Skip to content
June 27, 2026
  • Linkedin
  • Twitter
  • Facebook
  • Youtube

Daily CyberSecurity

Zero-hour alerts. Unmatched analysis.

Primary Menu
  • Home
  • CVE Watchtower
  • Cyber Criminals
  • Data Leak
  • Linux
  • Malware
  • Vulnerability
  • Submit Press Release
  • Vulnerability Report
Light/Dark Button
“PlugX” Malware Deleted from Thousands of Computers in Global Operation Seedworm Espionage Campaign 2026 ChromElevator Stealer DLL Sideloading SIM Swapping Crypto Theft Lazarus Comebacker, Aerospace Espionage Delete PlugX Malware
  • Malware
  • Vulnerability

“PlugX” Malware Deleted from Thousands of Computers in Global Operation

Do Son January 14, 2025 0
Read More Read more about “PlugX” Malware Deleted from Thousands of Computers in Global Operation
Ivanti Endpoint Manager Patches Critical Security Vulnerabilities CVE-2023-38036 - CVE-2024-10811
  • Vulnerability

Ivanti Endpoint Manager Patches Critical Security Vulnerabilities

Do Son January 14, 2025 0
Read More Read more about Ivanti Endpoint Manager Patches Critical Security Vulnerabilities
CVE-2025-0147: Zoom Fixes High-Severity Security Flaw CVE-2025-0147
  • Vulnerability

CVE-2025-0147: Zoom Fixes High-Severity Security Flaw

Do Son January 14, 2025 0
Read More Read more about CVE-2025-0147: Zoom Fixes High-Severity Security Flaw
Malicious npm Packages Exploit Developer Tools with Hidden Kill Switch Kill Switch
  • Malware

Malicious npm Packages Exploit Developer Tools with Hidden Kill Switch

Do Son January 14, 2025 0
Read More Read more about Malicious npm Packages Exploit Developer Tools with Hidden Kill Switch
Fortinet FortiGate Firewalls Targeted in Sophisticated Campaign Exploiting Management Interfaces Weaver E-cology RCE CVE-2026-22679 CVE-2026-20127 Cisco SD-WAN Exploitation AI-Driven Cyberattack ARXON Malware React Server Components Vulnerability CVE-2025-55182 FortiWeb Auth Bypass, Unauthenticated Admin Takeover RayInitiator Bootkit, LINE VIPER CVE-2025-59689 Department of the Treasury cybersecurity - CVE-2025-0108 PoC CVE-2025-31103 Dior Data Breach SK Telecom data breach, long-term intrusion
  • Cyber Security
  • Vulnerability

Fortinet FortiGate Firewalls Targeted in Sophisticated Campaign Exploiting Management Interfaces

Do Son January 14, 2025 0
Read More Read more about Fortinet FortiGate Firewalls Targeted in Sophisticated Campaign Exploiting Management Interfaces
Over 5,000 WordPress Sites Infected in WP3.XYZ Malware Attack WP3.XYZ Malware Attack
  • Malware

Over 5,000 WordPress Sites Infected in WP3.XYZ Malware Attack

Do Son January 14, 2025 0
Read More Read more about Over 5,000 WordPress Sites Infected in WP3.XYZ Malware Attack
Chrome 132 Arrives: 16 Security Fixes in Latest Stable Release Chrome 132
  • Vulnerability

Chrome 132 Arrives: 16 Security Fixes in Latest Stable Release

Do Son January 14, 2025 0
Read More Read more about Chrome 132 Arrives: 16 Security Fixes in Latest Stable Release
Microsoft’s January 2025 Patch Tuesday Fixes 159 Vulnerabilities, Including 10 Critical and 8 Zero-Days Driver Cleanup CVE-2024-49138 - December Patch Tuesday Windows update errors, Windows update troubleshooting
  • Vulnerability
  • Windows

Microsoft’s January 2025 Patch Tuesday Fixes 159 Vulnerabilities, Including 10 Critical and 8 Zero-Days

Do Son January 14, 2025 0
Read More Read more about Microsoft’s January 2025 Patch Tuesday Fixes 159 Vulnerabilities, Including 10 Critical and 8 Zero-Days
SimpleHelp Urgents to Patch Critical Security Vulnerabilities Screenshot 2025-01-14 222456
  • Vulnerability

SimpleHelp Urgents to Patch Critical Security Vulnerabilities

Do Son January 14, 2025 0
Read More Read more about SimpleHelp Urgents to Patch Critical Security Vulnerabilities
Multi-Layered Attack: Formbook Stealer Bypasses Detection with Memory-Based Execution macOS malware 2024 XCSSET
  • Malware

Multi-Layered Attack: Formbook Stealer Bypasses Detection with Memory-Based Execution

Do Son January 14, 2025 0
Read More Read more about Multi-Layered Attack: Formbook Stealer Bypasses Detection with Memory-Based Execution
Active Exploitation of CVE-2024-55591 (CVSS 9.6): FortiOS and FortiProxy Under Threat BeyondTrust Vulnerability CVE-2026-1731 UPBIT $369M Hack CVE-2024-55591 Ivanti VPN vulnerability, cyber espionage
  • Vulnerability

Active Exploitation of CVE-2024-55591 (CVSS 9.6): FortiOS and FortiProxy Under Threat

Do Son January 14, 2025 0
Read More Read more about Active Exploitation of CVE-2024-55591 (CVSS 9.6): FortiOS and FortiProxy Under Threat
How to Store Computer Vision Data Effectively data-vision
  • Technique

How to Store Computer Vision Data Effectively

Do Son January 14, 2025 0
Read More Read more about How to Store Computer Vision Data Effectively
Biden’s AI Chip Export Restrictions: A Strategic Move to Counter Global Tech Threats Bad Likert Judge - Artificial Intelligence Diffusion
  • Technology

Biden’s AI Chip Export Restrictions: A Strategic Move to Counter Global Tech Threats

Do Son January 14, 2025 0
Read More Read more about Biden’s AI Chip Export Restrictions: A Strategic Move to Counter Global Tech Threats
Critical SAP Flaws Revealed: CVE-2025-0070 and CVE-2025-0066 with CVSS 9.9 Demand Immediate Action SAP Security Patches CVE-2026-27685 SAP Security Update CVE-2026-0488 CVE-2024-47578 - CVE-2025-0070 and CVE-2025-0066
  • Vulnerability

Critical SAP Flaws Revealed: CVE-2025-0070 and CVE-2025-0066 with CVSS 9.9 Demand Immediate Action

Do Son January 14, 2025 0
Read More Read more about Critical SAP Flaws Revealed: CVE-2025-0070 and CVE-2025-0066 with CVSS 9.9 Demand Immediate Action
Linux Kernel Privilege Escalation Vulnerability (CVE-2024-27397) Exploited: PoC Released CrackArmor AppArmor Vulnerabilities Linux Kernel UAF, Privilege Escalation PoC CVE-2024-27397 PoC
  • Linux
  • Vulnerability

Linux Kernel Privilege Escalation Vulnerability (CVE-2024-27397) Exploited: PoC Released

Do Son January 13, 2025 0
Read More Read more about Linux Kernel Privilege Escalation Vulnerability (CVE-2024-27397) Exploited: PoC Released
Zyxel Urges Patch Application for Privilege Escalation Vulnerability (CVE-2024-12398) CVE-2022-43389 - CVE-2024-12398 Zyxel UPnP Vulnerability CVE-2025-13942
  • Vulnerability

Zyxel Urges Patch Application for Privilege Escalation Vulnerability (CVE-2024-12398)

Do Son January 13, 2025 0
Read More Read more about Zyxel Urges Patch Application for Privilege Escalation Vulnerability (CVE-2024-12398)
CISA Warns of Active Exploitation of Critical Flaws in BeyondTrust and Qlik Sense GUARDIANWALL MailSuite Exploit CVE-2026-32661 FileZen Vulnerability CVE-2026-25108 Ivanti EPMM Vulnerability Dormant Backdoor Fortinet Authentication Bypass CVE-2026-24858 VMware vCenter Server Flaw CVE-2025-21590
  • Vulnerability

CISA Warns of Active Exploitation of Critical Flaws in BeyondTrust and Qlik Sense

Do Son January 13, 2025 0
Read More Read more about CISA Warns of Active Exploitation of Critical Flaws in BeyondTrust and Qlik Sense
Kernel Modules and Malicious Commands: Anatomy of the sysinitd Rootkit sysinitd rootkit
  • Linux
  • Malware

Kernel Modules and Malicious Commands: Anatomy of the sysinitd Rootkit

Do Son January 13, 2025 0
Read More Read more about Kernel Modules and Malicious Commands: Anatomy of the sysinitd Rootkit
Microsoft Unveils CVE-2024-44243: A macOS System Integrity Protection Bypass Through Kernel Extensions CVE-2024-44243
  • Vulnerability

Microsoft Unveils CVE-2024-44243: A macOS System Integrity Protection Bypass Through Kernel Extensions

Do Son January 13, 2025 0
Read More Read more about Microsoft Unveils CVE-2024-44243: A macOS System Integrity Protection Bypass Through Kernel Extensions
APT28’s New Espionage Campaign Uses Double-Tap Infection Chain BingX cyberattack FortiGate SSO Attacks Firewall Config Theft
  • Cyber Security
  • Malware

APT28’s New Espionage Campaign Uses Double-Tap Infection Chain

Do Son January 13, 2025 0
Read More Read more about APT28’s New Espionage Campaign Uses Double-Tap Infection Chain
❮ Prev Page
Next Page ❯

Search

Translation

CVE WATCHTOWER
🚨

Receive alerts for vulnerabilities being exploited in the wild.

⚡

Get notified instantly when a Proof of Concept (PoC) exploit is published.

🔍

Access critical info on vulnerabilities even when marked as "RESERVED".

🧠

Insights powered by decades of expertise and global intelligence sources.

🎯

Customize alerts with up to 10 keywords for your specific tech stack.

📊

Export the raw CVE database for SIEM integration and reporting.

Upgrade Package

🚨 Active Exploits in the Wild

  • CVE-2026-42208
    LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format. From version...
  • CVE-2018-1273CVSS 9.8
    Spring Data Commons, versions prior to 1.13 to 1.13.10, 2.0 to 2.0.5, and older unsupported versions, contain a...
  • CVE-2026-20230CVSS 8.6
    A vulnerability in Cisco Unified Communications Manager (Unified CM) and Cisco Unified Communications Manager Session Management Edition (Unified...
  • CVE-2026-12569
    A critical remote code execution (RCE) vulnerability has been reported in PTC Windchill PDMlink and PTC FlexPLM. The...
  • CVE-2026-28496CVSS 9.4
    FOSSBilling is a free, open-source billing and client management system. Versions prior to 0.8.0 have a Server-Side Template...
  • CVE-2026-21509CVSS 7.8
    Reliance on untrusted inputs in a security decision in Microsoft Office allows an unauthorized attacker to bypass a...
  • CVE-2026-34908CVSS 10.0
    A malicious actor with access to the network could exploit an Improper Access Control vulnerability found in UniFi...
  • CVE-2026-34909CVSS 10.0
    A malicious actor with access to the network could exploit a Path Traversal vulnerability found in UniFi OS...
  • CVE-2026-34910CVSS 10.0
    A malicious actor with access to the network could exploit an Improper Input Validation vulnerability found in UniFi...
  • CVE-2025-67038CVSS 9.8
    An issue was discovered in Lantronix EDS5000 2.1.0.0R3. The HTTP RPC module executes a shell command to write...
Powered by CVE Watchtower

🔴 Live Critical Threats

  • CVE-2026-12415CVSS 9.8
    The Invoice Generator plugin for WordPress is vulnerable to privilege escalation due...
  • CVE-2026-28701CVSS 9.8
    Various versions of Daktronics Controller Firmware could allow authenticated and unauthenticated remote...
  • CVE-2026-53576CVSS 10.0
    Kestra is an open-source, event-driven orchestration platform. Prior to 1.0.45 and 1.3.21,...
  • CVE-2026-49869CVSS 10.0
    Kestra is an open-source, event-driven orchestration platform. Prior to 1.0.45 and 1.3.21,...
  • CVE-2026-54350CVSS 10.0
    Budibase is an open-source low-code platform. Prior to 3.39.12, an unauthenticated visitor...
  • CVE-2026-54352CVSS 9.6
    Budibase is an open-source low-code platform. Prior to 3.39.9, `POST /api/pwa/process-zip` at...
  • CVE-2026-52785CVSS 9.9
    OpenProject is open-source, web-based project management software. Prior to 17.3.3 and 17.4.1,...
  • CVE-2026-52782CVSS 9.9
    OpenProject is open-source, web-based project management software. Prior to 17.3.3 and 17.4.1,...
  • CVE-2026-52780CVSS 9.6
    OpenProject is open-source, web-based project management software. Prior to 17.3.3 and 17.4.1,...
  • CVE-2026-46386CVSS 9.9
    OpenProject is open-source, web-based project management software. Prior to , the official...
Powered by CVE WATCHTOWER

Our Websites
  • Penetration Testing Tools
  • The Daily Information Technology
  • Daily CyberSecurity

    • About SecurityOnline.info
    • Advertise with us
    • Announcement
    • Contact
    • Contributor Register
    • Login
    • Disclaimer
    • Privacy Policy
    • About SecurityOnline.info
    • Advertise on SecurityOnline.info
    • Contact Us

    When you purchase through links on our site, we may earn an affiliate commission. Here’s how it works

    • Disclaimer
    • Privacy Policy
    • DMCA NOTICE
    • Linkedin
    • Twitter
    • Facebook
    • Youtube
    © 2017 - 2026 Daily CyberSecurity. All Rights Reserved.