Skip to content
October 13, 2026
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube

Daily CyberSecurity

Zero-hour alerts. Unmatched analysis.

Primary Menu
  • Home
  • CVE Data
    • CVE Watchtower
    • Top Exploited CVEs
    • CVE Stats by Vendor
    • Q2 2026 Report
    • CVE Alerts
    • CVE Alert Settings
    • Pricing
  • Cyber Criminals
  • Data Leak
  • Free Tools
    • CVSS 3.1 Calculator
    • Certificate Viewer
    • DNS Lookup
    • Encoder & Hash Generator
    • IP / Subnet Calculator
    • Whois Lookup
  • Linux
  • Malware
  • Vulnerability
  • Submit Press Release
  • Weekly Recap
Light/Dark Button

Weekly Recap

Weekly CVE report Oct 5-11 2026 exploited vulnerabilities not yet on CISA KEV
  • Weekly Recap

Six Exploited Flaws Missing From CISA KEV Lead This Weekly CVE Report

Do Son October 12, 2026 0
Weekly CVE report on exploited vulnerabilities from Daily Cybersecurity and CISA KEV, September 28 to October 4, 2026
  • Weekly Recap

Weekly CVE Report Tracks 2,652 New Flaws and Seven Exploited Vulnerabilities (Sept. 28 – Oct. 4, 2026)

Do Son October 5, 2026 0
Weekly CVE report comparing exploited vulnerabilities from Daily Cybersecurity intelligence with the CISA KEV catalog for September 21-27, 2026
  • Weekly Recap

Weekly CVE Report: 2,825 New Flaws and 9 Exploited Bugs (Sept 21-27, 2026)

Do Son September 28, 2026 0
CVE-2023-50164 AEM Forms
  • Weekly Recap

Weekly CVE Report: 4,378 New Flaws and 10 Exploited Bugs

Do Son September 21, 2026 0
Weekly CVE report chart comparing Daily Cybersecurity exploited vulnerabilities against the CISA KEV catalog
  • Weekly Recap

Daily Cybersecurity Flagged 9 Exploited Flaws Before CISA KEV

Do Son September 14, 2026 0

Tech News

Anthropic Claude AI model distillation protection mechanism
  • Technology

Anthropic Fortifies Claude AI Against Model Distillation

Do Son October 13, 2026 0
Bitwarden application logo and password manager interface on a mobile device
  • Technology

Bitwarden App Store License Changes to Commercial Model

Do Son October 13, 2026 0
Firefox 158.0 release default JPEG XL format support
  • Technology

Firefox 158.0 Released: Default JPEG XL Support

Do Son October 13, 2026 0
Intel hyper-threading return in 2028 Coral Rapids Xeon server CPUs announced by CEO Lip-Bu Tan to reclaim data center CPU market share
  • Technology

Intel Implements Significant Price Increases on PC Processors

Do Son October 13, 2026 0

Vulnerability

Docker Hub security advisory for CVE-2026-105445 access token vulnerability
  • Vulnerability Report

Docker Hub Security Advisory: CVE-2026-105445 Token Flaw

Do Son October 13, 2026 0
Wazuh vulnerabilities enabling remote code execution as root on SIEM managers and agents
  • Vulnerability Report

Wazuh Fixes 15 Vulnerabilities, Including Two Critical Root Code Execution Flaws

Do Son October 13, 2026 0
Fortinet vulnerabilities FortiSandbox authentication bypass and FortiSIEM code execution patched in October 2026
  • Vulnerability Report

Fortinet Patches Critical FortiSandbox and FortiSIEM Flaws Among 13 Vulnerabilities

Do Son October 13, 2026 0
Zoom Workplace vulnerabilities enabling privilege escalation and information disclosure
  • Vulnerability Report

Zoom Patches Four High-Severity Flaws in Workplace Clients, Including Privilege Escalation Bugs

Do Son October 13, 2026 0

Cyber Security

Ivanti Connect Secure Zero-Day Chain CVE-2026-104935 Exploited by UTA0576 to Gain Root Access Ivanti Connect Secure zero-day exploit chain CVE-2026-104935 used by UTA0576 to gain root access on a VPN appliance
  • Cybercriminals

Ivanti Connect Secure Zero-Day Chain CVE-2026-104935 Exploited by UTA0576 to Gain Root Access

October 13, 2026 0
Kimsuky Spear Phishing Targets Ukrainian Diplomacy and Security Experts in Operation GitPower Kimsuky spear phishing email with fake KCSCON speaker invitation targeting Ukrainian experts in Operation GitPower
  • Cybercriminals

Kimsuky Spear Phishing Targets Ukrainian Diplomacy and Security Experts in Operation GitPower

October 13, 2026 0
Massive Cyberattack Paralyzes French Supermarket Refrigeration French supermarket cyberattack damage, Danfoss refrigeration system hack, grocery cold chain disruption
  • Cybercriminals

Massive Cyberattack Paralyzes French Supermarket Refrigeration

October 13, 2026 0
Suspected TraderTraitor Hackers Use Trojanized Terraform Provider to Deliver FLATROOF and ROOFDECK Trojanized Terraform provider attack chain linked to suspected TraderTraitor hackers delivering FLATROOF and ROOFDECK malware
  • Cybercriminals

Suspected TraderTraitor Hackers Use Trojanized Terraform Provider to Deliver FLATROOF and ROOFDECK

October 12, 2026 0

Malware Alert

Ledger Supply Chain Attack Hits Europe via Tampered Wallets Ledger Nano X hardware wallet dismantled showing malicious LTE module modification
  • Malware

Ledger Supply Chain Attack Hits Europe via Tampered Wallets

October 13, 2026 0
Malicious npm Packages From Fake Web3 Accelerator Apex Deliver Stealers and Hijack AI Coding Agents Malicious npm packages from the fake Web3 accelerator Apex delivering CloudSyncD and a Windows infostealer
  • Malware

Malicious npm Packages From Fake Web3 Accelerator Apex Deliver Stealers and Hijack AI Coding Agents

October 13, 2026 0
AI Agent Attack Turns One Exposed Endpoint Into a Full Server Takeover in Under 24 Hours AI agent attack using the Cairn orchestration platform to achieve a full server takeover through an exposed job endpoint
  • Malware

AI Agent Attack Turns One Exposed Endpoint Into a Full Server Takeover in Under 24 Hours

October 13, 2026 0
Warden Stealer Rust Infostealer Targets AI Coding Agent Tokens and Browser Data Warden Stealer Rust infostealer stealing AI coding agent tokens, browser passwords and crypto wallet data
  • Malware

Warden Stealer Rust Infostealer Targets AI Coding Agent Tokens and Browser Data

October 12, 2026 0

Data Leak

Ricardo Data Leak Exposes User Contact Details Ricardo data leak illustration highlighting the SMG security vulnerability.
  • Data Leak

Ricardo Data Leak Exposes User Contact Details

October 9, 2026 0
The Growing Backlash Against Apple Intelligence Integration Apple Intelligence storage macOS 27 Golden Gate enterprise security
  • Data Leak

The Growing Backlash Against Apple Intelligence Integration

October 9, 2026 0
Trump Mobile Data Breach Exposes 3,615 Customers in BYOD Leak leak
  • Data Leak

Trump Mobile Data Breach Exposes 3,615 Customers in BYOD Leak

October 6, 2026 0
Denmark CPR Data Breach Exposes CPR Numbers of 8.8 Million People Denmark CPR data breach - CPR numbers exposed for 8.8 million people in the national register
  • Data Leak

Denmark CPR Data Breach Exposes CPR Numbers of 8.8 Million People

October 5, 2026 0
Ivanti Fixes Two CVSS 9.9 Flaws in Neurons Patch for Intune and Xtraction That Leak Credentials Ivanti critical vulnerabilities in Neurons Patch for Intune and Xtraction enabling credential theft
  • Vulnerability Report

Ivanti Fixes Two CVSS 9.9 Flaws in Neurons Patch for Intune and Xtraction That Leak Credentials

Do Son October 13, 2026 0
Read More Read more about Ivanti Fixes Two CVSS 9.9 Flaws in Neurons Patch for Intune and Xtraction That Leak Credentials
Siemens Warns of Eight Unpatched SIMATIC S7-1500 Web Server Flaws Rated Up to CVSS 9.4 Siemens S7-1500 vulnerabilities cross-site scripting in SIMATIC PLC web server trace files
  • Vulnerability Report

Siemens Warns of Eight Unpatched SIMATIC S7-1500 Web Server Flaws Rated Up to CVSS 9.4

Do Son October 13, 2026 0
Read More Read more about Siemens Warns of Eight Unpatched SIMATIC S7-1500 Web Server Flaws Rated Up to CVSS 9.4
Ivanti Connect Secure Vulnerability CVE-2026-104935 Exploited in the Wild Ivanti Connect Secure vulnerability CVE-2026-104935 exploited in the wild against VPN gateways
  • Vulnerability Report

Ivanti Connect Secure Vulnerability CVE-2026-104935 Exploited in the Wild

Do Son October 13, 2026 0
Read More Read more about Ivanti Connect Secure Vulnerability CVE-2026-104935 Exploited in the Wild
Criminal IP to Showcase Threat Intelligence and AITEM at Security Days Fall 2026 Tokyo 1_1791335386Gx2p3olWCv
  • Press Release

Criminal IP to Showcase Threat Intelligence and AITEM at Security Days Fall 2026 Tokyo

cybernewswire October 13, 2026 0
Read More Read more about Criminal IP to Showcase Threat Intelligence and AITEM at Security Days Fall 2026 Tokyo
Ubuntu 27.04 Release Schedule: Tenacious T-Rex Ubuntu 27.04 release schedule and Tenacious T-Rex codename details
  • Linux

Ubuntu 27.04 Release Schedule: Tenacious T-Rex

Do Son October 13, 2026 0
Read More Read more about Ubuntu 27.04 Release Schedule: Tenacious T-Rex
G2A.COM Reports 35% Growth in Security Software Orders, Outpacing VPN Growth G2A_Logo_RGB_Color_Dark_1791212026FxtySSNVFq
  • Press Release

G2A.COM Reports 35% Growth in Security Software Orders, Outpacing VPN Growth

cybernewswire October 13, 2026 0
Read More Read more about G2A.COM Reports 35% Growth in Security Software Orders, Outpacing VPN Growth
Windows 11 23H2 EOL: Enterprise Support Concludes Windows 11 23H2 EOL announcement on a computer screen
  • Windows

Windows 11 23H2 EOL: Enterprise Support Concludes

Do Son October 13, 2026 0
Read More Read more about Windows 11 23H2 EOL: Enterprise Support Concludes
SAP Security Patch Day October 2026 Fixes CVSS 10 Cloud SDK Flaw and Three More Critical Bugs SAP Security Patch Day October 2026 critical vulnerabilities in Cloud SDK, Visual Composer and S/4HANA
  • Vulnerability Report

SAP Security Patch Day October 2026 Fixes CVSS 10 Cloud SDK Flaw and Three More Critical Bugs

Do Son October 13, 2026 0
Read More Read more about SAP Security Patch Day October 2026 Fixes CVSS 10 Cloud SDK Flaw and Three More Critical Bugs
Yandex Cloud Drone Strike Causes Widespread Service Outages Yandex Cloud drone strike Vladimir data center destruction
  • Technology

Yandex Cloud Drone Strike Causes Widespread Service Outages

Do Son October 13, 2026 0
Read More Read more about Yandex Cloud Drone Strike Causes Widespread Service Outages
Qualcomm AI Wi-Fi 8: The Next Broadband Evolution Qualcomm AI Wi-Fi 8 gateway router and related AI native broadband technology
  • Technology

Qualcomm AI Wi-Fi 8: The Next Broadband Evolution

Do Son October 13, 2026 0
Read More Read more about Qualcomm AI Wi-Fi 8: The Next Broadband Evolution
ChatGPT Meetings Plugin Radically Transforms Audio Capture ChatGPT Meetings plugin macOS audio capture workspace integration
  • Technology

ChatGPT Meetings Plugin Radically Transforms Audio Capture

Do Son October 13, 2026 0
Read More Read more about ChatGPT Meetings Plugin Radically Transforms Audio Capture
IBM Patches Three Critical Flaws in IBM i, Db2 Mirror and Maximo AI Service IBM critical vulnerabilities in IBM i, Db2 Mirror and Maximo enabling remote code execution
  • Vulnerability Report

IBM Patches Three Critical Flaws in IBM i, Db2 Mirror and Maximo AI Service

Do Son October 13, 2026 0
Read More Read more about IBM Patches Three Critical Flaws in IBM i, Db2 Mirror and Maximo AI Service
Discourse Vulnerabilities Let Attackers Hijack Pages for Every Visitor and Read Server Files Discourse vulnerabilities CVE-2026-55674 cache poisoning and CVE-2026-55420 server file read
  • Vulnerability Report

Discourse Vulnerabilities Let Attackers Hijack Pages for Every Visitor and Read Server Files

Do Son October 13, 2026 0
Read More Read more about Discourse Vulnerabilities Let Attackers Hijack Pages for Every Visitor and Read Server Files
Critical Ghostscript Vulnerability CVE-2026-39919 Turns Uploaded PDFs Into Remote Code Execution Ghostscript vulnerability CVE-2026-39919 enabling remote code execution through uploaded PDF files
  • Vulnerability Report

Critical Ghostscript Vulnerability CVE-2026-39919 Turns Uploaded PDFs Into Remote Code Execution

Do Son October 12, 2026 0
Read More Read more about Critical Ghostscript Vulnerability CVE-2026-39919 Turns Uploaded PDFs Into Remote Code Execution
Seeworld Clay-Style 3D Previews: Explore a Scene From Every Angle AISelect_20261013_025746_Docs
  • Technique

Seeworld Clay-Style 3D Previews: Explore a Scene From Every Angle

Do Son October 12, 2026 0
Read More Read more about Seeworld Clay-Style 3D Previews: Explore a Scene From Every Angle
Progress Fixes 31 MarkLogic Server Vulnerabilities, Three Rated CVSS 9.9 MarkLogic Server vulnerabilities enabling privilege escalation and admin takeover
  • Vulnerability Report

Progress Fixes 31 MarkLogic Server Vulnerabilities, Three Rated CVSS 9.9

Do Son October 12, 2026 0
Read More Read more about Progress Fixes 31 MarkLogic Server Vulnerabilities, Three Rated CVSS 9.9
CERT/CC Warns of 11 Unpatched Thelia Vulnerabilities Enabling Remote Code Execution Thelia vulnerabilities enabling remote code execution on unpatched e-commerce servers
  • Vulnerability Report

CERT/CC Warns of 11 Unpatched Thelia Vulnerabilities Enabling Remote Code Execution

Do Son October 12, 2026 0
Read More Read more about CERT/CC Warns of 11 Unpatched Thelia Vulnerabilities Enabling Remote Code Execution
MariaDB Patches Nine Vulnerabilities Enabling Privilege Escalation and Code Execution MariaDB vulnerabilities CVE-2026-107815 privilege escalation and code execution in database server
  • Vulnerability Report

MariaDB Patches Nine Vulnerabilities Enabling Privilege Escalation and Code Execution

Do Son October 12, 2026 0
Read More Read more about MariaDB Patches Nine Vulnerabilities Enabling Privilege Escalation and Code Execution
RD Web Access Breaks as Chrome Drops XSLT Support RD Web Access portal on Windows Server failing to load after Chrome XSLT deprecation removes client-side XSLT
  • Technology

RD Web Access Breaks as Chrome Drops XSLT Support

Do Son October 12, 2026 0
Read More Read more about RD Web Access Breaks as Chrome Drops XSLT Support
Windows 11 Quick Settings Can Now Ring Your Android Phone Windows 11 Quick Settings panel showing a paired phone with Do Not Disturb, volume, and a find my phone Windows 11 ring option
  • Windows

Windows 11 Quick Settings Can Now Ring Your Android Phone

Do Son October 12, 2026 0
Read More Read more about Windows 11 Quick Settings Can Now Ring Your Android Phone
LineageOS 24.0 Released: Android 17 & Web Flashing Tool LineageOS 24.0 Android 17 custom ROM and WebUSB Lineage Flash Tools interface
  • Android

LineageOS 24.0 Released: Android 17 & Web Flashing Tool

Do Son October 12, 2026 0
Read More Read more about LineageOS 24.0 Released: Android 17 & Web Flashing Tool
Run Googlebook OS on MacBook via QEMU Virtualization Googlebook OS running on Apple Silicon MacBook via QEMU virtualization
  • Technology

Run Googlebook OS on MacBook via QEMU Virtualization

Do Son October 12, 2026 0
Read More Read more about Run Googlebook OS on MacBook via QEMU Virtualization
Next Page ❯

Search

Translation

CVE ALERTS
πŸ“ˆ

EPSS Spike Alerts
Catch risk spikes before they make headlines.

🎯

Custom EPSS/CVSS
Set score thresholds to effectively filter noise.

πŸ›‘οΈ

Exploit Intel
Real-world exploit signals beyond the KEV catalog.

πŸ™

GitHub Issues
Auto-create alert tickets without duplication.

πŸ“¬

Weekly Digest
Clean summaries, eliminating email spam.

🏷️

Watchlist Groups
Tag vulnerabilities by team (Infra/AppSec/SOC).

πŸ”€

Smart Routing
Route chat channels based on severity levels.

🚨

RBP Tracker
Early warning detection and tracking system.

Subscribe – $7/mo or try free for 14 days β†’

🚨 Active Exploits in the Wild

  • CVE-2026-104935CVSS 8.6
    Authentication bypass by spoofing in ICS before version 25.1.3.0 allows a remote unauthenticated attacker to execute arbitrary commands....
    CISA KEV📅 Added to KEV: Oct 13, 2026
  • CVE-2026-102255CVSS 10.0
    A Pre-authentication SSRF vulnerability exists in the SMA1000 Appliance Work Place interface due to an unintended alternate access...
    Admin intel📅 Updated: Oct 9, 2026
  • CVE-2026-105133CVSS 6.9
    A vulnerability was detected in Ahsay AhsayCBS up to 10.3.2. This affects the function checkSysPwd of the file...
    Admin intel📅 Updated: Oct 9, 2026
  • CVE-2023-22894CVSS 4.9
    Strapi through 4.5.5 allows attackers (with access to the admin panel) to discover sensitive user details by exploiting...
    CISA KEV📅 Added to KEV: Oct 8, 2026
  • CVE-2016-3081CVSS 8.1
    Apache Struts 2.3.19 to 2.3.20.2, 2.3.21 to 2.3.24.1, and 2.3.25 to 2.3.28, when Dynamic Method Invocation is enabled,...
    CISA KEV📅 Added to KEV: Oct 8, 2026
  • CVE-2015-3306CVSS 10.0
    The mod_copy module in ProFTPD 1.3.5 allows remote attackers to read and write to arbitrary files via the...
    CISA KEV📅 Added to KEV: Oct 8, 2026
  • CVE-2015-5477CVSS 7.5
    named in ISC BIND 9.x before 9.9.7-P2 and 9.10.x before 9.10.2-P3 allows remote attackers to cause a denial...
    CISA KEV📅 Added to KEV: Oct 8, 2026
  • CVE-2021-3199CVSS 9.8
    Directory traversal with remote code execution can occur in /upload in ONLYOFFICE Document Server before 5.6.3, when JWT...
    CISA KEV📅 Added to KEV: Oct 8, 2026
Powered by CVE Watchtower

Critical Vulnerabilities

  • CVE-2026-86360CVSS 9.6
    Dell System Update, versions prior to 2.3.0.0, contains an Improper Limitation of a Pathname to a Restricted Directory...
    📅 Updated: Oct 13, 2026
  • CVE-2026-92892CVSS 9.0
    Potential arbitrary code execution, under specific configurations.
    📅 Updated: Oct 13, 2026
  • CVE-2026-55183CVSS 9.6
    RClone Manager is a cross-platform GUI application designed to help users manage Rclone remotes efficiently. Prior to 0.2.7,...
    📅 Updated: Oct 13, 2026
  • CVE-2026-106173CVSS 9.8
    A improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiSIEM 7.5.0 may...
    📅 Updated: Oct 13, 2026
  • CVE-2020-37279CVSS 9.2
    easy-pdf-merge 0.1.0 through 0.2.6 contains an OS command injection vulnerability that allows attackers to execute commands by injecting...
    📅 Updated: Oct 13, 2026
  • CVE-2026-105445CVSS 9.4
    An Incorrect Privilege Assignment vulnerability in Docker Hub's account-to-organization conversion feature allowed an authenticated attacker to reassign a...
    📅 Updated: Oct 13, 2026
  • CVE-2026-94603CVSS 10.0
    Podman is a tool for managing OCI containers and pods. From 4.4.0 until 5.8.8 and 6.1.3, podman run...
    📅 Updated: Oct 13, 2026
  • CVE-2026-77459CVSS 9.9
    Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. From 2.10.0 until 3.3.15, 3.4.10, 3.5.4, and...
    📅 Updated: Oct 13, 2026
Powered by CVE Watchtower

Daily CyberSecurity

  • About SecurityOnline.info
  • Advertise with us
  • Announcement
  • Contact
  • Contributor Register
  • Login
  • Disclaimer
  • DCMA
  • Privacy Policy
  • About SecurityOnline.info
  • Advertise on SecurityOnline.info
  • Contact Us

When you purchase through links on our site, we may earn an affiliate commission. Here’s how it works

  • CVE Watchtower
  • CVE Statistics by Vendor 2026
  • Q3 2026 Report
  • Top Exploited CVEs
  • Bluesky
  • Facebook
  • Linkedin
  • Mastodon
  • RSS
  • Twitter
  • Youtube
Β© 2017 - 2026 Daily CyberSecurity. All Rights Reserved.