Skip to content
July 25, 2026
  • Linkedin
  • Twitter
  • Facebook
  • Youtube

Daily CyberSecurity

Zero-hour alerts. Unmatched analysis.

Primary Menu
  • Home
  • CVE Data
    • CVE Watchtower
    • Top Exploited CVEs
    • CVE Stats by Vendor
    • Q2 2026 Report
  • Cyber Criminals
  • Data Leak
  • Linux
  • Malware
  • Vulnerability
  • Submit Press Release
  • Weekly Recap
Light/Dark Button
MOVEit Automation Alert: Critical Authentication Bypass Hits CVSS 9.8 MOVEit Automation Vulnerability CVE-2026-4670 CVE-2024-6670 & CVE-2024-6671 Progress WhatsUp Gold
  • Vulnerability Report

MOVEit Automation Alert: Critical Authentication Bypass Hits CVSS 9.8

Do Son May 4, 2026 0
Read More Read more about MOVEit Automation Alert: Critical Authentication Bypass Hits CVSS 9.8
The CVE Watchtower: Weekly Threat Intelligence Briefing (April 27 – May 3, 2026) cPanel Authentication Bypass Architectural Mismatch
  • Weekly Recap

The CVE Watchtower: Weekly Threat Intelligence Briefing (April 27 – May 3, 2026)

Do Son May 4, 2026 0
Read More Read more about The CVE Watchtower: Weekly Threat Intelligence Briefing (April 27 – May 3, 2026)
FreeBSD DHCP Client Flaw Opens Door to Remote Code Execution as Root Privilege FreeBSD Wi-Fi RCE Vulnerability CVE-2026-45255 Patch FreeBSD dhclient Root Exploit CVE-2026-42511 FreeBSD Vulnerability - CVE-2024-7589 FreeBSD Jail Escape CVE-2025-15576
  • Vulnerability Report

FreeBSD DHCP Client Flaw Opens Door to Remote Code Execution as Root Privilege

Do Son May 4, 2026 0
Read More Read more about FreeBSD DHCP Client Flaw Opens Door to Remote Code Execution as Root Privilege
Active Exploitation in the Wild: Critical Qinglong Bypasses Fuel Covert Cryptomining Campaign Qinglong Vulnerability Active Exploitation GhostGrab Hybrid Malware, Monero Mining
  • Vulnerability Report

Active Exploitation in the Wild: Critical Qinglong Bypasses Fuel Covert Cryptomining Campaign

Do Son May 4, 2026 0
Read More Read more about Active Exploitation in the Wild: Critical Qinglong Bypasses Fuel Covert Cryptomining Campaign
The Tadashi Files: Inside the xlabs_v1 Botnet Targeting 4 Million Android Devices xlabs_v1 Botnet ADB Port 5555 Exploit
  • Malware

The Tadashi Files: Inside the xlabs_v1 Botnet Targeting 4 Million Android Devices

Do Son May 3, 2026 0
Read More Read more about The Tadashi Files: Inside the xlabs_v1 Botnet Targeting 4 Million Android Devices
40,000+ Sites Exposed: Critical 9.8 CVSS Flaw Grants Total WordPress Account Takeover WordPress Account Takeover CVE-2026-7567
  • Vulnerability Report

40,000+ Sites Exposed: Critical 9.8 CVSS Flaw Grants Total WordPress Account Takeover

Do Son May 2, 2026 0
Read More Read more about 40,000+ Sites Exposed: Critical 9.8 CVSS Flaw Grants Total WordPress Account Takeover
Cybersecurity Pros Sentenced for Running ALPHV BlackCat Ransomware ALPHV BlackCat Affiliates Ransomware Insider Threat
  • Cybercriminals

Cybersecurity Pros Sentenced for Running ALPHV BlackCat Ransomware

Do Son May 2, 2026 0
Read More Read more about Cybersecurity Pros Sentenced for Running ALPHV BlackCat Ransomware
Waking the Sleepers: The BufferZoneCorp Campaign Poisoning Ruby and Go Ecosystems BufferZoneCorp Supply Chain Go and Ruby Malware
  • Malware

Waking the Sleepers: The BufferZoneCorp Campaign Poisoning Ruby and Go Ecosystems

Do Son May 2, 2026 0
Read More Read more about Waking the Sleepers: The BufferZoneCorp Campaign Poisoning Ruby and Go Ecosystems
The Fall of Versus: Dark Web Mastermind Extradited to the US to Face Life Behind Bars Versus Project Dark Web Extradition
  • Cybercriminals

The Fall of Versus: Dark Web Mastermind Extradited to the US to Face Life Behind Bars

Do Son May 2, 2026 0
Read More Read more about The Fall of Versus: Dark Web Mastermind Extradited to the US to Face Life Behind Bars
AI’s Supply Chain Nightmare: The Lightning Framework Worm and the “Silence Developer” Meme Lightning Framework Attack TEAM PCP Supply Chain
  • Malware

AI’s Supply Chain Nightmare: The Lightning Framework Worm and the “Silence Developer” Meme

Do Son May 2, 2026 0
Read More Read more about AI’s Supply Chain Nightmare: The Lightning Framework Worm and the “Silence Developer” Meme
“TanStack”: Malicious Name-Squatting Campaign Steals Environment Secrets TanStack Typosquatting npm Supply Chain Attack Axios Supply Chain Attack npm Poisoning eScan Supply Chain Attack Antivirus Compromise APT-36, NCERT WhatsApp Advisory FBI alert, Salesforce Salt Typhoon, APT group ConnectWise ScreenConnect hack Nation-state cyberattack FortiGate Leak - zkLend vulnerability - TRIPLESTRENGTH Threat Actor Group Dark Storm
  • Malware

“TanStack”: Malicious Name-Squatting Campaign Steals Environment Secrets

Do Son May 2, 2026 0
Read More Read more about “TanStack”: Malicious Name-Squatting Campaign Steals Environment Secrets
The Worm Turns to PHP: Mini Shai-Hulud’s 20-Million-Install Hijack of Intercom Mini Shai-Hulud Packagist Supply Chain Attack
  • Malware

The Worm Turns to PHP: Mini Shai-Hulud’s 20-Million-Install Hijack of Intercom

Do Son May 2, 2026 0
Read More Read more about The Worm Turns to PHP: Mini Shai-Hulud’s 20-Million-Install Hijack of Intercom
Active In-The-Wild Exploit: “Copy Fail” Grants Root Privileges on Millions of Linux Systems Copy Fail CVE-2026-31431 Linux Root Privilege Exploit
  • Vulnerability Report

Active In-The-Wild Exploit: “Copy Fail” Grants Root Privileges on Millions of Linux Systems

Do Son May 2, 2026 0
Read More Read more about Active In-The-Wild Exploit: “Copy Fail” Grants Root Privileges on Millions of Linux Systems
44,000 IPs Hijacked: cPanel’s 9.8 CVSS Authentication Bypass Triggers Global Ransomware Surge cPanel Authentication Bypass CVE-2026-41940
  • Vulnerability Report

44,000 IPs Hijacked: cPanel’s 9.8 CVSS Authentication Bypass Triggers Global Ransomware Surge

Do Son May 2, 2026 0
Read More Read more about 44,000 IPs Hijacked: cPanel’s 9.8 CVSS Authentication Bypass Triggers Global Ransomware Surge
Criminal IP and Securonix ThreatQ Collaborate to Enhance Threat Intelligence Operations 1200_700_1776732787DlSbx2MTHb
  • Press Release

Criminal IP and Securonix ThreatQ Collaborate to Enhance Threat Intelligence Operations

cybernewswire May 1, 2026 0
Read More Read more about Criminal IP and Securonix ThreatQ Collaborate to Enhance Threat Intelligence Operations
Crashing the Shield: The One-Line Script Taking Down ModSecurity v3 WAFs libmodsecurity3 Denial of Service WAF Security Vulnerability CVE-2025-27110 ModSecurity vulnerability, JSON DoS
  • Vulnerability Report

Crashing the Shield: The One-Line Script Taking Down ModSecurity v3 WAFs

Do Son May 1, 2026 0
Read More Read more about Crashing the Shield: The One-Line Script Taking Down ModSecurity v3 WAFs
Operation Road Trap: Inside the 79,000-Message Smishing Wave Hitting Drivers Worldwide Smishing Operation
  • Cybercriminals

Operation Road Trap: Inside the 79,000-Message Smishing Wave Hitting Drivers Worldwide

Do Son May 1, 2026 0
Read More Read more about Operation Road Trap: Inside the 79,000-Message Smishing Wave Hitting Drivers Worldwide
New DDoS Botnet Exploits Jenkins to Target Gaming Servers Jenkins DDoS Botnet Gaming Industry Cyberattacks
  • Malware

New DDoS Botnet Exploits Jenkins to Target Gaming Servers

Do Son May 1, 2026 0
Read More Read more about New DDoS Botnet Exploits Jenkins to Target Gaming Servers
Unmasking the Phoenix System’s Rogue BTS Smishing Empire Phoenix System PhaaS Rogue BTS Smishing
  • Cybercriminals

Unmasking the Phoenix System’s Rogue BTS Smishing Empire

Do Son May 1, 2026 0
Read More Read more about Unmasking the Phoenix System’s Rogue BTS Smishing Empire
PromptMink Tricked AI Agents into Planting Malware PromptMink Campaign AI Agent Deception LIMINAL PANDA UNC1549 DLL Hijacking, VDI Breakout
  • Malware

PromptMink Tricked AI Agents into Planting Malware

Do Son May 1, 2026 0
Read More Read more about PromptMink Tricked AI Agents into Planting Malware
The 11-Step Trap: How a Fake DHL OTP Trick Steals Your Password DHL Phishing OTP Social Engineering
  • Cybercriminals

The 11-Step Trap: How a Fake DHL OTP Trick Steals Your Password

Do Son May 1, 2026 0
Read More Read more about The 11-Step Trap: How a Fake DHL OTP Trick Steals Your Password
Minirat’s Stealth Supply Chain Attack Targets macOS Developers Minirat macOS Malware Go-based RAT
  • Malware

Minirat’s Stealth Supply Chain Attack Targets macOS Developers

Do Son May 1, 2026 0
Read More Read more about Minirat’s Stealth Supply Chain Attack Targets macOS Developers
❮ Prev Page
Next Page ❯

Search

Translation

CVE WATCHTOWER
🚨

Receive alerts for vulnerabilities being exploited in the wild.

⚡

Get notified instantly when a Proof of Concept (PoC) exploit is published.

🔍

Access critical info on vulnerabilities even when marked as "RESERVED".

🧠

Insights powered by decades of expertise and global intelligence sources.

🎯

Customize alerts with up to 10 keywords for your specific tech stack.

📊

Export the raw CVE database for SIEM integration and reporting.

Upgrade Package

🚨 Active Exploits in the Wild

  • CVE-2026-16232CVSS 9.1
    An authentication bypass vulnerability in the Check Point SmartConsole login process allows an unauthenticated remote attacker to obtain...
    CISA KEV📅 Added to KEV: Jul 22, 2026
  • CVE-2026-50522CVSS 9.8
    Deserialization of untrusted data in Microsoft Office SharePoint allows an unauthorized attacker to execute code over a network.
    Admin intelCISA KEV📅 Added to KEV: Jul 22, 2026📅 Updated: Jul 21, 2026
  • CVE-2026-63030CVSS 9.8
    WordPress 6.9.x before 6.9.5 and 7.0.x before 7.0.2 is affected by a REST API batch endpoint route confusion...
    Admin intelCISA KEV📅 Added to KEV: Jul 21, 2026📅 Updated: Jul 21, 2026
  • CVE-2026-60137CVSS 5.9
    WordPress 6.8.x before 6.8.6, 6.9.x before 6.9.5, and 7.0.x before 7.0.2 does not properly sanitise the author__not_in parameter...
    Admin intelCISA KEV📅 Added to KEV: Jul 21, 2026📅 Updated: Jul 21, 2026
  • CVE-2026-0770CVSS 9.8
    Langflow exec_globals Inclusion of Functionality from Untrusted Control Sphere Remote Code Execution Vulnerability. This vulnerability allows remote attackers...
    CISA KEV📅 Added to KEV: Jul 21, 2026
  • CVE-2021-27137CVSS 8.1
    An issue was discovered in router/upnp/src/ssdp.c in DD-WRT before 45724. An unsafe strcpy in the UPnP handling functionality...
    CISA KEV📅 Added to KEV: Jul 21, 2026
  • CVE-2026-6875CVSS 9.5
    ServiceNow has addressed a remote code execution vulnerability that was identified in the ServiceNow AI platform. This vulnerability...
    Admin intel📅 Updated: Jul 18, 2026
  • CVE-2026-39808CVSS 9.8
    A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiSandbox...
    CISA KEV📅 Added to KEV: Jul 16, 2026
Powered by CVE Watchtower

🔴 Live Critical Threats

  • CVE-2026-61884CVSS 9.8
    The web management interface of Tycon Systems TPDIN-Monitor-WEB2  does not perform server-side validation...
  • CVE-2026-62379CVSS 9.8
    ## Summary A pre-authentication remote code execution vulnerability affects OpenAM. The remote...
  • CVE-2026-62263
    ### Summary The GHSA-6c99-87fr-6q7r fix wrapped WebAuthn authenticator deserialization in an `ObjectInputFilter`...
  • CVE-2026-62835CVSS 9.3
    Improper authorization in Azure Portal allows an unauthorized attacker to disclose information...
  • CVE-2026-48021CVSS 9.1
    In epa4all, prior to version 2026-05-20, an attacker who can intercept the...
  • CVE-2026-59940CVSS 9.8
    ## Summary A type confusion issue in `seroval.fromJSON()` allowed attacker-controlled JSON input...
  • CVE-2026-58630CVSS 10.0
    Improper access control in Azure App Service allows an unauthorized attacker to...
  • CVE-2026-57106CVSS 10.0
    Server-side request forgery (ssrf) in Data Quality allows an unauthorized attacker to...
  • CVE-2026-56163CVSS 10.0
    Missing authentication for critical function in Microsoft Azure Kubernetes Service allows an...
  • CVE-2026-15704CVSS 9.8
    In Eclipse BaSyx Go Components versions up to and including 1.0.0, ABAC-enabled...
Powered by CVE WATCHTOWER

Our Websites
  • Penetration Testing Tools
  • The Daily Information Technology
  • Top Exploited CVEs
  • Daily CyberSecurity

    • About SecurityOnline.info
    • Advertise with us
    • Announcement
    • Contact
    • Contributor Register
    • Login
    • Disclaimer
    • DCMA
    • Privacy Policy
    • About SecurityOnline.info
    • Advertise on SecurityOnline.info
    • Contact Us

    When you purchase through links on our site, we may earn an affiliate commission. Here’s how it works

    • CVE Watchtower
    • CVE Statistics by Vendor 2026
    • Q2 2026 Report
    • Top Exploited CVEs
    • Linkedin
    • Twitter
    • Facebook
    • Youtube
    © 2017 - 2026 Daily CyberSecurity. All Rights Reserved.