Search: “mitigation”

1,386 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Vulnerability 3902 Ransomware 2219 Exploit / PoC 1397 Data breach 1156 Malware 1077 Industry 816 Policy & legal 806 Threat actor 678 Phishing & fraud 548 Advisory 165 AI safety & security 137 Research 117 AI tools & infra 105 AI research 57

SeverityAll critical 6793 high 2859 medium 2061 low 1237 info 361

CISA says it observed nearly year-old activity tied to Cisco zero

CyberScoopSep 25, 23:34 UTC · Sep 25, 2025Exploit / PoC in the wild

60

ToolShell Exploit: Critical SharePoint Zero

Recorded FutureAug 21, 00:00 UTC · Aug 21, 2025Exploit / PoC in the wildCVE-2025-53770 CVE-2025-53771 CVE-2025-49706+1 CVEs1

60

GPUHammer: New RowHammer Attack Variant Degrades AI Models on NVIDIA GPUs

The Hacker NewsJul 15, 00:00 UTC · Jul 15, 2025Exploit / PoC

45

SafeLine WAF: Open Source Web Application Firewall with Zero

The Hacker NewsMay 23, 10:30 UTC · May 23, 2025Exploit / PoC

60

China-linked APT Silk Typhoon targets IT Supply Chain

Security AffairsMar 5, 21:02 UTC · Mar 5, 2025Exploit / PoC CVE-2025-0282

60

Fortinet Warns of New Zero-Day Used in Attacks on Firewalls with Exposed Interfaces

The Hacker NewsJan 28, 13:09 UTC · Jan 28, 2025Exploit / PoC in the wildCVE-2024-55591

60

BadRAM: $10 security flaw in AMD could allow hackers to access cloud computing secrets

The RecordDec 10, 16:11 UTC · Dec 10, 2024Exploit / PoC in the wild

60

Nucleus Security unveils POAM Process Automation for federal agencies

Help Net SecurityOct 24, 00:00 UTC · Oct 24, 2024Exploit / PoC in the wild

60

Expert released PoC exploit code for Veeam Backup Enterprise Manager flaw CVE-2024

Security AffairsJun 11, 09:19 UTC · Jun 11, 2024Exploit / PoC in the wildCVE-2024-29849

60

Network Security Trends: August

Palo Alto Unit 42Jun 6, 00:57 UTC · Jun 6, 2024Exploit / PoC in the wildCVE-2021-40438 CVE-2021-34473 CVE-2021-38647+9 CVEs

60

MITRE EMB3D improves security for embedded devices

Help Net SecurityMay 13, 00:00 UTC · May 13, 2024Exploit / PoC

45

Palo Alto Networks warns of zero

The RecordApr 12, 14:52 UTC · Apr 12, 2024Exploit / PoC in the wildCVE-2024-3400

60

Federal government affected by Russian breach of Microsoft

CyberScoopApr 4, 20:10 UTC · Apr 4, 2024Exploit / PoC in the wild1

60

Product showcase: AppTrana

Help Net SecurityMar 18, 08:25 UTC · Mar 18, 2024Exploit / PoC

60

Recent SSRF Flaw in Ivanti VPN Products Undergoes Mass Exploitation

The Hacker NewsFeb 6, 14:36 UTC · Feb 6, 2024Exploit / PoC in the wildCVE-2024-21893 CVE-2024-21887 CVE-2023-36661+1 CVEs

60

Latest Ivanti Zero Day Exploited By Scores of IPs

Infosecurity MagazineFeb 6, 11:00 UTC · Feb 6, 2024Exploit / PoC in the wildCVE-2024-21893 CVE-2023-46805 CVE-2024-21887+2 CVEs

60

CISA orders federal agencies to disconnect Ivanti VPN instances by February 2

Security AffairsFeb 1, 19:46 UTC · Feb 1, 2024Exploit / PoC in the wildCVE-2023-46805 CVE-2024-21887 CVE-2024-21888+1 CVEs

60

CISA Emergency Directive Orders Action on Ivanti Zero

Infosecurity MagazineJan 22, 10:15 UTC · Jan 22, 2024Exploit / PoC in the wildCVE-2023-46805 CVE-2024-21887

60

Ivanti Zero-Days Exploited By Multiple Actors Globally

Infosecurity MagazineJan 16, 10:15 UTC · Jan 16, 2024Exploit / PoC in the wildCVE-2023-46805 CVE-2024-21887

60

Two zero-day bugs in Ivanti Connect Secure actively exploited

Security AffairsJan 11, 15:03 UTC · Jan 11, 2024Exploit / PoC in the wildCVE-2023-46805 CVE-2024-21887

60

Citrix Bleed leveraged to steal data of 35+ million Comcast Xfinity customers

Help Net SecurityDec 20, 00:00 UTC · Dec 20, 2023Exploit / PoC CVE-2023-4966

60

PoC exploit for critical Apache Struts flaw found online

Help Net SecurityNov 20, 11:02 UTC · Nov 20, 2023Exploit / PoC CVE-2018-11776 CVE-2017-5638

60

F5 fixes critical BIG-IP vulnerability, PoC is public (CVE-2023-46747)

Help Net SecurityNov 2, 11:53 UTC · Nov 2, 2023Exploit / PoC CVE-2023-46747 CVE-2020-5902 CVE-2023-46748

60

Tech Giants Reveal Record

Infosecurity MagazineOct 11, 09:30 UTC · Oct 11, 2023Exploit / PoC CVE-2023-44487

60

New technique leads to largest DDoS attacks ever, Google and Amazon say

The RecordOct 10, 15:09 UTC · Oct 10, 2023Exploit / PoC CVE-2023-44487

60

Almost all VPNs are vulnerable to traffic-leaking TunnelCrack attacks

Help Net SecurityAug 14, 00:00 UTC · Aug 14, 2023Exploit / PoC in the wildCVE-2023-36672 CVE-2023-35838 CVE-2023-36673+1 CVEs

60

Threat Advisory: Microsoft Outlook privilege escalation vulnerability being exploited in the wild

Cisco TalosMar 15, 23:46 UTC · Mar 15, 2023Exploit / PoC in the wildCVE-2023-23397

60

Microsoft confirms two Exchange Server zero days are being used in cyberattacks

The RecordJan 10, 00:00 UTC · Jan 10, 2023Exploit / PoC in the wildCVE-2022-41040 CVE-2022-410821

60

The Pentagon may require vendors certify their software is free of known flaws. Experts are split.

CyberScoopAug 19, 17:34 UTC · Aug 19, 2022Exploit / PoC

60

Microsoft patches Windows LSA spoofing zero-day under active attack (CVE-2022-26925)

Help Net SecurityMay 12, 08:27 UTC · May 12, 2022Exploit / PoC in the wildCVE-2022-26925 CVE-2022-29972 CVE-2022-22713+2 CVEs1

60

TLStorm 2.0: Critical bugs in widely-used Aruba, Avaya network switches

Help Net SecurityMay 3, 00:00 UTC · May 3, 2022Exploit / PoC CVE-2022-23677 CVE-2022-23676 CVE-2022-29860+2 CVEs

60

Chrome Limits Websites' Direct Access to Private Networks for Security Reasons

The Hacker NewsJan 18, 04:53 UTC · Jan 18, 2022Exploit / PoC in the wild

60

The Log4j debacle showed again that public disclosure of 0-days only helps attackers

Help Net SecurityJan 6, 00:00 UTC · Jan 6, 2022Exploit / PoC

60

Open-source software holds the key to solving Log4Shell-like problems

Help Net SecurityDec 22, 00:00 UTC · Dec 22, 2021Exploit / PoC in the wild

60

Critical RCE 0day in Apache Log4j library exploited in the wild (CVE-2021-44228)

Help Net SecurityDec 13, 12:51 UTC · Dec 13, 2021Exploit / PoC in the wildCVE-2021-44228

60

Threat Source Newsletter (Dec. 16, 2021)

Cisco TalosDec 10, 12:00 UTC · Dec 10, 2021Exploit / PoC in the wildCVE-2021-4102 CVE-2021-44228 CVE-2021-43215

60

Microsoft warns of a zero-day in Internet Explorer that is actively exploited

Security AffairsSep 8, 12:07 UTC · Sep 8, 2021Exploit / PoC in the wildCVE-2021-40444

60

Kaseya fixed two of the three Kaseya Unitrends zero

Security AffairsAug 26, 17:13 UTC · Aug 26, 2021Exploit / PoC

60

JFrog to acquire Vdoo to expand its end-to-end DevOps platform offering

Help Net SecurityJun 30, 00:00 UTC · Jun 30, 2021Exploit / PoC in the wild

60

Attackers are exploiting zero-day in Pulse Secure VPNs to breach orgs (CVE-2021-22893)

Help Net SecurityApr 21, 00:00 UTC · Apr 21, 2021Exploit / PoC CVE-2021-22893 CVE-2019-11510 CVE-2020-8243+1 CVEs

60