Zero-days exploited in the wild jumped 50% in 2023, fueled by spyware vendorsThe Record·Mar 27, 01:56 UTC · Mar 27, 2024Exploit / PoC in the wildCVE-2023-4863CVE-2023-41064CVE-2023-521760
Mozilla fixed Firefox 0days exploited at Pwn2Own Vancouver 2024Security Affairs·Mar 23, 13:53 UTC · Mar 23, 2024Exploit / PoCCVE-2024-29944CVE-2024-29943CVE-2024-299460
Security Researchers Win Second Tesla At Pwn2OwnInfosecurity Magazine·Mar 21, 09:30 UTC · Mar 21, 2024Exploit / PoC60
CISA adds Microsoft Streaming Service bug to its Known Exploited Vulnerabilities catalogSecurity Affairs·Mar 1, 08:08 UTC · Mar 1, 2024Exploit / PoC in the wildCVE-2023-2936060
Microsoft fixes exploited zero-day in Windows Support Diagnostic Tool (CVE-2022-34713)Help Net Security·Dec 12, 12:03 UTC · Dec 12, 2023Exploit / PoC in the wildCVE-2022-34713CVE-2022-30134CVE-2017-11882+4 CVEs160
DoubleAgent attack uses built-in Windows tool to hijack applicationsHelp Net Security·Nov 21, 11:35 UTC · Nov 21, 2023Exploit / PoC60
Featured talks at the upcoming Hack In The Box Security ConferenceHelp Net Security·Nov 20, 13:37 UTC · Nov 20, 2023Exploit / PoC60
Week in review: Cybersecurity cheat sheets, widely exploited Cisco zero-day, KeePass-themed malvertisingHelp Net Security·Oct 22, 00:00 UTC · Oct 22, 2023Exploit / PoC in the wildCVE-2023-20198CVE-2023-4966CVE-2023-3883160
Microsoft fixes exploited WordPad, Skype for Business zero-days (CVE-2023-36563, CVE-2023-41763)Help Net Security·Oct 10, 00:00 UTC · Oct 10, 2023Exploit / PoC in the wildCVE-2023-36563CVE-2023-41763CVE-2023-44487+2 CVEs60
Atlassian Confluence zero-day CVE-2023Security Affairs·Oct 4, 19:46 UTC · Oct 4, 2023Exploit / PoC in the wildCVE-2023-22515CVE-2022-26134160
Fake WinRAR PoC spread VenomRAT malwareHelp Net Security·Sep 21, 00:00 UTC · Sep 21, 2023Exploit / PoCCVE-2023-4047CVE-2023-25157CVE-2023-4047760
CISA says latest VMware analytics bug being exploitedThe Record·Jun 23, 12:17 UTC · Jun 23, 2023Exploit / PoC in the wildCVE-2023-20887CVE-2016-9079CVE-2016-016560
Week in review: Microsoft patches zero-day, Apple security updates, HashiCorp Vault vulnerabilityHelp Net Security·Apr 18, 11:58 UTC · Apr 18, 2023Exploit / PoC in the wildCVE-2023-28252CVE-2023-28205CVE-2023-28206+1 CVEs160
Microsoft patches zero-day exploited by attackers (CVE-2023-28252)Help Net Security·Apr 11, 00:00 UTC · Apr 11, 2023Exploit / PoC in the wildCVE-2023-28252CVE-2023-23376CVE-2023-21554+4 CVEs60
Tech Industry Bids to Tackle CyberInfosecurity Magazine·Mar 29, 10:30 UTC · Mar 29, 2023Exploit / PoC60
Microsoft patches three exploited zero-days (CVE-2023-21715, CVE-2023-23376, CVE-2023-21823)Help Net Security·Feb 14, 00:00 UTC · Feb 14, 2023Exploit / PoC in the wildCVE-2023-21715CVE-2023-23376CVE-2023-21823+1 CVEs160
Tesla, Microsoft and Ubuntu bugs found during Pwn2Own hacking competitionThe Record·Jan 12, 00:00 UTC · Jan 12, 2023Exploit / PoC60
Microsoft plugs actively exploited zero-day hole (CVE-2023-21674)Help Net Security·Jan 10, 00:00 UTC · Jan 10, 2023Exploit / PoC in the wildCVE-2023-21674CVE-2023-21549CVE-2023-21743+4 CVEs160
Microsoft updates guidance for ‘ProxyNotShell’ bugs after researchers get around mitigationsThe Record·Jan 10, 00:00 UTC · Jan 10, 2023Exploit / PoC in the wildCVE-2022-41040CVE-2022-4108260
Researchers Demonstrate How EDR and Antivirus Can Be Weaponized Against UsersThe Hacker News·Dec 15, 00:00 UTC · Dec 15, 2022Exploit / PoCCVE-2022-37971CVE-2022-45797CVE-2022-417360
Microsoft fixes exploited zero-day, revokes certificate used to sign malicious drivers (CVE-2022-44698)Help Net Security·Dec 13, 00:00 UTC · Dec 13, 2022Exploit / PoCCVE-2022-44698CVE-2022-41076CVE-2022-44713+2 CVEs60
Microsoft patches Windows flaw exploited in the wild (CVE-2022-41033)Help Net Security·Nov 8, 17:57 UTC · Nov 8, 2022Exploit / PoC in the wildCVE-2022-41033CVE-2022-41040CVE-2022-41082+6 CVEs60
Microsoft fixes many zero-days under attackHelp Net Security·Nov 8, 00:00 UTC · Nov 8, 2022Exploit / PoC in the wildCVE-2022-41091CVE-2022-41049CVE-2022-41128+3 CVEs60
DeadBolt is hitting QNAP NAS devices via zero-day bug, what to do?Help Net Security·Sep 12, 09:31 UTC · Sep 12, 2022Exploit / PoC60
PoC exploit for Windows Shell RCE releasedHelp Net Security·Jun 14, 11:11 UTC · Jun 14, 2022Exploit / PoCCVE-2018-849560
INTERPOL hauls in alleged Nigerian cybercrime ringleaderCyberScoop·May 25, 14:49 UTC · May 25, 2022Exploit / PoC60
Microsoft patches Windows LSA spoofing zero-day under active attack (CVE-2022-26925)Help Net Security·May 12, 08:27 UTC · May 12, 2022Exploit / PoC in the wildCVE-2022-26925CVE-2022-29972CVE-2022-22713+2 CVEs160
Pwn2Own Miami hacking contest awarded 400K for 26 unique ICS exploitsSecurity Affairs·Apr 22, 08:21 UTC · Apr 22, 2022Exploit / PoC60
Microsoft fixes actively exploited zero-day reported by the NSA (CVE-2022-24521)Help Net Security·Apr 12, 00:00 UTC · Apr 12, 2022Exploit / PoC in the wildCVE-2022-24521CVE-2022-26904CVE-2022-26809+2 CVEs60
Microsoft patches actively exploited Exchange, Excel zero-days (CVE-2021-42321, CVE-2021-42292)Help Net Security·Nov 9, 00:00 UTC · Nov 9, 2021Exploit / PoC in the wildCVE-2021-42321CVE-2021-42292CVE-2021-38666+2 CVEs60
White hat hackers earn over $1 Million at Pwn2Own Austin 2021Security Affairs·Nov 6, 12:23 UTC · Nov 6, 2021Exploit / PoC60
Microsoft patches actively exploited Windows zero-day (CVE-2021-40449)Help Net Security·Oct 12, 00:00 UTC · Oct 12, 2021Exploit / PoC in the wildCVE-2021-40449CVE-2021-40486CVE-2021-26427+5 CVEs60
Microsoft patches actively exploited MSHTML zero-day RCE (CVE-2021-40444)Help Net Security·Sep 17, 09:50 UTC · Sep 17, 2021Exploit / PoC in the wildCVE-2021-40444CVE-2021-36965CVE-2021-38647+10 CVEs60
How do I select a container security solution for my business?Help Net Security·Sep 8, 00:00 UTC · Sep 8, 2021Exploit / PoC60
Microsoft patches actively exploited zero-day (CVE-2021-36948), more Print Spooler flawsHelp Net Security·Aug 10, 00:00 UTC · Aug 10, 2021Exploit / PoC in the wildCVE-2021-36948CVE-2021-36936CVE-2021-34483+3 CVEs160
February 2021 Patch Tuesday: Microsoft and Adobe fix exploited zero-daysHelp Net Security·Jun 8, 18:29 UTC · Jun 8, 2021Exploit / PoC in the wildCVE-2021-21017CVE-2021-1732CVE-2021-24074+6 CVEs60
March 2021 Patch Tuesday: Microsoft fixes yet another actively exploited IE zero-dayHelp Net Security·Jun 8, 18:28 UTC · Jun 8, 2021Exploit / PoC in the wildCVE-2021-26411CVE-2021-27076CVE-2021-26867+1 CVEs60
June 2021 Patch Tuesday: Microsoft fixes six actively exploited zero-daysHelp Net Security·Jun 8, 00:00 UTC · Jun 8, 2021Exploit / PoC in the wildCVE-2021-33742CVE-2021-31201CVE-2021-31199+6 CVEs60
Exploit broker Zerodium is looking for Pidgin 0day exploitsSecurity Affairs·Jun 2, 09:08 UTC · Jun 2, 2021Exploit / PoC60