Found fast, fixed slow: The gap the AI clearinghouse must closeCyberScoop·Jul 8, 09:00 UTC · Jul 8, 2026Exploit / PoC in the wild60
New "Bad Epoll" Linux Kernel Flaw Lets Unprivileged Users Gain Root, Hits AndroidThe Hacker News·Jul 3, 19:41 UTC · Jul 3, 2026Exploit / PoC in the wildCVE-2026-46242CVE-2026-43074CVE-2026-31431+2 CVEs160
29-Year-Old Squid Proxy Bug 'Squidbleed' Can Leak Cleartext HTTP RequestsThe Hacker News·Jun 23, 11:30 UTC · Jun 23, 2026Exploit / PoC in the wildCVE-2026-47729CVE-2026-50012160
Unpatchable BootROM Flaw Impacts Apple A12, A13 ChipsInfosecurity Magazine·Jun 22, 14:00 UTC · Jun 22, 2026Exploit / PoC60
AI’s constant patching treadmill can be a security problemCyberScoop·Jun 17, 22:36 UTC · Jun 17, 2026Exploit / PoC in the wild60
Google Vertex AI SDK Flaw Let Attackers Hijack Model Uploads via Bucket SquattingThe Hacker News·Jun 15, 00:00 UTC · Jun 15, 2026Exploit / PoCCVE-2026-2473150
FBI takes down massive China-based cybercrime network that caused $1.9B in lossesCyberScoop·Jun 12, 21:56 UTC · Jun 12, 2026Exploit / PoC in the wild60
FSB Group Gamaredon Hides Worm in Windows Data StreamsInfosecurity Magazine·Jun 1, 11:00 UTC · Jun 1, 2026Exploit / PoCCVE-2025-808860
Google security engineer accused of turning confidential search trends into $1.2M win on PolymarketCyberScoop·May 28, 18:13 UTC · May 28, 2026Exploit / PoC in the wild60
Zapier exploit chain shows how known anti-patterns compose into critical riskHelp Net Security·May 28, 00:00 UTC · May 28, 2026Exploit / PoC60
Zero-Click WhatsApp Account Takeover Hits iPhone Users Running iOS 16. No Linked Devices, No WarningSecurity Affairs·May 25, 10:29 UTC · May 25, 2026Exploit / PoC in the wildCVE-2025-43300CVE-2025-5517760
Nine-Year-Old Linux Kernel Flaw Leaks SSH Keys and Password HashesInfosecurity Magazine·May 21, 12:00 UTC · May 21, 2026Exploit / PoCCVE-2026-4633350
The readiness paradox: Why a false sense of cyber confidence is becoming a liabilityCyberScoop·May 21, 10:00 UTC · May 21, 2026Exploit / PoC in the wild60
Chaotic Eclipse discloses MiniPlasma zero-day, suggesting a missing or undone 2020 Windows security fixSecurity Affairs·May 18, 08:15 UTC · May 18, 2026Exploit / PoCCVE-2020-17103CVE-2026-3382560
How AI Hallucinations Are Creating Real Security RisksThe Hacker News·May 15, 00:00 UTC · May 15, 2026Exploit / PoC60
New Fragnesia Flaw Hands Linux Local Users Root AccessInfosecurity Magazine·May 14, 13:00 UTC · May 14, 2026Exploit / PoCCVE-2026-46300CVE-2026-31431CVE-2026-43284+1 CVEs50
Hackers Observed Using AI to Develop ZeroInfosecurity Magazine·May 11, 13:00 UTC · May 11, 2026Exploit / PoC60
Ivanti customers confront yet another actively exploited zeroCyberScoop·May 7, 21:50 UTC · May 7, 2026Exploit / PoC in the wildCVE-2026-6973CVE-2026-5787CVE-2026-5788+3 CVEs60
US government, allies publish guidance on how to safely deploy AI agentsCyberScoop·May 1, 16:49 UTC · May 1, 2026Exploit / PoC in the wild60
ThreatsDay Bulletin: $290M DeFi Hack, macOS LotL Abuse, ProxySmart SIM Farms +25 New StoriesThe Hacker News·Apr 24, 04:36 UTC · Apr 24, 2026Exploit / PoCCVE-2026-27175CVE-2026-27174CVE-2025-22952+1 CVEs60
APTs use of lesser-known TTPs are no less of a headacheHelp Net Security·Apr 23, 13:37 UTC · Apr 23, 2026Exploit / PoC60
PentAGI: Open-source autonomous AI penetration testing systemHelp Net Security·Apr 22, 00:00 UTC · Apr 22, 2026Exploit / PoC60
Week in review: Windows zero-day exploit leaked, Patch Tuesday forecastHelp Net Security·Apr 12, 00:00 UTC · Apr 12, 2026Exploit / PoC in the wildCVE-2026-34197160
Apple urges iPhone users to update as Coruna and DarkSword exploit kits emergeSecurity Affairs·Mar 20, 11:22 UTC · Mar 20, 2026Exploit / PoCCVE-2021-30952CVE-2022-48503CVE-2023-43000+15 CVEs160
DarkSword emerges as powerful iOS exploit tool in global attacksSecurity Affairs·Mar 19, 14:09 UTC · Mar 19, 2026Exploit / PoCCVE-2025-31277CVE-2026-20700CVE-2025-43529+3 CVEs60
Dell RecoverPoint for VMs Zero-Day CVE-2026-22769 Exploited Since MidThe Hacker News·Mar 6, 10:06 UTC · Mar 6, 2026Exploit / PoC in the wildCVE-2026-2276960
FBI targeted with ‘suspicious’ activity on its networksCyberScoop·Mar 5, 20:45 UTC · Mar 5, 2026Exploit / PoC in the wild60
Russia-linked APT28 exploited MSHTML zero-day CVE-2026Security Affairs·Mar 2, 14:46 UTC · Mar 2, 2026Exploit / PoCCVE-2026-2151360
Anthropic rolls out embedded security scanning for ClaudeCyberScoop·Feb 20, 21:41 UTC · Feb 20, 2026Exploit / PoC in the wild60
83% of Ivanti EPMM Exploits Linked to Single IP on Bulletproof Hosting InfrastructureThe Hacker News·Feb 15, 00:00 UTC · Feb 15, 2026Exploit / PoC in the wildCVE-2026-1281CVE-2026-1340CVE-2026-21962+2 CVEs60
Dutch Authorities Confirm Ivanti Zero-Day Exploit Exposed Employee Contact DataThe Hacker News·Feb 12, 05:21 UTC · Feb 12, 2026Exploit / PoCCVE-2026-1281CVE-2026-134060
Zen-AI-Pentest: Open-source AI-powered penetration testing frameworkHelp Net Security·Feb 11, 00:00 UTC · Feb 11, 2026Exploit / PoC45
U.S. CISA adds Prettier eslint-config-prettier, Vite Vitejs, Versa Concerto SD-WAN orchestration platform and Synacor Zimbra Collaboration Suite flaws to its Known Exploited Vulnerabilities catalogSecurity Affairs·Jan 23, 11:50 UTC · Jan 23, 2026Exploit / PoC in the wildCVE-2025-31125CVE-2025-34026CVE-2025-54313+1 CVEs60
PoC exploit for critical FortiSIEM vulnerability released (CVE-2025-64155)Help Net Security·Jan 20, 09:41 UTC · Jan 20, 2026Exploit / PoCCVE-2025-64155CVE-2025-2525660
Microsoft seizes RedVDS infrastructure, disrupts fastCyberScoop·Jan 14, 15:00 UTC · Jan 14, 2026Exploit / PoC in the wild60
Unpatched Gogs Zero-Day Exploited Across 700+ Instances Amid Active AttacksThe Hacker News·Jan 13, 07:05 UTC · Jan 13, 2026Exploit / PoC in the wildCVE-2025-8110CVE-2024-5594760
China-linked APT UAT-9686 is targeting Cisco Secure Email Gateway and Secure Email and Web ManagerSecurity Affairs·Dec 19, 08:53 UTC · Dec 19, 2025Exploit / PoC in the wildCVE-2025-2039360
U.S. CISA adds Cisco, SonicWall, and ASUS flaws to its Known Exploited Vulnerabilities catalogSecurity Affairs·Dec 18, 10:18 UTC · Dec 18, 2025Exploit / PoC in the wildCVE-2025-20393CVE-2025-40602CVE-2025-59374+1 CVEs60
Sneeit WordPress RCE Exploited in the Wild While ICTBroadcast Bug Fuels Frost Botnet AttacksThe Hacker News·Dec 8, 09:15 UTC · Dec 8, 2025Exploit / PoC in the wildCVE-2025-6389CVE-2025-2611CVE-2025-161060