Skip to content
October 19, 2026
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube

Daily CyberSecurity

Zero-hour alerts. Unmatched analysis.

Primary Menu
  • Home
  • CVE Data
    • CVE Watchtower
    • Top Exploited CVEs
    • CVE Stats by Vendor
    • Q2 2026 Report
    • CVE Alerts
    • CVE Alert Settings
    • Pricing
  • Cyber Criminals
  • Data Leak
  • Free Tools
    • CVSS 3.1 Calculator
    • Certificate Viewer
    • DNS Lookup
    • Encoder & Hash Generator
    • IP / Subnet Calculator
    • Whois Lookup
  • Linux
  • Malware
  • Vulnerability
  • Submit Press Release
  • Weekly Recap
Light/Dark Button
Iranian Airport Electronic Display Screened Protest Messages Iranian Airport
  • Cyber Security

Iranian Airport Electronic Display Screened Protest Messages

Do Son May 29, 2018
On Thursday (May 24), the airport in Mashhad, northeastern Iran, was attacked by a group of unidentified...
Read More Read more about Iranian Airport Electronic Display Screened Protest Messages
FBI Remind User to Restart Router to Remove VPNFILTER malware VPNFilter malware
  • Malware

FBI Remind User to Restart Router to Remove VPNFILTER malware

Do Son May 29, 2018
Previously, Cisco’s security labs discovered that malware named VPNFILTER has infected more than 500,000 routers worldwide. The malware...
Read More Read more about FBI Remind User to Restart Router to Remove VPNFILTER malware
Researcher release PS4 5.05 Kernel Exploit PS4 4.05 firmware hacked
  • Vulnerability

Researcher release PS4 5.05 Kernel Exploit

Do Son May 28, 2018
In January, the PS4 crack based on the 4.05 firmware was released. On February 28th, the 4.55...
Read More Read more about Researcher release PS4 5.05 Kernel Exploit
Dragos’s reseacher: Trisis malware has expanded its target
  • Malware

Dragos’s reseacher: Trisis malware has expanded its target

Do Son May 28, 2018
Industrial Cyber Security company Dragos disclosed on May 24th, 2018 that the hacking organization Xenotime’s initial trajectory...
Read More Read more about Dragos’s reseacher: Trisis malware has expanded its target
New Monero mining software target Mac users
  • Malware

New Monero mining software target Mac users

Do Son May 28, 2018
A large number of Mac users have discovered that a process called “mshelper” takes up their CPUs...
Read More Read more about New Monero mining software target Mac users
Bitcoin Gold Hacked: Lose $18 Million
  • Cyber Security

Bitcoin Gold Hacked: Lose $18 Million

Do Son May 28, 2018
Bitcoin Gold’s development team recently announced details of the attacks last week. At that time, the attacker stole...
Read More Read more about Bitcoin Gold Hacked: Lose $18 Million
Schneider PLC exposes high-risk vulnerability allowing hackers to initiate remote attacks ManageEngine strelka
  • Vulnerability

Schneider PLC exposes high-risk vulnerability allowing hackers to initiate remote attacks

Do Son May 28, 2018
Schneider Electric, a global leader in energy efficiency management, issued a fix last Tuesday against a high-risk...
Read More Read more about Schneider PLC exposes high-risk vulnerability allowing hackers to initiate remote attacks
AgentRun data leak reveals personal sensitive information of customers
  • Data Leak

AgentRun data leak reveals personal sensitive information of customers

Do Son May 28, 2018
The US software company AgentRun has accidentally exposed the thousands personal sensitive information of policyholders recently. The reason is...
Read More Read more about AgentRun data leak reveals personal sensitive information of customers
Oracle plant to remove Java serialization due to security issues Java serialization
  • Technology

Oracle plant to remove Java serialization due to security issues

Do Son May 28, 2018
Oracle plans to remove serialization capabilities from Java because it has always been a thorny issue in...
Read More Read more about Oracle plant to remove Java serialization due to security issues
Domain Name WHOIS Information Will No Longer Show Contact Information WHOIS
  • Technology

Domain Name WHOIS Information Will No Longer Show Contact Information

Do Son May 28, 2018
Recently, the European Union has officially started implementing a new privacy protection act, the “General Data Protection...
Read More Read more about Domain Name WHOIS Information Will No Longer Show Contact Information
Microsoft develops new tools that prevent AI algorithms from being biased network attack
  • Technology

Microsoft develops new tools that prevent AI algorithms from being biased

Do Son May 27, 2018
Microsoft has developed a new set of tools to determine if AI algorithms are biased. The AI algorithm...
Read More Read more about Microsoft develops new tools that prevent AI algorithms from being biased
Z-Wave downgrade attacks: 100 million IoT devices are affected
  • Vulnerability

Z-Wave downgrade attacks: 100 million IoT devices are affected

Do Son May 26, 2018
Pen Test Partners, a UK-based network security company focused on penetration testing and security services, recently issued...
Read More Read more about Z-Wave downgrade attacks: 100 million IoT devices are affected
Amazon Alexa eavesdropped on my private conversation and randomly shared it with your contact
  • Technology

Amazon Alexa eavesdropped on my private conversation and randomly shared it with your contact

Do Son May 26, 2018
The Danielle family from Portland, United States, recently encountered a “mysterious” eavesdropping incident. A few days ago, Danielle...
Read More Read more about Amazon Alexa eavesdropped on my private conversation and randomly shared it with your contact
Intel’s new processor may not be able to repair the new Spectre variant vulnerability
  • Technology

Intel’s new processor may not be able to repair the new Spectre variant vulnerability

Do Son May 26, 2018
The modern processor, which has been exposed since the beginning of the year, has pushed chip maker...
Read More Read more about Intel’s new processor may not be able to repair the new Spectre variant vulnerability
Canonical Releases Major Core Updates for Ubuntu 17.10, 16.04 LTS, and 14.04 LTS
  • Linux
  • Vulnerability

Canonical Releases Major Core Updates for Ubuntu 17.10, 16.04 LTS, and 14.04 LTS

Do Son May 26, 2018
After releasing the Ubuntu 18.04 LTS (Bionic Beaver) series operating system kernel update to alleviate the recently...
Read More Read more about Canonical Releases Major Core Updates for Ubuntu 17.10, 16.04 LTS, and 14.04 LTS
Avast found pre-installed Cosiloon malware in devices from manufacturers like ZTE, Archos and myPhone Cosiloon malware
  • Malware

Avast found pre-installed Cosiloon malware in devices from manufacturers like ZTE, Archos and myPhone

Do Son May 25, 2018
Avast, a well-known security agency, issued a report that its security threats lab found that a number...
Read More Read more about Avast found pre-installed Cosiloon malware in devices from manufacturers like ZTE, Archos and myPhone
Hacker attacked Verge Blockchain and steal $1.65 million in tokens
  • Cyber Security

Hacker attacked Verge Blockchain and steal $1.65 million in tokens

Do Son May 25, 2018
A mysterious hacker exploited the security flaw of an existing patch in the Verge cryptocurrency source code...
Read More Read more about Hacker attacked Verge Blockchain and steal $1.65 million in tokens
RTU exists multi vulnerabilities, European Energy Firms may face large-scale DoS attacks ManageEngine strelka
  • Vulnerability

RTU exists multi vulnerabilities, European Energy Firms may face large-scale DoS attacks

Do Son May 25, 2018
The Remote Terminal Unit (RTU) module is a common solution in the energy field. At present, all...
Read More Read more about RTU exists multi vulnerabilities, European Energy Firms may face large-scale DoS attacks
Research shows that passwords created by most people are still bad
  • Technology

Research shows that passwords created by most people are still bad

Do Son May 25, 2018
Although hacking incidents/data breaches continue to occur, most people still seem to be using scary passwords. A study...
Read More Read more about Research shows that passwords created by most people are still bad
Kaspersky found a backdoor account and security flaws in D-Link DIR-620 Routers
  • Vulnerability

Kaspersky found a backdoor account and security flaws in D-Link DIR-620 Routers

Do Son May 25, 2018
Researchers at Kaspersky Lab stated on Wednesday that they discovered four security flaws in the firmware of...
Read More Read more about Kaspersky found a backdoor account and security flaws in D-Link DIR-620 Routers
LifeBridge Health Data leaks exposed 500,000 patients’ personal information
  • Data Leak

LifeBridge Health Data leaks exposed 500,000 patients’ personal information

Do Son May 25, 2018
Founded in 1998, LifeBridge Health is a non-profit healthcare company headquartered in the northwestern part of Baltimore,...
Read More Read more about LifeBridge Health Data leaks exposed 500,000 patients’ personal information
Attacker find new way to install Backdoored Plugins on WordPress sites Backdoored Plugins
  • Vulnerability

Attacker find new way to install Backdoored Plugins on WordPress sites

Do Son May 25, 2018
Hackers have discovered an unprecedented method of installing backdoor plugins on websites running the open source CMS...
Read More Read more about Attacker find new way to install Backdoored Plugins on WordPress sites
❮ Prev Page
Next Page ❯

Search

Translation

CVE ALERTS
📈

EPSS Spike Alerts
Catch risk spikes before they make headlines.

🎯

Custom EPSS/CVSS
Set score thresholds to effectively filter noise.

🛡️

Exploit Intel
Real-world exploit signals beyond the KEV catalog.

🐙

GitHub Issues
Auto-create alert tickets without duplication.

📬

Weekly Digest
Clean summaries, eliminating email spam.

🏷️

Watchlist Groups
Tag vulnerabilities by team (Infra/AppSec/SOC).

🔀

Smart Routing
Route chat channels based on severity levels.

🚨

RBP Tracker
Early warning detection and tracking system.

Subscribe – $7/mo or try free for 14 days →

🚨 Active Exploits in the Wild

  • CVE-2020-13125CVSS 7.2
    An issue was discovered in the "Ultimate Addons for Elementor" plugin before 1.24.2 for WordPress, as exploited in...
    Watchtower Verified📅 Updated: Oct 19, 2026
  • CVE-2020-13126CVSS 9.9
    An issue was discovered in the Elementor Pro plugin before 2.9.4 for WordPress, as exploited in the wild...
    Watchtower Verified📅 Updated: Oct 19, 2026
  • CVE-2019-20180CVSS 8.0
    The TablePress plugin for WordPress is vulnerable to CSV Injection in versions up to and including 1.14 via...
    Watchtower Verified📅 Updated: Oct 19, 2026
  • CVE-2026-111862CVSS 9.8
    Rank Math SEO PRO for WordPress is affected by a supply-chain compromise in a subset of version 3.0.123...
    Admin intel📅 Updated: Oct 17, 2026
  • CVE-2026-111357CVSS 7.0
    Ivanti Connect Secure 22.8R2.4 mishandles the manner in which the dsinvoked broker trusts DSCache configuration data, leading to...
    Watchtower Verified📅 Updated: Oct 17, 2026
  • CVE-2025-61624CVSS 6.0
    An Improper Limitation of a Pathname to a Restricted Directory (\'Path Traversal\') [CWE-22] vulnerability in Fortinet FortiOS 7.6.0...
    CISA KEV📅 Added to KEV: Oct 16, 2026
  • CVE-2026-102764CVSS 9.3
    The vulnerability exists within internal components of BeyondTrust’s Remote Support product. The components did not adequately validate the...
    CISA KEV📅 Added to KEV: Oct 16, 2026
  • CVE-2026-106931CVSS 8.5
    SiteGuard Server Edition contains an OS command injection vulnerability, which may allow an attacker to execute arbitrary OS...
    Admin intel📅 Updated: Oct 15, 2026
Powered by CVE Watchtower

Critical Vulnerabilities

  • CVE-2026-103091CVSS 9.3
    Missing Authorization (CWE-862) and Initialization of a Resource with an Insecure Default (CWE-1188) in the MCP proxy (HandleStreamPassThrough...
    📅 Updated: Oct 19, 2026
  • CVE-2026-102503CVSS 9.3
    Missing Authentication for Critical Function (CWE-306) and Missing Authorization (CWE-862) in the /libp2p-http ingress server (StartIngressServer in cmd/sam-node/node.go)...
    📅 Updated: Oct 19, 2026
  • CVE-2026-108983CVSS 9.8
    A vulnerability is in Web Server default connection ports under the process name GeoWebServer.exe .
    📅 Updated: Oct 19, 2026
  • CVE-2025-39496CVSS 9.3
    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WBW WooBeWoo Product Filter...
    📅 Updated: Oct 18, 2026
  • CVE-2025-48100CVSS 9.1
    Improper Control of Generation of Code ('Code Injection') vulnerability in extremeidea bidorbuy Store Integrator bidorbuystoreintegrator allows Remote Code...
    📅 Updated: Oct 18, 2026
  • CVE-2025-49387CVSS 10.0
    Unrestricted Upload of File with Dangerous Type vulnerability in add-ons.org Drag and Drop File Upload for Elementor Forms...
    📅 Updated: Oct 18, 2026
  • CVE-2025-49388CVSS 9.8
    Incorrect Privilege Assignment vulnerability in kamleshyadav Miraculous Core Plugin miraculouscore allows Privilege Escalation.This issue affects Miraculous Core Plugin:...
    📅 Updated: Oct 18, 2026
  • CVE-2025-52761CVSS 9.8
    Deserialization of Untrusted Data vulnerability in manfcarlo WP Funnel Manager wp-funnel-manager allows Object Injection.This issue affects WP Funnel...
    📅 Updated: Oct 18, 2026
Powered by CVE Watchtower

Daily CyberSecurity

  • About SecurityOnline.info
  • Advertise with us
  • Announcement
  • Contact
  • Contributor Register
  • Login
  • Disclaimer
  • DCMA
  • Privacy Policy
  • About SecurityOnline.info
  • Advertise on SecurityOnline.info
  • Contact Us

When you purchase through links on our site, we may earn an affiliate commission. Here’s how it works

  • CVE Watchtower
  • CVE Statistics by Vendor 2026
  • Q3 2026 Report
  • Top Exploited CVEs
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube
© 2017 - 2026 Daily CyberSecurity. All Rights Reserved.