Skip to content
September 29, 2026
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube

Daily CyberSecurity

Zero-hour alerts. Unmatched analysis.

Primary Menu
  • Home
  • CVE Data
    • CVE Watchtower
    • Top Exploited CVEs
    • CVE Stats by Vendor
    • Q2 2026 Report
    • CVE Alerts
    • CVE Alert Settings
    • Pricing
  • Cyber Criminals
  • Data Leak
  • Free Tools
    • CVSS 3.1 Calculator
    • Certificate Viewer
    • DNS Lookup
    • Encoder & Hash Generator
    • IP / Subnet Calculator
    • Whois Lookup
  • Linux
  • Malware
  • Vulnerability
  • Submit Press Release
  • Weekly Recap
Light/Dark Button
PoC Exploit Releases for Critical Symlink Flaw in Apple’s iOS – CVE-2024-44258 Coruna Exploit Kit iOS Security Update Apple Zero-Day CVE-2026-20700 Apple Data Privacy Day 2026, iPhone privacy features guide iOS Privilege Escalation, CVE-2025-24085 PoC Apple Manufacturing Academy, US Investment CVE-2024-44258 - symlink vulnerability
  • Vulnerability

PoC Exploit Releases for Critical Symlink Flaw in Apple’s iOS – CVE-2024-44258

Do Son November 5, 2024 0
Read More Read more about PoC Exploit Releases for Critical Symlink Flaw in Apple’s iOS – CVE-2024-44258
New Keylogger Targeting U.S. Organizations Linked to North Korean APT Group Andariel Andariel APT
  • Cyber Security
  • Malware

New Keylogger Targeting U.S. Organizations Linked to North Korean APT Group Andariel

Do Son November 5, 2024 0
Read More Read more about New Keylogger Targeting U.S. Organizations Linked to North Korean APT Group Andariel
Over 1,500 Devices Infected: Android Trojan ToxicPanda Targets Banks in Europe and Latin America ToxicPanda malware
  • Malware

Over 1,500 Devices Infected: Android Trojan ToxicPanda Targets Banks in Europe and Latin America

Do Son November 5, 2024 0
Read More Read more about Over 1,500 Devices Infected: Android Trojan ToxicPanda Targets Banks in Europe and Latin America
LameDuck: A Threat Actor Mixing Politics and Profit with Over 35,000 DDoS Attacks Anonymous Sudan X - LameDuck
  • Cyber Security

LameDuck: A Threat Actor Mixing Politics and Profit with Over 35,000 DDoS Attacks

Do Son November 5, 2024 0
Read More Read more about LameDuck: A Threat Actor Mixing Politics and Profit with Over 35,000 DDoS Attacks
Google Chrome Patches Two High-Severity Vulnerabilities: Update Now! CVE-2024-10826 and CVE-2024-10827
  • Vulnerability

Google Chrome Patches Two High-Severity Vulnerabilities: Update Now!

Do Son November 5, 2024 0
Read More Read more about Google Chrome Patches Two High-Severity Vulnerabilities: Update Now!
Stealc Malware: The Infostealer Targeting Credentials, Crypto Wallets, and More fast16 Malware Cyber Sabotage IronWind malware Stealc
  • Malware

Stealc Malware: The Infostealer Targeting Credentials, Crypto Wallets, and More

Do Son November 5, 2024 0
Read More Read more about Stealc Malware: The Infostealer Targeting Credentials, Crypto Wallets, and More
Beyond VPNs and Botnets: Understanding the Danger of ORB Networks ORB networks
  • Cyber Security

Beyond VPNs and Botnets: Understanding the Danger of ORB Networks

Do Son November 5, 2024 0
Read More Read more about Beyond VPNs and Botnets: Understanding the Danger of ORB Networks
Cable: Open-Source, Powerful Tool for Active Directory Post-Exploitation and Enumeration Active Directory Enumeration
  • Open Source Tool

Cable: Open-Source, Powerful Tool for Active Directory Post-Exploitation and Enumeration

Do Son November 5, 2024 0
Read More Read more about Cable: Open-Source, Powerful Tool for Active Directory Post-Exploitation and Enumeration
AWS IAM Roles Anywhere: A Potential Backdoor for Attackers? IAM Roles Anywhere Persistent
  • Vulnerability

AWS IAM Roles Anywhere: A Potential Backdoor for Attackers?

Do Son November 5, 2024 0
Read More Read more about AWS IAM Roles Anywhere: A Potential Backdoor for Attackers?
Sri Lanka: New Target for T-APT-04 APT Group T-APT-04 - Rattlesnake
  • Cyber Security

Sri Lanka: New Target for T-APT-04 APT Group

Do Son November 5, 2024 0
Read More Read more about Sri Lanka: New Target for T-APT-04 APT Group
Stealthy Process Injection: New Kernel Callback Table Technique Exposed Kernel Callback Tables for Process Injection
  • Malware
  • Open Source Tool

Stealthy Process Injection: New Kernel Callback Table Technique Exposed

Do Son November 5, 2024 0
Read More Read more about Stealthy Process Injection: New Kernel Callback Table Technique Exposed
Warning: LastPass Alerts Users to Phishing Scam Using Fake Support Reviews on Chrome Web Store LastPass Phishing Scam
  • Cyber Security

Warning: LastPass Alerts Users to Phishing Scam Using Fake Support Reviews on Chrome Web Store

Do Son November 5, 2024 0
Read More Read more about Warning: LastPass Alerts Users to Phishing Scam Using Fake Support Reviews on Chrome Web Store
FBI Warning: “Remember Me” Cookies Put Your Email at Risk Iranian Cyber Reconnaissance IP Camera Security NCSC Warning Russian Hacktivists Taiwan Cyberattacks China State-Sponsored Hacking state-sponsored threat actor Ransomware RAT Abuse, AnyDesk
  • Cyber Security

FBI Warning: “Remember Me” Cookies Put Your Email at Risk

Do Son November 5, 2024 0
Read More Read more about FBI Warning: “Remember Me” Cookies Put Your Email at Risk
Analyzing a Decade of Software Security Incidents: A Novel Framework for Supply Chain Risk Assessment Img_2025_11_05_06_54_31
  • Technique

Analyzing a Decade of Software Security Incidents: A Novel Framework for Supply Chain Risk Assessment

Mykhailo Hanol November 5, 2024 0
Read More Read more about Analyzing a Decade of Software Security Incidents: A Novel Framework for Supply Chain Risk Assessment
CVE-2024-43047 & CVE-2024-43093: Android Zero-Days Demand Immediate Patching BadBox 2.0, Android Botnet Alien spyware - CVE-2024-43093
  • Vulnerability

CVE-2024-43047 & CVE-2024-43093: Android Zero-Days Demand Immediate Patching

Do Son November 4, 2024 0
Read More Read more about CVE-2024-43047 & CVE-2024-43093: Android Zero-Days Demand Immediate Patching
Pygmy Goat Malware: A Sophisticated Network Device Backdoor Targets Firewalls critical server patch Pygmy Goat malware - Fuji Electric Ransomware Attack
  • Malware

Pygmy Goat Malware: A Sophisticated Network Device Backdoor Targets Firewalls

Do Son November 4, 2024 0
Read More Read more about Pygmy Goat Malware: A Sophisticated Network Device Backdoor Targets Firewalls
GOOTLOADER Malware Continues to Evolve: Google Researchers Uncover Advanced Tactics GOOTLOADER
  • Malware

GOOTLOADER Malware Continues to Evolve: Google Researchers Uncover Advanced Tactics

Do Son November 4, 2024 0
Read More Read more about GOOTLOADER Malware Continues to Evolve: Google Researchers Uncover Advanced Tactics
Century Systems Routers Vulnerable to Remote Exploitation – CVE-2024-50357 (CVSS 9.8) FutureNet NXR - CVE-2024-50357
  • Vulnerability

Century Systems Routers Vulnerable to Remote Exploitation – CVE-2024-50357 (CVSS 9.8)

Do Son November 4, 2024 0
Read More Read more about Century Systems Routers Vulnerable to Remote Exploitation – CVE-2024-50357 (CVSS 9.8)
Xiū Gǒu Phishing Kit: The ‘Doggo’ of Phishing Campaigns with Global Reach Xiū Gǒu Phishing Kit
  • Cyber Security

Xiū Gǒu Phishing Kit: The ‘Doggo’ of Phishing Campaigns with Global Reach

Do Son November 4, 2024 0
Read More Read more about Xiū Gǒu Phishing Kit: The ‘Doggo’ of Phishing Campaigns with Global Reach
Beyond Keylogging: HookBot’s Advanced Techniques for Data Theft Screenshot 2024-11-03 152517
  • Malware

Beyond Keylogging: HookBot’s Advanced Techniques for Data Theft

Do Son November 4, 2024 0
Read More Read more about Beyond Keylogging: HookBot’s Advanced Techniques for Data Theft
Storm-0940 and CovertNetwork-1658: Insights into Chinese Cyberattack Infrastructure Storm-0940 - CovertNetwork-1658
  • Cyber Security

Storm-0940 and CovertNetwork-1658: Insights into Chinese Cyberattack Infrastructure

Do Son November 4, 2024 0
Read More Read more about Storm-0940 and CovertNetwork-1658: Insights into Chinese Cyberattack Infrastructure
ZoneMinder’s CVE-2024-51482: A 10/10 Severity Vulnerability Exposes SQL Databases CVE-2024-51482
  • Vulnerability

ZoneMinder’s CVE-2024-51482: A 10/10 Severity Vulnerability Exposes SQL Databases

Do Son November 4, 2024 0
Read More Read more about ZoneMinder’s CVE-2024-51482: A 10/10 Severity Vulnerability Exposes SQL Databases
❮ Prev Page
Next Page ❯

Search

Translation

CVE ALERTS
📈

EPSS Spike Alerts
Catch risk spikes before they make headlines.

🎯

Custom EPSS/CVSS
Set score thresholds to effectively filter noise.

🛡️

Exploit Intel
Real-world exploit signals beyond the KEV catalog.

🐙

GitHub Issues
Auto-create alert tickets without duplication.

📬

Weekly Digest
Clean summaries, eliminating email spam.

🏷️

Watchlist Groups
Tag vulnerabilities by team (Infra/AppSec/SOC).

🔀

Smart Routing
Route chat channels based on severity levels.

🚨

RBP Tracker
Early warning detection and tracking system.

Subscribe – $7/mo or try free for 14 days →

🚨 Active Exploits in the Wild

  • CVE-2026-86950CVSS 8.8
    An out-of-bounds write issue was addressed with improved bounds checking. This issue is fixed in iOS 26.7.1 and...
    Admin intel📅 Updated: Sep 29, 2026
  • CVE-2026-88772
    Memory overflow vulnerability leading to remote code execution or denial of service.
    Admin intelCISA KEV📅 Added to KEV: Sep 27, 2026📅 Updated: Sep 27, 2026
  • CVE-2026-88771
    Remote code execution due to improper input validation that can allow an unauthenticated attacker to execute arbitrary commands.
    Admin intelCISA KEV📅 Added to KEV: Sep 27, 2026📅 Updated: Sep 27, 2026
  • CVE-2026-65660CVSS 8.8
    Improper control of generation of code (\'code injection\') in Microsoft Office SharePoint allows an authorized attacker to execute...
    Admin intelCISA KEV📅 Added to KEV: Sep 25, 2026📅 Updated: Sep 25, 2026
  • CVE-2026-5430CVSS 10.0
    The JWT authentication mechanism accepts tokens signed with algorithms other than those explicitly configured or supported. This allows...
    CISA KEV📅 Added to KEV: Sep 24, 2026
  • CVE-2026-71362CVSS 9.1
    Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in privilege escalation. An attacker could...
    CISA KEV📅 Added to KEV: Sep 24, 2026
  • CVE-2026-48842CVSS 8.1
    Roundcube Webmail 1.6.x before 1.6.16 and 1.7.x before 1.7.1 has Pre-authentication SQL injection in the virtuser_query plugin via...
    Admin intel📅 Updated: Sep 23, 2026
  • CVE-2026-87902
    Unauthenticated path traversal in page-template resolution leading to conditional RCE An unauthenticated attacker can make get_page_template() page-template resolution...
    Admin intelCISA KEV📅 Added to KEV: Sep 25, 2026📅 Updated: Sep 23, 2026
Powered by CVE Watchtower

Critical Vulnerabilities

  • CVE-2026-102361CVSS 9.3
    mall4j through 4.0 contains a missing authentication vulnerability in the PUT /user/updatePwd endpoint that allows unauthenticated attackers to...
    📅 Updated: Sep 28, 2026
  • CVE-2026-101264CVSS 9.4
    A vulnerability was determined in Ziroom ZHOME A0101 1.0.1.0. Impacted is an unknown function of the file /api/ZRnetwork/set_passwd....
    📅 Updated: Sep 28, 2026
  • CVE-2026-13214CVSS 9.8
    The OCPP 1.6 client in subsys/net/lib/ocpp/ocpp_j.c contains a stack buffer overflow in parse_getconfig_msg(). When handling a GetConfiguration request...
    📅 Updated: Sep 28, 2026
  • CVE-2026-49845CVSS 9.8
    SQL injection in Hive Metastore direct SQL partition-name resolution in Apache Hive before 4.2.1 on all platforms allows...
    📅 Updated: Sep 28, 2026
  • CVE-2026-55976CVSS 9.1
    Server-Side Request Forgery (SSRF) in Avro SerDe schema resolution in Apache Hive before 4.2.1 allows an authenticated remote...
    📅 Updated: Sep 28, 2026
  • CVE-2026-90048CVSS 9.8
    In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: fix slab-out-of-bounds write in ni_create_attr_list() ni_create_attr_list() allocates...
    📅 Updated: Sep 28, 2026
  • CVE-2026-90049CVSS 9.3
    In the Linux kernel, the following vulnerability has been resolved: net: skbuff: don't skb_tx_error() the source skb in...
    📅 Updated: Sep 28, 2026
  • CVE-2026-101263CVSS 9.4
    A vulnerability was found in Ziroom ZHOME A0101 1.0.1.0. This issue affects some unknown processing of the file...
    📅 Updated: Sep 28, 2026
Powered by CVE Watchtower

Daily CyberSecurity

  • About SecurityOnline.info
  • Advertise with us
  • Announcement
  • Contact
  • Contributor Register
  • Login
  • Disclaimer
  • DCMA
  • Privacy Policy
  • About SecurityOnline.info
  • Advertise on SecurityOnline.info
  • Contact Us

When you purchase through links on our site, we may earn an affiliate commission. Here’s how it works

  • CVE Watchtower
  • CVE Statistics by Vendor 2026
  • Q2 2026 Report
  • Top Exploited CVEs
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube
© 2017 - 2026 Daily CyberSecurity. All Rights Reserved.