad versions 6.3.0 to 6.5.4 are vulnerable a session hijack vulnerability that leads to remote code execution as...
    Admin intelCISA KEV📅 Added to KEV: Oct 2, 2026📅 Updated: Oct 2, 2026
  • CVE-2026-100382CVSS 10.0
    Improper Neutralization of Special Elements used in an OS Command (\'OS Command Injection\') vulnerability in Wikimedia Foundation Mediawiki...
    Admin intel📅 Updated: Oct 1, 2026
  • CVE-2026-104286CVSS 9.8
    An improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiMail 8.0.0 through...
    CISA KEV📅 Added to KEV: Oct 1, 2026
  • CVE-2026-76504CVSS 9.8
    A vulnerability in the API session-based authentication management of Cisco Catalyst SD-WAN Manager could allow an unauthenticated, remote...
    Admin intelCISA KEV📅 Added to KEV: Sep 30, 2026📅 Updated: Sep 30, 2026
  • CVE-2026-86950CVSS 8.8
    An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7.1 and...
    Admin intelCISA KEV📅 Added to KEV: Sep 29, 2026📅 Updated: Sep 29, 2026
  • CVE-2026-88772
    Memory overflow vulnerability leading to remote code execution or denial of service.
    Admin intelCISA KEV📅 Added to KEV: Sep 27, 2026📅 Updated: Sep 27, 2026
Powered by CVE Watchtower

Critical Vulnerabilities

  • CVE-2026-105218CVSS 9.1
    gopay before 1.5.119 disables TLS certificate verification in defaultClient() in pkg/xhttp/client.go, allowing man-in-the-middle attackers to impersonate payment provider...
    📅 Updated: Oct 4, 2026
  • CVE-2026-105216CVSS 9.1
    go-micro before 6.0.0 contains an improper certificate validation vulnerability that allows network attackers to impersonate services because the...
    📅 Updated: Oct 4, 2026
  • CVE-2026-105086CVSS 9.3
    WWBN AVideo 12.4 through 29.2.0 contains a stored cross-site scripting vulnerability that allows authenticated uploaders to inject HTML...
    📅 Updated: Oct 4, 2026
  • CVE-2026-105089CVSS 9.3
    WWBN AVideo through 29.2.0 contains a stored cross-site scripting vulnerability that allows users with upload permission to inject...
    📅 Updated: Oct 4, 2026
  • CVE-2026-82042CVSS 9.3
    UTMStack before 11.2.16 contains an authentication bypass vulnerability that allows remote attackers to gain full administrative API access...
    📅 Updated: Oct 4, 2026
  • CVE-2026-105215CVSS 9.3
    ZITADEL before 3.4.14 and 4.x before 4.16.2 contains an authentication bypass in the hosted Login V1 UI because...
    📅 Updated: Oct 4, 2026
  • CVE-2026-105211CVSS 9.2
    ZITADEL before 4.17.1 contains an authentication bypass vulnerability in Login V2 that allows unauthenticated attackers to take over...
    📅 Updated: Oct 4, 2026
  • CVE-2026-105209CVSS 9.3
    ZITADEL 3.x before 3.4.15 and 4.x before 4.17.1 contains an improper authorization vulnerability: when issuing passkey or passwordless...
    📅 Updated: Oct 4, 2026
Powered by CVE Watchtower

Daily CyberSecurity

  • About SecurityOnline.info
  • Advertise with us
  • Announcement
  • Contact
  • Contributor Register
  • Login
  • Disclaimer
  • DCMA
  • Privacy Policy
  • About SecurityOnline.info
  • Advertise on SecurityOnline.info
  • Contact Us

When you purchase through links on our site, we may earn an affiliate commission. Here’s how it works

  • CVE Watchtower
  • CVE Statistics by Vendor 2026
  • Q2 2026 Report
  • Top Exploited CVEs
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube
© 2017 - 2026 Daily CyberSecurity. All Rights Reserved.