Researcher Drops New Windows Zero-Day PoC Hours After Microsoft Patch TuesdayThe Hacker News·Jul 21, 11:38 UTC · Jul 21, 2026Exploit / PoC in the wildCVE-2026-56164CVE-2026-56155CVE-2026-32201+2 CVEs60
New Agent Data Injection Attack Can Make AI Agents Misclick or Run Attacker CommandsThe Hacker News·Jul 15, 00:00 UTC · Jul 15, 2026Exploit / PoCCVE-2025-32711150
Seven Bugs in FatFs Put IoT and Embedded Devices at RiskSecurity Affairs·Jul 6, 10:20 UTC · Jul 6, 2026Exploit / PoCCVE-2026-6682CVE-2026-6683CVE-2026-6687+4 CVEs150
Bad Epoll Flaw Gives Attackers Root Access on Linux and AndroidSecurity Affairs·Jul 6, 08:24 UTC · Jul 6, 2026Exploit / PoC in the wildCVE-2026-46242CVE-2026-4307460
FortiBleed Targeted FortiGate Firewalls in 110 MillionThe Hacker News·Jun 25, 05:28 UTC · Jun 25, 2026Exploit / PoC60
29-Year-Old Squid Proxy Bug 'Squidbleed' Can Leak Cleartext HTTP RequestsThe Hacker News·Jun 23, 11:30 UTC · Jun 23, 2026Exploit / PoC in the wildCVE-2026-47729CVE-2026-50012160
ThreatsDay Bulletin: Claude Chat Abuse, NastyC2 npm Packages, DeviceThe Hacker News·Jun 18, 15:29 UTC · Jun 18, 2026Exploit / PoCCVE-2026-2012760
MOVEit Transfer zero-day attacks: The latest infoHelp Net Security·Jun 8, 10:36 UTC · Jun 8, 2026Exploit / PoC60
Zero-Click WhatsApp Account Takeover Hits iPhone Users Running iOS 16. No Linked Devices, No WarningSecurity Affairs·May 25, 10:29 UTC · May 25, 2026Exploit / PoC in the wildCVE-2025-43300CVE-2025-5517760
Google publishes exploit code threatening millions of Chromium usersArs Technica · Security·May 20, 19:10 UTC · May 20, 2026Exploit / PoC57
Zero-Day Exploit Against Windows BitLockerSchneier on Security·May 18, 11:08 UTC · May 18, 2026Exploit / PoC60
Critical Apache HTTP/2 Flaw (CVE-2026The Hacker News·May 5, 16:46 UTC · May 5, 2026Exploit / PoCCVE-2026-2391860
ChatGPT Security Issue Enabled Data Theft via Single PromptInfosecurity Magazine·Mar 31, 13:01 UTC · Mar 31, 2026Exploit / PoC in the wild60
Amazon Uncovers Attacks Exploited Cisco ISE and Citrix NetScaler as ZeroThe Hacker News·Nov 15, 00:00 UTC · Nov 15, 2025Exploit / PoC in the wildCVE-2025-5777CVE-2025-2033760
Microsoft Fixes 63 Security Flaws, Including a Windows Kernel ZeroThe Hacker News·Nov 12, 11:14 UTC · Nov 12, 2025Exploit / PoC in the wildCVE-2025-62215CVE-2025-60724CVE-2025-62220+1 CVEs60
Italian-made spyware Dante linked to Chrome zero-day exploitation campaignHelp Net Security·Oct 28, 00:00 UTC · Oct 28, 2025Exploit / PoCCVE-2025-278360
Microsoft SharePoint Zero-DaySchneier on Security·Jul 28, 11:09 UTC · Jul 28, 2025Exploit / PoC in the wildCVE-2025-5377060
Log4Shell: How It’s Exploited and Mitigating DamageRecorded Future·Jun 27, 00:00 UTC · Jun 27, 2025Exploit / PoC in the wildCVE-2021-4422860
Meta confused over WhatsApp ban issued to House staffersCyberScoop·Jun 24, 21:12 UTC · Jun 24, 2025Exploit / PoC in the wild60
Federal cyber insurance backstop should be tied to expiring terrorism insurance law, report recommendsCyberScoop·Jun 17, 13:00 UTC · Jun 17, 2025Exploit / PoC in the wild60
Using an agent for the Mythic framework: pros and cons in pentestingKaspersky Securelist·May 13, 10:00 UTC · May 13, 2025Exploit / PoC60
After Signal controversy, do private conversations online exist anymore?CyberScoop·May 6, 12:05 UTC · May 6, 2025Exploit / PoC in the wild60
Trump signs order stripping Chris Krebs of security clearanceCyberScoop·Apr 10, 14:51 UTC · Apr 10, 2025Exploit / PoC in the wild60
Fortinet Warns of New Zero-Day Used in Attacks on Firewalls with Exposed InterfacesThe Hacker News·Jan 28, 13:09 UTC · Jan 28, 2025Exploit / PoC in the wildCVE-2024-5559160
ESET researchers analyze first UEFI bootkit for Linux systemsHelp Net Security·Nov 27, 00:00 UTC · Nov 27, 2024Exploit / PoC57
Invisible text that AI chatbots understand and humans can’t? Yep, it’s a thing.Ars Technica · Security·Oct 15, 00:00 UTC · Oct 15, 2024Exploit / PoC145
Federal privacy law faces new hurdles ahead of markupCyberScoop·Jun 26, 21:25 UTC · Jun 26, 2024Exploit / PoC in the wild60
TheMoon bot infected 40,000 devices in January and FebruarySecurity Affairs·Mar 26, 21:19 UTC · Mar 26, 2024Exploit / PoC60
Attackers exploited WinRAR zero-day for months to steal money from brokers (CVE-2023-38831)Help Net Security·Oct 18, 08:32 UTC · Oct 18, 2023Exploit / PoCCVE-2023-38831CVE-2023-4047760
Zenbleed: New Flaw in AMD Zen 2 Processors Puts Encryption Keys and Passwords at RiskThe Hacker News·Jul 27, 06:35 UTC · Jul 27, 2023Exploit / PoC in the wildCVE-2023-2059360
20 cybersecurity projects on GitHub you should check outHelp Net Security·Jun 8, 00:00 UTC · Jun 8, 2023Exploit / PoC45
CISA adds TP-Link, Apache, and Oracle bugs to its Known Exploited Vulnerabilities catalogSecurity Affairs·May 2, 07:11 UTC · May 2, 2023Exploit / PoC in the wildCVE-2023-1389CVE-2021-45046CVE-2021-44228+1 CVEs60
New SmashEx attack breaks Intel SGX enclavesThe Record·Dec 18, 00:00 UTC · Dec 18, 2022Exploit / PoCCVE-2021-0186CVE-2021-3376750
‘Every Attack Was Like a Slightly Deadlier Version Than the Last:’ NYT’s Perlroth Talks About Her New BookThe Record·Nov 17, 16:28 UTC · Nov 17, 2022Exploit / PoC60
Microsoft Confirms Two Exchange ZeroInfosecurity Magazine·Sep 30, 15:30 UTC · Sep 30, 2022Exploit / PoC in the wildCVE-2022-41040CVE-2022-4108260
How 'China coup' tweets went viral, and what it says about the rapid spread of disinformationCyberScoop·Sep 26, 17:58 UTC · Sep 26, 2022Exploit / PoC in the wild60
Security experts say Ukraine's request to shut down Russian domains could hurt civiliansCyberScoop·Mar 1, 16:54 UTC · Mar 1, 2022Exploit / PoC in the wild60
Threat Advisory: Critical Apache Log4j vulnerability being exploited in the wildCisco Talos·Dec 10, 19:37 UTC · Dec 10, 2021Exploit / PoC in the wildCVE-2021-44228CVE-2021-45046CVE-2021-45105+1 CVEs60