Skip to content
October 16, 2026
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube

Daily CyberSecurity

Zero-hour alerts. Unmatched analysis.

Primary Menu
  • Home
  • CVE Data
    • CVE Watchtower
    • Top Exploited CVEs
    • CVE Stats by Vendor
    • Q2 2026 Report
    • CVE Alerts
    • CVE Alert Settings
    • Pricing
  • Cyber Criminals
  • Data Leak
  • Free Tools
    • CVSS 3.1 Calculator
    • Certificate Viewer
    • DNS Lookup
    • Encoder & Hash Generator
    • IP / Subnet Calculator
    • Whois Lookup
  • Linux
  • Malware
  • Vulnerability
  • Submit Press Release
  • Weekly Recap
Light/Dark Button
ESET’s Discovery: Blackwood’s AitM Attacks and the NSPX30 Implant NSPX30 implant Blackwood
  • Cyber Security
  • Malware

ESET’s Discovery: Blackwood’s AitM Attacks and the NSPX30 Implant

Do Son January 25, 2024 0
In the intricate and often shadowy world of cyber espionage, a new name has risen to prominence,...
Read More Read more about ESET’s Discovery: Blackwood’s AitM Attacks and the NSPX30 Implant
CVE-2023-49657: Apache Superset Hit by High-Risk Stored XSS Vulnerability CVE-2023-49657
  • Vulnerability

CVE-2023-49657: Apache Superset Hit by High-Risk Stored XSS Vulnerability

Do Son January 24, 2024 0
The maintainers of the Apache Superset open-source data visualization software have released fixes to fix a critical vulnerability...
Read More Read more about CVE-2023-49657: Apache Superset Hit by High-Risk Stored XSS Vulnerability
APT10’s Latest Weapon: Unveiling the LODEINFO Malware Menace LODEINFO malware
  • Cyber Security
  • Malware

APT10’s Latest Weapon: Unveiling the LODEINFO Malware Menace

Do Son January 24, 2024 0
In the shadowy corners of the digital world, where the battle between cybersecurity defenders and attackers unfolds...
Read More Read more about APT10’s Latest Weapon: Unveiling the LODEINFO Malware Menace
CVE-2024-20253 (CVSS 9.9): Cisco Unified Communications Products RCE Vulnerability CVE-2024-20253
  • Vulnerability

CVE-2024-20253 (CVSS 9.9): Cisco Unified Communications Products RCE Vulnerability

Do Son January 24, 2024 0
Cisco has patched a critical Unified Communications and Contact Center Solutions security flaw that can let unauthenticated,...
Read More Read more about CVE-2024-20253 (CVSS 9.9): Cisco Unified Communications Products RCE Vulnerability
Arctic Wolf Labs Exposes CherryLoader: A New Go-based Malware CherryLoader
  • Malware

Arctic Wolf Labs Exposes CherryLoader: A New Go-based Malware

Do Son January 24, 2024 0
Arctic Wolf Labs has recently shed light on a sophisticated Go-based malware downloader, dubbed “CherryLoader,” which uses...
Read More Read more about Arctic Wolf Labs Exposes CherryLoader: A New Go-based Malware
CVE-2024-23897 (CVSS 9.8): Critical Jenkins Security Vulnerability, RCE Possible CVE-2024-23897
  • Vulnerability

CVE-2024-23897 (CVSS 9.8): Critical Jenkins Security Vulnerability, RCE Possible

Do Son January 24, 2024 0
Jenkins – a popular open-source automation server software – published an advisory on Wednesday concerning a critical...
Read More Read more about CVE-2024-23897 (CVSS 9.8): Critical Jenkins Security Vulnerability, RCE Possible
Denmark’s CFCS Raises Alarm on Ransomware Exploiting Cisco VPN Flaw CVE-2023-20269 Acreed Infostealer, BNB Smart Chain CVE-2023-20269 exploit
  • Cyber Security
  • Vulnerability

Denmark’s CFCS Raises Alarm on Ransomware Exploiting Cisco VPN Flaw CVE-2023-20269

Do Son January 24, 2024 0
The Danish Centre for Cyber Security (CFCS) is warning of increased ransomware activity, exploiting CVE-2023-20269, a vulnerability...
Read More Read more about Denmark’s CFCS Raises Alarm on Ransomware Exploiting Cisco VPN Flaw CVE-2023-20269
CVE-2024-0769: The Vulnerability D-Link Won’t Fix in DIR-859 Router CVE-2024-0769
  • Vulnerability

CVE-2024-0769: The Vulnerability D-Link Won’t Fix in DIR-859 Router

Do Son January 24, 2024 0
D-Link DIR-859 Wi-Fi Router once sailed as a trusted model for consumers seeking reliable wireless connections. However,...
Read More Read more about CVE-2024-0769: The Vulnerability D-Link Won’t Fix in DIR-859 Router
Over 200,000 Sites at Risk: Directory Traversal CVE-2024-0221 Vulnerability Hits Photo Gallery Plugin CVE-2024-0221
  • Vulnerability

Over 200,000 Sites at Risk: Directory Traversal CVE-2024-0221 Vulnerability Hits Photo Gallery Plugin

Do Son January 24, 2024 0
A critical directory traversal vulnerability has been found in a popular WordPress plugin. The affected plugin, Photo...
Read More Read more about Over 200,000 Sites at Risk: Directory Traversal CVE-2024-0221 Vulnerability Hits Photo Gallery Plugin
BianLian Ransomware’s Surge: A Top Threat to Healthcare and Manufacturing BianLian ransomware group
  • Cyber Security
  • Malware

BianLian Ransomware’s Surge: A Top Threat to Healthcare and Manufacturing

Do Son January 23, 2024 0
The BianLian ransomware group, first identified in 2022, has quickly ascended the ranks to become one of...
Read More Read more about BianLian Ransomware’s Surge: A Top Threat to Healthcare and Manufacturing
ReversingLabs Exposes Malicious npm Packages Storing Stolen SSH Keys on GitHub malicious npm packages
  • Malware

ReversingLabs Exposes Malicious npm Packages Storing Stolen SSH Keys on GitHub

Do Son January 23, 2024 0
Researchers from ReversingLabs have recently illuminated the dark corners of npm, revealing two malicious packages that exploit...
Read More Read more about ReversingLabs Exposes Malicious npm Packages Storing Stolen SSH Keys on GitHub
AhnLab Warns of Stealthy VenomRAT Attack via Fake ‘Survey.docx.lnk’ File VenomRAT
  • Malware

AhnLab Warns of Stealthy VenomRAT Attack via Fake ‘Survey.docx.lnk’ File

Do Son January 23, 2024 0
A new threat has emerged, dubbed VenomRAT (AsyncRAT), this Remote Access Trojan (RAT) represents a sophisticated blend...
Read More Read more about AhnLab Warns of Stealthy VenomRAT Attack via Fake ‘Survey.docx.lnk’ File
PoC Exploit Published for Fortra GoAnywhere MFT CVE-2024-0204 Vulnerability CVE-2024-0204 PoC
  • Vulnerability

PoC Exploit Published for Fortra GoAnywhere MFT CVE-2024-0204 Vulnerability

Do Son January 23, 2024 0
A security researcher has published proof-of-concept (PoC) code targeting a recently patched critical CVE-2024-0204 vulnerability in the...
Read More Read more about PoC Exploit Published for Fortra GoAnywhere MFT CVE-2024-0204 Vulnerability
0-Click Exploit: PoC Targets Android, Linux, macOS, and iOS Devices via Bluetooth CVE-2023-45866 Flaw CVE-2023-45866 PoC
  • Vulnerability

0-Click Exploit: PoC Targets Android, Linux, macOS, and iOS Devices via Bluetooth CVE-2023-45866 Flaw

Do Son January 23, 2024 0
Proof-of-concept (PoC) exploit code has been made available for recently disclosed and patched critical flaws (CVE-2023-45866, CVE-2024-21306)...
Read More Read more about 0-Click Exploit: PoC Targets Android, Linux, macOS, and iOS Devices via Bluetooth CVE-2023-45866 Flaw
Unpacking Kasseika: The Latest Ransomware to Exploit BYOVD Tactics Kasseika ransomware
  • Malware

Unpacking Kasseika: The Latest Ransomware to Exploit BYOVD Tactics

Do Son January 23, 2024 0
As the digital landscape evolves, so too does the sophistication of threats that lurk within it. The...
Read More Read more about Unpacking Kasseika: The Latest Ransomware to Exploit BYOVD Tactics
Software testing: A critical tool for business growth and competitiveness 20310
  • Technique

Software testing: A critical tool for business growth and competitiveness

Do Son January 23, 2024 0
Software testing: A critical tool for business growth and competitiveness In the rapidly evolving digital world, the...
Read More Read more about Software testing: A critical tool for business growth and competitiveness
Tietoevry Faces Service Disruptions Following Ransomware Attack in Sweden Tietoevry cyberattack
  • Cyber Security

Tietoevry Faces Service Disruptions Following Ransomware Attack in Sweden

Do Son January 23, 2024 0
Tietoevry is a large IT company based in Finland that provides software and services to businesses and...
Read More Read more about Tietoevry Faces Service Disruptions Following Ransomware Attack in Sweden
CRIL Exposes: Asylum Seekers in US Hit by MetaStealer Malware Campaign MetaStealer malware
  • Malware

CRIL Exposes: Asylum Seekers in US Hit by MetaStealer Malware Campaign

Do Son January 22, 2024 0
Recently, Cyble Research and Intelligence Labs (CRIL), in a meticulous investigation, has unveiled a chilling campaign that...
Read More Read more about CRIL Exposes: Asylum Seekers in US Hit by MetaStealer Malware Campaign
ScarCruft Strikes: North Korea’s Cyber Espionage Against Media and Experts Unveiled ScarCruft threat actor
  • Cyber Security
  • Malware

ScarCruft Strikes: North Korea’s Cyber Espionage Against Media and Experts Unveiled

Do Son January 22, 2024 0
In the intricate web of global cyber espionage, the activities of state-sponsored Advanced Persistent Threat (APT) groups...
Read More Read more about ScarCruft Strikes: North Korea’s Cyber Espionage Against Media and Experts Unveiled
The Python Package Index: Info Stealing Malware in Open-Source Software info stealing malware
  • Malware

The Python Package Index: Info Stealing Malware in Open-Source Software

Do Son January 22, 2024 0
In the sprawling ecosystem of open-source software, the Python Package Index (PyPI) stands as a cornerstone, fostering...
Read More Read more about The Python Package Index: Info Stealing Malware in Open-Source Software
CVE-2024-0204 (CVSS 9.8): Critical Authentication Bypass Flaw in GoAnywhere MFT CVE-2024-0204
  • Vulnerability

CVE-2024-0204 (CVSS 9.8): Critical Authentication Bypass Flaw in GoAnywhere MFT

Do Son January 22, 2024 0
GoAnywhere MFT is a secure managed file transfer (MFT) solution that helps organizations automate, centralize, and secure...
Read More Read more about CVE-2024-0204 (CVSS 9.8): Critical Authentication Bypass Flaw in GoAnywhere MFT
CVE-2024-23222: Apple’s First Zero-Day Flaw of the Year Apple Spring Event 2026 Apple Intel 14A iPhone 2028, Intel Foundry Apple Silicon iPhone 18 glass cloth shortage, Nittobo T-glass Apple crisis Apple UK App Store lawsuit appeal, Apple tax £1.5bn damages Apple AI Leadership Shakeup Giannandrea Subramanya Touchscreen MacBook Pro Apple 2026 Roadmap Apple Smart Home, Desktop Robot Apple H3 Chip, AirPods Camera Apple chips, on-device AI Apple AI, retail chatbot MacBook, Affordable Foldable iPhone, Apple Strategy Apple COO, Leadership Transition DOJ Lawsuit Apple EU Policy, App Store Fees CVE-2024-23222 Apple French antitrust fine
  • Vulnerability

CVE-2024-23222: Apple’s First Zero-Day Flaw of the Year

Do Son January 22, 2024 0
Apple has unfurled security updates to confront the year’s inaugural zero-day vulnerability, a menacing shadow looming over...
Read More Read more about CVE-2024-23222: Apple’s First Zero-Day Flaw of the Year
❮ Prev Page
Next Page ❯

Search

Translation

CVE ALERTS
📈

EPSS Spike Alerts
Catch risk spikes before they make headlines.

🎯

Custom EPSS/CVSS
Set score thresholds to effectively filter noise.

🛡️

Exploit Intel
Real-world exploit signals beyond the KEV catalog.

🐙

GitHub Issues
Auto-create alert tickets without duplication.

📬

Weekly Digest
Clean summaries, eliminating email spam.

🏷️

Watchlist Groups
Tag vulnerabilities by team (Infra/AppSec/SOC).

🔀

Smart Routing
Route chat channels based on severity levels.

🚨

RBP Tracker
Early warning detection and tracking system.

Subscribe – $7/mo or try free for 14 days →

🚨 Active Exploits in the Wild

  • CVE-2026-111357CVSS 7.0
    Ivanti Connect Secure 22.8R2.4 mishandles the manner in which the dsinvoked broker trusts DSCache configuration data, leading to...
    Watchtower Verified📅 Updated: Oct 16, 2026
  • CVE-2020-13125CVSS 7.2
    An issue was discovered in the "Ultimate Addons for Elementor" plugin before 1.24.2 for WordPress, as exploited in...
    Watchtower Verified📅 Updated: Oct 16, 2026
  • CVE-2020-13126CVSS 9.9
    An issue was discovered in the Elementor Pro plugin before 2.9.4 for WordPress, as exploited in the wild...
    Watchtower Verified📅 Updated: Oct 16, 2026
  • CVE-2019-20180CVSS 8.0
    The TablePress plugin for WordPress is vulnerable to CSV Injection in versions up to and including 1.14 via...
    Watchtower Verified📅 Updated: Oct 16, 2026
  • CVE-2026-106931CVSS 8.5
    SiteGuard Server Edition contains an OS command injection vulnerability, which may allow an attacker to execute arbitrary OS...
    Admin intel📅 Updated: Oct 15, 2026
  • CVE-2025-61624CVSS 6.0
    An Improper Limitation of a Pathname to a Restricted Directory (\'Path Traversal\') [CWE-22] vulnerability in Fortinet FortiOS 7.6.0...
    Admin intel📅 Updated: Oct 15, 2026
  • CVE-2026-110447CVSS 9.2
    Collabora Online Built-in CODE Server before 26.4.303 (richdocumentscode), a Nextcloud app, allows remote code execution, as exploited in...
    Watchtower Verified📅 Updated: Oct 15, 2026
  • CVE-2026-21589CVSS 9.3
    This is a vulnerability in Bitbucket Data Center, Confluence Data Center, Jira Service Management Data Center, Jira Software...
    CISA KEV📅 Added to KEV: Oct 15, 2026
Powered by CVE Watchtower

Critical Vulnerabilities

  • CVE-2026-99999CVSS 9.3
    In the Linux kernel, the following vulnerability has been resolved: ipv4: validate checksum_start before completing checksum If a...
    📅 Updated: Oct 15, 2026
  • CVE-2026-5067CVSS 9.8
    A remote, unauthenticated attacker can trigger memory corruption in Zephyr's HTTP server WebSocket upgrade path by sending a...
    📅 Updated: Oct 15, 2026
  • CVE-2026-1678CVSS 9.4
    dns_unpack_name() caches the buffer tailroom once and reuses it while appending DNS labels. As the buffer grows, the...
    📅 Updated: Oct 15, 2026
  • CVE-2025-68263CVSS 9.8
    In the Linux kernel, the following vulnerability has been resolved: ksmbd: ipc: fix use-after-free in ipc_msg_send_request ipc_msg_send_request() waits...
    📅 Updated: Oct 15, 2026
  • CVE-2025-68284CVSS 9.8
    In the Linux kernel, the following vulnerability has been resolved: libceph: prevent potential out-of-bounds writes in handle_auth_session_key() The...
    📅 Updated: Oct 15, 2026
  • CVE-2025-68192CVSS 9.8
    In the Linux kernel, the following vulnerability has been resolved: net: usb: qmi_wwan: initialize MAC header offset in...
    📅 Updated: Oct 15, 2026
  • CVE-2025-40320CVSS 9.8
    In the Linux kernel, the following vulnerability has been resolved: smb: client: fix potential cfid UAF in smb2_query_info_compound...
    📅 Updated: Oct 15, 2026
  • CVE-2025-40343CVSS 9.8
    In the Linux kernel, the following vulnerability has been resolved: nvmet-fc: avoid scheduling association deletion twice When forcefully...
    📅 Updated: Oct 15, 2026
Powered by CVE Watchtower

Daily CyberSecurity

  • About SecurityOnline.info
  • Advertise with us
  • Announcement
  • Contact
  • Contributor Register
  • Login
  • Disclaimer
  • DCMA
  • Privacy Policy
  • About SecurityOnline.info
  • Advertise on SecurityOnline.info
  • Contact Us

When you purchase through links on our site, we may earn an affiliate commission. Here’s how it works

  • CVE Watchtower
  • CVE Statistics by Vendor 2026
  • Q3 2026 Report
  • Top Exploited CVEs
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube
© 2017 - 2026 Daily CyberSecurity. All Rights Reserved.