Skip to content
October 15, 2026
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube

Daily CyberSecurity

Zero-hour alerts. Unmatched analysis.

Primary Menu
  • Home
  • CVE Data
    • CVE Watchtower
    • Top Exploited CVEs
    • CVE Stats by Vendor
    • Q2 2026 Report
    • CVE Alerts
    • CVE Alert Settings
    • Pricing
  • Cyber Criminals
  • Data Leak
  • Free Tools
    • CVSS 3.1 Calculator
    • Certificate Viewer
    • DNS Lookup
    • Encoder & Hash Generator
    • IP / Subnet Calculator
    • Whois Lookup
  • Linux
  • Malware
  • Vulnerability
  • Submit Press Release
  • Weekly Recap
Light/Dark Button
Root Access Risk: CVE-2023-6246 Exposes Critical Flaw in Linux’s glibc CVE-2023-6246
  • Vulnerability

Root Access Risk: CVE-2023-6246 Exposes Critical Flaw in Linux’s glibc

Do Son January 30, 2024 0
The GNU C Library (glibc), a fundamental component in major Linux distributions, has a critical vulnerability, CVE-2023-6246....
Read More Read more about Root Access Risk: CVE-2023-6246 Exposes Critical Flaw in Linux’s glibc
Greatness Phishing Kit: The New Cyber Menace Targeting Microsoft 365 Greatness phishing kit
  • Cyber Security

Greatness Phishing Kit: The New Cyber Menace Targeting Microsoft 365

Do Son January 30, 2024 0
In the evolving landscape of cyber threats, a new danger has emerged, targeting Microsoft 365 users with...
Read More Read more about Greatness Phishing Kit: The New Cyber Menace Targeting Microsoft 365
New Trigona Ransomware Threat Actor Uses Mimic Ransomware and BCP Utility in Attacks Trigona ransomware
  • Malware

New Trigona Ransomware Threat Actor Uses Mimic Ransomware and BCP Utility in Attacks

Do Son January 30, 2024 0
AhnLab Security Intelligence Center (ASEC) has recently uncovered a concerning development in ransomware attacks. A new threat...
Read More Read more about New Trigona Ransomware Threat Actor Uses Mimic Ransomware and BCP Utility in Attacks
GRIT Report 2023: Unpacking the Surge in Ransomware Attacks Ransomware Annual Report 2023
  • Cyber Security
  • Malware

GRIT Report 2023: Unpacking the Surge in Ransomware Attacks

Do Son January 29, 2024 0
The GRIT Ransomware Annual Report 2023 offers a comprehensive overview of the evolving ransomware landscape. This detailed...
Read More Read more about GRIT Report 2023: Unpacking the Surge in Ransomware Attacks
CVE-2023-41474: Ivanti Avalanche Directory Traversal Flaw, PoC Published CVE-2023-41474
  • Vulnerability

CVE-2023-41474: Ivanti Avalanche Directory Traversal Flaw, PoC Published

Do Son January 29, 2024 0
Ivanti Avalanche, a mighty tool in the realm of Mobile Device Management (MDM), serves as a beacon,...
Read More Read more about CVE-2023-41474: Ivanti Avalanche Directory Traversal Flaw, PoC Published
CVE-2024-22860 & CVE-2024-22862: Critical FFmpeg Remote Code Execution Flaws CVE-2024-22860 and CVE-2024-22862
  • Vulnerability

CVE-2024-22860 & CVE-2024-22862: Critical FFmpeg Remote Code Execution Flaws

Do Son January 29, 2024 0
FFmpeg, a widely used open-source project for handling multimedia files, has recently been spotlighted for its vulnerabilities....
Read More Read more about CVE-2024-22860 & CVE-2024-22862: Critical FFmpeg Remote Code Execution Flaws
Data Breach at Ofuji Fishing: 200,000 Customers’ Information Compromised Gardyn Home Kit Vulnerabilities IoT Command Injection Vivotek Vulnerability CVE-2026-22755 Command Injection Ofuji Fishing data breach
  • Cyber Security
  • Data Leak

Data Breach at Ofuji Fishing: 200,000 Customers’ Information Compromised

Do Son January 29, 2024 0
Ofuji Fishing Tackles, a renowned fishing tackle wholesaler and manufacturer in Japan has recently faced a severe...
Read More Read more about Data Breach at Ofuji Fishing: 200,000 Customers’ Information Compromised
Critical Alert: CVE-2023-6200 Exploits Linux Kernel with Code Execution Risk Linux Kernel legacy driver removal Linux kernel x86 page fault, interrupt state asymmetry fix Linux ISO, false positive CVE-2023-6200 - Linux Kernel 6.12 LTS 6.14
  • Vulnerability

Critical Alert: CVE-2023-6200 Exploits Linux Kernel with Code Execution Risk

Do Son January 28, 2024 0
A new vulnerability has been found in the Linux Kernel’s IPv6 implementation. Identified as CVE-2023-6200, with a...
Read More Read more about Critical Alert: CVE-2023-6200 Exploits Linux Kernel with Code Execution Risk
CVE-2024-21326 (CVSS 9.6): One Click Could Compromise Microsoft Edge CVE-2024-21326
  • Vulnerability

CVE-2024-21326 (CVSS 9.6): One Click Could Compromise Microsoft Edge

Do Son January 28, 2024 0
Microsoft has released a security update for its browser, Microsoft Edge, addressing vulnerabilities revealed in Chromium and...
Read More Read more about CVE-2024-21326 (CVSS 9.6): One Click Could Compromise Microsoft Edge
From Spear-Phishing to Zero-Day: Lazarus Group’s Latest Cyber Strategies Lazarus Group
  • Cyber Security

From Spear-Phishing to Zero-Day: Lazarus Group’s Latest Cyber Strategies

Do Son January 28, 2024 0
The Lazarus Group, a notorious name in the cyber espionage realm, has yet again drawn attention with...
Read More Read more about From Spear-Phishing to Zero-Day: Lazarus Group’s Latest Cyber Strategies
HiddenFace Unmasked: ESET’s Deep Dive into MirrorFace’s Complex Malware HiddenFace
  • Cyber Security
  • Malware

HiddenFace Unmasked: ESET’s Deep Dive into MirrorFace’s Complex Malware

Do Son January 28, 2024 0
Malware researcher Dominik Breitenbacher from ESET revealed HiddenFace, a highly sophisticated backdoor malware developed by the MirrorFace...
Read More Read more about HiddenFace Unmasked: ESET’s Deep Dive into MirrorFace’s Complex Malware
Cybersecurity Alert: Unseen WIREFIRE Web Shell Variant in ICS VPN Appliances Knowledge Deliver RCE vulnerability FortiClient EMS Vulnerability CVE-2026-35616 Cisco SD-WAN Vulnerability CVE-2026-20122 PCPcat, Next.js RCE Salesloft breach, Salesforce CRM WIREFIRE web shell
  • Malware

Cybersecurity Alert: Unseen WIREFIRE Web Shell Variant in ICS VPN Appliances

Do Son January 28, 2024 0
Recently, QuoIntelligence has uncovered a previously unknown and undetected variant of the WIREFIRE web shell, a Python-based...
Read More Read more about Cybersecurity Alert: Unseen WIREFIRE Web Shell Variant in ICS VPN Appliances
From Games to Ransom: Albabat’s Deceptive Distribution Method Exposed Albabat ransomware
  • Malware

From Games to Ransom: Albabat’s Deceptive Distribution Method Exposed

Do Son January 27, 2024 0
FortiGuard Labs detected the Albabat ransomware, also known as White Bat. First emerging in November 2023, this...
Read More Read more about From Games to Ransom: Albabat’s Deceptive Distribution Method Exposed
Breaking Down CVE-2024-23897: PoC Code Surfaces Just After Jenkins Advisory CVE-2024-23897 PoC
  • Vulnerability

Breaking Down CVE-2024-23897: PoC Code Surfaces Just After Jenkins Advisory

Do Son January 26, 2024 0
The technical details and proof-of-concept (PoC) code targeting a critical CVE-2024-23897 vulnerability in Jenkins was published one...
Read More Read more about Breaking Down CVE-2024-23897: PoC Code Surfaces Just After Jenkins Advisory
CVE-2023-40547: The Critical Shim Flaw Compromising Linux Bootloaders CVE-2023-40547 Iran Internet Shutdown
  • Vulnerability

CVE-2023-40547: The Critical Shim Flaw Compromising Linux Bootloaders

Do Son January 25, 2024 0
Recently, a new vulnerability has been unearthed that strikes at the very core of system boot processes,...
Read More Read more about CVE-2023-40547: The Critical Shim Flaw Compromising Linux Bootloaders
AllaKore RAT: The Trojan Horse Targeting Mexico’s Financial Titans AllaKore RAT
  • Malware

AllaKore RAT: The Trojan Horse Targeting Mexico’s Financial Titans

Do Son January 25, 2024 0
In a cyber landscape increasingly dominated by sophisticated threats, a recent campaign was found targeting Mexican financial...
Read More Read more about AllaKore RAT: The Trojan Horse Targeting Mexico’s Financial Titans
From Espionage to Ransomware: Iran’s Strategic Assault on the West Revealed Iran cyber espionage
  • Cyber Security

From Espionage to Ransomware: Iran’s Strategic Assault on the West Revealed

Do Son January 25, 2024 0
Within the intricate webs of international cyber espionage, a comprehensive report by Insikt Group® has shed light...
Read More Read more about From Espionage to Ransomware: Iran’s Strategic Assault on the West Revealed
FAUST Ransomware Strikes: The Hidden Dangers Inside Office Documents FAUST ransomware
  • Malware

FAUST Ransomware Strikes: The Hidden Dangers Inside Office Documents

Do Son January 25, 2024 0
Recently, FortiGuard Labs uncovered the FAUST ransomware, a variant of the notorious Phobos family. This malicious software,...
Read More Read more about FAUST Ransomware Strikes: The Hidden Dangers Inside Office Documents
Beyond Simple Scams: The Rise of Conditional QR Code Routing Attacks QR Code Routing Attacks
  • Cyber Security

Beyond Simple Scams: The Rise of Conditional QR Code Routing Attacks

Do Son January 25, 2024 0
Avanan, a leading cybersecurity firm, observed a significant uptick in phishing attacks leveraging QR codes, marking a...
Read More Read more about Beyond Simple Scams: The Rise of Conditional QR Code Routing Attacks
CVE-2024-0402: GitLab Releases Urgent Security Patches for Critical Vulnerability CVE-2024-0402
  • Vulnerability

CVE-2024-0402: GitLab Releases Urgent Security Patches for Critical Vulnerability

Do Son January 25, 2024 0
GitLab has addressed a critical severity vulnerability that could allow an authenticated user to write files to...
Read More Read more about CVE-2024-0402: GitLab Releases Urgent Security Patches for Critical Vulnerability
Over a Million Sites at Risk: Hackers are Exploiting CVE-2023-6933 Flaw in WordPress Plugin CVE-2023-6933
  • Vulnerability

Over a Million Sites at Risk: Hackers are Exploiting CVE-2023-6933 Flaw in WordPress Plugin

Do Son January 25, 2024 0
A critical vulnerability was identified in the widely used Better Search Replace plugin, a staple tool for...
Read More Read more about Over a Million Sites at Risk: Hackers are Exploiting CVE-2023-6933 Flaw in WordPress Plugin
ESET’s Discovery: Blackwood’s AitM Attacks and the NSPX30 Implant NSPX30 implant Blackwood
  • Cyber Security
  • Malware

ESET’s Discovery: Blackwood’s AitM Attacks and the NSPX30 Implant

Do Son January 25, 2024 0
In the intricate and often shadowy world of cyber espionage, a new name has risen to prominence,...
Read More Read more about ESET’s Discovery: Blackwood’s AitM Attacks and the NSPX30 Implant
❮ Prev Page
Next Page ❯

Search

Translation

CVE ALERTS
📈

EPSS Spike Alerts
Catch risk spikes before they make headlines.

🎯

Custom EPSS/CVSS
Set score thresholds to effectively filter noise.

🛡️

Exploit Intel
Real-world exploit signals beyond the KEV catalog.

🐙

GitHub Issues
Auto-create alert tickets without duplication.

📬

Weekly Digest
Clean summaries, eliminating email spam.

🏷️

Watchlist Groups
Tag vulnerabilities by team (Infra/AppSec/SOC).

🔀

Smart Routing
Route chat channels based on severity levels.

🚨

RBP Tracker
Early warning detection and tracking system.

Subscribe – $7/mo or try free for 14 days →

🚨 Active Exploits in the Wild

  • CVE-2020-13125CVSS 7.2
    An issue was discovered in the "Ultimate Addons for Elementor" plugin before 1.24.2 for WordPress, as exploited in...
    Watchtower Verified📅 Updated: Oct 15, 2026
  • CVE-2020-13126CVSS 9.9
    An issue was discovered in the Elementor Pro plugin before 2.9.4 for WordPress, as exploited in the wild...
    Watchtower Verified📅 Updated: Oct 15, 2026
  • CVE-2019-20180CVSS 8.0
    The TablePress plugin for WordPress is vulnerable to CSV Injection in versions up to and including 1.14 via...
    Watchtower Verified📅 Updated: Oct 15, 2026
  • CVE-2026-106931CVSS 8.5
    SiteGuard Server Edition contains an OS command injection vulnerability, which may allow an attacker to execute arbitrary OS...
    Admin intel📅 Updated: Oct 15, 2026
  • CVE-2025-61624CVSS 6.0
    An Improper Limitation of a Pathname to a Restricted Directory (\'Path Traversal\') [CWE-22] vulnerability in Fortinet FortiOS 7.6.0...
    Admin intel📅 Updated: Oct 15, 2026
  • CVE-2026-110447CVSS 9.2
    Collabora Online Built-in CODE Server before 26.4.303 (richdocumentscode), a Nextcloud app, allows remote code execution, as exploited in...
    Watchtower Verified📅 Updated: Oct 15, 2026
  • CVE-2026-105133CVSS 6.9
    A vulnerability was detected in Ahsay AhsayCBS up to 10.3.2. This affects the function checkSysPwd of the file...
    CISA KEV📅 Added to KEV: Oct 14, 2026
  • CVE-2026-105134CVSS 10.0
    A flaw has been found in Ahsay AhsayCBS up to 10.3.2. This vulnerability affects unknown code of the...
    CISA KEV📅 Added to KEV: Oct 14, 2026
Powered by CVE Watchtower

Critical Vulnerabilities

  • CVE-2026-88178CVSS 9.8
    Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network.
    📅 Updated: Oct 15, 2026
  • CVE-2026-88156CVSS 9.8
    Stack-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
    📅 Updated: Oct 15, 2026
  • CVE-2026-70291CVSS 9.8
    Heap-based buffer overflow in Microsoft Office Outlook allows an unauthorized attacker to execute code over a network.
    📅 Updated: Oct 15, 2026
  • CVE-2026-70096CVSS 9.8
    Heap-based buffer overflow in Windows Rich Text Edit Control allows an unauthorized attacker to execute code over a...
    📅 Updated: Oct 15, 2026
  • CVE-2026-69883CVSS 9.8
    Use after free in Windows iSCSI allows an unauthorized attacker to execute code over a network.
    📅 Updated: Oct 15, 2026
  • CVE-2026-69705CVSS 9.8
    Out-of-bounds write in Windows iSCSI allows an unauthorized attacker to execute code over a network.
    📅 Updated: Oct 15, 2026
  • CVE-2026-105037CVSS 9.9
    EnergizeLab station-middleware (NestJS) Docker images 1.6.5 through 1.8.2 allow any registered, low-privilege account to read arbitrary files from...
    📅 Updated: Oct 15, 2026
  • CVE-2026-105038CVSS 9.8
    The EnergizeLab Eilik and EilikO FastAPI AI inference and profiling services expose AI model administration functions without authentication....
    📅 Updated: Oct 15, 2026
Powered by CVE Watchtower

Daily CyberSecurity

  • About SecurityOnline.info
  • Advertise with us
  • Announcement
  • Contact
  • Contributor Register
  • Login
  • Disclaimer
  • DCMA
  • Privacy Policy
  • About SecurityOnline.info
  • Advertise on SecurityOnline.info
  • Contact Us

When you purchase through links on our site, we may earn an affiliate commission. Here’s how it works

  • CVE Watchtower
  • CVE Statistics by Vendor 2026
  • Q3 2026 Report
  • Top Exploited CVEs
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube
© 2017 - 2026 Daily CyberSecurity. All Rights Reserved.