Skip to content
October 16, 2026
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube

Daily CyberSecurity

Zero-hour alerts. Unmatched analysis.

Primary Menu
  • Home
  • CVE Data
    • CVE Watchtower
    • Top Exploited CVEs
    • CVE Stats by Vendor
    • Q2 2026 Report
    • CVE Alerts
    • CVE Alert Settings
    • Pricing
  • Cyber Criminals
  • Data Leak
  • Free Tools
    • CVSS 3.1 Calculator
    • Certificate Viewer
    • DNS Lookup
    • Encoder & Hash Generator
    • IP / Subnet Calculator
    • Whois Lookup
  • Linux
  • Malware
  • Vulnerability
  • Submit Press Release
  • Weekly Recap
Light/Dark Button
npm’s Hidden Threat: The Covert Trojan Lurking in Your Windows System npm Trojan
  • Malware

npm’s Hidden Threat: The Covert Trojan Lurking in Your Windows System

Do Son January 21, 2024 0
Recently, the Phylum team’s automated risk detection platform uncovered a suspicious publication on npm, a popular package...
Read More Read more about npm’s Hidden Threat: The Covert Trojan Lurking in Your Windows System
Morphisec Reveals Chae$ 4.1: A New Era of Malware Sophistication Chae$ 4.1 malware
  • Malware

Morphisec Reveals Chae$ 4.1: A New Era of Malware Sophistication

Do Son January 20, 2024 0
In the ever-shifting landscape of cyber threats, a new player has emerged: Chae$ 4.1. This updated version...
Read More Read more about Morphisec Reveals Chae$ 4.1: A New Era of Malware Sophistication
Russian Hackers Midnight Blizzard Compromise Microsoft’s Email Data Midnight Blizzard Microsoft
  • Cyber Security

Russian Hackers Midnight Blizzard Compromise Microsoft’s Email Data

Do Son January 19, 2024 0
In an unprecedented turn of events, Microsoft’s security team has recently unearthed an insidious cyber attack, carried...
Read More Read more about Russian Hackers Midnight Blizzard Compromise Microsoft’s Email Data
CVE-2024-21733: Apache Tomcat Information Disclosure Vulnerability CVE-2024-21733 - CVE-2025-24813
  • Vulnerability

CVE-2024-21733: Apache Tomcat Information Disclosure Vulnerability

Do Son January 19, 2024 0
In the vast expanse of web technology, Apache Tomcat emerges as a cornerstone, being a free and...
Read More Read more about CVE-2024-21733: Apache Tomcat Information Disclosure Vulnerability
Elegant Evening Attire: Sequin, Long Plus Size, and Tulle Dresses i14mrlas2pvzdde
  • Technique

Elegant Evening Attire: Sequin, Long Plus Size, and Tulle Dresses

Do Son January 19, 2024 0
When it comes to making a grand entrance at special evening occasions, your choice of attire plays...
Read More Read more about Elegant Evening Attire: Sequin, Long Plus Size, and Tulle Dresses
VMware Confirms CVE-2023-34048 RCE Flaw in vCenter Exploited in the Wild CVE-2023-34048 RCE
  • Vulnerability

VMware Confirms CVE-2023-34048 RCE Flaw in vCenter Exploited in the Wild

Do Son January 19, 2024 0
On October 25, 2023, VMware issued critical security updates to address a severe vulnerability in its vCenter...
Read More Read more about VMware Confirms CVE-2023-34048 RCE Flaw in vCenter Exploited in the Wild
Breaking Down Slippy-Book: The New RCE Flaw in Linux Distros Slippy-Book
  • Vulnerability

Breaking Down Slippy-Book: The New RCE Flaw in Linux Distros

Do Son January 19, 2024 0
A new vulnerability, whimsically named “Slippy-Book,” has emerged as a formidable threat to the integrity of popular...
Read More Read more about Breaking Down Slippy-Book: The New RCE Flaw in Linux Distros
Over 2,100 Ivanti VPNs Compromised: The GIFTEDVISITOR Webshell Threat GIFTEDVISITOR webshell
  • Cyber Security
  • Malware
  • Vulnerability

Over 2,100 Ivanti VPNs Compromised: The GIFTEDVISITOR Webshell Threat

Do Son January 19, 2024 0
Recently, the cyber intelligence firm Volexity has detected many malicious exploitation activities using critical vulnerabilities in Ivanti...
Read More Read more about Over 2,100 Ivanti VPNs Compromised: The GIFTEDVISITOR Webshell Threat
NETSCOUT ASERT Uncovers Disturbing Surge in Global Malicious Botnet Activity malicious botnet
  • Malware

NETSCOUT ASERT Uncovers Disturbing Surge in Global Malicious Botnet Activity

Do Son January 19, 2024 0
The NETSCOUT ASERT team, renowned for its unparalleled insight into the world’s internet traffic, has recently unearthed...
Read More Read more about NETSCOUT ASERT Uncovers Disturbing Surge in Global Malicious Botnet Activity
New Outlook Exploit Unveiled: CVE-2023-35636 Leads to NTLM v2 Password Breach CVE-2023-35636
  • Vulnerability

New Outlook Exploit Unveiled: CVE-2023-35636 Leads to NTLM v2 Password Breach

Do Son January 18, 2024 0
In a recent discovery, Varonis Threat Labs has unveiled three new ways that cyber attackers can exploit...
Read More Read more about New Outlook Exploit Unveiled: CVE-2023-35636 Leads to NTLM v2 Password Breach
The 7777-Botnet Exploit: A New Threat to TP-Link, Xiongmai, and Hikvision 7777-Botnet
  • Malware

The 7777-Botnet Exploit: A New Threat to TP-Link, Xiongmai, and Hikvision

Do Son January 18, 2024 0
In the realm of cybersecurity, the emergence of sophisticated botnets poses a perennial challenge. One such formidable...
Read More Read more about The 7777-Botnet Exploit: A New Threat to TP-Link, Xiongmai, and Hikvision
CVE-2023-50643: Evernote Remote Code Execution Flaw, PoC Published CVE-2023-50643
  • Vulnerability

CVE-2023-50643: Evernote Remote Code Execution Flaw, PoC Published

Do Son January 18, 2024 0
Evernote is a popular note-taking and task-management application that helps you capture ideas, organize information, and stay...
Read More Read more about CVE-2023-50643: Evernote Remote Code Execution Flaw, PoC Published
A Stealthy Godzilla Webshell: A New Threat Targeting Apache ActiveMQ Godzilla Webshell
  • Malware
  • Vulnerability

A Stealthy Godzilla Webshell: A New Threat Targeting Apache ActiveMQ

Do Son January 18, 2024 0
In recent weeks, cybersecurity experts at Trustwave have detected a surge in cyberattacks exploiting vulnerabilities in Apache...
Read More Read more about A Stealthy Godzilla Webshell: A New Threat Targeting Apache ActiveMQ
Sophisticated NFT Scam Campaign Exposed: Over 100 Projects Targeted NFT scam campaign
  • Cyber Security

Sophisticated NFT Scam Campaign Exposed: Over 100 Projects Targeted

Do Son January 18, 2024 0
Recent investigations by Check Point Research have exposed a large-scale, sophisticated NFT scam campaign, marking a new...
Read More Read more about Sophisticated NFT Scam Campaign Exposed: Over 100 Projects Targeted
Decoding COLDRIVER: Russia’s Rising Cyber Force Targeting Global Elites SPICA backdoor
  • Cyber Security
  • Malware

Decoding COLDRIVER: Russia’s Rising Cyber Force Targeting Global Elites

Do Son January 18, 2024 0
In the ever-evolving landscape of cyber threats, certain actors stand out for their sophisticated and persistent efforts....
Read More Read more about Decoding COLDRIVER: Russia’s Rising Cyber Force Targeting Global Elites
TA866 Returns: Proofpoint Thwarts Massive Email Campaign in North America
  • Cyber Security
  • Malware

TA866 Returns: Proofpoint Thwarts Massive Email Campaign in North America

Do Son January 18, 2024 0
After a mysterious nine-month hiatus, the digital underworld witnessed the reemergence of TA866, a formidable threat in...
Read More Read more about TA866 Returns: Proofpoint Thwarts Massive Email Campaign in North America
Unveiling a Novel Malware Campaign: Attackers Targeting Vulnerable Docker Services Docker Malware Campaign Docker Vulnerability CVE-2025-9074
  • Malware

Unveiling a Novel Malware Campaign: Attackers Targeting Vulnerable Docker Services

Do Son January 18, 2024 0
Recently, Cado Security Labs researchers have uncovered a striking and innovative campaign that specifically targets vulnerable Docker...
Read More Read more about Unveiling a Novel Malware Campaign: Attackers Targeting Vulnerable Docker Services
Mimo’s Multi-Threat Campaign: From CoinMiner to Mimus Ransomware Mimo CoinMiner
  • Malware

Mimo’s Multi-Threat Campaign: From CoinMiner to Mimus Ransomware

Do Son January 18, 2024 0
In recent years, cybersecurity has become a paramount concern, and it’s no surprise given the persistent and...
Read More Read more about Mimo’s Multi-Threat Campaign: From CoinMiner to Mimus Ransomware
LockBit Ransomware: The Hidden Threat in Resume Word Files LockBit ransomware spread
  • Malware

LockBit Ransomware: The Hidden Threat in Resume Word Files

Do Son January 18, 2024 0
The AhnLab Security Intelligence Center has uncovered that the LockBit ransomware is being spread through malicious Word...
Read More Read more about LockBit Ransomware: The Hidden Threat in Resume Word Files
Ecommerce Alert: Shopware Hit by Critical-Risk CVE-2024-22406 Flaw CVE-2024-22406
  • Vulnerability

Ecommerce Alert: Shopware Hit by Critical-Risk CVE-2024-22406 Flaw

Do Son January 17, 2024 0
Shopware, an open-source ecommerce platform that helps businesses of all sizes create and manage their online stores,...
Read More Read more about Ecommerce Alert: Shopware Hit by Critical-Risk CVE-2024-22406 Flaw
AgentTesla and Beyond: McAfee Reveals Diverse VBS Malware Tactics Remcos RAT malware
  • Malware

AgentTesla and Beyond: McAfee Reveals Diverse VBS Malware Tactics

Do Son January 17, 2024 0
In the ever-evolving landscape of cybersecurity threats, one campaign has recently caught the attention of McAfee Labs....
Read More Read more about AgentTesla and Beyond: McAfee Reveals Diverse VBS Malware Tactics
Mint Sandstorm Campaign’s Targeted Cyber Attacks on Middle Eastern Experts Mint Sandstorm campaign
  • Cyber Security

Mint Sandstorm Campaign’s Targeted Cyber Attacks on Middle Eastern Experts

Do Son January 17, 2024 0
In a recent revelation, Microsoft has uncovered a concerning cyber-espionage campaign conducted by Mint Sandstorm, a notorious...
Read More Read more about Mint Sandstorm Campaign’s Targeted Cyber Attacks on Middle Eastern Experts
❮ Prev Page
Next Page ❯

Search

Translation

CVE ALERTS
📈

EPSS Spike Alerts
Catch risk spikes before they make headlines.

🎯

Custom EPSS/CVSS
Set score thresholds to effectively filter noise.

🛡️

Exploit Intel
Real-world exploit signals beyond the KEV catalog.

🐙

GitHub Issues
Auto-create alert tickets without duplication.

📬

Weekly Digest
Clean summaries, eliminating email spam.

🏷️

Watchlist Groups
Tag vulnerabilities by team (Infra/AppSec/SOC).

🔀

Smart Routing
Route chat channels based on severity levels.

🚨

RBP Tracker
Early warning detection and tracking system.

Subscribe – $7/mo or try free for 14 days →

🚨 Active Exploits in the Wild

  • CVE-2026-111357CVSS 7.0
    Ivanti Connect Secure 22.8R2.4 mishandles the manner in which the dsinvoked broker trusts DSCache configuration data, leading to...
    Watchtower Verified📅 Updated: Oct 16, 2026
  • CVE-2020-13125CVSS 7.2
    An issue was discovered in the "Ultimate Addons for Elementor" plugin before 1.24.2 for WordPress, as exploited in...
    Watchtower Verified📅 Updated: Oct 16, 2026
  • CVE-2020-13126CVSS 9.9
    An issue was discovered in the Elementor Pro plugin before 2.9.4 for WordPress, as exploited in the wild...
    Watchtower Verified📅 Updated: Oct 16, 2026
  • CVE-2019-20180CVSS 8.0
    The TablePress plugin for WordPress is vulnerable to CSV Injection in versions up to and including 1.14 via...
    Watchtower Verified📅 Updated: Oct 16, 2026
  • CVE-2026-106931CVSS 8.5
    SiteGuard Server Edition contains an OS command injection vulnerability, which may allow an attacker to execute arbitrary OS...
    Admin intel📅 Updated: Oct 15, 2026
  • CVE-2025-61624CVSS 6.0
    An Improper Limitation of a Pathname to a Restricted Directory (\'Path Traversal\') [CWE-22] vulnerability in Fortinet FortiOS 7.6.0...
    Admin intel📅 Updated: Oct 15, 2026
  • CVE-2026-110447CVSS 9.2
    Collabora Online Built-in CODE Server before 26.4.303 (richdocumentscode), a Nextcloud app, allows remote code execution, as exploited in...
    Watchtower Verified📅 Updated: Oct 15, 2026
  • CVE-2026-21589CVSS 9.3
    This is a vulnerability in Bitbucket Data Center, Confluence Data Center, Jira Service Management Data Center, Jira Software...
    CISA KEV📅 Added to KEV: Oct 15, 2026
Powered by CVE Watchtower

Critical Vulnerabilities

  • CVE-2026-87744CVSS 9.1
    A flaw was found in Quarkus REST Data Panache. This vulnerability allows unauthenticated attackers to bypass security controls...
    📅 Updated: Oct 16, 2026
  • CVE-2026-99999CVSS 9.3
    In the Linux kernel, the following vulnerability has been resolved: ipv4: validate checksum_start before completing checksum If a...
    📅 Updated: Oct 15, 2026
  • CVE-2026-5067CVSS 9.8
    A remote, unauthenticated attacker can trigger memory corruption in Zephyr's HTTP server WebSocket upgrade path by sending a...
    📅 Updated: Oct 15, 2026
  • CVE-2026-1678CVSS 9.4
    dns_unpack_name() caches the buffer tailroom once and reuses it while appending DNS labels. As the buffer grows, the...
    📅 Updated: Oct 15, 2026
  • CVE-2025-68263CVSS 9.8
    In the Linux kernel, the following vulnerability has been resolved: ksmbd: ipc: fix use-after-free in ipc_msg_send_request ipc_msg_send_request() waits...
    📅 Updated: Oct 15, 2026
  • CVE-2025-68284CVSS 9.8
    In the Linux kernel, the following vulnerability has been resolved: libceph: prevent potential out-of-bounds writes in handle_auth_session_key() The...
    📅 Updated: Oct 15, 2026
  • CVE-2025-68192CVSS 9.8
    In the Linux kernel, the following vulnerability has been resolved: net: usb: qmi_wwan: initialize MAC header offset in...
    📅 Updated: Oct 15, 2026
  • CVE-2025-40320CVSS 9.8
    In the Linux kernel, the following vulnerability has been resolved: smb: client: fix potential cfid UAF in smb2_query_info_compound...
    📅 Updated: Oct 15, 2026
Powered by CVE Watchtower

Daily CyberSecurity

  • About SecurityOnline.info
  • Advertise with us
  • Announcement
  • Contact
  • Contributor Register
  • Login
  • Disclaimer
  • DCMA
  • Privacy Policy
  • About SecurityOnline.info
  • Advertise on SecurityOnline.info
  • Contact Us

When you purchase through links on our site, we may earn an affiliate commission. Here’s how it works

  • CVE Watchtower
  • CVE Statistics by Vendor 2026
  • Q3 2026 Report
  • Top Exploited CVEs
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube
© 2017 - 2026 Daily CyberSecurity. All Rights Reserved.