Third of Exploited Flaws Weaponized Within a Day of DisclosureInfosecurity Magazine·Jul 30, 12:45 UTC · Jul 30, 2025Exploit / PoC in the wild60
CISA Adds Erlang SSH and Roundcube Flaws to Known Exploited Vulnerabilities CatalogThe Hacker News·Jun 12, 05:02 UTC · Jun 12, 2025Exploit / PoC in the wildCVE-2025-32433CVE-2024-42009CVE-2025-3102260
⚡ Weekly Recap: Zero-Day Exploits, Insider Threats, APT Targeting, Botnets and MoreThe Hacker News·May 19, 14:35 UTC · May 19, 2025Exploit / PoC in the wildCVE-2025-30397CVE-2025-30400CVE-2025-32701+22 CVEs60
Friday Squid Blogging: The Colossal SquidSchneier on Security·Feb 7, 22:02 UTC · Feb 7, 2025Exploit / PoC45
Department of Justice partners with Dutch police to break up HeartSender networkCyberScoop·Jan 30, 22:03 UTC · Jan 30, 2025Exploit / PoC in the wild60
Hackers Exploit Zero-Day in cnPilot Routers to Deploy AIRASHI DDoS BotnetThe Hacker News·Jan 23, 05:18 UTC · Jan 23, 2025Exploit / PoCCVE-2013-3307CVE-2016-20016CVE-2017-5259+7 CVEs160
Zero-Day Vulnerability in Ivanti VPNSchneier on Security·Jan 9, 17:16 UTC · Jan 9, 2025Exploit / PoC in the wild60
Yearlong supply-chain attack targeting security pros steals 390K credentialsArs Technica · Security·Dec 15, 00:00 UTC · Dec 15, 2024Exploit / PoC57
Defenders must adapt to shrinking exploitation timelinesHelp Net Security·Oct 16, 00:00 UTC · Oct 16, 2024Exploit / PoC in the wildCVE-2023-28121CVE-2023-2799760
Secator: Open-source pentesting Swiss army knifeHelp Net Security·Jul 3, 00:00 UTC · Jul 3, 2024Exploit / PoC57
Mirai-based Botnet Exploiting Zero-Day Bugs in Routers and NVRs for Massive DDoS AttacksThe Hacker News·Dec 18, 04:47 UTC · Dec 18, 2023Exploit / PoCCVE-2023-49897CVE-2023-4756560
Week in review: Cybersecurity cheat sheets, widely exploited Cisco zero-day, KeePass-themed malvertisingHelp Net Security·Oct 22, 00:00 UTC · Oct 22, 2023Exploit / PoC in the wildCVE-2023-20198CVE-2023-4966CVE-2023-3883160
Google "confirms" that exploited Chrome zero-day is actually in libwebp (CVE-2023-5129)Help Net Security·Sep 29, 10:48 UTC · Sep 29, 2023Exploit / PoC in the wildCVE-2023-5129CVE-2023-4863CVE-2023-4106460
20 cybersecurity projects on GitHub you should check outHelp Net Security·Jun 8, 00:00 UTC · Jun 8, 2023Exploit / PoC45
Barracuda Warns of Zero-Day Exploited to Breach Email Security Gateway AppliancesThe Hacker News·May 27, 07:08 UTC · May 27, 2023Exploit / PoC in the wildCVE-2023-286860
Zerodium looks to buy zero-days in Outlook and Thunderbird email clientsThe Record·Jan 17, 00:00 UTC · Jan 17, 2023Exploit / PoC60
Zerodium acquiring zero-days in Pidgin, an IM client popular with cybercriminalsThe Record·Dec 12, 00:00 UTC · Dec 12, 2022Exploit / PoC60
PoC Exploit Released for Critical Fortinet Auth Bypass Bug Under Active AttacksThe Hacker News·Oct 15, 00:00 UTC · Oct 15, 2022Exploit / PoC in the wildCVE-2022-40684CVE-2018-1337960
Microsoft Zero-Days Sold and Then UsedSchneier on Security·Aug 14, 16:39 UTC · Aug 14, 2022Exploit / PoC60
Chinese Hackers Exploited Sophos Firewall ZeroThe Hacker News·Jun 18, 03:43 UTC · Jun 18, 2022Exploit / PoCCVE-2022-1040CVE-2022-2613460
IT threat evolution Q3 2021Kaspersky Securelist·Nov 26, 12:00 UTC · Nov 26, 2021Exploit / PoCCVE-2021-4044460
Up to 1.2 million GoDaddy customers' data exposed in breachCyberScoop·Nov 22, 17:26 UTC · Nov 22, 2021Exploit / PoC in the wild60
Exploit broker Zerodium is looking for Pidgin 0day exploitsSecurity Affairs·Jun 2, 09:08 UTC · Jun 2, 2021Exploit / PoC60
Twitter restricts account of Intrusion Truth, which doxxes suspected Chinese hackersCyberScoop·May 5, 00:58 UTC · May 5, 2021Exploit / PoC in the wild60
Four Microsoft Exchange Zero-Days Exploited by ChinaSchneier on Security·Mar 12, 22:23 UTC · Mar 12, 2021Exploit / PoC60
Thinking of a Cybersecurity Career? Read ThisKrebs on Security·Jul 29, 17:36 UTC · Jul 29, 2020Exploit / PoC60
Facebook takes down inauthentic accounts from India, EgyptCyberScoop·Mar 2, 21:34 UTC · Mar 2, 2020Exploit / PoC in the wild60
Ethical hackers submitted more bugs to the Pentagon than ever last yearCyberScoop·Mar 2, 18:43 UTC · Mar 2, 2020Exploit / PoC in the wild60
Warning: Researcher Drops phpMyAdmin ZeroThe Hacker News·Sep 18, 11:08 UTC · Sep 18, 2019Exploit / PoCCVE-2019-1292260
Multiple Code Execution Flaws Found In PHP Programming LanguageThe Hacker News·Sep 15, 00:00 UTC · Sep 15, 2019Exploit / PoC in the wildCVE-2019-1322460
That battery-saving app may have used your device to mine Monero, Symantec saysCyberScoop·Feb 15, 20:42 UTC · Feb 15, 2019Exploit / PoC in the wild60
Thousands of applications affected by a zeroSecurity Affairs·Oct 20, 08:38 UTC · Oct 20, 2018Exploit / PoC in the wildCVE-2018-920660
Week in review: macOS security, Segway vulns, and the SOC of the futureHelp Net Security·Oct 15, 09:22 UTC · Oct 15, 2018Exploit / PoC60
Python-based attack tools are the most common vector for launching exploit attemptsHelp Net Security·Oct 1, 00:00 UTC · Oct 1, 2018Exploit / PoC157
ZDI offers hefty bounties for zero-days in popular web servers, CMSesHelp Net Security·Jul 25, 00:00 UTC · Jul 25, 2018Exploit / PoC60
Severe Bug Discovered in Signal Messaging App for Windows and LinuxThe Hacker News·May 12, 09:13 UTC · May 12, 2018Exploit / PoC157