When trust turns toxic: Lessons from the Salesloft Drift incidentCyberScoop·Nov 24, 11:00 UTC · Nov 24, 2025Exploit / PoC in the wild60
DOJ lauds series of gains against North Korean IT worker scheme, crypto theftsCyberScoop·Nov 14, 20:20 UTC · Nov 14, 2025Exploit / PoC in the wild60
Amazon pins Cisco, Citrix zeroCyberScoop·Nov 12, 18:27 UTC · Nov 12, 2025Exploit / PoC in the wildCVE-2025-5777CVE-2025-2033760
U.S. CISA adds Samsung mobile devices flaw to its Known Exploited Vulnerabilities catalogSecurity Affairs·Nov 11, 09:00 UTC · Nov 11, 2025Exploit / PoC in the wildCVE-2025-21042CVE-2025-2104360
LANDFALL spyware exploited Samsung zero-day CVE-2025Security Affairs·Nov 7, 21:54 UTC · Nov 7, 2025Exploit / PoC in the wildCVE-2025-21042CVE-2025-2104360
Chrome Zero-Day Actively Exploited in Attacks by Mem3nt0 moriInfosecurity Magazine·Oct 28, 16:00 UTC · Oct 28, 2025Exploit / PoC in the wildCVE-2025-2783CVE-2025-285760
Top 10 Takeaways from Predict 2025: Turning Intelligence Into ActionRecorded Future·Oct 21, 00:00 UTC · Oct 21, 2025Exploit / PoC in the wild60
Hackers used Cisco zero-day to plant rootkits on network switches (CVE-2025-20352)Help Net Security·Oct 17, 00:00 UTC · Oct 17, 2025Exploit / PoCCVE-2025-20352CVE-2017-388160
GoAnywhere MFT zero-day used by StormSecurity Affairs·Oct 7, 19:23 UTC · Oct 7, 2025Exploit / PoC in the wildCVE-2025-1003560
Hackers exploit Fortra GoAnywhere flaw before public alertSecurity Affairs·Sep 26, 14:35 UTC · Sep 26, 2025Exploit / PoC in the wildCVE-2025-1003560
The npm incident frightened everyone, but ended up being nothing to fret aboutCyberScoop·Sep 10, 14:35 UTC · Sep 10, 2025Exploit / PoC in the wild60
Netscaler vulnerability was exploited as zero-day for nearly two months (CVE-2025-6543)Help Net Security·Aug 29, 09:22 UTC · Aug 29, 2025Exploit / PoC in the wildCVE-2025-6543CVE-2025-577760
How security teams are putting AI to work right nowHelp Net Security·Aug 18, 00:00 UTC · Aug 18, 2025Exploit / PoC45
Dutch NCSC: Citrix NetScaler zeroSecurity Affairs·Aug 12, 17:45 UTC · Aug 12, 2025Exploit / PoC in the wildCVE-2025-654360
Dutch NCSC Confirms Active Exploitation of Citrix NetScaler CVE-2025The Hacker News·Aug 12, 08:36 UTC · Aug 12, 2025Exploit / PoC in the wildCVE-2025-6543CVE-2025-577760
Microsoft: An organization without a response plan will be hit harder by a security incidentCyberScoop·Aug 8, 16:06 UTC · Aug 8, 2025Exploit / PoC60
CISA, Microsoft warn of critical Exchange hybrid flaw CVE-2025Security Affairs·Aug 7, 14:05 UTC · Aug 7, 2025Exploit / PoC in the wildCVE-2025-5378660
Week in review: Google fixes zero-day vulnerability in Chrome, critical SQL injection flaw in FortiWebHelp Net Security·Jul 20, 00:00 UTC · Jul 20, 2025Exploit / PoC in the wildCVE-2025-6558CVE-2025-2525760
CISA Adds Citrix NetScaler CVE-2025-5777 to KEV Catalog as Active Exploits Target EnterprisesThe Hacker News·Jul 18, 04:54 UTC · Jul 18, 2025Exploit / PoC in the wildCVE-2025-5777CVE-2023-4966CVE-2025-6543+1 CVEs60
ViciousTrap Uses Cisco Flaw to Build Global Honeypot from 5,300 Compromised DevicesThe Hacker News·May 29, 08:55 UTC · May 29, 2025Exploit / PoC in the wildCVE-2023-20118CVE-2023-3978060
China-linked APT UNC5221 started exploiting Ivanti EPMM flaws shortly after their disclosureSecurity Affairs·May 26, 11:31 UTC · May 26, 2025Exploit / PoC in the wildCVE-2025-4427CVE-2025-442860
Critical Versa Concerto Flaws Let Attackers Escape Docker and Compromise HostsThe Hacker News·May 23, 04:44 UTC · May 23, 2025Exploit / PoC in the wildCVE-2025-34025CVE-2025-34026CVE-2024-45410+1 CVEs160
Using an agent for the Mythic framework: pros and cons in pentestingKaspersky Securelist·May 13, 10:00 UTC · May 13, 2025Exploit / PoC60
Google: Governments are using zeroArs Technica · Security·Apr 29, 16:53 UTC · Apr 29, 2025Exploit / PoC60
Attackers stick with effective intrusion points, valid credentials and exploitsCyberScoop·Apr 22, 14:48 UTC · Apr 22, 2025Exploit / PoC in the wild60
Tomorrow, and tomorrow, and tomorrow: Information security and the Baseball Hall of FameCisco Talos·Mar 20, 18:00 UTC · Mar 20, 2025Exploit / PoC60
Amnesty Finds Cellebrite’s Zero-Day Used to Unlock Serbian Activist’s Android PhoneThe Hacker News·Mar 4, 08:43 UTC · Mar 4, 2025Exploit / PoCCVE-2024-53104CVE-2024-53197CVE-2024-5030260
Cellebrite blocked Serbia from using its solution because misuse of the equipment for political reasonsSecurity Affairs·Feb 27, 09:41 UTC · Feb 27, 2025Exploit / PoCCVE-2024-4304760
North Korean hackers behind $50 million crypto heist of Radiant CapitalThe Record·Dec 11, 23:11 UTC · Dec 11, 2024Exploit / PoC60
Georgia Secretary of State: Haitian immigrant voting video is likely Russian disinformationCyberScoop·Nov 1, 17:15 UTC · Nov 1, 2024Exploit / PoC in the wild60
South Korean Spies Exploit WPS Office ZeroInfosecurity Magazine·Aug 28, 09:50 UTC · Aug 28, 2024Exploit / PoCCVE-2024-7262CVE-2024-726360
Practical Guidance For Securing Your Software Supply ChainThe Hacker News·Jun 26, 09:52 UTC · Jun 26, 2024Exploit / PoC60
Check Point Warns of ZeroThe Hacker News·Jun 6, 04:42 UTC · Jun 6, 2024Exploit / PoC in the wildCVE-2024-2491960
Fake Tom Cruise warns of violence at Paris Olympics in proCyberScoop·Jun 3, 04:00 UTC · Jun 3, 2024Exploit / PoC in the wild60
Week in review: Google fixes yet another Chrome zero-day exploit, YouTube as a cybercrime channelHelp Net Security·May 26, 00:00 UTC · May 26, 2024Exploit / PoC in the wildCVE-2024-5274CVE-2024-4985CVE-2023-43208+4 CVEs60
Five Core Tenets Of Highly Effective DevSecOps PracticesThe Hacker News·May 21, 11:33 UTC · May 21, 2024Exploit / PoC60
Experts warn of a flaw in Fluent Bit utility that is used by major cloud platforms and firmsSecurity Affairs·May 21, 09:55 UTC · May 21, 2024Exploit / PoCCVE-2024-432360
U.S. Charges 7 Chinese Nationals in Major 14The Hacker News·Mar 26, 16:21 UTC · Mar 26, 2024Exploit / PoC60
New Hampshire voters sue operative, companies behind Biden AI robocallCyberScoop·Mar 14, 20:28 UTC · Mar 14, 2024Exploit / PoC in the wild60
Sen. Warner: US is less prepared to secure the 2024 election than 2020CyberScoop·Feb 27, 22:41 UTC · Feb 27, 2024Exploit / PoC in the wild60