⚡ Weekly Recap: Zero-Day Exploits, Insider Threats, APT Targeting, Botnets and MoreThe Hacker News·May 19, 14:35 UTC · May 19, 2025Exploit / PoC in the wildCVE-2025-30397CVE-2025-30400CVE-2025-32701+22 CVEs60
CISA Puts Chrome and Magento Zero-Days on MustInfosecurity Magazine·Feb 16, 09:41 UTC · Feb 16, 2022Exploit / PoC in the wildCVE-2022-24086CVE-2022-060960
Hackers Exploit macOS Zero-Day to Hack Hong Kong Users with new ImplantThe Hacker News·Nov 15, 00:00 UTC · Nov 15, 2021Exploit / PoC in the wildCVE-2021-30869CVE-2021-1789CVE-2019-850660
Apple patches macOS zero-day exploited by malware for months (CVE-2021-30657)Help Net Security·Apr 27, 00:00 UTC · Apr 27, 2021Exploit / PoCCVE-2021-3065760
North Korea-linked ScarCruft APT adds Bluetooth Harvester to its arsenalSecurity Affairs·May 14, 12:48 UTC · May 14, 2019Exploit / PoCCVE-2018-812060
Zerodium offers up to $500,000 for Linux ZeroSecurity Affairs·Jul 1, 12:29 UTC · Jul 1, 2018Exploit / PoC60
Sofacy APT increased its operations tenfoldSecurity Affairs·Oct 23, 21:35 UTC · Oct 23, 2017Exploit / PoC60
RIG Exploit Kit 3.0 infected over 1.3 Million PC worldwideSecurity Affairs·Jan 15, 20:49 UTC · Jan 15, 2017Exploit / PoC60
The Careto/Mask APT: Frequently Asked QuestionsKaspersky Securelist·Feb 10, 21:03 UTC · Feb 10, 2014Exploit / PoCCVE-2012-077360
Zerodium offers $100K for bypass Flash Player heap isolationSecurity Affairs·Jul 1, 11:57 UTC · Jul 1, 2018Exploit / PoC in the wild60
Google discloses Critical Windows Zero-Day that makes all Windows Users VulnerableThe Hacker News·Nov 1, 08:27 UTC · Nov 1, 2016Exploit / PoC in the wildCVE-2016-785560
Latest Windows zero-day exploited by DNC hackersHelp Net Security·Nov 2, 00:00 UTC · Nov 2, 2016Exploit / PoC in the wild60
September 2019 Patch Tuesday: Microsoft plugs two actively exploited zero-daysHelp Net Security·Sep 14, 06:24 UTC · Sep 14, 2019Exploit / PoC in the wildCVE-2019-1214CVE-2019-1215CVE-2019-1257+10 CVEs60
Zero-day exploits are rarer and more expensive than ever, researchers sayCyberScoop·Apr 26, 04:01 UTC · Apr 26, 2017Exploit / PoC in the wild60
Adobe patches newly exploited Flash zero-dayHelp Net Security·Dec 15, 12:35 UTC · Dec 15, 2023Exploit / PoC in the wildCVE-2018-1598260
Sykipot exploits an Adobe Flash ZeroKaspersky Securelist·Oct 29, 16:21 UTC · Oct 29, 2010Exploit / PoC in the wildCVE-2010-365460
BlackOasis APT and new targeted attacks leveraging zeroKaspersky Securelist·Oct 16, 14:28 UTC · Oct 16, 2017Exploit / PoC in the wildCVE-2017-11292CVE-2017-8759CVE-2016-4117+2 CVEs60
Google warns of actively exploited Windows zero-dayHelp Net Security·Nov 9, 21:14 UTC · Nov 9, 2016Exploit / PoC in the wildCVE-2016-7255CVE-2016-785560
Mozilla will disable Adobe Flash by default starting from Firefox 69Security Affairs·Jan 15, 06:50 UTC · Jan 15, 2019Exploit / PoC in the wild60
Adobe will finally kill Flash in 2020CyberScoop·Jul 25, 18:02 UTC · Jul 25, 2017Exploit / PoC in the wild60
Pawn Storm raced to pop many targets before Windows zero-day patch releaseHelp Net Security·Jun 26, 21:25 UTC · Jun 26, 2018Exploit / PoC in the wildCVE-2016-785560
Booby-trapped Office docs build with ThreadKit trigger CVE-2018Security Affairs·Apr 10, 08:15 UTC · Apr 10, 2018Exploit / PoCCVE-2018-4878CVE-2018-0802CVE-2017-857060
PROMETHIUM & NEODYMIUM APTs used same ZeroDay against TurkishSecurity Affairs·Dec 16, 10:59 UTC · Dec 16, 2016Exploit / PoCCVE-2016-411760