Skip to content
October 17, 2026
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube

Daily CyberSecurity

Zero-hour alerts. Unmatched analysis.

Primary Menu
  • Home
  • CVE Data
    • CVE Watchtower
    • Top Exploited CVEs
    • CVE Stats by Vendor
    • Q2 2026 Report
    • CVE Alerts
    • CVE Alert Settings
    • Pricing
  • Cyber Criminals
  • Data Leak
  • Free Tools
    • CVSS 3.1 Calculator
    • Certificate Viewer
    • DNS Lookup
    • Encoder & Hash Generator
    • IP / Subnet Calculator
    • Whois Lookup
  • Linux
  • Malware
  • Vulnerability
  • Submit Press Release
  • Weekly Recap
Light/Dark Button
IDEMIA’s Big Glitch: Critical Vulnerabilities Expose Biometric Terminals IDEMIA Vulnerabilities
  • Vulnerability

IDEMIA’s Big Glitch: Critical Vulnerabilities Expose Biometric Terminals

Do Son December 16, 2023 0
IDEMIA, a prominent player in this field, recently issued an advisory that highlights critical vulnerabilities in its...
Read More Read more about IDEMIA’s Big Glitch: Critical Vulnerabilities Expose Biometric Terminals
PoC Released for SharePoint Pre-Auth RCE Chain (CVE-2023-29357 & CVE-2023-24955) CVE-2023-29357 & CVE-2023-24955 PoC
  • Vulnerability

PoC Released for SharePoint Pre-Auth RCE Chain (CVE-2023-29357 & CVE-2023-24955)

Do Son December 16, 2023 0
Two vulnerabilities in Microsoft SharePoint Server have recently come under the spotlight, thanks to the detailed work...
Read More Read more about PoC Released for SharePoint Pre-Auth RCE Chain (CVE-2023-29357 & CVE-2023-24955)
What Organizations Need to Know About CVE-2023-45849 on Perforce Helix Core Server CVE-2023-45849
  • Vulnerability

What Organizations Need to Know About CVE-2023-45849 on Perforce Helix Core Server

Do Son December 15, 2023 0
A risk has brewed in the software world, with four critical vulnerabilities discovered in Perforce Helix Core...
Read More Read more about What Organizations Need to Know About CVE-2023-45849 on Perforce Helix Core Server
Web of Deceit: Unmasking the Hidden Threat of Stockpiled Domains Malicious Stockpiled Domains
  • Cyber Security

Web of Deceit: Unmasking the Hidden Threat of Stockpiled Domains

Do Son December 15, 2023 0
In the dynamic theater of cyber warfare, a new front has opened – the struggle against malicious...
Read More Read more about Web of Deceit: Unmasking the Hidden Threat of Stockpiled Domains
Vulnerable Clicks: PikaBot Hijacks Businesses with Malvertising PikaBot malvertising
  • Malware

Vulnerable Clicks: PikaBot Hijacks Businesses with Malvertising

Do Son December 15, 2023 0
PikaBot, a malware family that surfaced in early 2023, has swiftly morphed from being distributed via malspam...
Read More Read more about Vulnerable Clicks: PikaBot Hijacks Businesses with Malvertising
C&C in the Clouds: OilRig Group Hijacks Microsoft Services for Espionage OilRig downloader
  • Cyber Security
  • Malware

C&C in the Clouds: OilRig Group Hijacks Microsoft Services for Espionage

Do Son December 15, 2023 0
According to a recent report by the cybersecurity firm ESET, the Iranian government-sponsored group OilRig deployed three...
Read More Read more about C&C in the Clouds: OilRig Group Hijacks Microsoft Services for Espionage
Crypto Crack: Malicious Code Lurks in Ledger dApps, Drains Millions dApps supply chain attack
  • Cyber Security

Crypto Crack: Malicious Code Lurks in Ledger dApps, Drains Millions

Do Son December 15, 2023 0
Ledger, a renowned manufacturer of hardware cryptocurrency wallets, has cautioned its clients about the risks associated with...
Read More Read more about Crypto Crack: Malicious Code Lurks in Ledger dApps, Drains Millions
750M Fake Accounts, $M in Scam: Microsoft Dismantles Fraud Storm-1152 Group Storm-1152 group
  • Cyber Security

750M Fake Accounts, $M in Scam: Microsoft Dismantles Fraud Storm-1152 Group

Do Son December 15, 2023 0
Microsoft has announced a comprehensive operation against a cybercriminal syndicate known as Storm-1152, culpable for the creation...
Read More Read more about 750M Fake Accounts, $M in Scam: Microsoft Dismantles Fraud Storm-1152 Group
BianLian, White Rabbit, and Mario Ransomware Gangs Team Up for Mega-Extortion Mario Ransomware
  • Cyber Security
  • Malware

BianLian, White Rabbit, and Mario Ransomware Gangs Team Up for Mega-Extortion

Do Son December 15, 2023 0
In the shadowy world of cybercrime, alliances are formed not in boardrooms, but in the encrypted corners...
Read More Read more about BianLian, White Rabbit, and Mario Ransomware Gangs Team Up for Mega-Extortion
Researcher details 5 zero-day flaws in Qualcomm chipsets & ARM Mali GPU CVE-2023-33107
  • Vulnerability

Researcher details 5 zero-day flaws in Qualcomm chipsets & ARM Mali GPU

Do Son December 15, 2023 0
The blog title”Deep Dive: Qualcomm MSM & ARM Mali Kernel 0-day Exploit Attacks of October 2023″ by...
Read More Read more about Researcher details 5 zero-day flaws in Qualcomm chipsets & ARM Mali GPU
Open or Not, You’re Vulnerable: Email Flaw Hijacks PCs Without a Click CVE-2023-35628
  • Vulnerability

Open or Not, You’re Vulnerable: Email Flaw Hijacks PCs Without a Click

Do Son December 15, 2023 0
A new vulnerability has been found in the Windows MSHTML platform. The vulnerability, identified as CVE-2023-35628, carries...
Read More Read more about Open or Not, You’re Vulnerable: Email Flaw Hijacks PCs Without a Click
CVE-2023-47100: A Critical Security Vulnerability Patched Perl Programming Language CVE-2023-47100
  • Vulnerability

CVE-2023-47100: A Critical Security Vulnerability Patched Perl Programming Language

Do Son December 15, 2023 0
Perl is a highly capable, feature-rich programming language with over 36 years of development. Perl runs on...
Read More Read more about CVE-2023-47100: A Critical Security Vulnerability Patched Perl Programming Language
The Impact of Gaza Cybergang on Palestine & Israel Gaza Cybergang
  • Cyber Security
  • Malware

The Impact of Gaza Cybergang on Palestine & Israel

Do Son December 14, 2023 0
Cyberattack has become a battleground for not just companies and individuals, but also geopolitical entities. A striking...
Read More Read more about The Impact of Gaza Cybergang on Palestine & Israel
NKAbuse: Go-Powered Malware Floods & Hacks, Targets Linux & Beyond NKAbuse malware
  • Cyber Security
  • Malware

NKAbuse: Go-Powered Malware Floods & Hacks, Targets Linux & Beyond

Do Son December 14, 2023 0
In the ever-evolving landscape of cyber threats, a new multiplatform menace has emerged, shaking the foundations of...
Read More Read more about NKAbuse: Go-Powered Malware Floods & Hacks, Targets Linux & Beyond
Mallox ransomware Exploits Old Flaws in MS-SQL & ODBC Mallox ransomware
  • Malware

Mallox ransomware Exploits Old Flaws in MS-SQL & ODBC

Do Son December 14, 2023 0
In an ever-evolving cyber landscape, where the churn of malware families and actor groups is relentless, Mallox...
Read More Read more about Mallox ransomware Exploits Old Flaws in MS-SQL & ODBC
Every Other Day, a Breach: Data Nightmare Haunts Businesses Data Breach Businesses
  • Data Leak

Every Other Day, a Breach: Data Nightmare Haunts Businesses

Do Son December 14, 2023 0
In a world where one in every three businesses grapples with cybersecurity threats, the statistics on data...
Read More Read more about Every Other Day, a Breach: Data Nightmare Haunts Businesses
FakeSG Campaign, Akira Ransomware, AMOS Stealer: Kaspersky Uncovers Malware Variety FakeSG Campaign
  • Malware

FakeSG Campaign, Akira Ransomware, AMOS Stealer: Kaspersky Uncovers Malware Variety

Do Son December 13, 2023 0
In an ever-evolving digital landscape, the specter of malware looms large. Cybercriminals, armed with sophisticated tools and...
Read More Read more about FakeSG Campaign, Akira Ransomware, AMOS Stealer: Kaspersky Uncovers Malware Variety
Phishing for Profits: Attackers Mine Crypto & Spam Through OAuth Apps misuse OAuth applications
  • Cyber Security

Phishing for Profits: Attackers Mine Crypto & Spam Through OAuth Apps

Do Son December 13, 2023 0
In the evolving landscape of cyber threats, a new trend has emerged that challenges the conventional understanding...
Read More Read more about Phishing for Profits: Attackers Mine Crypto & Spam Through OAuth Apps
PyPI Poisoned: 116 Malicious Packages Target Windows and Linux malicious PyPI
  • Malware

PyPI Poisoned: 116 Malicious Packages Target Windows and Linux

Do Son December 12, 2023 0
A recent ESET research study has shed light on a disturbing development in the Python Package Index...
Read More Read more about PyPI Poisoned: 116 Malicious Packages Target Windows and Linux
Thousands of Exposed Cloud Buckets Threaten Data Security Cloud Buckets Exposed
  • Data Leak

Thousands of Exposed Cloud Buckets Threaten Data Security

Do Son December 12, 2023 0
In the ever-evolving landscape of information technology, a recent study from RedHunt Labs has uncovered a startling...
Read More Read more about Thousands of Exposed Cloud Buckets Threaten Data Security
Log4Shell (CVE-2021-44228): Millions of Applications Remain Unpatched Two Years Later CVE-2021-44228
  • Vulnerability

Log4Shell (CVE-2021-44228): Millions of Applications Remain Unpatched Two Years Later

Do Son December 12, 2023 0
December 9 marks the second anniversary of a cybersecurity alert that sent shockwaves through the digital world:...
Read More Read more about Log4Shell (CVE-2021-44228): Millions of Applications Remain Unpatched Two Years Later
Kyivstar Down: Cyberattack Cripples Ukraine’s Largest Telecom Provider Kyivstar cyberattack
  • Cyber Security

Kyivstar Down: Cyberattack Cripples Ukraine’s Largest Telecom Provider

Do Son December 12, 2023 0
Kyivstar, Ukraine’s premier telecommunications operator serving over 25 million mobile and home internet subscribers, has experienced a...
Read More Read more about Kyivstar Down: Cyberattack Cripples Ukraine’s Largest Telecom Provider
❮ Prev Page
Next Page ❯

Search

Translation

CVE ALERTS
📈

EPSS Spike Alerts
Catch risk spikes before they make headlines.

🎯

Custom EPSS/CVSS
Set score thresholds to effectively filter noise.

🛡️

Exploit Intel
Real-world exploit signals beyond the KEV catalog.

🐙

GitHub Issues
Auto-create alert tickets without duplication.

📬

Weekly Digest
Clean summaries, eliminating email spam.

🏷️

Watchlist Groups
Tag vulnerabilities by team (Infra/AppSec/SOC).

🔀

Smart Routing
Route chat channels based on severity levels.

🚨

RBP Tracker
Early warning detection and tracking system.

Subscribe – $7/mo or try free for 14 days →

🚨 Active Exploits in the Wild

  • CVE-2020-13125CVSS 7.2
    An issue was discovered in the "Ultimate Addons for Elementor" plugin before 1.24.2 for WordPress, as exploited in...
    Watchtower Verified📅 Updated: Oct 17, 2026
  • CVE-2020-13126CVSS 9.9
    An issue was discovered in the Elementor Pro plugin before 2.9.4 for WordPress, as exploited in the wild...
    Watchtower Verified📅 Updated: Oct 17, 2026
  • CVE-2019-20180CVSS 8.0
    The TablePress plugin for WordPress is vulnerable to CSV Injection in versions up to and including 1.14 via...
    Watchtower Verified📅 Updated: Oct 17, 2026
  • CVE-2026-111862CVSS 9.8
    Rank Math SEO PRO for WordPress is affected by a supply-chain compromise in a subset of version 3.0.123...
    Admin intel📅 Updated: Oct 17, 2026
  • CVE-2026-111357CVSS 7.0
    Ivanti Connect Secure 22.8R2.4 mishandles the manner in which the dsinvoked broker trusts DSCache configuration data, leading to...
    Watchtower Verified📅 Updated: Oct 17, 2026
  • CVE-2025-61624CVSS 6.0
    An Improper Limitation of a Pathname to a Restricted Directory (\'Path Traversal\') [CWE-22] vulnerability in Fortinet FortiOS 7.6.0...
    CISA KEV📅 Added to KEV: Oct 16, 2026
  • CVE-2026-102764CVSS 9.3
    The vulnerability exists within internal components of BeyondTrust’s Remote Support product. The components did not adequately validate the...
    CISA KEV📅 Added to KEV: Oct 16, 2026
  • CVE-2026-106931CVSS 8.5
    SiteGuard Server Edition contains an OS command injection vulnerability, which may allow an attacker to execute arbitrary OS...
    Admin intel📅 Updated: Oct 15, 2026
Powered by CVE Watchtower

Critical Vulnerabilities

  • CVE-2026-111862CVSS 9.8
    Rank Math SEO PRO for WordPress is affected by a supply-chain compromise in a subset of version 3.0.123...
    Admin intel📅 Updated: Oct 17, 2026
  • CVE-2026-104736CVSS 9.8
    The LearnPress plugin for WordPress is vulnerable to PHP Object Injection in versions up to, and including, 4.4.10...
    📅 Updated: Oct 17, 2026
  • CVE-2026-101950CVSS 9.3
    A Heap-based Buffer Overflow vulnerability in the SVR component of Juniper Networks Junos OS on SRX Series allows...
    📅 Updated: Oct 17, 2026
  • CVE-2026-110653CVSS 9.1
    The Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress plugin for WordPress is vulnerable to...
    📅 Updated: Oct 17, 2026
  • CVE-2026-97381CVSS 9.9
    Legacy Update is a tool for activating and installing updates on legacy Windows PCs. Legacy Update 1.12.0 through...
    📅 Updated: Oct 17, 2026
  • CVE-2026-93895CVSS 9.1
    IBM WebSphere Application Server - Liberty 20.0.0.12 through 26.0.0.10 could allow an unauthenticated remote attacker to bypass access...
    📅 Updated: Oct 17, 2026
  • CVE-2026-111823CVSS 9.8
    Mage OSS through 0.9.80 before 76c4f46 can proceed with session creation upon encountering an unknown OAuth provider.
    📅 Updated: Oct 17, 2026
  • CVE-2026-106629CVSS 9.3
    Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an...
    📅 Updated: Oct 17, 2026
Powered by CVE Watchtower

Daily CyberSecurity

  • About SecurityOnline.info
  • Advertise with us
  • Announcement
  • Contact
  • Contributor Register
  • Login
  • Disclaimer
  • DCMA
  • Privacy Policy
  • About SecurityOnline.info
  • Advertise on SecurityOnline.info
  • Contact Us

When you purchase through links on our site, we may earn an affiliate commission. Here’s how it works

  • CVE Watchtower
  • CVE Statistics by Vendor 2026
  • Q3 2026 Report
  • Top Exploited CVEs
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube
© 2017 - 2026 Daily CyberSecurity. All Rights Reserved.