Skip to content
October 19, 2026
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube

Daily CyberSecurity

Zero-hour alerts. Unmatched analysis.

Primary Menu
  • Home
  • CVE Data
    • CVE Watchtower
    • Top Exploited CVEs
    • CVE Stats by Vendor
    • Q2 2026 Report
    • CVE Alerts
    • CVE Alert Settings
    • Pricing
  • Cyber Criminals
  • Data Leak
  • Free Tools
    • CVSS 3.1 Calculator
    • Certificate Viewer
    • DNS Lookup
    • Encoder & Hash Generator
    • IP / Subnet Calculator
    • Whois Lookup
  • Linux
  • Malware
  • Vulnerability
  • Submit Press Release
  • Weekly Recap
Light/Dark Button
200 million Japanese netizens’ personal data offered on the underground market
  • Data Leak

200 million Japanese netizens’ personal data offered on the underground market

Do Son May 21, 2018
In a survey released on Thursday, May 17th, the cybersecurity company FireEye stated that the company’s security...
Read More Read more about 200 million Japanese netizens’ personal data offered on the underground market
North Korean hackers use the malware app in Google Play Store to track North Koreans North Korean hackers
  • Cyber Security

North Korean hackers use the malware app in Google Play Store to track North Koreans

Do Son May 21, 2018
According to Techspot, Play Store had no stranger to applications that appeared to be legitimate but contained...
Read More Read more about North Korean hackers use the malware app in Google Play Store to track North Koreans
Teen phone monitoring TeenSafe app leaked thousands of user passwords TeenSafe
  • Data Leak

Teen phone monitoring TeenSafe app leaked thousands of user passwords

Do Son May 21, 2018
According to ZDNet, the server used by TeenSafe, the teen’s mobile monitoring application, has leaked tens of thousands...
Read More Read more about Teen phone monitoring TeenSafe app leaked thousands of user passwords
Lubuntu 18.10 will officially switch from LXDE to LXQt
  • Linux

Lubuntu 18.10 will officially switch from LXDE to LXQt

Do Son May 21, 2018
After transitioning from the GTK-based LXDE desktop environment to the modern LXQt desktop environment supported by Qt...
Read More Read more about Lubuntu 18.10 will officially switch from LXDE to LXQt
Stuxnet worm is the most complicated software created so far Stuxnet worm
  • Malware

Stuxnet worm is the most complicated software created so far

Do Son May 20, 2018
Gigantic Software CEO John Byrd published an article on the subject in Quora about mysterious Stuxnet worm that is now...
Read More Read more about Stuxnet worm is the most complicated software created so far
DarkOverlord hacker group member arrested by Serbian police
  • Cyber Security

DarkOverlord hacker group member arrested by Serbian police

Do Son May 20, 2018
Serbian authorities recently arrested a 38-year-old man from Belgrade suspected of being a member of the Dark...
Read More Read more about DarkOverlord hacker group member arrested by Serbian police
Los Angeles County data breach exposes 3.2 million files containing terrifyingly sensitive data Los Angeles County
  • Data Leak

Los Angeles County data breach exposes 3.2 million files containing terrifyingly sensitive data

Do Son May 19, 2018
According to TheNextWeb, the personnel responsible for the 2-1-1 system database in Los Angeles County recently made...
Read More Read more about Los Angeles County data breach exposes 3.2 million files containing terrifyingly sensitive data
Ubuntu 18.10: New theme, Android integration, Power optimization
  • Linux

Ubuntu 18.10: New theme, Android integration, Power optimization

Do Son May 19, 2018
Canonical has announced the official opening of the Ubuntu 18.10 (Cosmic Cuttlefish) universe, bringing with it a...
Read More Read more about Ubuntu 18.10: New theme, Android integration, Power optimization
WinstarNssmMiner mining software infects 500,000 computers in Three Days
  • Malware

WinstarNssmMiner mining software infects 500,000 computers in Three Days

Do Son May 19, 2018
The 360 Security Center recently detected that a new mining malware WinstarNssmMiner spread wildly through the Internet and...
Read More Read more about WinstarNssmMiner mining software infects 500,000 computers in Three Days
Google Announces Git protocol version 2, Bringing Significant Performance Improvements
  • Technology

Google Announces Git protocol version 2, Bringing Significant Performance Improvements

Do Son May 19, 2018
Google today announced the release of Git protocol version 2 (Git protocol version 2) as a major...
Read More Read more about Google Announces Git protocol version 2, Bringing Significant Performance Improvements
Russian Telegrab Malware Gather Telegram Credentials, Cookies, Desktop Cache, and Critical Files
  • Malware

Russian Telegrab Malware Gather Telegram Credentials, Cookies, Desktop Cache, and Critical Files

Do Son May 18, 2018
Security experts at the Cisco Talos Group have discovered a new type of malicious software, Telegrab, that...
Read More Read more about Russian Telegrab Malware Gather Telegram Credentials, Cookies, Desktop Cache, and Critical Files
Kwort Linux 4.3.3 release: a modern and fast Linux distribution
  • Linux

Kwort Linux 4.3.3 release: a modern and fast Linux distribution

Do Son May 18, 2018
Kwort is a modern and fast Linux distribution that combines powerful and useful applications in order to...
Read More Read more about Kwort Linux 4.3.3 release: a modern and fast Linux distribution
2 Syrians Prosecuted for attacking the White House Computer System 2 Syrians
  • Cyber Security

2 Syrians Prosecuted for attacking the White House Computer System

Do Son May 18, 2018
In recent days, the situation in Syria has been rekindled. On Thursday, two Syrian citizens were sued for...
Read More Read more about 2 Syrians Prosecuted for attacking the White House Computer System
Rail Europe North America Company was hacked, customers payment card data leaks
  • Data Leak

Rail Europe North America Company was hacked, customers payment card data leaks

Do Son May 18, 2018
Rail Europe North America (RENA) recently informed its customers that due to security flaws on its website,...
Read More Read more about Rail Europe North America Company was hacked, customers payment card data leaks
Chrome will no longer flag HTTPS pages as secure sites
  • Technology

Chrome will no longer flag HTTPS pages as secure sites

Do Son May 18, 2018
Google announced that starting in September, Chrome will stop marking HTTPS pages as “safe” sites in the...
Read More Read more about Chrome will no longer flag HTTPS pages as secure sites
AR/VR development tool Amazon Sumerian officially launched Amazon Sumerian
  • Technology

AR/VR development tool Amazon Sumerian officially launched

Do Son May 18, 2018
Last year, AWS launched the AR/VR development tool Amazon Sumerian, allowing developers to create 3D, virtual reality...
Read More Read more about AR/VR development tool Amazon Sumerian officially launched
Proxmox VE 5.2 released: based-on Debian 9 Proxmox VE
  • Linux

Proxmox VE 5.2 released: based-on Debian 9

Do Son May 18, 2018
Proxmox VE is a complete open-source platform for all-inclusive enterprise virtualization that tightly integrates KVM hypervisor and...
Read More Read more about Proxmox VE 5.2 released: based-on Debian 9
Hackers have been stolen millions in Mexican banks
  • Cyber Security

Hackers have been stolen millions in Mexican banks

Do Son May 17, 2018
The Central Bank of Mexico and the regulatory agency said on the 14th that between 18 million and...
Read More Read more about Hackers have been stolen millions in Mexican banks
Google Releases Major Update and Open Source Component for Material Design Language
  • Technology

Google Releases Major Update and Open Source Component for Material Design Language

Do Son May 17, 2018
Google’s flat style material design language introduced in previous years has now been adopted by many developers...
Read More Read more about Google Releases Major Update and Open Source Component for Material Design Language
Signal Desktop Application Exists Code Injection Vulnerability
  • Vulnerability

Signal Desktop Application Exists Code Injection Vulnerability

Do Son May 17, 2018
In a week or less after a code injection vulnerability (CVE-2018-10994) from the Signal desktop application was disclosed, security researchers discovered...
Read More Read more about Signal Desktop Application Exists Code Injection Vulnerability
Facebook advertisers use user’s sensitive information to display ads
  • Technology

Facebook advertisers use user’s sensitive information to display ads

Do Son May 17, 2018
People are able to manage their ad preferences tool, which clearly explains how Facebook for Ecommerce works...
Read More Read more about Facebook advertisers use user’s sensitive information to display ads
Cisco Digital Network Architecture Center (DNA) Multiple Vulnerabilities
  • Vulnerability

Cisco Digital Network Architecture Center (DNA) Multiple Vulnerabilities

Do Son May 17, 2018
On May 16th, Cisco released a number of security announcements that it had fixed three high-risk vulnerabilities...
Read More Read more about Cisco Digital Network Architecture Center (DNA) Multiple Vulnerabilities
❮ Prev Page
Next Page ❯

Search

Translation

CVE ALERTS
📈

EPSS Spike Alerts
Catch risk spikes before they make headlines.

🎯

Custom EPSS/CVSS
Set score thresholds to effectively filter noise.

🛡️

Exploit Intel
Real-world exploit signals beyond the KEV catalog.

🐙

GitHub Issues
Auto-create alert tickets without duplication.

📬

Weekly Digest
Clean summaries, eliminating email spam.

🏷️

Watchlist Groups
Tag vulnerabilities by team (Infra/AppSec/SOC).

🔀

Smart Routing
Route chat channels based on severity levels.

🚨

RBP Tracker
Early warning detection and tracking system.

Subscribe – $7/mo or try free for 14 days →

🚨 Active Exploits in the Wild

  • CVE-2020-13125CVSS 7.2
    An issue was discovered in the "Ultimate Addons for Elementor" plugin before 1.24.2 for WordPress, as exploited in...
    Watchtower Verified📅 Updated: Oct 19, 2026
  • CVE-2020-13126CVSS 9.9
    An issue was discovered in the Elementor Pro plugin before 2.9.4 for WordPress, as exploited in the wild...
    Watchtower Verified📅 Updated: Oct 19, 2026
  • CVE-2019-20180CVSS 8.0
    The TablePress plugin for WordPress is vulnerable to CSV Injection in versions up to and including 1.14 via...
    Watchtower Verified📅 Updated: Oct 19, 2026
  • CVE-2026-111862CVSS 9.8
    Rank Math SEO PRO for WordPress is affected by a supply-chain compromise in a subset of version 3.0.123...
    Admin intel📅 Updated: Oct 17, 2026
  • CVE-2026-111357CVSS 7.0
    Ivanti Connect Secure 22.8R2.4 mishandles the manner in which the dsinvoked broker trusts DSCache configuration data, leading to...
    Watchtower Verified📅 Updated: Oct 17, 2026
  • CVE-2025-61624CVSS 6.0
    An Improper Limitation of a Pathname to a Restricted Directory (\'Path Traversal\') [CWE-22] vulnerability in Fortinet FortiOS 7.6.0...
    CISA KEV📅 Added to KEV: Oct 16, 2026
  • CVE-2026-102764CVSS 9.3
    The vulnerability exists within internal components of BeyondTrust’s Remote Support product. The components did not adequately validate the...
    CISA KEV📅 Added to KEV: Oct 16, 2026
  • CVE-2026-106931CVSS 8.5
    SiteGuard Server Edition contains an OS command injection vulnerability, which may allow an attacker to execute arbitrary OS...
    Admin intel📅 Updated: Oct 15, 2026
Powered by CVE Watchtower

Critical Vulnerabilities

  • CVE-2026-103091CVSS 9.3
    Missing Authorization (CWE-862) and Initialization of a Resource with an Insecure Default (CWE-1188) in the MCP proxy (HandleStreamPassThrough...
    📅 Updated: Oct 19, 2026
  • CVE-2026-102503CVSS 9.3
    Missing Authentication for Critical Function (CWE-306) and Missing Authorization (CWE-862) in the /libp2p-http ingress server (StartIngressServer in cmd/sam-node/node.go)...
    📅 Updated: Oct 19, 2026
  • CVE-2026-108983CVSS 9.8
    A vulnerability is in Web Server default connection ports under the process name GeoWebServer.exe .
    📅 Updated: Oct 19, 2026
  • CVE-2025-39496CVSS 9.3
    Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in WBW WooBeWoo Product Filter...
    📅 Updated: Oct 18, 2026
  • CVE-2025-48100CVSS 9.1
    Improper Control of Generation of Code ('Code Injection') vulnerability in extremeidea bidorbuy Store Integrator bidorbuystoreintegrator allows Remote Code...
    📅 Updated: Oct 18, 2026
  • CVE-2025-49387CVSS 10.0
    Unrestricted Upload of File with Dangerous Type vulnerability in add-ons.org Drag and Drop File Upload for Elementor Forms...
    📅 Updated: Oct 18, 2026
  • CVE-2025-49388CVSS 9.8
    Incorrect Privilege Assignment vulnerability in kamleshyadav Miraculous Core Plugin miraculouscore allows Privilege Escalation.This issue affects Miraculous Core Plugin:...
    📅 Updated: Oct 18, 2026
  • CVE-2025-52761CVSS 9.8
    Deserialization of Untrusted Data vulnerability in manfcarlo WP Funnel Manager wp-funnel-manager allows Object Injection.This issue affects WP Funnel...
    📅 Updated: Oct 18, 2026
Powered by CVE Watchtower

Daily CyberSecurity

  • About SecurityOnline.info
  • Advertise with us
  • Announcement
  • Contact
  • Contributor Register
  • Login
  • Disclaimer
  • DCMA
  • Privacy Policy
  • About SecurityOnline.info
  • Advertise on SecurityOnline.info
  • Contact Us

When you purchase through links on our site, we may earn an affiliate commission. Here’s how it works

  • CVE Watchtower
  • CVE Statistics by Vendor 2026
  • Q3 2026 Report
  • Top Exploited CVEs
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube
© 2017 - 2026 Daily CyberSecurity. All Rights Reserved.