Skip to content
October 20, 2026
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube

Daily CyberSecurity

Zero-hour alerts. Unmatched analysis.

Primary Menu
  • Home
  • CVE Data
    • CVE Watchtower
    • Top Exploited CVEs
    • CVE Stats by Vendor
    • Q2 2026 Report
    • CVE Alerts
    • CVE Alert Settings
    • Pricing
  • Cyber Criminals
  • Data Leak
  • Free Tools
    • CVSS 3.1 Calculator
    • Certificate Viewer
    • DNS Lookup
    • Encoder & Hash Generator
    • IP / Subnet Calculator
    • Whois Lookup
  • Linux
  • Malware
  • Vulnerability
  • Submit Press Release
  • Weekly Recap
Light/Dark Button
Multiple SAML libraries flaws allow hackers to bypass authentication to SAML service providers SAML libraries
  • Vulnerability

Multiple SAML libraries flaws allow hackers to bypass authentication to SAML service providers

Do Son February 28, 2018
Unified authentication mechanism SSO SAML recently disclosed security bypass vulnerability, SAML, and OAuth, OpenID, CAS par. An attacker using the...
Read More Read more about Multiple SAML libraries flaws allow hackers to bypass authentication to SAML service providers
CrowdStrike Global Threat Report: extortion and weaponization of data have become mainstream among cybercriminals cybersecurity cooperation
  • Cyber Security

CrowdStrike Global Threat Report: extortion and weaponization of data have become mainstream among cybercriminals

Do Son February 28, 2018
Dissemination of advanced attack strategies has blurred the line between statecraft and espionage technologies, putting the threat beyond the defensive...
Read More Read more about CrowdStrike Global Threat Report: extortion and weaponization of data have become mainstream among cybercriminals
EU: ready to manage crypto-currencies
  • Technology

EU: ready to manage crypto-currencies

Do Son February 28, 2018
EU’s head of financial services said on Monday that the EU stands ready to regulate digital currencies if the risks...
Read More Read more about EU: ready to manage crypto-currencies
Ukrainian police successfully arrested one of the organizers of the massive Avalanche cybercrime network Avalanche cybercrime
  • Malware

Ukrainian police successfully arrested one of the organizers of the massive Avalanche cybercrime network

Do Son February 28, 2018
Foreign media reported on February 26 that Ukrainian police said on Monday that one of the organizers of...
Read More Read more about Ukrainian police successfully arrested one of the organizers of the massive Avalanche cybercrime network
LA Times website was embeded malicious script to mine Monero
  • Malware

LA Times website was embeded malicious script to mine Monero

Do Son February 28, 2018
According to infosecurity-magazine reports, the company’s security researcher Troy Mursch of Bad Packets reported recently discovered that...
Read More Read more about LA Times website was embeded malicious script to mine Monero
South Korea set up research center dedicated to the application of artificial intelligence to national defense projects South Korea
  • Technology

South Korea set up research center dedicated to the application of artificial intelligence to national defense projects

Do Son February 28, 2018
According to newatlas, just as the United Nations continues to formulate clear international treaties related to deadly...
Read More Read more about South Korea set up research center dedicated to the application of artificial intelligence to national defense projects
New Mirai botnet variant OMG turn IoT devices into proxy servers
  • Malware

New Mirai botnet variant OMG turn IoT devices into proxy servers

Do Son February 28, 2018
Since the source code for the Mirai botnet was released in 2016, FortiGuard Labs has discovered a...
Read More Read more about New Mirai botnet variant OMG turn IoT devices into proxy servers
iPhone X may be cracked
  • Technology

iPhone X may be cracked

Do Son February 28, 2018
According to Forbes, a well-known U.S. business magazine, a U.S. government contractor claims it can unlock almost...
Read More Read more about iPhone X may be cracked
Chrome OS will enable Linux applications to run on virtual machines
  • Technology

Chrome OS will enable Linux applications to run on virtual machines

Do Son February 28, 2018
Chromebook users will soon be able to run Linux distributions and applications on Google Chrome OS hardware...
Read More Read more about Chrome OS will enable Linux applications to run on virtual machines
Mozilla will remove individual cookie management in Firefox 60
  • Technology

Mozilla will remove individual cookie management in Firefox 60

Do Son February 28, 2018
The latest version of Firefox Nightly is 60, bringing changes in Firefox’s cookie management. Mozilla merges cookie settings...
Read More Read more about Mozilla will remove individual cookie management in Firefox 60
Who is behind PyeongChang Winter Olympic attack? Pyeongchang Winter Olympics
  • Cyber Security

Who is behind PyeongChang Winter Olympic attack?

Do Son February 27, 2018
On February 9, The Pyeongchang Olympic Winter Games in South Korea during the opening ceremony of the...
Read More Read more about Who is behind PyeongChang Winter Olympic attack?
CVE-2018-1305: Apache Tomcat Security Bypass Vulnerability
  • Vulnerability

CVE-2018-1305: Apache Tomcat Security Bypass Vulnerability

Do Son February 27, 2018
CVE-2018-1305 Security constraint annotations applied too late Severity: High Vendor: The Apache Software Foundation Versions Affected: Apache...
Read More Read more about CVE-2018-1305: Apache Tomcat Security Bypass Vulnerability
ArchLabs Linux 2018.05 releases, Arch Linux based distro ArchLabs Linux
  • Linux

ArchLabs Linux 2018.05 releases, Arch Linux based distro

Do Son February 27, 2018
ArchLabs Linux is a simple lightweight rolling releaseLinux distribution based on a minimal Arch Linux operating system with the Openboxwindow manager. The Openbox ArchLabs Linux...
Read More Read more about ArchLabs Linux 2018.05 releases, Arch Linux based distro
Why did not Intel tell CERTS and US gov about CPU flaws? CPU flaws
  • Vulnerability

Why did not Intel tell CERTS and US gov about CPU flaws?

Do Son February 27, 2018
According to the theregister news on February 23, Intel and six other companies (Amazon, AMD, Apple, ARM, Google, Microsoft)...
Read More Read more about Why did not Intel tell CERTS and US gov about CPU flaws?
Trend Micro Linux-based Email Encryption Gateway exist multiple security vulnerabilities
  • Vulnerability

Trend Micro Linux-based Email Encryption Gateway exist multiple security vulnerabilities

Do Son February 27, 2018
According to securityaffairs on Feb. 25, Core Security has found several security vulnerabilities (CVE-2018-6219 ~ CVE-2018-6230) in the...
Read More Read more about Trend Micro Linux-based Email Encryption Gateway exist multiple security vulnerabilities
North Korea hacker group APT37 is using zero-day vulnerability to attack Japan, Vietnam and the Middle East countries
  • Cyber Security

North Korea hacker group APT37 is using zero-day vulnerability to attack Japan, Vietnam and the Middle East countries

Do Son February 27, 2018
On February 2, 2018, a research team from FireEye, a cyber-security company, published a blog detailing how...
Read More Read more about North Korea hacker group APT37 is using zero-day vulnerability to attack Japan, Vietnam and the Middle East countries
Nvidia released GEFORCE GAME READY DRIVER version 391.01 GEFORCE GAME READY DRIVER
  • Technology

Nvidia released GEFORCE GAME READY DRIVER version 391.01

Do Son February 27, 2018
Nvidia recently released GeForce Game Ready Driver latest WHQL certified version 391.01, this update to the latest...
Read More Read more about Nvidia released GEFORCE GAME READY DRIVER version 391.01
Coinbase notifies 13,000 users that the IRS will get their data
  • Technology

Coinbase notifies 13,000 users that the IRS will get their data

Do Son February 27, 2018
Earlier this month, theverge had reported that “the IRS is eyeing the Coinbase” encrypted currency tax “sooner”. Last...
Read More Read more about Coinbase notifies 13,000 users that the IRS will get their data
Microsoft Quantum Development Kit official support Linux & MacOS
  • Technology

Microsoft Quantum Development Kit official support Linux & MacOS

Do Son February 27, 2018
Microsoft just announced the first major update to Quantum Development Kit (QDK). It debuted at Ignite 2017 and...
Read More Read more about Microsoft Quantum Development Kit official support Linux & MacOS
Iranian hacker group OilRig uses a new Trojan OopsIE in the recent attacks OopsIE
  • Malware

Iranian hacker group OilRig uses a new Trojan OopsIE in the recent attacks

Do Son February 27, 2018
Researchers at Unit 42, a Palo Alto Networks threat intelligence unit, recently discovered that OilRig, a hacker...
Read More Read more about Iranian hacker group OilRig uses a new Trojan OopsIE in the recent attacks
JPMorgan Chase Bank has a bug that allows customers to access others’ bank accounts JPMorgan Chase Bank
  • Data Leak
  • Vulnerability

JPMorgan Chase Bank has a bug that allows customers to access others’ bank accounts

Do Son February 27, 2018
Recently, a number of JPMorgan clients’ account information was exposed online due to a “glitch” on the...
Read More Read more about JPMorgan Chase Bank has a bug that allows customers to access others’ bank accounts
Hackers attacked into school CCTV system in British
  • Data Leak

Hackers attacked into school CCTV system in British

Do Son February 26, 2018
According to dailymail, recently, a website in Britain turned out to be able to watch real-time surveillance cameras,...
Read More Read more about Hackers attacked into school CCTV system in British
❮ Prev Page
Next Page ❯

Search

Translation

CVE ALERTS
📈

EPSS Spike Alerts
Catch risk spikes before they make headlines.

🎯

Custom EPSS/CVSS
Set score thresholds to effectively filter noise.

🛡️

Exploit Intel
Real-world exploit signals beyond the KEV catalog.

🐙

GitHub Issues
Auto-create alert tickets without duplication.

📬

Weekly Digest
Clean summaries, eliminating email spam.

🏷️

Watchlist Groups
Tag vulnerabilities by team (Infra/AppSec/SOC).

🔀

Smart Routing
Route chat channels based on severity levels.

🚨

RBP Tracker
Early warning detection and tracking system.

Subscribe – $7/mo or try free for 14 days →

🚨 Active Exploits in the Wild

  • CVE-2020-13125CVSS 7.2
    An issue was discovered in the "Ultimate Addons for Elementor" plugin before 1.24.2 for WordPress, as exploited in...
    Watchtower Verified📅 Updated: Oct 20, 2026
  • CVE-2020-13126CVSS 9.9
    An issue was discovered in the Elementor Pro plugin before 2.9.4 for WordPress, as exploited in the wild...
    Watchtower Verified📅 Updated: Oct 20, 2026
  • CVE-2019-20180CVSS 8.0
    The TablePress plugin for WordPress is vulnerable to CSV Injection in versions up to and including 1.14 via...
    Watchtower Verified📅 Updated: Oct 20, 2026
  • CVE-2026-66373CVSS 7.5
    Redis before 8.8.0, in the unusual case where an authenticated attacker can execute RESTORE, allows remote code execution...
    Admin intel📅 Updated: Oct 20, 2026
  • CVE-2026-110936CVSS 8.4
    A vulnerability has been identified in Siemens Software Center (All versions < V4.0.9.8). The affected application loads dynamic-link...
    Admin intel📅 Updated: Oct 20, 2026
  • CVE-2026-111862CVSS 9.8
    Rank Math SEO PRO for WordPress is affected by a supply-chain compromise in a subset of version 3.0.123...
    Admin intel📅 Updated: Oct 17, 2026
  • CVE-2026-111357CVSS 7.0
    Ivanti Connect Secure 22.8R2.4 mishandles the manner in which the dsinvoked broker trusts DSCache configuration data, leading to...
    Watchtower Verified📅 Updated: Oct 17, 2026
  • CVE-2025-61624CVSS 6.0
    An Improper Limitation of a Pathname to a Restricted Directory (\'Path Traversal\') [CWE-22] vulnerability in Fortinet FortiOS 7.6.0...
    CISA KEV📅 Added to KEV: Oct 16, 2026
Powered by CVE Watchtower

Critical Vulnerabilities

  • CVE-2026-43844CVSS 9.3
    A vulnerability in the proprietary protocol could allow an attacker to bypass the authentication mechanism.
    📅 Updated: Oct 20, 2026
  • CVE-2026-43845CVSS 9.2
    A vulnerability in the password reset mechanism could allow an attacker to bypass the authentication mechanism.
    📅 Updated: Oct 20, 2026
  • CVE-2026-43838CVSS 9.2
    A stack-based buffer overflow vulnerability in the login functionality could allow an attacker to achieve code execution.
    📅 Updated: Oct 20, 2026
  • CVE-2026-43836CVSS 9.3
    A vulnerability could allow an attacker to forge a packet to execute arbitrary commands with maximum privileges.
    📅 Updated: Oct 20, 2026
  • CVE-2026-113380CVSS 9.3
    In the RingRTC library before 2.72.0 for Signal, a peer that saturates a call's FSM queue can interfere...
    📅 Updated: Oct 20, 2026
  • CVE-2026-103849CVSS 10.0
    Adobe Commerce is affected by an Improper Neutralization of Special Elements Used in a Template Engine vulnerability that...
    📅 Updated: Oct 20, 2026
  • CVE-2026-78162CVSS 10.0
    Deserialization of Untrusted Data vulnerability in Apache Camel. This issue affects Apache Camel: from 4.0.0 before 4.18.5, from...
    📅 Updated: Oct 20, 2026
  • CVE-2026-47168CVSS 9.1
    EspoCRM is an open source customer relationship management application. Prior to 9.3.7, an authenticated administrator can supply crafted...
    📅 Updated: Oct 20, 2026
Powered by CVE Watchtower

Daily CyberSecurity

  • About SecurityOnline.info
  • Advertise with us
  • Announcement
  • Contact
  • Contributor Register
  • Login
  • Disclaimer
  • DCMA
  • Privacy Policy
  • About SecurityOnline.info
  • Advertise on SecurityOnline.info
  • Contact Us

When you purchase through links on our site, we may earn an affiliate commission. Here’s how it works

  • CVE Watchtower
  • CVE Statistics by Vendor 2026
  • Q3 2026 Report
  • Top Exploited CVEs
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube
© 2017 - 2026 Daily CyberSecurity. All Rights Reserved.