Rockwell Automation ControlLogix Bugs Expose Industrial Systems to Remote AttacksThe Hacker News·Jul 15, 00:00 UTC · Jul 15, 2023Exploit / PoCCVE-2023-3595CVE-2023-359660
MOVEit Transfer Under Attack: Zero-Day Vulnerability Actively Being ExploitedThe Hacker News·Jun 7, 08:52 UTC · Jun 7, 2023Exploit / PoC in the wildCVE-2023-3436260
Microsoft patches zero-day exploited by attackers (CVE-2023-28252)Help Net Security·Apr 11, 00:00 UTC · Apr 11, 2023Exploit / PoC in the wildCVE-2023-28252CVE-2023-23376CVE-2023-21554+4 CVEs60
RSA Conference announces initial 2023 keynote speaker lineupHelp Net Security·Feb 18, 00:00 UTC · Feb 18, 2023Exploit / PoC in the wildCVE-2026-8749160
Routers and modems running Arcadyan firmware are under attackThe Record·Jan 18, 00:00 UTC · Jan 18, 2023Exploit / PoCCVE-2021-20090CVE-2021-2009160
Malicious code exploiting recent VMware bug publicly available, company warnsThe Record·Jan 11, 00:00 UTC · Jan 11, 2023Exploit / PoC in the wildCVE-2022-31656CVE-2022-31659CVE-2022-22972+1 CVEs60
Microsoft updates guidance for ‘ProxyNotShell’ bugs after researchers get around mitigationsThe Record·Jan 10, 00:00 UTC · Jan 10, 2023Exploit / PoC in the wildCVE-2022-41040CVE-2022-4108260
Microsoft plugs actively exploited zero-day hole (CVE-2023-21674)Help Net Security·Jan 10, 00:00 UTC · Jan 10, 2023Exploit / PoC in the wildCVE-2023-21674CVE-2023-21549CVE-2023-21743+4 CVEs160
Experts downplay reach of Apache bug ‘Text4Shell’The Record·Jan 9, 00:00 UTC · Jan 9, 2023Exploit / PoCCVE-2022-4288960
Two ZeroInfosecurity Magazine·Dec 14, 09:30 UTC · Dec 14, 2022Exploit / PoC in the wildCVE-2022-44698CVE-2022-44710CVE-2022-41076+1 CVEs60
Microsoft fixes many zero-days under attackHelp Net Security·Nov 8, 00:00 UTC · Nov 8, 2022Exploit / PoC in the wildCVE-2022-41091CVE-2022-41049CVE-2022-41128+3 CVEs60
Microsoft fixes exploited zero-day in the Windows CLFS Driver (CVE-2022-37969)Help Net Security·Sep 19, 07:02 UTC · Sep 19, 2022Exploit / PoC in the wildCVE-2022-37969CVE-2022-24521CVE-2022-34724+4 CVEs60
Microsoft fixes exploited zero-day in Windows CSRSS (CVE-2022-22047)Help Net Security·Jul 12, 00:00 UTC · Jul 12, 2022Exploit / PoC in the wildCVE-2022-22047CVE-2022-30216CVE-2022-22029+1 CVEs160
Microsoft patches Windows LSA spoofing zero-day under active attack (CVE-2022-26925)Help Net Security·May 12, 08:27 UTC · May 12, 2022Exploit / PoC in the wildCVE-2022-26925CVE-2022-29972CVE-2022-22713+2 CVEs160
Microsoft fixes actively exploited zero-day reported by the NSA (CVE-2022-24521)Help Net Security·Apr 12, 00:00 UTC · Apr 12, 2022Exploit / PoC in the wildCVE-2022-24521CVE-2022-26904CVE-2022-26809+2 CVEs60
Attackers exploit another zero-day in ManageEngine software (CVE-2021-44515)Help Net Security·Dec 21, 09:45 UTC · Dec 21, 2021Exploit / PoCCVE-2021-44515CVE-2021-4407760
Microsoft patches actively exploited Exchange, Excel zero-days (CVE-2021-42321, CVE-2021-42292)Help Net Security·Nov 9, 00:00 UTC · Nov 9, 2021Exploit / PoC in the wildCVE-2021-42321CVE-2021-42292CVE-2021-38666+2 CVEs60
Microsoft patches actively exploited Windows zero-day (CVE-2021-40449)Help Net Security·Oct 12, 00:00 UTC · Oct 12, 2021Exploit / PoC in the wildCVE-2021-40449CVE-2021-40486CVE-2021-26427+5 CVEs60
Microsoft patches actively exploited MSHTML zero-day RCE (CVE-2021-40444)Help Net Security·Sep 17, 09:50 UTC · Sep 17, 2021Exploit / PoC in the wildCVE-2021-40444CVE-2021-36965CVE-2021-38647+10 CVEs60
Hackers Exploiting New Auth Bypass Bug Affecting Millions of Arcadyan RoutersThe Hacker News·Aug 11, 03:38 UTC · Aug 11, 2021Exploit / PoCCVE-2021-20090CVE-2020-29557CVE-2021-1497+4 CVEs60
Microsoft patches actively exploited zero-day (CVE-2021-36948), more Print Spooler flawsHelp Net Security·Aug 10, 00:00 UTC · Aug 10, 2021Exploit / PoC in the wildCVE-2021-36948CVE-2021-36936CVE-2021-34483+3 CVEs160
Cisco ASA Flaw Under Active Attack After PoC Exploit Posted OnlineThe Hacker News·Jun 30, 15:48 UTC · Jun 30, 2021Exploit / PoC in the wildCVE-2020-358060
Cisco security devices targeted with CVE-2020-3580 PoC exploitHelp Net Security·Jun 29, 00:00 UTC · Jun 29, 2021Exploit / PoCCVE-2020-3580CVE-2020-3581CVE-2020-3582+1 CVEs50
February 2021 Patch Tuesday: Microsoft and Adobe fix exploited zero-daysHelp Net Security·Jun 8, 18:29 UTC · Jun 8, 2021Exploit / PoC in the wildCVE-2021-21017CVE-2021-1732CVE-2021-24074+6 CVEs60
March 2021 Patch Tuesday: Microsoft fixes yet another actively exploited IE zero-dayHelp Net Security·Jun 8, 18:28 UTC · Jun 8, 2021Exploit / PoC in the wildCVE-2021-26411CVE-2021-27076CVE-2021-26867+1 CVEs60
June 2021 Patch Tuesday: Microsoft fixes six actively exploited zero-daysHelp Net Security·Jun 8, 00:00 UTC · Jun 8, 2021Exploit / PoC in the wildCVE-2021-33742CVE-2021-31201CVE-2021-31199+6 CVEs60
Trend Micro flaw actively exploited in the wildSecurity Affairs·Apr 22, 09:05 UTC · Apr 22, 2021Exploit / PoC in the wildCVE-2020-24557CVE-2019-18187CVE-2020-8467+1 CVEs60
Attackers are exploiting zero-day in Pulse Secure VPNs to breach orgs (CVE-2021-22893)Help Net Security·Apr 21, 00:00 UTC · Apr 21, 2021Exploit / PoCCVE-2021-22893CVE-2019-11510CVE-2020-8243+1 CVEs60
VMware fixed flaws in vROps that can be chained to compromise organizationsSecurity Affairs·Apr 1, 14:39 UTC · Apr 1, 2021Exploit / PoCCVE-2021-21975CVE-2021-2198360
TikTok says it will do more to slow spread of misinformation videosCyberScoop·Feb 3, 14:53 UTC · Feb 3, 2021Exploit / PoC in the wild60
Pentagon's initiative for Black cyber students met with cautious optimismCyberScoop·Oct 26, 14:51 UTC · Oct 26, 2020Exploit / PoC in the wild60
Zerologon Windows Server Flaw Used in Active AttacksInfosecurity Magazine·Sep 25, 10:05 UTC · Sep 25, 2020Exploit / PoC in the wildCVE-2020-147260
vBulletin zero-day exploited in the wild in wake of exploit releaseHelp Net Security·May 28, 11:23 UTC · May 28, 2020Exploit / PoC in the wildCVE-2019-1675960
Recorded Future to Provide Free Access to Elite Intelligence Through New Browser ExtensionSecurity Affairs·May 5, 20:38 UTC · May 5, 2020Exploit / PoC in the wild60
PPP Daemon flaw opens Linux distros, networking devices to takeover attacksHelp Net Security·Mar 10, 00:00 UTC · Mar 10, 2020Exploit / PoCCVE-2020-859750
September 2019 Patch Tuesday: Microsoft plugs two actively exploited zero-daysHelp Net Security·Sep 14, 06:24 UTC · Sep 14, 2019Exploit / PoC in the wildCVE-2019-1214CVE-2019-1215CVE-2019-1257+10 CVEs60
July 2019 Patch Tuesday: Microsoft plugs two actively exploited zero-daysHelp Net Security·Jul 10, 00:00 UTC · Jul 10, 2019Exploit / PoC in the wildCVE-2019-0880CVE-2019-1132CVE-2019-1068+4 CVEs60
A bug in Wi-Fi ‘extenders’ could give a hacker full control over the devicesCyberScoop·Jun 18, 10:00 UTC · Jun 18, 2019Exploit / PoC in the wild60
Microsoft Issues Emergency Fix for IE Zero DayKrebs on Security·Dec 19, 21:15 UTC · Dec 19, 2018Exploit / PoC in the wildCVE-2018-865360
SCYTHE raises $3 million for attack simulation platformCyberScoop·Sep 18, 15:37 UTC · Sep 18, 2018Exploit / PoC in the wild60