Experts warn of an emerging credential harvester named LegionSecurity Affairs·Apr 17, 08:53 UTC · Apr 17, 2023Vulnerability42
New Python-Based "Legion" Hacking Tool Emerges on TelegramThe Hacker News·Apr 15, 00:00 UTC · Apr 15, 2023Vulnerability42
Ivanti Flaw CVE-2025-0282 Actively Exploited, Impacts Connect Secure and Policy SecureThe Hacker News·Jan 11, 06:31 UTC · Jan 11, 2025Vulnerability in the wildCVE-2025-0282CVE-2025-028360
ThreatsDay Bulletin: PAN-OS RCE, Mythos cURL Bug, AI Tokenizer Attacks, and 10+ StoriesThe Hacker News·May 15, 00:00 UTC · May 15, 2026VulnerabilityCVE-2026-0300160
“Keep going, bro. You’ve got this!” A data-driven look at how adversaries are weaponizing AICisco Talos·Aug 4, 10:00 UTC · Aug 4, 2026Vulnerability55
Kazakhstan-associated YoroTrooper disguises origin of attacks as AzerbaijanCisco Talos·Oct 25, 12:01 UTC · Oct 25, 2023Vulnerability30
Malicious Python Package Uses Unicode Trickery to Evade Detection and Steal DataThe Hacker News·Mar 24, 13:40 UTC · Mar 24, 2023Vulnerability142
Critical Langflow Flaw CVE-2026-33017 Triggers Attacks within 20 Hours of DisclosureThe Hacker News·Mar 26, 06:26 UTC · Mar 26, 2026Vulnerability in the wildCVE-2026-33017CVE-2025-3248160
36 Malicious npm Packages Exploited Redis, PostgreSQL to Deploy Persistent ImplantsThe Hacker News·Apr 6, 06:40 UTC · Apr 6, 2026Vulnerability142
Friday Squid Blogging: Squid PursesSchneier on Security·May 3, 21:05 UTC · May 3, 2024VulnerabilityCVE-2023-23397135
⚡ Weekly Recap: AI-Powered Phishing, Android Spying Tool, Linux Exploit, GitHub RCE & MoreThe Hacker News·May 5, 05:41 UTC · May 5, 2026Vulnerability in the wildCVE-2026-41940CVE-2026-31431CVE-2026-3854+2 CVEs160
Two flaws in Apache SuperSet allow to remotely hack serversSecurity Affairs·Sep 7, 13:34 UTC · Sep 7, 2023VulnerabilityCVE-2023-39265CVE-2023-37941CVE-2023-30776+1 CVEs47
Alert: Apache Superset Vulnerabilities Expose Servers to Remote Code Execution AttacksThe Hacker News·Sep 8, 02:46 UTC · Sep 8, 2023VulnerabilityCVE-2023-39265CVE-2023-37941CVE-2023-36388+2 CVEs47
Web Server Exploits and Mimikatz Used in Attacks Targeting Asian Critical InfrastructureThe Hacker News·Mar 9, 18:22 UTC · Mar 9, 2026Vulnerability55
Apache Superset Vulnerability: Insecure Default Configuration Exposes Servers to RCE AttacksThe Hacker News·Apr 27, 07:55 UTC · Apr 27, 2023VulnerabilityCVE-2023-2752447
Malicious PyPI, npm, and Ruby Packages Exposed in Ongoing OpenThe Hacker News·Jun 4, 10:11 UTC · Jun 4, 2025Vulnerability242
ThreatsDay Bulletin: Pixel Zero-Click, Redis RCE, China C2s, RAT Ads, Crypto Scams & 15+ StoriesThe Hacker News·Jan 24, 08:04 UTC · Jan 24, 2026Vulnerability55
Open-source CI/CD abuse detector guards against stolen credential attacksHelp Net Security·Jun 15, 00:00 UTC · Jun 15, 2026Vulnerability42
Unmasking the new persistent attacks on JapanCisco Talos·Mar 6, 11:00 UTC · Mar 6, 2025VulnerabilityCVE-2024-4577160
ThreatsDay Bulletin: Rootkit Patch, Federal Breach, OnePlus SMS Leak, TikTok Scandal & MoreThe Hacker News·Oct 2, 12:19 UTC · Oct 2, 2025VulnerabilityCVE-2025-10184CVE-2024-36401160
Marimo RCE Flaw CVE-2026-39987 Exploited Within 10 Hours of DisclosureThe Hacker News·Apr 24, 05:28 UTC · Apr 24, 2026Vulnerability in the wildCVE-2026-3998760
Open-source attacks move through normal development workflowsHelp Net Security·Apr 23, 13:29 UTC · Apr 23, 2026Vulnerability142
Container Escape to Shadow Admin: GKE Autopilot VulnerabilitiesPalo Alto Unit 42·Jun 5, 23:26 UTC · Jun 5, 2024VulnerabilityCVE-2020-855447
ThreatsDay Bulletin: SMS Blaster Busts, OpenEMR Flaws, 600K Roblox Hacks and 25 More StoriesThe Hacker News·May 1, 07:21 UTC · May 1, 2026VulnerabilityCVE-2019-0708147
Thousands of publicly-exposed Apache Superset installs exposed to RCE attacksSecurity Affairs·Apr 26, 13:34 UTC · Apr 26, 2023VulnerabilityCVE-2023-2752447
Researchers Find Serious AI Bugs Exposing Meta, Nvidia, and Microsoft Inference FrameworksThe Hacker News·Nov 15, 00:00 UTC · Nov 15, 2025VulnerabilityCVE-2024-50050CVE-2025-30165CVE-2025-23254+1 CVEs60
North Korea-Linked Hackers Target Developers via Malicious VS Code ProjectsThe Hacker News·Feb 26, 10:15 UTC · Feb 26, 2026Vulnerability42
⚡ Weekly Recap: IoT Exploits, Wallet Breaches, Rogue Extensions, AI Abuse & MoreThe Hacker News·Jan 5, 12:56 UTC · Jan 5, 2026VulnerabilityCVE-2025-55182CVE-2025-13915CVE-2025-52691+7 CVEs60
⚡ Weekly Recap: WordPress RCE, SonicWall 0-Days, AI Service Attacks, SharePoint 0The Hacker News·Jul 21, 04:34 UTC · Jul 21, 2026Vulnerability in the wildCVE-2026-63030CVE-2026-60137CVE-2026-15409+26 CVEs160
Weekly Recap: Outlook Add-Ins Hijack, 0-Day Patches, Wormable Botnet & AI MalwareThe Hacker News·Feb 23, 11:00 UTC · Feb 23, 2026Vulnerability in the wildCVE-2026-2441CVE-2026-1731CVE-2026-2070060
Shell No! Adversary Web Shell Trends and Mitigations (Part 1)Recorded Future·Jun 27, 00:00 UTC · Jun 27, 2025Vulnerability42
ThreatsDay Bulletin: AI Prompt RCE, Claude 0-Click, RenEngine Loader, Auto 0The Hacker News·Feb 15, 00:00 UTC · Feb 15, 2026VulnerabilityCVE-2026-2084147