SonicWall SMA zero-days were exploited weeks before disclosureHelp Net Security·Jul 21, 00:00 UTC · Jul 21, 2026Exploit / PoCCVE-2026-15409CVE-2026-1541060
Researchers Build Self-Replicating AI Worm That Operates Entirely on Local, OpenThe Hacker News·Jun 9, 11:59 UTC · Jun 9, 2026Exploit / PoC in the wildCVE-2026-39987CVE-2026-31431CVE-2026-43284+1 CVEs160
GemStuffer Abuses 150+ RubyGems to Exfiltrate Scraped U.K. Council Portal DataThe Hacker News·May 15, 00:00 UTC · May 15, 2026Exploit / PoC57
U.S. CISA adds a flaw in BerriAI LiteLLM to its Known Exploited Vulnerabilities catalogSecurity Affairs·May 11, 09:14 UTC · May 11, 2026Exploit / PoC in the wildCVE-2026-4220860
Mirai Variant Nexcorium Exploits CVE-2024The Hacker News·Apr 22, 15:13 UTC · Apr 22, 2026Exploit / PoC in the wildCVE-2024-3721CVE-2017-17215CVE-2023-33538+2 CVEs160
Week in review: Windows zero-day exploit leaked, Patch Tuesday forecastHelp Net Security·Apr 12, 00:00 UTC · Apr 12, 2026Exploit / PoC in the wildCVE-2026-34197160
Week in review: Firmware-level Android backdoor found on tablets, Dell zero-day exploited since 2024Help Net Security·Feb 22, 00:00 UTC · Feb 22, 2026Exploit / PoC in the wildCVE-2026-2441CVE-2026-22769CVE-2026-2329+1 CVEs60
U.S. CISA adds Dell RecoverPoint and GitLab flaws to its Known Exploited Vulnerabilities catalogSecurity Affairs·Feb 19, 15:16 UTC · Feb 19, 2026Exploit / PoC in the wildCVE-2021-22175CVE-2026-22769CVE-2020-779660
China-linked APT weaponized Dell RecoverPoint zeroSecurity Affairs·Feb 18, 12:15 UTC · Feb 18, 2026Exploit / PoC in the wildCVE-2026-2276960
China-Linked APT Exploited Sitecore ZeroThe Hacker News·Jan 22, 08:08 UTC · Jan 22, 2026Exploit / PoCCVE-2025-5369060
UAT-8837 targets critical infrastructure sectors in North AmericaCisco Talos·Jan 15, 11:00 UTC · Jan 15, 2026Exploit / PoCCVE-2025-5369060
Infosecurity's Top 10 Cybersecurity Stories of 2025Infosecurity Magazine·Jan 1, 08:30 UTC · Jan 1, 2026Exploit / PoC in the wildCVE-2024-5559160
Russia’s GRU hackers targeting misconfigured network edge devices in attacks on energy sector, Amazon saysThe Record·Dec 16, 21:50 UTC · Dec 16, 2025Exploit / PoCCVE-2022-26318CVE-2021-26084CVE-2023-22518+1 CVEs60
⚡ Weekly Recap: Fortinet Exploited, China's AI Hacks, PhaaS Empire Falls & MoreThe Hacker News·Nov 17, 12:37 UTC · Nov 17, 2025Exploit / PoC in the wildCVE-2025-64446CVE-2025-64740CVE-2025-64741+24 CVEs60
OneLogin Bug Let Attackers Use API Keys to Steal OIDC Secrets and Impersonate AppsThe Hacker News·Oct 1, 16:43 UTC · Oct 1, 2025Exploit / PoC in the wildCVE-2025-5936360
Cisco fixed actively exploited zeroSecurity Affairs·Sep 25, 07:27 UTC · Sep 25, 2025Exploit / PoC in the wildCVE-2025-2035260
Cisco fixes IOS/IOS XE zero-day exploited by attackers (CVE-2025-20352)Help Net Security·Sep 25, 00:00 UTC · Sep 25, 2025Exploit / PoCCVE-2025-2035260
From summer camp to grind seasonCisco Talos·Sep 4, 18:02 UTC · Sep 4, 2025Exploit / PoCCVE-2025-5517760
⚡ Weekly Recap: Zero-Day Exploits, Insider Threats, APT Targeting, Botnets and MoreThe Hacker News·May 19, 14:35 UTC · May 19, 2025Exploit / PoC in the wildCVE-2025-30397CVE-2025-30400CVE-2025-32701+22 CVEs60
⚡ THN Weekly Recap: Alerts on Zero-Day Exploits, AI Breaches, and Crypto HeistsThe Hacker News·May 6, 07:05 UTC · May 6, 2025Exploit / PoCCVE-2024-53104CVE-2024-53197CVE-2024-50302+25 CVEs60
U.S. CISA adds Cisco Smart Licensing Utility flaw to its Known Exploited Vulnerabilities catalogSecurity Affairs·Mar 31, 19:56 UTC · Mar 31, 2025Exploit / PoC in the wildCVE-2024-20439CVE-2024-20440CVE-2024-030560
Cisco Smart Licensing Utility flaws actively exploited in the wildSecurity Affairs·Mar 21, 09:26 UTC · Mar 21, 2025Exploit / PoC in the wildCVE-2024-20439CVE-2024-20440CVE-2024-030560
Silk Typhoon Shifts Tactics to Exploit Common IT SolutionsInfosecurity Magazine·Mar 5, 16:30 UTC · Mar 5, 2025Exploit / PoC in the wildCVE-2025-028260
Broadcom fixed information disclosure flaws in VMware Aria OperationsSecurity Affairs·Jan 31, 09:36 UTC · Jan 31, 2025Exploit / PoCCVE-2025-22218CVE-2025-22219CVE-2025-22220+3 CVEs60
Zero-Day Flaw in Zimbra Email Software Exploited by Four Hacker GroupsThe Hacker News·Nov 17, 03:48 UTC · Nov 17, 2023Exploit / PoCCVE-2023-3758060
Zimbra zero-day exploited to steal government emails by 4 groupsSecurity Affairs·Nov 16, 20:49 UTC · Nov 16, 2023Exploit / PoCCVE-2023-3758060
Hackers target Greece, Tunisia, Moldova, Vietnam and Pakistan with Zimbra zeroThe Record·Nov 16, 17:06 UTC · Nov 16, 2023Exploit / PoCCVE-2023-37580CVE-2022-2468260
Experts Warn of Severe Flaws Affecting Milesight Routers and Titan SFTP ServersThe Hacker News·Oct 17, 10:16 UTC · Oct 17, 2023Exploit / PoC in the wildCVE-2023-43261CVE-2023-45685CVE-2023-45686+4 CVEs60
Comprehensive analysis of initial attack samples exploiting CVE-2023Kaspersky Securelist·Jul 19, 12:00 UTC · Jul 19, 2023Exploit / PoCCVE-2023-23397CVE-2023-2932460
PoC for Arcserve UDP authentication bypass flaw published (CVE-2023-26258)Help Net Security·Jun 29, 00:00 UTC · Jun 29, 2023Exploit / PoCCVE-2023-2625860
Experts published PoC exploit code for Veeam Backup & Replication bugSecurity Affairs·Mar 23, 21:02 UTC · Mar 23, 2023Exploit / PoCCVE-2023-2753260
Experts explained how to hack building controller widely adopted in RussiaSecurity Affairs·Mar 24, 22:09 UTC · Mar 24, 2022Exploit / PoC60
Spook.Js attack allows to bypass Google Chrome Site Isolation protectionsSecurity Affairs·Sep 13, 15:26 UTC · Sep 13, 2021Exploit / PoCCVE-2017-5754CVE-2017-5753CVE-2017-571550
Tackling cross-site request forgery (CSRF) on company websitesHelp Net Security·Mar 23, 00:00 UTC · Mar 23, 2021Exploit / PoC in the wild60
Zoom client for Windows could allow hackers to steal users' passwordSecurity Affairs·Apr 1, 20:34 UTC · Apr 1, 2020Exploit / PoC45
APTs are exploiting CVE-2020Security Affairs·Mar 9, 12:05 UTC · Mar 9, 2020Exploit / PoCCVE-2020-068860
Unpatched Strandhogg Android Vulnerability Actively Exploited in the WildThe Hacker News·Dec 3, 07:28 UTC · Dec 3, 2019Exploit / PoC in the wild60