Skip to content
July 24, 2026
  • Linkedin
  • Twitter
  • Facebook
  • Youtube

Daily CyberSecurity

Zero-hour alerts. Unmatched analysis.

Primary Menu
  • Home
  • CVE Data
    • CVE Watchtower
    • Top Exploited CVEs
    • CVE Stats by Vendor
    • Q2 2026 Report
  • Cyber Criminals
  • Data Leak
  • Linux
  • Malware
  • Vulnerability
  • Submit Press Release
  • Weekly Recap
Light/Dark Button
  • Home
  • finance

finance

Spear-Phishing Campaign Targets CFOs with Sophisticated Multi-Stage Intrusion Spear-phishing, MuddyWater
  • Cybercriminals

Spear-Phishing Campaign Targets CFOs with Sophisticated Multi-Stage Intrusion

Do Son August 22, 2025 0
A new report from Hunt Intelligence reveals a highly targeted spear-phishing campaign that has been systematically preying...
Read More Read more about Spear-Phishing Campaign Targets CFOs with Sophisticated Multi-Stage Intrusion
New Cyber Threat: UTG-Q-015 Exploits 0-Days for Espionage in Asia UTG-Q-015 Cyber-espionage campaign
  • Cyber Security

New Cyber Threat: UTG-Q-015 Exploits 0-Days for Espionage in Asia

Do Son May 29, 2025 0
In a threat intelligence report, the Qi’anxin Threat Intelligence Center has exposed a series of highly targeted...
Read More Read more about New Cyber Threat: UTG-Q-015 Exploits 0-Days for Espionage in Asia
Garantex Sanctions: Russia Seeks Domestic Stablecoin SEC Crypto Regulation, Project Crypto Stablecoin Regulation, GENIUS Act Cryptocurrency Fraud Report Garantex, stablecoin
  • Technology

Garantex Sanctions: Russia Seeks Domestic Stablecoin

Do Son April 17, 2025 0
In February 2025, the European Union imposed sanctions on Garantex, Russia’s largest cryptocurrency exchange. Shortly thereafter, Tether,...
Read More Read more about Garantex Sanctions: Russia Seeks Domestic Stablecoin

Search

Translation

CVE WATCHTOWER
🚨

Receive alerts for vulnerabilities being exploited in the wild.

⚡

Get notified instantly when a Proof of Concept (PoC) exploit is published.

🔍

Access critical info on vulnerabilities even when marked as "RESERVED".

🧠

Insights powered by decades of expertise and global intelligence sources.

🎯

Customize alerts with up to 10 keywords for your specific tech stack.

📊

Export the raw CVE database for SIEM integration and reporting.

Upgrade Package

🚨 Active Exploits in the Wild

  • CVE-2026-16232CVSS 9.1
    An authentication bypass vulnerability in the Check Point SmartConsole login process allows an unauthenticated remote attacker to obtain...
    CISA KEV📅 Added to KEV: Jul 22, 2026
  • CVE-2026-50522CVSS 9.8
    Deserialization of untrusted data in Microsoft Office SharePoint allows an unauthorized attacker to execute code over a network.
    Admin intelCISA KEV📅 Added to KEV: Jul 22, 2026📅 Updated: Jul 21, 2026
  • CVE-2026-63030CVSS 9.8
    WordPress 6.9.x before 6.9.5 and 7.0.x before 7.0.2 is affected by a REST API batch endpoint route confusion...
    Admin intelCISA KEV📅 Added to KEV: Jul 21, 2026📅 Updated: Jul 21, 2026
  • CVE-2026-60137CVSS 5.9
    WordPress 6.8.x before 6.8.6, 6.9.x before 6.9.5, and 7.0.x before 7.0.2 does not properly sanitise the author__not_in parameter...
    Admin intelCISA KEV📅 Added to KEV: Jul 21, 2026📅 Updated: Jul 21, 2026
  • CVE-2026-0770CVSS 9.8
    Langflow exec_globals Inclusion of Functionality from Untrusted Control Sphere Remote Code Execution Vulnerability. This vulnerability allows remote attackers...
    CISA KEV📅 Added to KEV: Jul 21, 2026
  • CVE-2021-27137CVSS 8.1
    An issue was discovered in router/upnp/src/ssdp.c in DD-WRT before 45724. An unsafe strcpy in the UPnP handling functionality...
    CISA KEV📅 Added to KEV: Jul 21, 2026
  • CVE-2026-6875CVSS 9.5
    ServiceNow has addressed a remote code execution vulnerability that was identified in the ServiceNow AI platform. This vulnerability...
    Admin intel📅 Updated: Jul 18, 2026
  • CVE-2026-39808CVSS 9.8
    A improper neutralization of special elements used in an os command ('os command injection') vulnerability in Fortinet FortiSandbox...
    CISA KEV📅 Added to KEV: Jul 16, 2026
Powered by CVE Watchtower

🔴 Live Critical Threats

  • CVE-2026-15704CVSS 9.8
    In Eclipse BaSyx Go Components versions up to and including 1.0.0, ABAC-enabled...
  • CVE-2026-62825CVSS 10.0
    Improper authentication in Azure Key Vault allows an unauthorized attacker to elevate...
  • CVE-2026-58275CVSS 10.0
    Missing authorization in Azure DNS allows an unauthorized attacker to elevate privileges...
  • CVE-2026-56191CVSS 10.0
    Improper authentication in Microsoft Exchange Online allows an unauthorized attacker to perform...
  • CVE-2026-56165CVSS 9.8
    Heap-based buffer overflow in Microsoft Account allows an unauthorized attacker to execute...
  • CVE-2026-56160CVSS 9.1
    Improper authorization in Azure Red Hat OpenShift (ARO) allows an authorized attacker...
  • CVE-2026-54120CVSS 9.9
    Improper input validation in Microsoft Surface allows an authorized attacker to execute...
  • CVE-2026-50517CVSS 9.9
    Deserialization of untrusted data in M365 Copilot allows an authorized attacker to...
  • CVE-2026-63359CVSS 9.8
    The Appriss Insights (Equifax) Victim Information Notification Exchange (VINE) applications allow an...
  • CVE-2026-6516CVSS 10.0
    Zohocorp ManageEngine ADAudit Plus versions before 8606 are affected by Unauthenticated Remote code...
Powered by CVE WATCHTOWER

Our Websites
  • Penetration Testing Tools
  • The Daily Information Technology
  • Top Exploited CVEs
  • Daily CyberSecurity

    • About SecurityOnline.info
    • Advertise with us
    • Announcement
    • Contact
    • Contributor Register
    • Login
    • Disclaimer
    • DCMA
    • Privacy Policy
    • About SecurityOnline.info
    • Advertise on SecurityOnline.info
    • Contact Us

    When you purchase through links on our site, we may earn an affiliate commission. Here’s how it works

    • CVE Watchtower
    • CVE Statistics by Vendor 2026
    • Q2 2026 Report
    • Top Exploited CVEs
    • Linkedin
    • Twitter
    • Facebook
    • Youtube
    © 2017 - 2026 Daily CyberSecurity. All Rights Reserved.