Cisco email security appliances rooted and backdoored via still unpatched zero-dayHelp Net Security·Jan 16, 14:17 UTC · Jan 16, 2026Exploit / PoCCVE-2025-20393CVE-2025-5777CVE-2025-7775160
China-linked APT UAT-9686 is targeting Cisco Secure Email Gateway and Secure Email and Web ManagerSecurity Affairs·Dec 19, 08:53 UTC · Dec 19, 2025Exploit / PoC in the wildCVE-2025-2039360
Two New Windows Zero-Days Exploited in the Wild — One Affects Every Version Ever ShippedThe Hacker News·Oct 15, 00:00 UTC · Oct 15, 2025Exploit / PoC in the wildCVE-2025-24990CVE-2025-59230CVE-2025-47827+5 CVEs160
Contain or be contained: The security imperative of controlling autonomous AICyberScoop·Sep 25, 13:30 UTC · Sep 25, 2025Exploit / PoC in the wild60
Chinese Hackers Target France in Ivanti ZeroInfosecurity Magazine·Jul 2, 12:00 UTC · Jul 2, 2025Exploit / PoCCVE-2024-8190CVE-2024-8963CVE-2024-9380160
New Linux Flaws Allow Password Hash Theft via Core Dumps in Ubuntu, RHEL, FedoraThe Hacker News·Jun 1, 05:53 UTC · Jun 1, 2025Exploit / PoCCVE-2025-5054CVE-2025-459850
Türkiye Hackers Exploited Output Messenger Zero-Day to Drop Golang Backdoors on Kurdish ServersThe Hacker News·May 15, 00:00 UTC · May 15, 2025Exploit / PoC in the wildCVE-2025-27920CVE-2025-2792160
Microsoft Fixes 90 New Flaws, Including Actively Exploited NTLM and Task Scheduler BugsThe Hacker News·Nov 15, 00:00 UTC · Nov 15, 2024Exploit / PoC in the wildCVE-2024-43451CVE-2024-49039CVE-2024-21410+6 CVEs60
Moody's Rating adds telecoms, airlines, utilities to highest risk categoryCyberScoop·Nov 14, 14:00 UTC · Nov 14, 2024Exploit / PoC in the wild60
Senator urges Meta CEO to maintain election research partnershipsCyberScoop·Oct 29, 20:04 UTC · Oct 29, 2024Exploit / PoC in the wild160
U.S. CISA adds Windows and Qualcomm bugs to its Known Exploited Vulnerabilities catalogSecurity Affairs·Oct 10, 11:10 UTC · Oct 10, 2024Exploit / PoC in the wildCVE-2024-43047CVE-2024-43572CVE-2024-4357360
Microsoft Issues Security Update Fixing 118 Flaws, Two Actively Exploited in the WildThe Hacker News·Oct 9, 12:48 UTC · Oct 9, 2024Exploit / PoC in the wildCVE-2024-43572CVE-2024-43573CVE-2024-43583+7 CVEs60
Largest Patch Tuesday since July includes two exploited in the wild, three critical vulnerabilitiesCisco Talos·Oct 8, 19:04 UTC · Oct 8, 2024Exploit / PoC in the wildCVE-2024-43572CVE-2024-43573CVE-2024-43583+10 CVEs60
Russian Hackers Exploit Safari and Chrome Flaws in HighThe Hacker News·Aug 31, 15:13 UTC · Aug 31, 2024Exploit / PoC in the wildCVE-2023-41993CVE-2024-4671CVE-2024-5274+2 CVEs60
Democrats give cyber short shrift in party platformCyberScoop·Aug 20, 19:35 UTC · Aug 20, 2024Exploit / PoC in the wild60
U.S. election official: ‘Whack-a-mole’ strategies less effective to combat disinfoCyberScoop·Jun 18, 21:04 UTC · Jun 18, 2024Exploit / PoC in the wild60
Chinese Hackers Rely on Covert Proxy Networks to Evade DetectionInfosecurity Magazine·May 22, 15:45 UTC · May 22, 2024Exploit / PoC60
New Silver SAML Attack Evades Golden SAML Defenses in Identity SystemsThe Hacker News·Mar 11, 04:52 UTC · Mar 11, 2024Exploit / PoC in the wild60
Microsoft Fixes Two ZeroInfosecurity Magazine·Feb 14, 10:30 UTC · Feb 14, 2024Exploit / PoC in the wildCVE-2024-21412CVE-2024-21351CVE-2024-21410+1 CVEs60
Attackers can steal NTLM password hashes via calendar invitesHelp Net Security·Jan 22, 00:00 UTC · Jan 22, 2024Exploit / PoCCVE-2023-35636150
January 2021 Patch Tuesday: Microsoft plugs Defender zero-day RCEHelp Net Security·Nov 14, 08:33 UTC · Nov 14, 2023Exploit / PoC in the wildCVE-2021-1647CVE-2021-1648CVE-2021-1658+8 CVEs60
Atlas VPN zero-day allows sites to discover users' IP addressHelp Net Security·Sep 18, 19:49 UTC · Sep 18, 2023Exploit / PoC60
It’s a hot 0-day summer for Apple, Google, and Microsoft security fixesArs Technica · Security·Aug 1, 17:55 UTC · Aug 1, 2023Exploit / PoCCVE-2023-37450CVE-2023-36884CVE-2023-32046+18 CVEs60
Chinese Hackers Using Never-Before-Seen Tactics for Critical Infrastructure AttacksThe Hacker News·Jun 27, 05:21 UTC · Jun 27, 2023Exploit / PoCCVE-2021-4053960
Tracers on the stage: Talking with the sleuths who cracked the big crypto cases of the 2010sThe Record·Apr 18, 12:49 UTC · Apr 18, 2023Exploit / PoC45
RSA Conference announces initial 2023 keynote speaker lineupHelp Net Security·Feb 18, 00:00 UTC · Feb 18, 2023Exploit / PoC in the wildCVE-2026-8749160
Russian disinformation rampant on farCyberScoop·Dec 13, 23:40 UTC · Dec 13, 2022Exploit / PoC in the wild60
Microsoft fixes exploited zero-day, revokes certificate used to sign malicious drivers (CVE-2022-44698)Help Net Security·Dec 13, 00:00 UTC · Dec 13, 2022Exploit / PoCCVE-2022-44698CVE-2022-41076CVE-2022-44713+2 CVEs60
Beyond Trump, Twitter welcomes back purveyors of farCyberScoop·Nov 22, 03:13 UTC · Nov 22, 2022Exploit / PoC in the wild60
Alchimist: A new attack framework in Chinese for Mac, Linux and WindowsCisco Talos·Oct 13, 12:00 UTC · Oct 13, 2022Exploit / PoC in the wildCVE-2021-4034160
Researchers unveil details of sprawling proCyberScoop·Aug 24, 20:57 UTC · Aug 24, 2022Exploit / PoC in the wild60
Previously unreported Lebanon-based hacking group targeting Israel, Microsoft saysCyberScoop·Jun 2, 21:01 UTC · Jun 2, 2022Exploit / PoC in the wildCVE-2018-1337960
Bitter APT Hackers Add Bangladesh to Their List of Targets in South AsiaThe Hacker News·May 12, 01:27 UTC · May 12, 2022Exploit / PoCCVE-2021-1732CVE-2021-28310CVE-2017-11882+2 CVEs60
Critical VMware Workspace ONE Access Flaw Under Active Exploitation in the WildThe Hacker News·Apr 15, 00:00 UTC · Apr 15, 2022Exploit / PoC in the wildCVE-2022-2295460
Russian hackers thwarted in attempt to take out electrical grid, Ukrainians sayCyberScoop·Apr 12, 15:56 UTC · Apr 12, 2022Exploit / PoC in the wild60
New Infinite Loop Bug in OpenSSL Could Let Attackers Crash Remote ServersThe Hacker News·Mar 15, 00:00 UTC · Mar 15, 2022Exploit / PoC in the wildCVE-2022-0778CVE-2021-416060
Proactive software supply chain security becoming critical as threats riseHelp Net Security·Jan 26, 00:00 UTC · Jan 26, 2022Exploit / PoC60
Cisco security devices targeted with CVE-2020-3580 PoC exploitHelp Net Security·Jun 29, 00:00 UTC · Jun 29, 2021Exploit / PoCCVE-2020-3580CVE-2020-3581CVE-2020-3582+1 CVEs50
February 2021 Patch Tuesday: Microsoft and Adobe fix exploited zero-daysHelp Net Security·Jun 8, 18:29 UTC · Jun 8, 2021Exploit / PoC in the wildCVE-2021-21017CVE-2021-1732CVE-2021-24074+6 CVEs60
Misinformation on Israel-Gaza violence prompts Facebook 24CyberScoop·May 19, 17:50 UTC · May 19, 2021Exploit / PoC in the wild60