Week in review: Microsoft, Apple patch exploited zero-days, tips for getting hired in cybersecurityHelp Net Security·Feb 19, 00:00 UTC · Feb 19, 2023Exploit / PoC in the wildCVE-2023-21715CVE-2023-23376CVE-2023-21823+2 CVEs60
Details and PoC for critical SharePoint RCE flaw releasedHelp Net Security·Jul 21, 00:00 UTC · Jul 21, 2020Exploit / PoC in the wildCVE-2020-1350CVE-2020-114760
Using legitimate tools to hide malicious codeKaspersky Securelist·Nov 8, 10:00 UTC · Nov 8, 2017Exploit / PoC45
Week in review: Firmware-level Android backdoor found on tablets, Dell zero-day exploited since 2024Help Net Security·Feb 22, 00:00 UTC · Feb 22, 2026Exploit / PoC in the wildCVE-2026-2441CVE-2026-22769CVE-2026-2329+1 CVEs60
Week in review: Cisco ASA zero-day vulnerabilities exploited, Fortra GoAnywhere instances at riskHelp Net Security·Sep 28, 00:00 UTC · Sep 28, 2025Exploit / PoCCVE-2025-10035CVE-2025-59689CVE-2025-26399+1 CVEs60
Chrome sandbox escape nets security researcher $250,000 rewardSecurity Affairs·Aug 11, 16:58 UTC · Aug 11, 2025Exploit / PoC in the wildCVE-2025-4609CVE-2025-278360
Week in review: Google fixes zero-day vulnerability in Chrome, critical SQL injection flaw in FortiWebHelp Net Security·Jul 20, 00:00 UTC · Jul 20, 2025Exploit / PoC in the wildCVE-2025-6558CVE-2025-2525760
Week in review: Atlassian Confluence RCE PoC, new Kali Linux, Patch Tuesday forecastHelp Net Security·Jun 9, 00:00 UTC · Jun 9, 2024Exploit / PoCCVE-2024-21683CVE-2024-28995CVE-2024-29972+4 CVEs60
Week in review: 10 cybersecurity frameworks you need to know, exploited Chrome zero-day fixedHelp Net Security·Jan 21, 00:00 UTC · Jan 21, 2024Exploit / PoC in the wildCVE-2023-36025CVE-2023-22527CVE-2024-0519+3 CVEs60
Week in review: Cybersecurity cheat sheets, widely exploited Cisco zero-day, KeePass-themed malvertisingHelp Net Security·Oct 22, 00:00 UTC · Oct 22, 2023Exploit / PoC in the wildCVE-2023-20198CVE-2023-4966CVE-2023-3883160
Week in review: Microsoft patches zero-day, Apple security updates, HashiCorp Vault vulnerabilityHelp Net Security·Apr 18, 11:58 UTC · Apr 18, 2023Exploit / PoC in the wildCVE-2023-28252CVE-2023-28205CVE-2023-28206+1 CVEs160
Week in review: Citrix and Fortinet RCEs, Microsoft fixes exploited zero-dayHelp Net Security·Dec 18, 00:00 UTC · Dec 18, 2022Exploit / PoCCVE-2022-20968CVE-2022-42475CVE-2022-27518+1 CVEs60
Alchimist: A new attack framework in Chinese for Mac, Linux and WindowsCisco Talos·Oct 13, 12:00 UTC · Oct 13, 2022Exploit / PoC in the wildCVE-2021-4034160
Red TIM Research discovers a critical command Injection on ResiSecurity Affairs·Jun 6, 10:36 UTC · Jun 6, 2022Exploit / PoCCVE-2022-29539CVE-2022-2953860
White House cyber summit with private sector nets impressive gains, but points to considerable work needed aheadCyberScoop·Aug 26, 20:51 UTC · Aug 26, 2021Exploit / PoC in the wild60
Lemon Duck spreads its wings: Actors target Microsoft Exchange servers, incorporate new TTPsCisco Talos·May 7, 19:50 UTC · May 7, 2021Exploit / PoCCVE-2021-26855CVE-2021-26857CVE-2021-26858+1 CVEs160
Open Document format creates twist in maldoc landscapeCisco Talos·Sep 30, 15:35 UTC · Sep 30, 2019Exploit / PoC45
Adobe, Microsoft Plug Critical Security HolesKrebs on Security·Sep 15, 00:00 UTC · Sep 15, 2017Exploit / PoC in the wildCVE-2017-8759CVE-2017-862860
OVSwrap: 13-Year-Old Linux Kernel Flaw Lets Local Users Become RootSecurity Affairs·Aug 5, 14:24 UTC · Aug 5, 2026Exploit / PoCCVE-2026-6453160
Week in review: Windows zero-day exploit leaked, Patch Tuesday forecastHelp Net Security·Apr 12, 00:00 UTC · Apr 12, 2026Exploit / PoC in the wildCVE-2026-34197160
Week in review: Microsoft fixes exploited Office zero-day, Fortinet patches FortiCloud SSO flawHelp Net Security·Feb 1, 00:00 UTC · Feb 1, 2026Exploit / PoC in the wildCVE-2026-21509CVE-2026-24858CVE-2025-8088+1 CVEs60
⚡ Weekly Recap: Fortinet Exploits, RedLine Clipjack, NTLM Crack, Copilot Attack & MoreThe Hacker News·Jan 20, 07:01 UTC · Jan 20, 2026Exploit / PoC in the wildCVE-2025-6415560
Week in review: PoC for FortiSIEM flaw released, Rakuten Viber CISO/CTO on messaging risksHelp Net Security·Jan 18, 00:00 UTC · Jan 18, 2026Exploit / PoCCVE-2025-64155CVE-2025-20393160
Week in review: Exploited zero-day in Cisco email security appliances, Kali Linux 2025.4 releasedHelp Net Security·Dec 21, 00:00 UTC · Dec 21, 2025Exploit / PoC in the wildCVE-2025-59718CVE-2025-40602CVE-2025-14174+1 CVEs160
Week in review: Covertly connected and insecure Android VPN apps, Apple fixes exploited zero-dayHelp Net Security·Aug 24, 00:00 UTC · Aug 24, 2025Exploit / PoC in the wildCVE-2025-43300CVE-2018-0171CVE-2025-31324+1 CVEs60
Using an agent for the Mythic framework: pros and cons in pentestingKaspersky Securelist·May 13, 10:00 UTC · May 13, 2025Exploit / PoC60
Microsoft fixes actively exploited zero-days (CVE-2024-43451, CVE-2024-49039)Help Net Security·Nov 26, 13:25 UTC · Nov 26, 2024Exploit / PoC in the wildCVE-2024-43451CVE-2024-49039CVE-2024-43639+3 CVEs60
Week in review: Google fixes yet another Chrome zero-day exploit, YouTube as a cybercrime channelHelp Net Security·May 26, 00:00 UTC · May 26, 2024Exploit / PoC in the wildCVE-2024-5274CVE-2024-4985CVE-2023-43208+4 CVEs60
Week in review: Public MS Word RCE PoC, API exploitation, Patch Tuesday forecastHelp Net Security·Mar 12, 00:00 UTC · Mar 12, 2023Exploit / PoCCVE-2023-27532CVE-2023-25610CVE-2023-21716160
Critical Code Execution Flaw Found in CyberArk Enterprise Password VaultThe Hacker News·Apr 9, 14:46 UTC · Apr 9, 2018Exploit / PoCCVE-2018-984360
Skygofree: Following in the footsteps of HackingTeamKaspersky Securelist·Jan 16, 10:00 UTC · Jan 16, 2018Exploit / PoC57
New OVSwrap Linux Kernel Flaw Lets Local Users Gain Root via Open vSwitchThe Hacker News·Aug 5, 11:43 UTC · Aug 5, 2026Exploit / PoCCVE-2026-6453150
Researcher Says AI Helped Develop Linux TrafficThe Hacker News·Jul 28, 08:04 UTC · Jul 28, 2026Exploit / PoC in the wildCVE-2026-5326460
The architecture of subtraction: Why it's time to erase the roads, not just map the trafficHelp Net Security·Jun 9, 00:00 UTC · Jun 9, 2026Exploit / PoC60
ThreatsDay Bulletin: $290M DeFi Hack, macOS LotL Abuse, ProxySmart SIM Farms +25 New StoriesThe Hacker News·Apr 24, 04:36 UTC · Apr 24, 2026Exploit / PoCCVE-2026-27175CVE-2026-27174CVE-2025-22952+1 CVEs60
Week in review: Axios npm supply chain compromise, critical FortiClient EMS bugs exploitedHelp Net Security·Apr 5, 00:00 UTC · Apr 5, 2026Exploit / PoC in the wildCVE-2026-35616CVE-2026-21643CVE-2026-20093+2 CVEs160
Week in review: NIST updates DNS security guidance, compromised LiteLLM PyPI packagesHelp Net Security·Mar 29, 00:00 UTC · Mar 29, 2026Exploit / PoC in the wildCVE-2025-53521CVE-2026-21992CVE-2026-305560
The BetterBank DeFi protocol exploited for reward mintingKaspersky Securelist·Oct 22, 10:00 UTC · Oct 22, 2025Exploit / PoC60
Week in review: PostgreSQL databases under attack, new Chrome zero-day actively exploitedHelp Net Security·Aug 25, 00:00 UTC · Aug 25, 2024Exploit / PoC in the wildCVE-2024-7971CVE-2024-6800CVE-2024-28987+2 CVEs60