Skip to content
September 24, 2026
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube

Daily CyberSecurity

Zero-hour alerts. Unmatched analysis.

Primary Menu
  • Home
  • CVE Data
    • CVE Watchtower
    • Top Exploited CVEs
    • CVE Stats by Vendor
    • Q2 2026 Report
    • CVE Alerts
    • CVE Alert Settings
    • Pricing
  • Cyber Criminals
  • Data Leak
  • Free Tools
    • CVSS 3.1 Calculator
    • Certificate Viewer
    • DNS Lookup
    • Encoder & Hash Generator
    • IP / Subnet Calculator
    • Whois Lookup
  • Linux
  • Malware
  • Vulnerability
  • Submit Press Release
  • Weekly Recap
Light/Dark Button
BADBOX Botnet: Pre-installed Malware Targets Android Devices Android BADBOX Botnet
  • Malware

BADBOX Botnet: Pre-installed Malware Targets Android Devices

Do Son February 6, 2025 0
Read More Read more about BADBOX Botnet: Pre-installed Malware Targets Android Devices
HPE Aruba Networking Issues Security Updates for ClearPass Policy Manager CVE-2024-26305 _ CVE-2025-23058 Aruba 5G Core Open Redirect
  • Vulnerability

HPE Aruba Networking Issues Security Updates for ClearPass Policy Manager

Do Son February 6, 2025 0
Read More Read more about HPE Aruba Networking Issues Security Updates for ClearPass Policy Manager
Cyberespionage Targets Aviation: ICAO and ACAO Breached Cyberespionage
  • Data Leak

Cyberespionage Targets Aviation: ICAO and ACAO Breached

Do Son February 6, 2025 0
Read More Read more about Cyberespionage Targets Aviation: ICAO and ACAO Breached
Vitest Vulnerability Exposes Developers to Remote Code Execution – CVE-2025-24964 (CVSS 9.7) CVE-2025-24964
  • Vulnerability

Vitest Vulnerability Exposes Developers to Remote Code Execution – CVE-2025-24964 (CVSS 9.7)

Do Son February 6, 2025 0
Read More Read more about Vitest Vulnerability Exposes Developers to Remote Code Execution – CVE-2025-24964 (CVSS 9.7)
Threat Actors Continue to Exploit Legitimate RMM Tool ScreenConnect KongTuke Microsoft Teams Phishing ModeloRAT Initial Access Broker CVE-2024-38193 - Lazarus Group Threat Actors ScreenConnect
  • Cyber Security

Threat Actors Continue to Exploit Legitimate RMM Tool ScreenConnect

Do Son February 6, 2025 0
Read More Read more about Threat Actors Continue to Exploit Legitimate RMM Tool ScreenConnect
ValleyRAT Returns: Silver Fox APT Deploys New Delivery Techniques for Multi-Stage Attacks DriverFixer0428, Contagious Interview Cache Smuggling, ClickFix Evasion North Korean Cyber Espionage
  • Malware

ValleyRAT Returns: Silver Fox APT Deploys New Delivery Techniques for Multi-Stage Attacks

Do Son February 6, 2025 0
Read More Read more about ValleyRAT Returns: Silver Fox APT Deploys New Delivery Techniques for Multi-Stage Attacks
GreenSpot APT Phishes 163.com Users with Spoofed Domains Oracle EBS Zero-Day, GRACEFUL SPIDER Cracked Software, Supply Chain Attack Black Basta - NOVA stealer
  • Cyber Security

GreenSpot APT Phishes 163.com Users with Spoofed Domains

Do Son February 6, 2025 0
Read More Read more about GreenSpot APT Phishes 163.com Users with Spoofed Domains
Windows 10 ESU Program: A Lifeline for Holdouts, But at What Cost? Windows 10 MSMQ Bug, KB5071546 Write Permissions Windows 10 Lawsuit Windows 10 ESU, Free Security Updates Windows 10 ESU program
  • Technology
  • Windows

Windows 10 ESU Program: A Lifeline for Holdouts, But at What Cost?

Do Son February 6, 2025 0
Read More Read more about Windows 10 ESU Program: A Lifeline for Holdouts, But at What Cost?
Gemini 2.0 Unleashed: Pro, Flash-Lite, & More Google Gemini, audio files Gemini AI, Google AI Google Gemini 2.0 Flash Thinking iOS
  • Technology

Gemini 2.0 Unleashed: Pro, Flash-Lite, & More

Do Son February 6, 2025 0
Read More Read more about Gemini 2.0 Unleashed: Pro, Flash-Lite, & More
Arch Linux on WSL 2: Microsoft Confirms Official Support Arch Linux WSL2
  • Linux
  • Vulnerability

Arch Linux on WSL 2: Microsoft Confirms Official Support

Do Son February 5, 2025 0
Read More Read more about Arch Linux on WSL 2: Microsoft Confirms Official Support
CVE-2025-20124 (CVSS 9.9) & CVE-2025-20125 (CVSS 9.1): Cisco Patches Critical Flaws in Identity Services Engine CVE-2025-20124 CVE-2025-20125
  • Vulnerability

CVE-2025-20124 (CVSS 9.9) & CVE-2025-20125 (CVSS 9.1): Cisco Patches Critical Flaws in Identity Services Engine

Do Son February 5, 2025 0
Read More Read more about CVE-2025-20124 (CVSS 9.9) & CVE-2025-20125 (CVSS 9.1): Cisco Patches Critical Flaws in Identity Services Engine
F5 Warns of TLS Session Resumption Vulnerability in NGINX (CVE-2025-23419) NGINX JavaScript Module Vulnerability CVE-2026-8711 NGINX 1.30.1 Security Update CVE-2026-42945 RCE NGINX Vulnerability CVE-2026-1642 NGINX Github - CVE-2025-23419
  • Vulnerability

F5 Warns of TLS Session Resumption Vulnerability in NGINX (CVE-2025-23419)

Do Son February 5, 2025 0
Read More Read more about F5 Warns of TLS Session Resumption Vulnerability in NGINX (CVE-2025-23419)
XE Group Exploits Zero-Day Vulnerabilities in VeraCore – CVE-2024-57968 & CVE-2025-25181 Winos 4.0 Malware Silver Fox APT RapperBot BVIEC cyberattack - CNC group DAMASCENED PEACOCK, malware analysis
  • Cyber Security
  • Vulnerability

XE Group Exploits Zero-Day Vulnerabilities in VeraCore – CVE-2024-57968 & CVE-2025-25181

Do Son February 5, 2025 0
Read More Read more about XE Group Exploits Zero-Day Vulnerabilities in VeraCore – CVE-2024-57968 & CVE-2025-25181
Malicious Go Package Exploits Caching for Stealthy Persistence Malicious Go Package Exploits Caching for Stealthy Persistence
  • Malware

Malicious Go Package Exploits Caching for Stealthy Persistence

Do Son February 5, 2025 0
Read More Read more about Malicious Go Package Exploits Caching for Stealthy Persistence
Zyxel Routers Under Attack: Default Credentials (CVE-2025-0890) and Code Injection (CVE-2024-40891), No Patch! CVE-2025-0890
  • Vulnerability

Zyxel Routers Under Attack: Default Credentials (CVE-2025-0890) and Code Injection (CVE-2024-40891), No Patch!

Do Son February 5, 2025 0
Read More Read more about Zyxel Routers Under Attack: Default Credentials (CVE-2025-0890) and Code Injection (CVE-2024-40891), No Patch!
Kubernetes Policy Enforcement at Risk: OPA Gatekeeper Bypass Exposes Security Flaws Ingress-Nginx Vulnerability Kubernetes RCE Vulnerability CVE-2025-9708 Kubernetes Security, Image Builder Vulnerability CVE-2024-10220 - OPA Gatekeeper Bypass
  • Vulnerability

Kubernetes Policy Enforcement at Risk: OPA Gatekeeper Bypass Exposes Security Flaws

Do Son February 5, 2025 0
Read More Read more about Kubernetes Policy Enforcement at Risk: OPA Gatekeeper Bypass Exposes Security Flaws
Google Security Team Uncovers AMD Microcode Vulnerability (CVE-2024-56161) AMD Microcode Vulnerability - CVE-2024-56161
  • Vulnerability

Google Security Team Uncovers AMD Microcode Vulnerability (CVE-2024-56161)

Do Son February 5, 2025 0
Read More Read more about Google Security Team Uncovers AMD Microcode Vulnerability (CVE-2024-56161)
$50 for Your Data: NOVA Stealer Sold as Malware-as-a-Service Oracle EBS Zero-Day, GRACEFUL SPIDER Cracked Software, Supply Chain Attack Black Basta - NOVA stealer
  • Malware

$50 for Your Data: NOVA Stealer Sold as Malware-as-a-Service

Do Son February 5, 2025 0
Read More Read more about $50 for Your Data: NOVA Stealer Sold as Malware-as-a-Service
Security Flaws Discovered in Apache Cassandra: Unauthorized Access, Privilege Escalation, and JMX Credential Theft CVE-2025-24860
  • Vulnerability

Security Flaws Discovered in Apache Cassandra: Unauthorized Access, Privilege Escalation, and JMX Credential Theft

Do Son February 5, 2025 0
Read More Read more about Security Flaws Discovered in Apache Cassandra: Unauthorized Access, Privilege Escalation, and JMX Credential Theft
SmartApeSG Campaign Uncovered: A Deep Dive into NetSupport RAT Distribution and Suspected Threat Actor Connections CRussian Market, "Fly" (Flyded) hange Healthcare Cyberattack - CVE-2024-50603 Exploit
  • Cyber Security
  • Malware

SmartApeSG Campaign Uncovered: A Deep Dive into NetSupport RAT Distribution and Suspected Threat Actor Connections

Do Son February 5, 2025 0
Read More Read more about SmartApeSG Campaign Uncovered: A Deep Dive into NetSupport RAT Distribution and Suspected Threat Actor Connections
North Korean-Linked Malware ‘FlexibleFerret’ Expands macOS Attack Surface North Korean Laptop Farm DPRK Insider Threat North Korea WMD Cyber Funding, Australia Sanctions Insider threat, North Korean hackers Kimsuky, cyber-espionage NPM Malware, North Korea Cyber-espionage North Korea, Remote IT Job Scam Laptop Farm - DriverEasy - Kimsuky Watering Hole Attack
  • Malware

North Korean-Linked Malware ‘FlexibleFerret’ Expands macOS Attack Surface

Do Son February 5, 2025 0
Read More Read more about North Korean-Linked Malware ‘FlexibleFerret’ Expands macOS Attack Surface
Symantec PAM Patches Critical Security Flaw – CVE-2025-24503 (CVSSv4 9.3) CVE-2025-24503
  • Vulnerability

Symantec PAM Patches Critical Security Flaw – CVE-2025-24503 (CVSSv4 9.3)

Do Son February 5, 2025 0
Read More Read more about Symantec PAM Patches Critical Security Flaw – CVE-2025-24503 (CVSSv4 9.3)
❮ Prev Page
Next Page ❯

Search

Translation

CVE ALERTS
📧

Email Delivery
Get threat intel straight to your inbox.

♾️

Unlimited Vendors
Track every technology in your stack.

🚨

All New CVE Alerts
Be the first to know about new flaws.

⚙️

Custom EPSS Threshold
Filter noise, focus on real risks.

💬

Slack & Teams Webhook
Integrate directly into your SecOps.

🚫

100% Ad-Free
Enjoy an uninterrupted reading experience.

$7/mo
Subscribe Now

🚨 Active Exploits in the Wild

  • CVE-2026-48842CVSS 8.1
    Roundcube Webmail 1.6.x before 1.6.16 and 1.7.x before 1.7.1 has Pre-authentication SQL injection in the virtuser_query plugin via...
    Admin intel📅 Updated: Sep 23, 2026
  • CVE-2026-87902
    Unauthenticated path traversal in page-template resolution leading to conditional RCE An unauthenticated attacker can make get_page_template() page-template resolution...
    Admin intel📅 Updated: Sep 23, 2026
  • CVE-2026-94127CVSS 9.8
    When a BIG-IP APM access policy and an OAuth profile is configured on a virtual server, specific malicious...
    Admin intelCISA KEV📅 Added to KEV: Sep 22, 2026📅 Updated: Sep 22, 2026
  • CVE-2026-85102CVSS 9.8
    Improper certificate trust validation during VPN negotiation in Check Point Quantum Security Gateway may allow an unauthenticated remote...
    Admin intelCISA KEV📅 Added to KEV: Sep 22, 2026📅 Updated: Sep 22, 2026
  • CVE-2026-93616CVSS 9.8
    A directory traversal and file upload vulnerability allows an unauthenticated attacker to upload and execute arbitrary scripts on...
    Admin intelCISA KEV📅 Added to KEV: Sep 22, 2026📅 Updated: Sep 22, 2026
  • CVE-2026-93952CVSS 10.0
    VeloCloud Orchestrator (VCO) on-prem has a security issue where this issue may allow a remote attacker to access...
    Admin intelCISA KEV📅 Added to KEV: Sep 22, 2026📅 Updated: Sep 22, 2026
  • CVE-2026-32996CVSS 7.3
    A vulnerability in Veeam Agent for Microsoft Windows allows for Local Privilege Escalation.
    Admin intel📅 Updated: Sep 22, 2026
  • CVE-2026-7273CVSS 8.8
    A stack-based buffer overflow vulnerability in the CGI program of Zyxel GS1900-48HPv2 firmware versions through 2.90(ABTQ.1)C0 could allow a...
    CISA KEV📅 Added to KEV: Sep 21, 2026
Powered by CVE Watchtower

Critical Vulnerabilities

  • CVE-2026-61741CVSS 9.3
    http4s-scala-xml provides `EntityDecoder[F, scala.xml.Elem]` instances that parse XML message bodies. Prior to versions 0.24.1 and 1.0.0-M39, these decoders...
    📅 Updated: Sep 24, 2026
  • CVE-2026-61732CVSS 10.0
    Decepticon is an autonomous hacking agent for red teams. Versions prior to 1.1.17 wrap web crawl results —...
    📅 Updated: Sep 24, 2026
  • CVE-2026-69843CVSS 10.0
    No description available
    📅 Updated: Sep 24, 2026
  • CVE-2026-62874CVSS 10.0
    No description available
    📅 Updated: Sep 24, 2026
  • CVE-2026-79766CVSS 9.1
    Termix is a web-based server management platform with SSH terminal, tunneling, and file editing capabilities. From 2.4.1 until...
    📅 Updated: Sep 24, 2026
  • CVE-2026-66792CVSS 9.9
    A flaw was found in the multicloud-operators-subscription component. This vulnerability allows a user on a managed cluster to...
    📅 Updated: Sep 24, 2026
  • CVE-2026-69399CVSS 10.0
    No description available
    📅 Updated: Sep 24, 2026
  • CVE-2026-58822CVSS 9.8
    In multiple functions of ftsmooth.c, there is a possible memory safety issue due to improper casting. This could...
    📅 Updated: Sep 24, 2026
Powered by CVE Watchtower

Daily CyberSecurity

  • About SecurityOnline.info
  • Advertise with us
  • Announcement
  • Contact
  • Contributor Register
  • Login
  • Disclaimer
  • DCMA
  • Privacy Policy
  • About SecurityOnline.info
  • Advertise on SecurityOnline.info
  • Contact Us

When you purchase through links on our site, we may earn an affiliate commission. Here’s how it works

  • CVE Watchtower
  • CVE Statistics by Vendor 2026
  • Q2 2026 Report
  • Top Exploited CVEs
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube
© 2017 - 2026 Daily CyberSecurity. All Rights Reserved.