Skip to content
October 18, 2026
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube

Daily CyberSecurity

Zero-hour alerts. Unmatched analysis.

Primary Menu
  • Home
  • CVE Data
    • CVE Watchtower
    • Top Exploited CVEs
    • CVE Stats by Vendor
    • Q2 2026 Report
    • CVE Alerts
    • CVE Alert Settings
    • Pricing
  • Cyber Criminals
  • Data Leak
  • Free Tools
    • CVSS 3.1 Calculator
    • Certificate Viewer
    • DNS Lookup
    • Encoder & Hash Generator
    • IP / Subnet Calculator
    • Whois Lookup
  • Linux
  • Malware
  • Vulnerability
  • Submit Press Release
  • Weekly Recap
Light/Dark Button
Palo Alto Networks Revealed Worldwide Linux XorDDoS Campaign XorDDoS Trojan
  • Malware

Palo Alto Networks Revealed Worldwide Linux XorDDoS Campaign

Do Son October 16, 2023 0
Palo Alto Networks has recently unearthed a new wave of attacks emanating from the XorDDoS Trojan. A...
Read More Read more about Palo Alto Networks Revealed Worldwide Linux XorDDoS Campaign
Cybercriminals Turn Discord into Malware Playground with Lumma Stealer Lumma Stealer
  • Malware

Cybercriminals Turn Discord into Malware Playground with Lumma Stealer

Do Son October 16, 2023 0
In a concerning revelation, Trend Micro’s security researchers have spotlighted a sinister trend: cybercriminals are deploying a...
Read More Read more about Cybercriminals Turn Discord into Malware Playground with Lumma Stealer
CVE-2023-5178 – Arbitrary Code Execution: Linux NVMe-oF/TCP Driver’s Alarming Flaw CVE-2023-5178
  • Vulnerability

CVE-2023-5178 – Arbitrary Code Execution: Linux NVMe-oF/TCP Driver’s Alarming Flaw

Do Son October 15, 2023 0
A critical security vulnerability has been discovered in the Linux NVMe-oF/TCP driver. This vulnerability, CVE-2023-5178, can be...
Read More Read more about CVE-2023-5178 – Arbitrary Code Execution: Linux NVMe-oF/TCP Driver’s Alarming Flaw
Node.js is vulnerable to HTTP/2 rapid reset zero-day vulnerability CVE-2023-44487 Node.js CVE-2023-44487
  • Vulnerability

Node.js is vulnerable to HTTP/2 rapid reset zero-day vulnerability CVE-2023-44487

Do Son October 15, 2023 0
Node.js is a popular JavaScript runtime environment that is used to build scalable and performant web applications...
Read More Read more about Node.js is vulnerable to HTTP/2 rapid reset zero-day vulnerability CVE-2023-44487
Addressing Critical Security Vulnerabilities in Apache InLong: What You Need to Know Apache InLong vulnerabilities
  • Vulnerability

Addressing Critical Security Vulnerabilities in Apache InLong: What You Need to Know

Do Son October 15, 2023 0
Apache InLong is a one-stop, full-scenario integration framework for massive data that supports Data Ingestion, Data Synchronization,...
Read More Read more about Addressing Critical Security Vulnerabilities in Apache InLong: What You Need to Know
Steam Bolsters Security with SMS Confirmations Amid Malware Scare Steam Malware
  • Cyber Security
  • Malware

Steam Bolsters Security with SMS Confirmations Amid Malware Scare

Do Son October 15, 2023 0
Recently, the Steam accounts of several game developers were compromised by hackers, who subsequently disseminated malicious software...
Read More Read more about Steam Bolsters Security with SMS Confirmations Amid Malware Scare
iPhone and Mac Users Beware: PoC Exploit for CVE-2023-41993 Zero-Day Released CVE-2023-41993 PoC
  • Vulnerability

iPhone and Mac Users Beware: PoC Exploit for CVE-2023-41993 Zero-Day Released

Do Son October 15, 2023 0
On October 15, 2023, a security researcher with X (formerly Twitter) alias @po6ix released a proof-of-concept (PoC)...
Read More Read more about iPhone and Mac Users Beware: PoC Exploit for CVE-2023-41993 Zero-Day Released
CISA’s RVWP Expands: A Spotlight on Ransomware Threats CISA RVWP
  • News

CISA’s RVWP Expands: A Spotlight on Ransomware Threats

Do Son October 15, 2023 0
The premier U.S. cybersecurity agency has announced plans to incorporate a section dedicated to groups deploying malicious...
Read More Read more about CISA’s RVWP Expands: A Spotlight on Ransomware Threats
Ubuntu 23.10 Pulls Images Amid Offensive Translation Scandal Ubuntu 24.10, End of Life Ubuntu 23.10 Translation
  • Technology

Ubuntu 23.10 Pulls Images Amid Offensive Translation Scandal

Do Son October 15, 2023 0
Canonical retracted the Ubuntu 23.10 images merely hours after their release due to user translations for the...
Read More Read more about Ubuntu 23.10 Pulls Images Amid Offensive Translation Scandal
ToddyCat’s Stealthy Assault: Asian Nations in the Crosshairs ToddyCat
  • Cyber Security
  • Malware

ToddyCat’s Stealthy Assault: Asian Nations in the Crosshairs

Do Son October 14, 2023 0
Researchers have unveiled an expansive campaign dubbed “Stayin’ Alive,” targeting governmental bodies and telecommunication firms across several...
Read More Read more about ToddyCat’s Stealthy Assault: Asian Nations in the Crosshairs
CVE-2023-5360: WordPress Plugin Zero-Day Affects 200k Sites CVE-2023-5360
  • Vulnerability

CVE-2023-5360: WordPress Plugin Zero-Day Affects 200k Sites

Do Son October 14, 2023 0
On October 13, 2023, the Wordfence Threat Intelligence team warned that WordPress sites are actively targeted with...
Read More Read more about CVE-2023-5360: WordPress Plugin Zero-Day Affects 200k Sites
Researcher details one-click RCE on Microsoft Visual Studio Visual Studio RCE
  • Vulnerability

Researcher details one-click RCE on Microsoft Visual Studio

Do Son October 13, 2023 0
The security of development tools is paramount. As software becomes more integrated with our daily lives, the...
Read More Read more about Researcher details one-click RCE on Microsoft Visual Studio
Equifax Slapped with £11M FCA Fine Over Data Security Lapse FCA Fine Equifax
  • Data Leak

Equifax Slapped with £11M FCA Fine Over Data Security Lapse

Do Son October 13, 2023 0
The United Kingdom has finally rendered a decisive judgment on a long-standing matter involving Equifax, which experienced...
Read More Read more about Equifax Slapped with £11M FCA Fine Over Data Security Lapse
Indian Government Portal Exposes Residents’ Aadhaar Details and Fingerprints Aadhaar Fingerprints
  • Data Leak

Indian Government Portal Exposes Residents’ Aadhaar Details and Fingerprints

Do Son October 13, 2023 0
An independent digital security researcher has unveiled a glitch within the governmental website of West Bengal, India....
Read More Read more about Indian Government Portal Exposes Residents’ Aadhaar Details and Fingerprints
From Legit Software to Ransomware: AvosLocker’s Stealth Tactics Exposed AvosLocker ransomware
  • Malware

From Legit Software to Ransomware: AvosLocker’s Stealth Tactics Exposed

Do Son October 13, 2023 0
In a joint communique from the Federal Bureau of Investigation (FBI) and the Cybersecurity and Infrastructure Security...
Read More Read more about From Legit Software to Ransomware: AvosLocker’s Stealth Tactics Exposed
Security Alert: Squid Proxy’s Unresolved Vulnerabilities Squid Vulnerabilities
  • Vulnerability

Security Alert: Squid Proxy’s Unresolved Vulnerabilities

Do Son October 13, 2023 0
Over two years have elapsed since the discovery of 35 vulnerabilities in the Squid caching proxy, yet...
Read More Read more about Security Alert: Squid Proxy’s Unresolved Vulnerabilities
PyPi’s Malware Intrusion: AWS, Alibaba Cloud, and Telegram in the Crosshairs PyPi Malware
  • Malware

PyPi’s Malware Intrusion: AWS, Alibaba Cloud, and Telegram in the Crosshairs

Do Son October 13, 2023 0
In recent developments, a new digital adversary is lurking in the open-source realm, targeting unsuspecting developers and...
Read More Read more about PyPi’s Malware Intrusion: AWS, Alibaba Cloud, and Telegram in the Crosshairs
Akira Ransomware: The New Threat Targeting Windows & Linux Akira ransomware
  • Malware

Akira Ransomware: The New Threat Targeting Windows & Linux

Do Son October 13, 2023 0
In recent months, the cybersecurity landscape has seen the rise of a potent ransomware variant known as...
Read More Read more about Akira Ransomware: The New Threat Targeting Windows & Linux
LummaC2 and Raccoon Stealer: The Rise of Certificate Abuse in Malware Raccoon Stealer
  • Malware

LummaC2 and Raccoon Stealer: The Rise of Certificate Abuse in Malware

Do Son October 13, 2023 0
Of late, cybercriminals have deployed an increasingly sophisticated technique, abusing certificates to disseminate malicious software. Their primary...
Read More Read more about LummaC2 and Raccoon Stealer: The Rise of Certificate Abuse in Malware
Zhao’s Bribes Unveiled: Selling US Navy’s Critical Secrets US Navy's Secrets
  • Data Leak

Zhao’s Bribes Unveiled: Selling US Navy’s Critical Secrets

Do Son October 13, 2023 0
US Navy serviceman, Wenheng Zhao, has confessed to selling American military secrets to a Chinese intelligence operative....
Read More Read more about Zhao’s Bribes Unveiled: Selling US Navy’s Critical Secrets
Simpson Manufacturing Faced A Cybersecurity Incident Simpson Manufacturing cybersecurity incident
  • Cyber Security

Simpson Manufacturing Faced A Cybersecurity Incident

Do Son October 13, 2023 0
Simpson Manufacturing, a foremost American purveyor of construction and architectural materials and a leading connector component manufacturer...
Read More Read more about Simpson Manufacturing Faced A Cybersecurity Incident
ShellBot Botnet’s New Hexadecimal Trick Targets Linux Servers ShellBot Botnet
  • Malware

ShellBot Botnet’s New Hexadecimal Trick Targets Linux Servers

Do Son October 13, 2023 0
Malicious actors behind the ShellBot botnet are employing hexadecimal-converted IP addresses to infiltrate vulnerable SSH Linux servers...
Read More Read more about ShellBot Botnet’s New Hexadecimal Trick Targets Linux Servers
❮ Prev Page
Next Page ❯

Search

Translation

CVE ALERTS
📈

EPSS Spike Alerts
Catch risk spikes before they make headlines.

🎯

Custom EPSS/CVSS
Set score thresholds to effectively filter noise.

🛡️

Exploit Intel
Real-world exploit signals beyond the KEV catalog.

🐙

GitHub Issues
Auto-create alert tickets without duplication.

📬

Weekly Digest
Clean summaries, eliminating email spam.

🏷️

Watchlist Groups
Tag vulnerabilities by team (Infra/AppSec/SOC).

🔀

Smart Routing
Route chat channels based on severity levels.

🚨

RBP Tracker
Early warning detection and tracking system.

Subscribe – $7/mo or try free for 14 days →

🚨 Active Exploits in the Wild

  • CVE-2020-13125CVSS 7.2
    An issue was discovered in the "Ultimate Addons for Elementor" plugin before 1.24.2 for WordPress, as exploited in...
    Watchtower Verified📅 Updated: Oct 18, 2026
  • CVE-2020-13126CVSS 9.9
    An issue was discovered in the Elementor Pro plugin before 2.9.4 for WordPress, as exploited in the wild...
    Watchtower Verified📅 Updated: Oct 18, 2026
  • CVE-2019-20180CVSS 8.0
    The TablePress plugin for WordPress is vulnerable to CSV Injection in versions up to and including 1.14 via...
    Watchtower Verified📅 Updated: Oct 18, 2026
  • CVE-2026-111862CVSS 9.8
    Rank Math SEO PRO for WordPress is affected by a supply-chain compromise in a subset of version 3.0.123...
    Admin intel📅 Updated: Oct 17, 2026
  • CVE-2026-111357CVSS 7.0
    Ivanti Connect Secure 22.8R2.4 mishandles the manner in which the dsinvoked broker trusts DSCache configuration data, leading to...
    Watchtower Verified📅 Updated: Oct 17, 2026
  • CVE-2025-61624CVSS 6.0
    An Improper Limitation of a Pathname to a Restricted Directory (\'Path Traversal\') [CWE-22] vulnerability in Fortinet FortiOS 7.6.0...
    CISA KEV📅 Added to KEV: Oct 16, 2026
  • CVE-2026-102764CVSS 9.3
    The vulnerability exists within internal components of BeyondTrust’s Remote Support product. The components did not adequately validate the...
    CISA KEV📅 Added to KEV: Oct 16, 2026
  • CVE-2026-106931CVSS 8.5
    SiteGuard Server Edition contains an OS command injection vulnerability, which may allow an attacker to execute arbitrary OS...
    Admin intel📅 Updated: Oct 15, 2026
Powered by CVE Watchtower

Critical Vulnerabilities

  • CVE-2026-16337CVSS 9.4
    Improper authorization in the ToolGroupResource and RoleAjax REST/DWR endpoints in dotCMS dotCMS 21.02 through 26.06.22-03 on all platforms...
    📅 Updated: Oct 18, 2026
  • CVE-2026-111911CVSS 9.3
    phpMyFAQ 4.0.0 before 4.1.9 contains an authentication bypass vulnerability where WebAuthn registration endpoints attach credentials to any account...
    📅 Updated: Oct 17, 2026
  • CVE-2026-111862CVSS 9.8
    Rank Math SEO PRO for WordPress is affected by a supply-chain compromise in a subset of version 3.0.123...
    Admin intel📅 Updated: Oct 17, 2026
  • CVE-2026-104736CVSS 9.8
    The LearnPress plugin for WordPress is vulnerable to PHP Object Injection in versions up to, and including, 4.4.10...
    📅 Updated: Oct 17, 2026
  • CVE-2026-101950CVSS 9.3
    A Heap-based Buffer Overflow vulnerability in the SVR component of Juniper Networks Junos OS on SRX Series allows...
    📅 Updated: Oct 17, 2026
  • CVE-2026-110653CVSS 9.1
    The Appointment Booking Plugin – LatePoint | Calendar & Scheduling for WordPress plugin for WordPress is vulnerable to...
    📅 Updated: Oct 17, 2026
  • CVE-2026-97381CVSS 9.9
    Legacy Update is a tool for activating and installing updates on legacy Windows PCs. Legacy Update 1.12.0 through...
    📅 Updated: Oct 17, 2026
  • CVE-2026-93895CVSS 9.1
    IBM WebSphere Application Server - Liberty 20.0.0.12 through 26.0.0.10 could allow an unauthenticated remote attacker to bypass access...
    📅 Updated: Oct 17, 2026
Powered by CVE Watchtower

Daily CyberSecurity

  • About SecurityOnline.info
  • Advertise with us
  • Announcement
  • Contact
  • Contributor Register
  • Login
  • Disclaimer
  • DCMA
  • Privacy Policy
  • About SecurityOnline.info
  • Advertise on SecurityOnline.info
  • Contact Us

When you purchase through links on our site, we may earn an affiliate commission. Here’s how it works

  • CVE Watchtower
  • CVE Statistics by Vendor 2026
  • Q3 2026 Report
  • Top Exploited CVEs
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube
© 2017 - 2026 Daily CyberSecurity. All Rights Reserved.