⚡ Weekly Recap: Zero-Day Exploits, Developer Malware, IoT Botnets, and AIThe Hacker News·Jan 20, 09:20 UTC · Jan 20, 2026Exploit / PoCCVE-2025-29824CVE-2025-2775CVE-2025-2776+19 CVEs60
⚡ Weekly Recap: Fortinet Exploits, RedLine Clipjack, NTLM Crack, Copilot Attack & MoreThe Hacker News·Jan 20, 07:01 UTC · Jan 20, 2026Exploit / PoC in the wildCVE-2025-6415560
Microsoft Issues Security Fixes for 56 Flaws, Including Active Exploit and Two ZeroThe Hacker News·Dec 10, 15:09 UTC · Dec 10, 2025Exploit / PoC in the wildCVE-2025-62223CVE-2025-62221CVE-2025-54100+6 CVEs60
NSO Group argues WhatsApp injunction threatens existence, future U.S. government workCyberScoop·Nov 20, 23:11 UTC · Nov 20, 2025Exploit / PoC in the wild60
Operational Cyber Threat IntelligenceRecorded Future·Nov 19, 00:00 UTC · Nov 19, 2025Exploit / PoC in the wild60
Microsoft Fixes 63 Security Flaws, Including a Windows Kernel ZeroThe Hacker News·Nov 12, 11:14 UTC · Nov 12, 2025Exploit / PoC in the wildCVE-2025-62215CVE-2025-60724CVE-2025-62220+1 CVEs60
Microsoft Uncovers 'Whisper Leak' Attack That Identifies AI Chat Topics in Encrypted TrafficThe Hacker News·Nov 10, 08:00 UTC · Nov 10, 2025Exploit / PoC60
Malicious AI Agent Server Reportedly Steals EmailsInfosecurity Magazine·Sep 25, 16:30 UTC · Sep 25, 2025Exploit / PoC60
WhatsApp Patches Zero-Day, ZeroInfosecurity Magazine·Sep 1, 09:30 UTC · Sep 1, 2025Exploit / PoCCVE-2025-55177CVE-2025-4330060
Apple Patches CVE-2025-43300 Zero-Day in iOS, iPadOS, and macOS Exploited in Targeted AttacksThe Hacker News·Aug 25, 15:10 UTC · Aug 25, 2025Exploit / PoC in the wildCVE-2025-43300CVE-2025-24085CVE-2025-24200+5 CVEs60
House lawmakers seek better tech for Commerce in fight against foreign powersCyberScoop·Aug 11, 17:44 UTC · Aug 11, 2025Exploit / PoC in the wild60
Critical Unpatched SharePoint Zero-Day Actively Exploited, Breaches 75+ Company ServersThe Hacker News·Jul 22, 03:59 UTC · Jul 22, 2025Exploit / PoC in the wildCVE-2025-53770CVE-2025-49704CVE-2025-49706+1 CVEs60
GPUHammer: New RowHammer Attack Variant Degrades AI Models on NVIDIA GPUsThe Hacker News·Jul 15, 00:00 UTC · Jul 15, 2025Exploit / PoC45
Meta confused over WhatsApp ban issued to House staffersCyberScoop·Jun 24, 21:12 UTC · Jun 24, 2025Exploit / PoC in the wild60
Researchers Warn of AI Attacks After PoC Exploits Atlassian's AI AgentInfosecurity Magazine·Jun 19, 11:50 UTC · Jun 19, 2025Exploit / PoC45
Iran’s Bank Sepah disrupted by cyberattack claimed by proCyberScoop·Jun 17, 20:49 UTC · Jun 17, 2025Exploit / PoC in the wild60
Critical Cisco ISE Auth Bypass Flaw Impacts Cloud Deployments on AWS, Azure, and OCIThe Hacker News·Jun 5, 05:37 UTC · Jun 5, 2025Exploit / PoC in the wildCVE-2025-2028660
Spies hack high-value mail servers using an exploit from yesteryearArs Technica · Security·May 15, 00:00 UTC · May 15, 2025Exploit / PoCCVE-2023-4377060
Quantum computer threat spurring quiet overhaul of internet securityCyberScoop·May 1, 20:51 UTC · May 1, 2025Exploit / PoC in the wild60
Chrome Extension Uses AI Engine to Act Without User InputInfosecurity Magazine·Apr 25, 13:15 UTC · Apr 25, 2025Exploit / PoC145
Judges strike skeptical note of NSO Group’s argument to dismiss case from El Salvadoran journosCyberScoop·Apr 10, 19:30 UTC · Apr 10, 2025Exploit / PoC in the wild60
WhatsApp fixed zero-day used to deploy Paragon Graphite spywareSecurity Affairs·Mar 20, 00:12 UTC · Mar 20, 2025Exploit / PoC60
Apple Patches Actively Exploited iOS Zero-Day CVE-2025The Hacker News·Feb 15, 00:00 UTC · Feb 15, 2025Exploit / PoC in the wildCVE-2025-24200CVE-2025-2408560
Cybercrime gang exploited VeraCore zero-day vulnerabilities for years (CVE-2025-25181, CVE-2024-57968)Help Net Security·Feb 11, 13:53 UTC · Feb 11, 2025Exploit / PoCCVE-2025-25181CVE-2024-57968160
Apple Update Mitigates “Extremely Sophisticated” ZeroInfosecurity Magazine·Feb 11, 10:30 UTC · Feb 11, 2025Exploit / PoC in the wildCVE-2025-24200CVE-2023-41064CVE-2023-41061+3 CVEs160
Subaru Starlink flaw allowed experts to remotely hack carsSecurity Affairs·Jan 25, 19:27 UTC · Jan 25, 2025Exploit / PoC45
3 Actively Exploited Zero-Day Flaws Patched in Microsoft's Latest Security UpdateThe Hacker News·Jan 21, 15:30 UTC · Jan 21, 2025Exploit / PoC in the wildCVE-2024-7344CVE-2025-21333CVE-2025-21334+13 CVEs60
Ongoing attacks on Ivanti VPNs install a ton of sneaky, wellArs Technica · Security·Jan 9, 22:17 UTC · Jan 9, 2025Exploit / PoC in the wildCVE-2025-028260
LDAPNightmare PoC Exploit Crashes LSASS and Reboots Windows Domain ControllersThe Hacker News·Jan 8, 13:19 UTC · Jan 8, 2025Exploit / PoCCVE-2024-49113CVE-2024-49112160
Playbook advises federal grant managers how to build cybersecurity into their programsCyberScoop·Dec 17, 19:44 UTC · Dec 17, 2024Exploit / PoC in the wild60
Researchers Discover Command Injection Flaw in WiThe Hacker News·Oct 29, 05:42 UTC · Oct 29, 2024Exploit / PoCCVE-2024-4199260
Researchers Discover Over 70 ZeroInfosecurity Magazine·Oct 28, 10:15 UTC · Oct 28, 2024Exploit / PoC60
Qualcomm zero-day under targeted exploitation (CVE-2024-43047)Help Net Security·Oct 8, 00:00 UTC · Oct 8, 2024Exploit / PoC in the wildCVE-2024-4304760
House lawmakers push Commerce Department to probe Chinese WiCyberScoop·Aug 16, 17:57 UTC · Aug 16, 2024Exploit / PoC in the wild60
Easterly: Cybersecurity is a software quality problemCyberScoop·Aug 9, 17:46 UTC · Aug 9, 2024Exploit / PoC in the wild60
Cisco Warns of Critical Flaw Affecting OnThe Hacker News·Jul 18, 13:13 UTC · Jul 18, 2024Exploit / PoC in the wildCVE-2024-20419CVE-2024-20401CVE-2024-34102+2 CVEs60
Rising exploitation in enterprise software: Key trends for CISOsHelp Net Security·Jun 19, 00:00 UTC · Jun 19, 2024Exploit / PoC60
China state hackers infected 20,000 Fortinet VPNs, Dutch spy service saysArs Technica · Security·Jun 11, 22:56 UTC · Jun 11, 2024Exploit / PoC in the wildCVE-2022-4247560
Windows 11 to Deprecate NTLM, Add AI-Powered App Controls and Security DefensesThe Hacker News·Jun 6, 09:16 UTC · Jun 6, 2024Exploit / PoC60
Five Core Tenets Of Highly Effective DevSecOps PracticesThe Hacker News·May 21, 11:33 UTC · May 21, 2024Exploit / PoC60