Skip to content
October 18, 2026
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube

Daily CyberSecurity

Zero-hour alerts. Unmatched analysis.

Primary Menu
  • Home
  • CVE Data
    • CVE Watchtower
    • Top Exploited CVEs
    • CVE Stats by Vendor
    • Q2 2026 Report
    • CVE Alerts
    • CVE Alert Settings
    • Pricing
  • Cyber Criminals
  • Data Leak
  • Free Tools
    • CVSS 3.1 Calculator
    • Certificate Viewer
    • DNS Lookup
    • Encoder & Hash Generator
    • IP / Subnet Calculator
    • Whois Lookup
  • Linux
  • Malware
  • Vulnerability
  • Submit Press Release
  • Weekly Recap
Light/Dark Button
Over 1,200 Entities Hit by TA571’s Forked IcedID Offensive Forked IcedID
  • Cyber Security
  • Malware

Over 1,200 Entities Hit by TA571’s Forked IcedID Offensive

Do Son October 30, 2023 0
In recent cyber-espionage activities, Proofpoint researchers have unveiled two malicious campaigns orchestrated by TA571 on 11 and...
Read More Read more about Over 1,200 Entities Hit by TA571’s Forked IcedID Offensive
Higaisa Hacker Targets Chinese Users with Deceptive OpenVPN Clone Higaisa Hacker
  • Cyber Security
  • Malware

Higaisa Hacker Targets Chinese Users with Deceptive OpenVPN Clone

Do Son October 30, 2023 0
Cybersecurity researchers at Cyble have issued warnings about a fresh wave of attacks targeting Chinese internet users,...
Read More Read more about Higaisa Hacker Targets Chinese Users with Deceptive OpenVPN Clone
NCSC’s PDNS: A New Shield for UK Schools Against Cyber Threats Protective Domain Name Service
  • News

NCSC’s PDNS: A New Shield for UK Schools Against Cyber Threats

Do Son October 30, 2023 0
In response to the escalating cyber threats within the educational sector, the UK’s National Cyber Security Centre...
Read More Read more about NCSC’s PDNS: A New Shield for UK Schools Against Cyber Threats
HackerOne’s $300M Milestone: Ethical Hackers Triumph HackerOne report
  • News
  • Vulnerability

HackerOne’s $300M Milestone: Ethical Hackers Triumph

Do Son October 30, 2023 0
A seminal moment has dawned in the realm of cybersecurity: HackerOne, a vanguard in bolstering resilience against...
Read More Read more about HackerOne’s $300M Milestone: Ethical Hackers Triumph
Ragnar Locker Ransomware: Key Developer Behind Bars in Major Raid Ragnar Locker ransomware
  • Cyber Security
  • Malware

Ragnar Locker Ransomware: Key Developer Behind Bars in Major Raid

Do Son October 30, 2023 0
As a result of an international operation spearheaded by Europol, one of the largest syndicates involved in...
Read More Read more about Ragnar Locker Ransomware: Key Developer Behind Bars in Major Raid
CVE-2023-47090: NATS.io Authentication Bypass Vulnerability CVE-2023-47090
  • Vulnerability

CVE-2023-47090: NATS.io Authentication Bypass Vulnerability

Do Son October 30, 2023 0
NATS.io is a popular cloud-native messaging system that is used by a wide variety of companies, including...
Read More Read more about CVE-2023-47090: NATS.io Authentication Bypass Vulnerability
CCSD’s Significant Data Breach Unveiled: Over 300,000 Students’ Data at Risk
  • Cyber Security
  • Data Leak

CCSD’s Significant Data Breach Unveiled: Over 300,000 Students’ Data at Risk

Do Son October 30, 2023 0
In the esteemed Clark County School District (CCSD) of Nevada, a cyberattack transpired, granting hackers unauthorized access...
Read More Read more about CCSD’s Significant Data Breach Unveiled: Over 300,000 Students’ Data at Risk
PoC released for Microsoft WordPad CVE-2023-36563 flaw exploited in attacks CVE-2023-36563
  • Vulnerability

PoC released for Microsoft WordPad CVE-2023-36563 flaw exploited in attacks

Do Son October 30, 2023 0
On October 23, security researcher Dillon Franke published a proof-of-concept (PoC) exploit for an actively exploited Microsoft...
Read More Read more about PoC released for Microsoft WordPad CVE-2023-36563 flaw exploited in attacks
Lockbit ransomware group listed Boeing on their victims list Lockbit ransomware Boeing
  • Malware

Lockbit ransomware group listed Boeing on their victims list

Do Son October 30, 2023 0
The eminent aerospace conglomerate, Boeing, has found itself ensnared by the cyber malefactors of Lockbit, who audaciously...
Read More Read more about Lockbit ransomware group listed Boeing on their victims list
Israel uses Pegasus spyware to track hostages in Gaza Pegasus spyware
  • Cyber Security
  • Malware

Israel uses Pegasus spyware to track hostages in Gaza

Do Son October 30, 2023 0
Israel’s security services have enlisted espionage firms, including the manufacturer of the controversial software, Pegasus, to aid...
Read More Read more about Israel uses Pegasus spyware to track hostages in Gaza
Why Does Ethical Design Matter? design
  • Technique

Why Does Ethical Design Matter?

Do Son October 30, 2023 0
As technology gets bigger and more woven into our daily lives, the topic of ethical design is...
Read More Read more about Why Does Ethical Design Matter?
CVE-2023-46748: F5 BIG-IP SQL injection vulnerability CVE-2023-46748
  • Vulnerability

CVE-2023-46748: F5 BIG-IP SQL injection vulnerability

Do Son October 29, 2023 0
Recently, a high-severity vulnerability in the F5 BIG-IP configuration utility tracked as CVE-2023-46748 was discovered. What makes...
Read More Read more about CVE-2023-46748: F5 BIG-IP SQL injection vulnerability
Kaspersky Reveals Lazarus’ Sophisticated Techniques in Targeting Software Vendors Lazarus Sophisticated
  • Cyber Security
  • Malware

Kaspersky Reveals Lazarus’ Sophisticated Techniques in Targeting Software Vendors

Do Son October 27, 2023 0
In recent months, the Lazarus group, a notorious cyber threat actor, has shown increased activity, exploiting software...
Read More Read more about Kaspersky Reveals Lazarus’ Sophisticated Techniques in Targeting Software Vendors
ANSSI Alerts: APT28’s Stealthy Strikes on France APT28 France
  • Cyber Security
  • Vulnerability

ANSSI Alerts: APT28’s Stealthy Strikes on France

Do Son October 27, 2023 0
The hacking consortium APT28 (also known as Strontium or Fancy Bear) has been assailing governmental entities, businesses,...
Read More Read more about ANSSI Alerts: APT28’s Stealthy Strikes on France
CVE-2023-46604: Apache ActiveMQ Remote Code Execution Vulnerability Apache ActiveMQ Vulnerability
  • Vulnerability

CVE-2023-46604: Apache ActiveMQ Remote Code Execution Vulnerability

Do Son October 27, 2023 0
In the labyrinthine world of open-source software, Apache ActiveMQ stands as a beacon of reliable message brokering....
Read More Read more about CVE-2023-46604: Apache ActiveMQ Remote Code Execution Vulnerability
CVE-2023-34057 & CVE-2023-34058: Two High-Severity VMware Tools Vulnerabilities CVE-2023-34057
  • Vulnerability

CVE-2023-34057 & CVE-2023-34058: Two High-Severity VMware Tools Vulnerabilities

Do Son October 26, 2023 0
VMware has released security patches to address two critical vulnerabilities in VMware Tools, its suite of utilities...
Read More Read more about CVE-2023-34057 & CVE-2023-34058: Two High-Severity VMware Tools Vulnerabilities
30,000 Sites at Risk: Critical RCE Vulnerability Found in News & Blog Designer Pack CVE-2023-5815
  • Vulnerability

30,000 Sites at Risk: Critical RCE Vulnerability Found in News & Blog Designer Pack

Do Son October 26, 2023 0
The News & Blog Designer Pack WordPress plugin is a popular plugin that allows users to create...
Read More Read more about 30,000 Sites at Risk: Critical RCE Vulnerability Found in News & Blog Designer Pack
Seiko Says Black Cat Ransomware Exposes 60,000 Data Items Seiko Exposes Data
  • Data Leak
  • Malware

Seiko Says Black Cat Ransomware Exposes 60,000 Data Items

Do Son October 26, 2023 0
The esteemed Japanese watch manufacturer, Seiko, announced on Wednesday that a ransomware incident first reported this summer...
Read More Read more about Seiko Says Black Cat Ransomware Exposes 60,000 Data Items
Cloudflare DDoS threat report for 2023 Q3: Countering the 100M RPS HTTP/2 DDoS Onslaught HTTP/2 DDoS
  • Cyber Security
  • Vulnerability

Cloudflare DDoS threat report for 2023 Q3: Countering the 100M RPS HTTP/2 DDoS Onslaught

Do Son October 26, 2023 0
The recent unveiling of the HTTP/2 Rapid Reset (CVE-2023-44487) vulnerability earlier this month followed a comprehensive industry-wide...
Read More Read more about Cloudflare DDoS threat report for 2023 Q3: Countering the 100M RPS HTTP/2 DDoS Onslaught
IMAPLoader: The New Tool in Tortoiseshell’s Cyber Arsenal Lotus Wiper Digital Sabotage G_Wagon Malware NPM Supply Chain Attack IMAPLoader malware ResolverRAT Malware Evasion
  • Cyber Security
  • Malware

IMAPLoader: The New Tool in Tortoiseshell’s Cyber Arsenal

Do Son October 26, 2023 0
The Iranian hacker group, dubbed Tortoiseshell, caught the attention of PwC specialists due to their new wave...
Read More Read more about IMAPLoader: The New Tool in Tortoiseshell’s Cyber Arsenal
StripedFly: The Deceptive Malware Infecting Windows and Linux StripedFly Malware
  • Malware

StripedFly: The Deceptive Malware Infecting Windows and Linux

Do Son October 26, 2023 0
Kaspersky Lab experts have uncovered a complex malicious campaign named StripedFly, previously unknown and intricately designed. Since...
Read More Read more about StripedFly: The Deceptive Malware Infecting Windows and Linux
NCC Group Reports: September’s Alarming Ransomware Spike AvosLocker ransomware
  • Cyber Security
  • Malware

NCC Group Reports: September’s Alarming Ransomware Spike

Do Son October 26, 2023 0
Despite increasing efforts from law enforcement and investigators, the surge in cyber extortion operations remains unabated. The...
Read More Read more about NCC Group Reports: September’s Alarming Ransomware Spike
❮ Prev Page
Next Page ❯

Search

Translation

CVE ALERTS
📈

EPSS Spike Alerts
Catch risk spikes before they make headlines.

🎯

Custom EPSS/CVSS
Set score thresholds to effectively filter noise.

🛡️

Exploit Intel
Real-world exploit signals beyond the KEV catalog.

🐙

GitHub Issues
Auto-create alert tickets without duplication.

📬

Weekly Digest
Clean summaries, eliminating email spam.

🏷️

Watchlist Groups
Tag vulnerabilities by team (Infra/AppSec/SOC).

🔀

Smart Routing
Route chat channels based on severity levels.

🚨

RBP Tracker
Early warning detection and tracking system.

Subscribe – $7/mo or try free for 14 days →

🚨 Active Exploits in the Wild

  • CVE-2020-13125CVSS 7.2
    An issue was discovered in the "Ultimate Addons for Elementor" plugin before 1.24.2 for WordPress, as exploited in...
    Watchtower Verified📅 Updated: Oct 18, 2026
  • CVE-2020-13126CVSS 9.9
    An issue was discovered in the Elementor Pro plugin before 2.9.4 for WordPress, as exploited in the wild...
    Watchtower Verified📅 Updated: Oct 18, 2026
  • CVE-2019-20180CVSS 8.0
    The TablePress plugin for WordPress is vulnerable to CSV Injection in versions up to and including 1.14 via...
    Watchtower Verified📅 Updated: Oct 18, 2026
  • CVE-2026-111862CVSS 9.8
    Rank Math SEO PRO for WordPress is affected by a supply-chain compromise in a subset of version 3.0.123...
    Admin intel📅 Updated: Oct 17, 2026
  • CVE-2026-111357CVSS 7.0
    Ivanti Connect Secure 22.8R2.4 mishandles the manner in which the dsinvoked broker trusts DSCache configuration data, leading to...
    Watchtower Verified📅 Updated: Oct 17, 2026
  • CVE-2025-61624CVSS 6.0
    An Improper Limitation of a Pathname to a Restricted Directory (\'Path Traversal\') [CWE-22] vulnerability in Fortinet FortiOS 7.6.0...
    CISA KEV📅 Added to KEV: Oct 16, 2026
  • CVE-2026-102764CVSS 9.3
    The vulnerability exists within internal components of BeyondTrust’s Remote Support product. The components did not adequately validate the...
    CISA KEV📅 Added to KEV: Oct 16, 2026
  • CVE-2026-106931CVSS 8.5
    SiteGuard Server Edition contains an OS command injection vulnerability, which may allow an attacker to execute arbitrary OS...
    Admin intel📅 Updated: Oct 15, 2026
Powered by CVE Watchtower

Critical Vulnerabilities

  • CVE-2026-111911CVSS 9.3
    phpMyFAQ 4.0.0 before 4.1.9 contains an authentication bypass vulnerability where WebAuthn registration endpoints attach credentials to any account...
    📅 Updated: Oct 17, 2026
  • CVE-2026-111862CVSS 9.8
    Rank Math SEO PRO for WordPress is affected by a supply-chain compromise in a subset of version 3.0.123...
    Admin intel📅 Updated: Oct 17, 2026
  • CVE-2026-104736CVSS 9.8
    The LearnPress plugin for WordPress is vulnerable to PHP Object Injection in versions up to, and including, 4.4.10...
    📅 Updated: Oct 17, 2026
  • CVE-2026-101950CVSS 9.3
    A Heap-based Buffer Overflow vulnerability in the SVR component of Juniper Networks Junos OS on SRX Series allows...
    📅 Updated: Oct 17, 2026
  • CVE-2026-110653CVSS 9.1
    The Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress plugin for WordPress is vulnerable to...
    📅 Updated: Oct 17, 2026
  • CVE-2026-97381CVSS 9.9
    Legacy Update is a tool for activating and installing updates on legacy Windows PCs. Legacy Update 1.12.0 through...
    📅 Updated: Oct 17, 2026
  • CVE-2026-93895CVSS 9.1
    IBM WebSphere Application Server - Liberty 20.0.0.12 through 26.0.0.10 could allow an unauthenticated remote attacker to bypass access...
    📅 Updated: Oct 17, 2026
  • CVE-2026-111823CVSS 9.8
    Mage OSS through 0.9.80 before 76c4f46 can proceed with session creation upon encountering an unknown OAuth provider.
    📅 Updated: Oct 17, 2026
Powered by CVE Watchtower

Daily CyberSecurity

  • About SecurityOnline.info
  • Advertise with us
  • Announcement
  • Contact
  • Contributor Register
  • Login
  • Disclaimer
  • DCMA
  • Privacy Policy
  • About SecurityOnline.info
  • Advertise on SecurityOnline.info
  • Contact Us

When you purchase through links on our site, we may earn an affiliate commission. Here’s how it works

  • CVE Watchtower
  • CVE Statistics by Vendor 2026
  • Q3 2026 Report
  • Top Exploited CVEs
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube
© 2017 - 2026 Daily CyberSecurity. All Rights Reserved.