Week in review: ServiceNow pre-auth RCE exploited in the wild, Hugging Face breachedHelp Net Security·Jul 26, 00:00 UTC · Jul 26, 2026Data breach in the wildCVE-2026-6875CVE-2026-15409CVE-2026-15410+4 CVEs60
China-linked threat actors have breached telcos and network service providersSecurity Affairs·Jun 8, 09:53 UTC · Jun 8, 2022Data breachCVE-2018-0171CVE-2019-15271CVE-2019-1652+13 CVEs60
Claude finds 353 zeroSansec (Magento / e-commerce security)·Apr 14, 19:49 UTC · Apr 14, 2026Data breach60
Week in review: Revolut data breach, ManageEngine RCE flaw, free Linux security training coursesHelp Net Security·Sep 25, 00:00 UTC · Sep 25, 2022Data breach in the wildCVE-2007-4559CVE-2022-35405CVE-2022-31671+4 CVEs60
Week in review: ChatGPT cybersecurity, critical RCE vulnerabilities found in git, Riot Games breachedHelp Net Security·Jan 29, 00:00 UTC · Jan 29, 2023Data breachCVE-2022-42856CVE-2022-31706CVE-2022-31704+3 CVEs60
A Few More Reasons Why RDP is Insecure (Surprise!)The Hacker News·Jul 20, 10:48 UTC · Jul 20, 2023Data breachCVE-2023-24905CVE-2023-3533260
DNS Rebinding Attack: How Malicious Websites Exploit Private NetworksPalo Alto Unit 42·Jun 6, 01:33 UTC · Jun 6, 2024Data breach60
How threat actors breached U.S. federal civilian agency by exploiting a GeoServer flawSecurity Affairs·Sep 24, 10:16 UTC · Sep 24, 2025Data breach in the wildCVE-2024-3640160
Microsoft Outlook Faced Critical ZeroInfosecurity Magazine·Jul 10, 16:30 UTC · Jul 10, 2024Data breachCVE-2024-38021CVE-2024-3010360
Top 10 Critical Pentest Findings 2024: What You Need to KnowThe Hacker News·Jun 11, 12:43 UTC · Jun 11, 2024Data breachCVE-2019-0708CVE-2018-120760
Week in review: Hacking industrial robots, criminals exploit SS7 flaws to empty bank accountsHelp Net Security·Nov 21, 11:27 UTC · Nov 21, 2023Data breachCVE-2017-6968CVE-2016-10033CVE-2017-829560
Flaws in CyberPower solutions expose data centers to hackingSecurity Affairs·Aug 14, 06:56 UTC · Aug 14, 2023Data breach in the wildCVE-2023-3259CVE-2023-3267CVE-2023-3264+6 CVEs160
Week in review: Log4Shell lingers, NIS2 directive adopted, LastPass breached (again)Help Net Security·Dec 4, 00:00 UTC · Dec 4, 2022Data breach in the wildCVE-2021-3558760
Week in review: SolarWinds hack and related attacks, life without passwords, how to make DevSecOps stickHelp Net Security·Dec 20, 00:00 UTC · Dec 20, 2020Data breach60
Week in review: Kali Linux 2020.3, mobile security threats, ISO certs at risk of lapsingHelp Net Security·Aug 23, 00:00 UTC · Aug 23, 2020Data breachCVE-2019-023060
Week in review: EasyJet breach, shadow IT risks, phishers bypassing Office 365 MFAHelp Net Security·May 26, 09:09 UTC · May 26, 2020Data breach60
Week in review: Claude breached three companies during tests, AD CS domain-takeover PoC releasedHelp Net Security·Aug 2, 00:00 UTC · Aug 2, 2026Data breachCVE-2026-54121CVE-2026-63077CVE-2026-20316+1 CVEs60
20,000 FortiGate appliances compromised by Chinese hackersHelp Net Security·Apr 23, 13:44 UTC · Apr 23, 2026Data breachCVE-2022-4247560
CosmicSting attack & defense overviewSansec (Magento / e-commerce security)·Apr 14, 20:16 UTC · Apr 14, 2026Data breach in the wildCVE-2024-2961CVE-2024-3410260
Malicious PDF reveals active Adobe Reader zeroSecurity Affairs·Apr 9, 19:14 UTC · Apr 9, 2026Data breach60
UAT-10608: Inside a large-scale automated credential harvesting operation targeting web applicationsCisco Talos·Apr 2, 10:00 UTC · Apr 2, 2026Data breachCVE-2025-55182160
China-Linked Silk Typhoon Expands Cyber Attacks to IT Supply Chains for Initial AccessThe Hacker News·Mar 7, 04:04 UTC · Mar 7, 2025Data breach in the wildCVE-2025-0282CVE-2024-3400CVE-2023-3519+5 CVEs60
UK Registry Nominet Breached Via Ivanti ZeroInfosecurity Magazine·Jan 14, 09:45 UTC · Jan 14, 2025Data breachCVE-2025-028260
Leveraging Wazuh for Zero Trust securityThe Hacker News·Nov 5, 11:00 UTC · Nov 5, 2024Data breach in the wildCVE-2024-309460
Critical Apache Log4j2 flaw still threatens global financeSecurity Affairs·Jun 1, 15:44 UTC · Jun 1, 2024Data breachCVE-2021-4483260
Chinese hackers breached Dutch Ministry of DefenseHelp Net Security·Feb 15, 11:48 UTC · Feb 15, 2024Data breachCVE-2022-4247560
US Government IIS Server Breached via Telerik Software FlawInfosecurity Magazine·Mar 16, 17:00 UTC · Mar 16, 2023Data breachCVE-2019-1893560
Microsoft Exchange Cyber Attack — What Do We Know So Far?The Hacker News·Mar 10, 08:44 UTC · Mar 10, 2021Data breach in the wildCVE-2021-26855CVE-2021-26857CVE-2021-26858+1 CVEs60
Week in review: Automated pentesting, Oracle WebLogic servers under attackHelp Net Security·Nov 1, 00:00 UTC · Nov 1, 2020Data breachCVE-2020-1488260
Week in review: BootHole, RCEs in industrial VPNs, the cybersecurity profession crisisHelp Net Security·Aug 2, 00:00 UTC · Aug 2, 2020Data breachCVE-2020-3452CVE-2020-1071360
Hackers breached six Cisco servers through SaltStack Salt vulnerabilitiesHelp Net Security·May 29, 00:00 UTC · May 29, 2020Data breachCVE-2020-11651CVE-2020-1165260
Week in review: Malicious Python packages, FaceApp panic, and how to avoid a biometric dystopiaHelp Net Security·May 28, 11:21 UTC · May 28, 2020Data breachCVE-2019-11580160
Week in review: UN hacked, new Kali Linux release, Win7 upgrade dilemmaHelp Net Security·Feb 2, 00:00 UTC · Feb 2, 2020Data breachCVE-2020-724760
Chinese hackers exploited Trend Micro AV 0day in Mitsubishi Electric hackSecurity Affairs·Jan 25, 13:21 UTC · Jan 25, 2020Data breach in the wildCVE-2019-1818760
Week in review: Public cloud performance, new G Suite security options, how to build a successful SOC?Help Net Security·Nov 24, 00:00 UTC · Nov 24, 2019Data breachCVE-2019-1193160
Hackers Breach ZoneAlarm's Forum Site — Outdated vBulletin to BlameThe Hacker News·Nov 11, 15:44 UTC · Nov 11, 2019Data breachCVE-2019-1675960
Week in review: Kali Linux roadmap, runtime container security, new issue of (IN)SECUREHelp Net Security·Jul 3, 08:22 UTC · Jul 3, 2019Data breach in the wildCVE-2019-272960
Week in review: VirtualBox 0day, GPU side channel attacks, vulnerable self-encrypting SSDsHelp Net Security·Nov 11, 00:00 UTC · Nov 11, 2018Data breach60
Week in review: Digital signature spoofing, securing microservicesHelp Net Security·Jun 17, 00:00 UTC · Jun 17, 2018Data breach60