A college student is suing a dating app that allegedly used her TikTok videos to target men in her dormitoryCyberScoop·May 5, 12:56 UTC · May 5, 2026Exploit / PoC in the wild60
Week in review: NIST updates DNS security guidance, compromised LiteLLM PyPI packagesHelp Net Security·Mar 29, 00:00 UTC · Mar 29, 2026Exploit / PoC in the wildCVE-2025-53521CVE-2026-21992CVE-2026-305560
Google's disruption rips millions of devices out of malicious networkCyberScoop·Jan 30, 15:37 UTC · Jan 30, 2026Exploit / PoC in the wild60
AI is causing all kinds of problems in the legal sectorCyberScoop·Dec 15, 18:55 UTC · Dec 15, 2025Exploit / PoC in the wild60
Hackers turn open-source AI framework into global cryptojacking operationCyberScoop·Nov 19, 15:29 UTC · Nov 19, 2025Exploit / PoC in the wildCVE-2023-48022160
Massive 7.3 Tbps DDoS Attack Delivers 37.4 TB in 45 Seconds, Targeting Hosting ProviderThe Hacker News·Jun 24, 13:30 UTC · Jun 24, 2025Exploit / PoC60
CISA Adds CrushFTP Vulnerability to KEV Catalog Following Confirmed Active ExploitationThe Hacker News·Apr 8, 15:56 UTC · Apr 8, 2025Exploit / PoC in the wildCVE-2025-31161CVE-2025-2825CVE-2024-282560
Attackers are targeting CrushFTP vulnerability with public PoC (CVE-2025-2825)Help Net Security·Apr 7, 09:29 UTC · Apr 7, 2025Exploit / PoC in the wildCVE-2025-2825CVE-2025-3116160
U.S. CISA adds Fortinet FortiOS/FortiProxy and GitHub Action flaws to its Known Exploited Vulnerabilities catalogSecurity Affairs·Mar 20, 14:17 UTC · Mar 20, 2025Exploit / PoC in the wildCVE-2025-24472CVE-2025-30066CVE-2024-5559160
U.S. CISA adds Apple iOS and iPadOS and Mitel SIP Phones flaws to its Known Exploited Vulnerabilities catalogSecurity Affairs·Feb 15, 17:37 UTC · Feb 15, 2025Exploit / PoC in the wildCVE-2025-24200CVE-2024-4171060
⚡ THN Weekly Recap: Top Cybersecurity Threats, Tools and Tips [3 February]The Hacker News·Feb 4, 11:56 UTC · Feb 4, 2025Exploit / PoC in the wildCVE-2025-24085CVE-2024-41710CVE-2025-0626+30 CVEs60
Aquabot variant v3 targets Mitel SIP phonesSecurity Affairs·Jan 29, 20:02 UTC · Jan 29, 2025Exploit / PoCCVE-2024-4171050
Hackers find 15,000 credentials by scanning for git configurationCyberScoop·Oct 30, 14:00 UTC · Oct 30, 2024Exploit / PoC60
U.S. CISA adds D-Link DIR-820 Router, DrayTek Multiple Vigor Router, Motion Spell GPAC, SAP Commerce Cloud bugs to its Known Exploited Vulnerabilities catalogSecurity Affairs·Oct 1, 14:13 UTC · Oct 1, 2024Exploit / PoC in the wildCVE-2023-25280CVE-2020-15415CVE-2021-4043+1 CVEs60
Microsoft Fixes ASCII Smuggling Flaw That Enabled Data Theft from Microsoft 365 CopilotThe Hacker News·Aug 29, 10:57 UTC · Aug 29, 2024Exploit / PoC157
Microsoft fixes 6 zero-days under active attackHelp Net Security·Aug 15, 07:12 UTC · Aug 15, 2024Exploit / PoC in the wildCVE-2024-38178CVE-2024-38106CVE-2024-38107+10 CVEs60
Researchers warn of a new critical Apache OFBiz flawSecurity Affairs·Aug 5, 16:42 UTC · Aug 5, 2024Exploit / PoC in the wildCVE-2024-38856CVE-2024-32113CVE-2023-5146760
Critical Ghostscript flaw exploited in the wild. Patch it now!Security Affairs·Jul 8, 18:12 UTC · Jul 8, 2024Exploit / PoC in the wildCVE-2024-29510CVE-2024-29509CVE-2024-29506+3 CVEs60
Threat Brief: VMware Vulnerabilities Exploited in the Wild (CVE-2022Palo Alto Unit 42·Jun 5, 20:43 UTC · Jun 5, 2024Exploit / PoC in the wildCVE-2022-22954CVE-2022-22960CVE-2022-22972+8 CVEs60
Fake Tom Cruise warns of violence at Paris Olympics in proCyberScoop·Jun 3, 04:00 UTC · Jun 3, 2024Exploit / PoC in the wild60
Chinese Hackers Rely on Covert Proxy Networks to Evade DetectionInfosecurity Magazine·May 22, 15:45 UTC · May 22, 2024Exploit / PoC60
Civil society groups press platforms to step up election integrity workCyberScoop·Apr 9, 16:42 UTC · Apr 9, 2024Exploit / PoC in the wild60
Why the toothbrush DDoS story fooled us allCisco Talos·Feb 15, 19:00 UTC · Feb 15, 2024Exploit / PoCCVE-2022-073260
Discover Why Proactive Web Security Outsmarts Traditional Antivirus SolutionsThe Hacker News·Nov 29, 09:21 UTC · Nov 29, 2023Exploit / PoC60
Can your Netgear router be hijacked? Check now!Help Net Security·Nov 21, 11:43 UTC · Nov 21, 2023Exploit / PoCCVE-2017-552150
January 2021 Patch Tuesday: Microsoft plugs Defender zero-day RCEHelp Net Security·Nov 14, 08:33 UTC · Nov 14, 2023Exploit / PoC in the wildCVE-2021-1647CVE-2021-1648CVE-2021-1658+8 CVEs60
Everything You Wanted to Know About AI Security but Were Afraid to AskThe Hacker News·Sep 4, 11:29 UTC · Sep 4, 2023Exploit / PoC60
PoC Exploit Released for Critical VMware Aria's SSH Auth Bypass VulnerabilityThe Hacker News·Sep 4, 04:00 UTC · Sep 4, 2023Exploit / PoCCVE-2023-34039CVE-2023-20890CVE-2023-2090060
New Flaw in WordPress Plugin Used by Over a Million Sites Under Active ExploitationThe Hacker News·May 20, 04:02 UTC · May 20, 2023Exploit / PoC in the wildCVE-2023-3224360
Check Point CloudGuard secures Microsoft Azure Virtual WANHelp Net Security·May 19, 00:00 UTC · May 19, 2023Exploit / PoC60
CISA adds Ruckus bug and another six flaws to its Known Exploited Vulnerabilities catalogSecurity Affairs·May 16, 19:39 UTC · May 16, 2023Exploit / PoC in the wildCVE-2023-25717CVE-2021-3560CVE-2014-0196+4 CVEs160
Threat Source newsletter (April 27, 2023) — New Cisco Secure offerings and extra security from DuoCisco Talos·Apr 27, 18:00 UTC · Apr 27, 2023Exploit / PoCCVE-2023-2735060
How one group of 'fellas' is winning the meme war in support of UkraineCyberScoop·Oct 6, 02:57 UTC · Oct 6, 2022Exploit / PoC in the wild60
Taiwanese government sites hit with DDoS attacks ahead of Pelosi's visitCyberScoop·Aug 2, 16:05 UTC · Aug 2, 2022Exploit / PoC in the wild60
Week in review: The future of Metasploit, detecting lateral movement, new issue of (IN)SECURE MagazineHelp Net Security·Jul 24, 00:00 UTC · Jul 24, 2022Exploit / PoC60
Network of hyperlocal Russian Telegram channels spew disinformation in occupied UkraineCyberScoop·May 23, 15:45 UTC · May 23, 2022Exploit / PoC in the wild60
Venezuelan leftists took to Twitter in attempt to swing Colombian presidential electionCyberScoop·Mar 21, 14:22 UTC · Mar 21, 2022Exploit / PoC in the wild60
Putin's government lists IPs and domains allegedly aiming DDoS traffic at RussiaCyberScoop·Mar 3, 18:38 UTC · Mar 3, 2022Exploit / PoC in the wild60
Facebook files suit against Ukrainian man who allegedly scraped data about 178 million usersCyberScoop·Oct 22, 20:06 UTC · Oct 22, 2021Exploit / PoC in the wild60