Skip to content
October 20, 2026
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube

Daily CyberSecurity

Zero-hour alerts. Unmatched analysis.

Primary Menu
  • Home
  • CVE Data
    • CVE Watchtower
    • Top Exploited CVEs
    • CVE Stats by Vendor
    • Q2 2026 Report
    • CVE Alerts
    • CVE Alert Settings
    • Pricing
  • Cyber Criminals
  • Data Leak
  • Free Tools
    • CVSS 3.1 Calculator
    • Certificate Viewer
    • DNS Lookup
    • Encoder & Hash Generator
    • IP / Subnet Calculator
    • Whois Lookup
  • Linux
  • Malware
  • Vulnerability
  • Submit Press Release
  • Weekly Recap
Light/Dark Button
Mozilla wants Facebook to make app private to protect user privacy by default
  • Data Leak

Mozilla wants Facebook to make app private to protect user privacy by default

Do Son March 21, 2018
In the context of the privacy crisis that engulfed the entire social network, the non-profit organization Mozilla...
Read More Read more about Mozilla wants Facebook to make app private to protect user privacy by default
Puerto Rico power Company was attacked, but Officials claim no customer data has been compromised
  • Cyber Security

Puerto Rico power Company was attacked, but Officials claim no customer data has been compromised

Do Son March 21, 2018
According to Reuters, the only electricity company in Puerto Rico, PREPA, said on Monday that the company...
Read More Read more about Puerto Rico power Company was attacked, but Officials claim no customer data has been compromised
FireEye: Iranian hacker group TEMP.Zagros targets Asia and the Middle East TEMP.Zagros
  • Cyber Security

FireEye: Iranian hacker group TEMP.Zagros targets Asia and the Middle East

Do Son March 21, 2018
Recently, FireEye released a security analysis report that an Iranian hacker named TEMP.Zagros (also known as MuddyWater) launched a large-scale phishing...
Read More Read more about FireEye: Iranian hacker group TEMP.Zagros targets Asia and the Middle East
Attackers hit National Lottery, 10.5 million players were requested to change password
  • Data Leak

Attackers hit National Lottery, 10.5 million players were requested to change password

Do Son March 21, 2018
According to ZDNet reports, Camelot, a UK national lottery management company, recommended that millions of national lottery players...
Read More Read more about Attackers hit National Lottery, 10.5 million players were requested to change password
Java 10 Official Released java 10
  • Technology

Java 10 Official Released

Do Son March 21, 2018
Java 10 has been officially released! You can download the official version of Java 10 here. To iterate faster and follow...
Read More Read more about Java 10 Official Released
AMD responds to security vulnerabilities: It will be completely repaired in the coming weeks AMD security vulnerabilities
  • Vulnerability

AMD responds to security vulnerabilities: It will be completely repaired in the coming weeks

Do Son March 21, 2018
Last week, the Israeli security company CTS-Labs claimed to have discovered the security risks of the AMD...
Read More Read more about AMD responds to security vulnerabilities: It will be completely repaired in the coming weeks
U.S. and Britain investigate Facebook data breach, Zuckerberg was summoned
  • Data Leak

U.S. and Britain investigate Facebook data breach, Zuckerberg was summoned

Do Son March 21, 2018
The morning of March 21st, this Tuesday, British lawmakers said that Facebook CEO Mark Zuckerberg should testify...
Read More Read more about U.S. and Britain investigate Facebook data breach, Zuckerberg was summoned
Dr.Web founds 3 new Trojan on Google Play that perform phishing attacks phishing attacks
  • Malware

Dr.Web founds 3 new Trojan on Google Play that perform phishing attacks

Do Son March 20, 2018
Antivirus company Dr.Web’s security experts discovered three new Android Trojans in the Google Play store last week....
Read More Read more about Dr.Web founds 3 new Trojan on Google Play that perform phishing attacks
Attacker use Scarlett Johansson’s picture to deliver cryptominer to PostgreSQL
  • Malware

Attacker use Scarlett Johansson’s picture to deliver cryptominer to PostgreSQL

Do Son March 20, 2018
Researchers at security company Imperva said last week that they have detected a new attack technology for...
Read More Read more about Attacker use Scarlett Johansson’s picture to deliver cryptominer to PostgreSQL
Security experts found MikroTik RouterOS SMB Buffer Overflow flaw MikroTik RouterOS SMB Buffer Overflow
  • Vulnerability

Security experts found MikroTik RouterOS SMB Buffer Overflow flaw

Do Son March 20, 2018
Security experts from security firm Core Security have disclosed details of a buffer overflow vulnerability that affected all...
Read More Read more about Security experts found MikroTik RouterOS SMB Buffer Overflow flaw
Linux Foundation Announces Open IoT ACRN Manager IoT ACRN
  • Technology

Linux Foundation Announces Open IoT ACRN Manager

Do Son March 20, 2018
The Linux Foundation released detailed information on ACRN, one of the open source projects, which is a...
Read More Read more about Linux Foundation Announces Open IoT ACRN Manager
Microsoft and BlackBerry Collaborate to provide a secure environment for mobile workforce
  • Technology

Microsoft and BlackBerry Collaborate to provide a secure environment for mobile workforce

Do Son March 20, 2018
If employees want to edit Microsoft Office documents on the external network, this is inseparable from a...
Read More Read more about Microsoft and BlackBerry Collaborate to provide a secure environment for mobile workforce
Trump ban Venezuela’s national cryptocurrency Petro cryptocurrency
  • Technology

Trump ban Venezuela’s national cryptocurrency

Do Son March 20, 2018
According to theverge reports, recently President of the United States Trump issued a ban on cryptocurrency purchases...
Read More Read more about Trump ban Venezuela’s national cryptocurrency
G20 Fiscal Supervisory Authority: Does Not Take Measures Against Cryptocurrencies
  • Technology

G20 Fiscal Supervisory Authority: Does Not Take Measures Against Cryptocurrencies

Do Son March 20, 2018
According to Reuters reports, the regulators responsible for financial and market reforms after the economic crisis stated...
Read More Read more about G20 Fiscal Supervisory Authority: Does Not Take Measures Against Cryptocurrencies
Polish police arrested the author of Flotera, Vortex, and Polski ransomware
  • Malware

Polish police arrested the author of Flotera, Vortex, and Polski ransomware

Do Son March 20, 2018
According to bleepingcomputer on March 17 news, the Polish law enforcement agencies announced on Friday last week that...
Read More Read more about Polish police arrested the author of Flotera, Vortex, and Polski ransomware
Japan will launch the world’s most powerful nuclear fusion research supercomputer
  • Technology

Japan will launch the world’s most powerful nuclear fusion research supercomputer

Do Son March 20, 2018
According to top500 media reports, Japan plans to officially launch a Cray XC50 supercomputer for advanced nuclear fusion...
Read More Read more about Japan will launch the world’s most powerful nuclear fusion research supercomputer
Fancy Bear use Adobe Flash vulnerability to attack European government agencies Fancy Bear
  • Cyber Security

Fancy Bear use Adobe Flash vulnerability to attack European government agencies

Do Son March 20, 2018
The security company Palo Alto Networks threat intelligence unit Unit 42 said last week that they observed...
Read More Read more about Fancy Bear use Adobe Flash vulnerability to attack European government agencies
McAfee: Mining cryptocurrencies with a PC is dangerous
  • Technology

McAfee: Mining cryptocurrencies with a PC is dangerous

Do Son March 19, 2018
Gary Davis, Chief Consumer Security Officer at McAfee, a well-known anti-virus software development company, suggested that using...
Read More Read more about McAfee: Mining cryptocurrencies with a PC is dangerous
CVE-2017-16995: Ubuntu Server Local Escalation Vulnerability
  • Vulnerability

CVE-2017-16995: Ubuntu Server Local Escalation Vulnerability

Do Son March 19, 2018
The latest version of Ubuntu Server was revealed to have a local privilege escalation vulnerability. This vulnerability (CVE-2017-16995)...
Read More Read more about CVE-2017-16995: Ubuntu Server Local Escalation Vulnerability
Android P blocked apps built for Android 4.1 or lower
  • Android

Android P blocked apps built for Android 4.1 or lower

Do Son March 19, 2018
Since iOS 10, Apple has abandoned 32-bit applications, so that is to make the device run more...
Read More Read more about Android P blocked apps built for Android 4.1 or lower
The Bicho: backdoor allowing remote control of cars Bicho
  • Vulnerability

The Bicho: backdoor allowing remote control of cars

Do Son March 19, 2018
Argentine security researchers, SHEILA AYELEN BERTA and CLAUDIO CARACCIOLO will plan to show how to use the hardware backdoor Bicho...
Read More Read more about The Bicho: backdoor allowing remote control of cars
BlackTDS: new Traffic Distribution System BlackTDS
  • Malware

BlackTDS: new Traffic Distribution System

Do Son March 19, 2018
According to Proofpoint researchers revealed that a new type of traffic distribution system (TDS) that spreads malicious...
Read More Read more about BlackTDS: new Traffic Distribution System
❮ Prev Page
Next Page ❯

Search

Translation

CVE ALERTS
📈

EPSS Spike Alerts
Catch risk spikes before they make headlines.

🎯

Custom EPSS/CVSS
Set score thresholds to effectively filter noise.

🛡️

Exploit Intel
Real-world exploit signals beyond the KEV catalog.

🐙

GitHub Issues
Auto-create alert tickets without duplication.

📬

Weekly Digest
Clean summaries, eliminating email spam.

🏷️

Watchlist Groups
Tag vulnerabilities by team (Infra/AppSec/SOC).

🔀

Smart Routing
Route chat channels based on severity levels.

🚨

RBP Tracker
Early warning detection and tracking system.

Subscribe – $7/mo or try free for 14 days →

🚨 Active Exploits in the Wild

  • CVE-2026-110936CVSS 8.4
    A vulnerability has been identified in Siemens Software Center (All versions < V4.0.9.8). The affected application loads dynamic-link...
    Admin intel📅 Updated: Oct 20, 2026
  • CVE-2020-13125CVSS 7.2
    An issue was discovered in the "Ultimate Addons for Elementor" plugin before 1.24.2 for WordPress, as exploited in...
    Watchtower Verified📅 Updated: Oct 20, 2026
  • CVE-2020-13126CVSS 9.9
    An issue was discovered in the Elementor Pro plugin before 2.9.4 for WordPress, as exploited in the wild...
    Watchtower Verified📅 Updated: Oct 20, 2026
  • CVE-2019-20180CVSS 8.0
    The TablePress plugin for WordPress is vulnerable to CSV Injection in versions up to and including 1.14 via...
    Watchtower Verified📅 Updated: Oct 20, 2026
  • CVE-2026-111862CVSS 9.8
    Rank Math SEO PRO for WordPress is affected by a supply-chain compromise in a subset of version 3.0.123...
    Admin intel📅 Updated: Oct 17, 2026
  • CVE-2026-111357CVSS 7.0
    Ivanti Connect Secure 22.8R2.4 mishandles the manner in which the dsinvoked broker trusts DSCache configuration data, leading to...
    Watchtower Verified📅 Updated: Oct 17, 2026
  • CVE-2025-61624CVSS 6.0
    An Improper Limitation of a Pathname to a Restricted Directory (\'Path Traversal\') [CWE-22] vulnerability in Fortinet FortiOS 7.6.0...
    CISA KEV📅 Added to KEV: Oct 16, 2026
  • CVE-2026-102764CVSS 9.3
    The vulnerability exists within internal components of BeyondTrust’s Remote Support product. The components did not adequately validate the...
    CISA KEV📅 Added to KEV: Oct 16, 2026
Powered by CVE Watchtower

Critical Vulnerabilities

  • CVE-2026-77936CVSS 9.3
    Letta through 0.16.8 ships a compose.yaml that does not enable LETTA_SERVER_SECURE, so the password middleware is never added...
    📅 Updated: Oct 20, 2026
  • CVE-2026-77933CVSS 9.3
    DB-GPT through 0.8.2 contains a hardcoded credentials vulnerability in its default docker-compose.yml that sets a static MYSQL_ROOT_PASSWORD and...
    📅 Updated: Oct 20, 2026
  • CVE-2026-77932CVSS 9.3
    DB-GPT through 0.8.2 contains an unauthenticated remote code execution vulnerability because the /api/v1/chat/react-agent endpoint relies on a mock...
    📅 Updated: Oct 20, 2026
  • CVE-2026-75128CVSS 9.3
    Langchain-Chatchat through 0.3.1.3 exposes a POST /tools/call API endpoint that invokes any registered tool by name without authentication,...
    📅 Updated: Oct 20, 2026
  • CVE-2026-109442CVSS 9.3
    piflow 2.0.0 through 2.0.1 contains a remote code execution vulnerability in its DeepAgents chat agent, whose POST /chat...
    📅 Updated: Oct 20, 2026
  • CVE-2026-96252CVSS 9.1
    Improper verification of cryptographic signature in Active Directory Federation Services (AD FS) allows an unauthorized attacker to perform...
    📅 Updated: Oct 20, 2026
  • CVE-2026-101306CVSS 9.8
    SCM_RIGHTS file descriptor passing did not preserve FD_RESOLVE_BENEATH when a descriptor was transferred. A process could clear the...
    📅 Updated: Oct 20, 2026
  • CVE-2026-105899CVSS 10.0
    ColdFusion is affected by an Unrestricted Upload of File with Dangerous Type vulnerability that could result in arbitrary...
    📅 Updated: Oct 20, 2026
Powered by CVE Watchtower

Daily CyberSecurity

  • About SecurityOnline.info
  • Advertise with us
  • Announcement
  • Contact
  • Contributor Register
  • Login
  • Disclaimer
  • DCMA
  • Privacy Policy
  • About SecurityOnline.info
  • Advertise on SecurityOnline.info
  • Contact Us

When you purchase through links on our site, we may earn an affiliate commission. Here’s how it works

  • CVE Watchtower
  • CVE Statistics by Vendor 2026
  • Q3 2026 Report
  • Top Exploited CVEs
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube
© 2017 - 2026 Daily CyberSecurity. All Rights Reserved.