Skip to content
September 25, 2026
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube

Daily CyberSecurity

Zero-hour alerts. Unmatched analysis.

Primary Menu
  • Home
  • CVE Data
    • CVE Watchtower
    • Top Exploited CVEs
    • CVE Stats by Vendor
    • Q2 2026 Report
    • CVE Alerts
    • CVE Alert Settings
    • Pricing
  • Cyber Criminals
  • Data Leak
  • Free Tools
    • CVSS 3.1 Calculator
    • Certificate Viewer
    • DNS Lookup
    • Encoder & Hash Generator
    • IP / Subnet Calculator
    • Whois Lookup
  • Linux
  • Malware
  • Vulnerability
  • Submit Press Release
  • Weekly Recap
Light/Dark Button
Kernel Modules and Malicious Commands: Anatomy of the sysinitd Rootkit sysinitd rootkit
  • Linux
  • Malware

Kernel Modules and Malicious Commands: Anatomy of the sysinitd Rootkit

Do Son January 13, 2025 0
Read More Read more about Kernel Modules and Malicious Commands: Anatomy of the sysinitd Rootkit
Microsoft Unveils CVE-2024-44243: A macOS System Integrity Protection Bypass Through Kernel Extensions CVE-2024-44243
  • Vulnerability

Microsoft Unveils CVE-2024-44243: A macOS System Integrity Protection Bypass Through Kernel Extensions

Do Son January 13, 2025 0
Read More Read more about Microsoft Unveils CVE-2024-44243: A macOS System Integrity Protection Bypass Through Kernel Extensions
APT28’s New Espionage Campaign Uses Double-Tap Infection Chain BingX cyberattack FortiGate SSO Attacks Firewall Config Theft
  • Cyber Security
  • Malware

APT28’s New Espionage Campaign Uses Double-Tap Infection Chain

Do Son January 13, 2025 0
Read More Read more about APT28’s New Espionage Campaign Uses Double-Tap Infection Chain
CVE-2024-56511: Critical Authentication Bypass Vulnerability in DataEase CVE-2024-56511
  • Vulnerability

CVE-2024-56511: Critical Authentication Bypass Vulnerability in DataEase

Do Son January 13, 2025 0
Read More Read more about CVE-2024-56511: Critical Authentication Bypass Vulnerability in DataEase
CVE-2024-41787 (CVSS 9.8): Critical IBM DOORS Next Flaw Enables Remote Code Execution IBM CCA Vulnerability CVE-2025-13375 IBM Anthropic Partnership, AI Software Development watsonx Orchestrate, SQL injection CVE-2024-49803 - CVE-2024-41787 IBM Completes Acquisition HashiCorp
  • Vulnerability

CVE-2024-41787 (CVSS 9.8): Critical IBM DOORS Next Flaw Enables Remote Code Execution

Do Son January 13, 2025 0
Read More Read more about CVE-2024-41787 (CVSS 9.8): Critical IBM DOORS Next Flaw Enables Remote Code Execution
Unauthenticated Attackers Can Exploit Junos Vulnerabilities (CVE-2025-21598 & CVE-2025-21599) Junos OS Evolved CVE-2026-21902 Juniper Security Director, Critical Vulnerability Junos OS vulnerabilities - CVE-2025-21598 & CVE-2025-21599
  • Vulnerability

Unauthenticated Attackers Can Exploit Junos Vulnerabilities (CVE-2025-21598 & CVE-2025-21599)

Do Son January 13, 2025 0
Read More Read more about Unauthenticated Attackers Can Exploit Junos Vulnerabilities (CVE-2025-21598 & CVE-2025-21599)
LummaC2 Infostealer Malware Spreads via Crack Programs and Phishing LummaC2 Infostealer
  • Malware

LummaC2 Infostealer Malware Spreads via Crack Programs and Phishing

Do Son January 13, 2025 0
Read More Read more about LummaC2 Infostealer Malware Spreads via Crack Programs and Phishing
Opportunities and Challenges of Leveraging AI in Software Development AI in Software Development
  • Technique

Opportunities and Challenges of Leveraging AI in Software Development

Do Son January 13, 2025 0
Read More Read more about Opportunities and Challenges of Leveraging AI in Software Development
New macOS Exploit Revealed: PoC for CVE-2024-54498 Breaks Sandbox Security CVE-2024-54498 PoC
  • Vulnerability

New macOS Exploit Revealed: PoC for CVE-2024-54498 Breaks Sandbox Security

Do Son January 12, 2025 0
Read More Read more about New macOS Exploit Revealed: PoC for CVE-2024-54498 Breaks Sandbox Security
0-Click Vulnerability in Samsung S24 Devices: PoC Releases for CVE-2024-49415 CVE-2024-49415
  • Vulnerability

0-Click Vulnerability in Samsung S24 Devices: PoC Releases for CVE-2024-49415

Do Son January 12, 2025 0
Read More Read more about 0-Click Vulnerability in Samsung S24 Devices: PoC Releases for CVE-2024-49415
Aviatrix Controller RCE CVE-2024-50603 Exploited in the Wild: Cryptojacking and Backdoors Deployed CRussian Market, "Fly" (Flyded) hange Healthcare Cyberattack - CVE-2024-50603 Exploit
  • Vulnerability

Aviatrix Controller RCE CVE-2024-50603 Exploited in the Wild: Cryptojacking and Backdoors Deployed

Do Son January 12, 2025 0
Read More Read more about Aviatrix Controller RCE CVE-2024-50603 Exploited in the Wild: Cryptojacking and Backdoors Deployed
Phishing Campaigns Exploit YouTube URLs and Microsoft 365 Themes to Steal Credentials Layoff Phishing Scam Remcos RAT Malware Aruba Phishing, Phishing-as-a-Service PyPI, phishing CVE-2024-25608 PyPI Phishing, Credential Theft
  • Cyber Security

Phishing Campaigns Exploit YouTube URLs and Microsoft 365 Themes to Steal Credentials

Do Son January 12, 2025 0
Read More Read more about Phishing Campaigns Exploit YouTube URLs and Microsoft 365 Themes to Steal Credentials
HexaLocker V2: Ransomware Reborn with Advanced Tactics ransom
  • Malware

HexaLocker V2: Ransomware Reborn with Advanced Tactics

Do Son January 12, 2025 0
Read More Read more about HexaLocker V2: Ransomware Reborn with Advanced Tactics
CVE-2025-22152 (CVSS 9.4): Severe Vulnerabilities Found in Atheos Web-Based IDE CVE-2025-22152
  • Vulnerability

CVE-2025-22152 (CVSS 9.4): Severe Vulnerabilities Found in Atheos Web-Based IDE

Do Son January 12, 2025 0
Read More Read more about CVE-2025-22152 (CVSS 9.4): Severe Vulnerabilities Found in Atheos Web-Based IDE
ZACROS Corporation Discloses Personal Information Leak Following Ransomware Attack INC Ransom Pacific Cyber Threats OysterLoader Malware Rhysida Ransomware Black Basta Ransomware BYOVD Technique Velociraptor Abuse, Storm-2603 Ransomware Crypto24, Ransomware Ransomware Payments, UK Legislation ZACROS data breach
  • Cyber Security
  • Data Leak

ZACROS Corporation Discloses Personal Information Leak Following Ransomware Attack

Do Son January 12, 2025 0
Read More Read more about ZACROS Corporation Discloses Personal Information Leak Following Ransomware Attack
RedDelta Leverages PlugX Backdoor in State-Sponsored Espionage Campaigns Kali365 phishing platform EmEditor Supply Chain Attack, WALSHAM INVESTMENTS LIMITED EggStreme, fileless malware North Korea Cybercrime, Remote IT Job Fraud RedDelta APT
  • Cyber Security
  • Malware

RedDelta Leverages PlugX Backdoor in State-Sponsored Espionage Campaigns

Do Son January 12, 2025 0
Read More Read more about RedDelta Leverages PlugX Backdoor in State-Sponsored Espionage Campaigns
RedCurl APT Group: Cyber Espionage with Living-Off-the-Land Techniques WhatsApp Worm, Brazilian Banking Trojan LAPSUS$ Alliance, Scattered Spider Ransomware, Cybercrime RedCurl APT group Russian Cyberespionage, ApolloShadow Malware
  • Cyber Security
  • Malware

RedCurl APT Group: Cyber Espionage with Living-Off-the-Land Techniques

Do Son January 12, 2025 0
Read More Read more about RedCurl APT Group: Cyber Espionage with Living-Off-the-Land Techniques
CVE-2025-22777 (CVSS 9.8): Critical Security Alert for GiveWP Plugin with 100,000 Active Installations CVE-2025-22777
  • Vulnerability

CVE-2025-22777 (CVSS 9.8): Critical Security Alert for GiveWP Plugin with 100,000 Active Installations

Do Son January 11, 2025 0
Read More Read more about CVE-2025-22777 (CVSS 9.8): Critical Security Alert for GiveWP Plugin with 100,000 Active Installations
FunkSec: The Rising Ransomware Group Blurring the Lines Between Cybercrime and Hacktivism Exploited VMware
  • Cyber Security

FunkSec: The Rising Ransomware Group Blurring the Lines Between Cybercrime and Hacktivism

Do Son January 11, 2025 0
Read More Read more about FunkSec: The Rising Ransomware Group Blurring the Lines Between Cybercrime and Hacktivism
GroupGreeting E-Card Platform Compromised in “zqxq” Campaign GroupGreeting e-card - “zqxq” campaign
  • Cyber Security
  • Malware

GroupGreeting E-Card Platform Compromised in “zqxq” Campaign

Do Son January 11, 2025 0
Read More Read more about GroupGreeting E-Card Platform Compromised in “zqxq” Campaign
CVE-2024-12847 (CVSS 9.8): NETGEAR Router Flaw Exploited in the Wild for Years, PoC Published CVE-2024-12847 - CVE-2022-41545
  • Vulnerability

CVE-2024-12847 (CVSS 9.8): NETGEAR Router Flaw Exploited in the Wild for Years, PoC Published

Do Son January 10, 2025 0
Read More Read more about CVE-2024-12847 (CVSS 9.8): NETGEAR Router Flaw Exploited in the Wild for Years, PoC Published
Cracked Software: A Gateway to Malware and Data Theft ahost.exe DLL Sideloading Signed Application Abuse PS1Bot, malware ransomware attacks bill
  • Malware

Cracked Software: A Gateway to Malware and Data Theft

Do Son January 10, 2025 0
Read More Read more about Cracked Software: A Gateway to Malware and Data Theft
❮ Prev Page
Next Page ❯

Search

Translation

CVE ALERTS
📧

Email Delivery
Get threat intel straight to your inbox.

♾️

Unlimited Vendors
Track every technology in your stack.

🚨

All New CVE Alerts
Be the first to know about new flaws.

⚙️

Custom EPSS Threshold
Filter noise, focus on real risks.

💬

Slack & Teams Webhook
Integrate directly into your SecOps.

🚫

100% Ad-Free
Enjoy an uninterrupted reading experience.

$7/mo
Subscribe Now

🚨 Active Exploits in the Wild

  • CVE-2026-5430CVSS 10.0
    The JWT authentication mechanism accepts tokens signed with algorithms other than those explicitly configured or supported. This allows...
    CISA KEV📅 Added to KEV: Sep 24, 2026
  • CVE-2026-71362CVSS 9.1
    Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in privilege escalation. An attacker could...
    CISA KEV📅 Added to KEV: Sep 24, 2026
  • CVE-2026-48842CVSS 8.1
    Roundcube Webmail 1.6.x before 1.6.16 and 1.7.x before 1.7.1 has Pre-authentication SQL injection in the virtuser_query plugin via...
    Admin intel📅 Updated: Sep 23, 2026
  • CVE-2026-87902
    Unauthenticated path traversal in page-template resolution leading to conditional RCE An unauthenticated attacker can make get_page_template() page-template resolution...
    Admin intel📅 Updated: Sep 23, 2026
  • CVE-2026-94127CVSS 9.8
    When a BIG-IP APM access policy and an OAuth profile is configured on a virtual server, specific malicious...
    Admin intelCISA KEV📅 Added to KEV: Sep 22, 2026📅 Updated: Sep 22, 2026
  • CVE-2026-85102CVSS 9.8
    Improper certificate trust validation during VPN negotiation in Check Point Quantum Security Gateway may allow an unauthenticated remote...
    Admin intelCISA KEV📅 Added to KEV: Sep 22, 2026📅 Updated: Sep 22, 2026
  • CVE-2026-93616CVSS 9.8
    A directory traversal and file upload vulnerability allows an unauthenticated attacker to upload and execute arbitrary scripts on...
    Admin intelCISA KEV📅 Added to KEV: Sep 22, 2026📅 Updated: Sep 22, 2026
  • CVE-2026-93952CVSS 10.0
    VeloCloud Orchestrator (VCO) on-prem has a security issue where this issue may allow a remote attacker to access...
    Admin intelCISA KEV📅 Added to KEV: Sep 22, 2026📅 Updated: Sep 22, 2026
Powered by CVE Watchtower

Critical Vulnerabilities

  • CVE-2026-14281CVSS 9.8
    The Automation Web Platform – Notifications and OTP for WooCommerce, Advanced Country Code plugin for WordPress is vulnerable...
    📅 Updated: Sep 25, 2026
  • CVE-2026-93399CVSS 9.1
    The Bookly plugin for WordPress is vulnerable to Insecure Direct Object Reference in versions up to, and including,...
    📅 Updated: Sep 25, 2026
  • CVE-2026-89055CVSS 9.1
    The Customer Reviews for WooCommerce plugin for WordPress is vulnerable to authorization bypass in all versions up to,...
    📅 Updated: Sep 25, 2026
  • CVE-2026-97413CVSS 9.8
    In the Linux kernel, the following vulnerability has been resolved: RDMA/rtrs-srv: Fix integer underflow in process_read and process_write...
    📅 Updated: Sep 25, 2026
  • CVE-2026-93228CVSS 9.1
    In the Linux kernel, the following vulnerability has been resolved: svcrdma: Reject Write/Reply chunks with segcount 0 A...
    📅 Updated: Sep 25, 2026
  • CVE-2026-93207CVSS 9.8
    In the Linux kernel, the following vulnerability has been resolved: SUNRPC: Zero rpc_gss_wire_cred at svcauth_gss_decode_credbody() entry svcauth_gss_decode_credbody() writes...
    📅 Updated: Sep 25, 2026
  • CVE-2026-93577CVSS 9.9
    GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.2 before 19.2.7, 19.3 before 19.3.3,...
    📅 Updated: Sep 25, 2026
  • CVE-2026-89078CVSS 9.9
    GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.2 before 19.2.7, 19.3 before 19.3.3,...
    📅 Updated: Sep 25, 2026
Powered by CVE Watchtower

Daily CyberSecurity

  • About SecurityOnline.info
  • Advertise with us
  • Announcement
  • Contact
  • Contributor Register
  • Login
  • Disclaimer
  • DCMA
  • Privacy Policy
  • About SecurityOnline.info
  • Advertise on SecurityOnline.info
  • Contact Us

When you purchase through links on our site, we may earn an affiliate commission. Here’s how it works

  • CVE Watchtower
  • CVE Statistics by Vendor 2026
  • Q2 2026 Report
  • Top Exploited CVEs
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube
© 2017 - 2026 Daily CyberSecurity. All Rights Reserved.