Overlooked essentials: API security best practicesHelp Net Security·Sep 19, 11:38 UTC · Sep 19, 2024Data breach60
Hackers Exploit WordPress mu-Plugins to Inject Spam and Hijack Site ImagesThe Hacker News·Apr 1, 05:37 UTC · Apr 1, 2025Data breachCVE-2024-27956CVE-2024-8353CVE-2024-434560
Apache Struts 2 Flaws Affect Multiple Cisco ProductsThe Hacker News·Sep 12, 10:51 UTC · Sep 12, 2017Data breach in the wildCVE-2017-9805CVE-2017-5638CVE-2017-9793+2 CVEs60
⚡ Weekly Recap: Rogue AI Models, $88M Bitcoin Theft, WaterThe Hacker News·Aug 3, 14:03 UTC · Aug 3, 2026Data breachCVE-2026-42897CVE-2026-6606660
Researchers Identify Rack::Static Vulnerability Enabling Data Breaches in Ruby ServersThe Hacker News·Apr 25, 10:29 UTC · Apr 25, 2025Data breachCVE-2025-27610CVE-2025-27111CVE-2025-25184+1 CVEs160
Security Flaws Found in Popular WooCommerce PluginInfosecurity Magazine·Jun 7, 11:00 UTC · Jun 7, 2024Data breachCVE-2024-33549CVE-2024-33544CVE-2024-3354660
Hundreds of Citrix NetScaler ADC and Gateway Servers Hacked in Major Cyber AttackThe Hacker News·Aug 8, 03:59 UTC · Aug 8, 2023Data breachCVE-2023-3519CVE-2023-2448960
Australian cybersecurity minister lambasts Optus for ‘unprecedented\' hackThe Record·Jan 10, 00:00 UTC · Jan 10, 2023Data breach60
China-linked attackers breached Metropolitan Transportation Authority (MTA) using Pulse Secure zeroSecurity Affairs·Jun 4, 11:44 UTC · Jun 4, 2021Data breach in the wildCVE-2021-2289360
Passwords Evolved: Authentication Guidance for the Modern EraTroy Hunt·Jul 26, 07:40 UTC · Jul 26, 2017Data breach60
Week in review: Claude breached three companies during tests, AD CS domain-takeover PoC releasedHelp Net Security·Aug 2, 00:00 UTC · Aug 2, 2026Data breachCVE-2026-54121CVE-2026-63077CVE-2026-20316+1 CVEs60
Claude published malicious code to the Internet and attacked 3 real companiesArs Technica · Security·Jul 31, 20:39 UTC · Jul 31, 2026Data breach160
Anthropic Says Claude Mistook the Open Internet for a CTF and Breached Three OrganizationsThe Hacker News·Jul 31, 16:17 UTC · Jul 31, 2026Data breach260
Anthropic says its AI hacked realThe Record·Jul 31, 12:16 UTC · Jul 31, 2026Data breach in the wild60
Week in review: ServiceNow pre-auth RCE exploited in the wild, Hugging Face breachedHelp Net Security·Jul 26, 00:00 UTC · Jul 26, 2026Data breach in the wildCVE-2026-6875CVE-2026-15409CVE-2026-15410+4 CVEs60
Estée Lauder discloses data breach tied to Oracle EBS vulnerabilityHelp Net Security·Jul 21, 00:00 UTC · Jul 21, 2026Data breachCVE-2025-6188260
eSentire links AI-led penetration testing with MDR through Atlas PreemptHelp Net Security·Jun 18, 00:00 UTC · Jun 18, 2026Data breach60
Week in review: Acrobat Reader flaw exploited, Claude Mythos offensive capabilities and limitsHelp Net Security·Apr 19, 00:00 UTC · Apr 19, 2026Data breach in the wildCVE-2026-34621CVE-2026-39813CVE-2026-3980860
PHP tool 'Adminer' leaks passwordsSansec (Magento / e-commerce security)·Apr 14, 20:16 UTC · Apr 14, 2026Data breach60
Bad extensions now main source of Magento hacks: a solution!Sansec (Magento / e-commerce security)·Apr 14, 20:16 UTC · Apr 14, 2026Data breach60
Hackers breached Magento through helpdeskSansec (Magento / e-commerce security)·Apr 14, 19:49 UTC · Apr 14, 2026Data breach in the wild60
Claude finds 353 zeroSansec (Magento / e-commerce security)·Apr 14, 19:49 UTC · Apr 14, 2026Data breach60
WebRTC Skimmer Bypasses CSP to Steal Payment Data from EThe Hacker News·Mar 26, 15:39 UTC · Mar 26, 2026Data breach in the wild60
⚡ Weekly Recap: Qualcomm 0-Day, iOS Exploit Chains, AirSnitch Attack & VibeThe Hacker News·Mar 9, 18:22 UTC · Mar 9, 2026Data breach in the wildCVE-2026-21385CVE-2026-2796CVE-2026-2256+13 CVEs60
⚡ Weekly Recap: SD-WAN 0-Day, Critical CVEs, Telegram Probe, Smart TV Proxy SDK and MoreThe Hacker News·Mar 2, 13:26 UTC · Mar 2, 2026Data breach in the wildCVE-2026-20127CVE-2025-40538CVE-2025-40539+27 CVEs60
China-linked group Salt Typhoon breached satellite firm ViasatSecurity Affairs·Jun 23, 20:52 UTC · Jun 23, 2025Data breach in the wildCVE-2023-20198CVE-2023-20273160
Why DNS Security Is Your First Defense Against Cyber Attacks?The Hacker News·Jun 11, 11:25 UTC · Jun 11, 2025Data breach in the wild60
Attackers breached ConnectWise, compromised customer ScreenConnect instancesHelp Net Security·Jun 4, 08:00 UTC · Jun 4, 2025Data breach in the wildCVE-2025-3935CVE-2025-3040660
WK Kellogg Confirms Data Breach Tied to Cleo Software ExploitInfosecurity Magazine·Apr 9, 16:00 UTC · Apr 9, 2025Data breachCVE-2024-50623CVE-2024-5595660
runZero’s expanded platform offers new approach to detecting and prioritizing riskHelp Net Security·Mar 27, 00:00 UTC · Mar 27, 2025Data breach in the wild60
China-Linked Silk Typhoon Expands Cyber Attacks to IT Supply Chains for Initial AccessThe Hacker News·Mar 7, 04:04 UTC · Mar 7, 2025Data breach in the wildCVE-2025-0282CVE-2024-3400CVE-2023-3519+5 CVEs60
China-linked APT Salt Typhoon breached telecoms by exploiting Cisco router flawsSecurity Affairs·Feb 14, 19:23 UTC · Feb 14, 2025Data breach in the wildCVE-2023-20198CVE-2023-2027360
New Hacking Group Leaks Configuration of 15,000 Fortinet FirewallsInfosecurity Magazine·Jan 16, 12:50 UTC · Jan 16, 2025Data breachCVE-2022-40684CVE-2024-5559160
UK Registry Nominet Breached Via Ivanti ZeroInfosecurity Magazine·Jan 14, 09:45 UTC · Jan 14, 2025Data breachCVE-2025-028260
UK domain registry Nominet breached via Ivanti zero-dayHelp Net Security·Jan 13, 00:00 UTC · Jan 13, 2025Data breachCVE-2025-028260
Top 10 Critical Pentest Findings 2024: What You Need to KnowThe Hacker News·Jun 11, 12:43 UTC · Jun 11, 2024Data breachCVE-2019-0708CVE-2018-120760
Warning: 3 Critical Vulnerabilities Expose ownCloud Users to Data BreachesThe Hacker News·Nov 29, 03:36 UTC · Nov 29, 2023Data breach in the wildCVE-2023-49103CVE-2023-49105CVE-2023-49104+1 CVEs60
Week in review: Hacking industrial robots, criminals exploit SS7 flaws to empty bank accountsHelp Net Security·Nov 21, 11:27 UTC · Nov 21, 2023Data breachCVE-2017-6968CVE-2016-10033CVE-2017-829560
Sony sent data breach notifications to about 6,800 individualsSecurity Affairs·Oct 5, 06:24 UTC · Oct 5, 2023Data breachCVE-2023-3436260
National Student Clearinghouse data breach impacted approximately 900 US schoolsSecurity Affairs·Sep 24, 09:19 UTC · Sep 24, 2023Data breachCVE-2023-3436260