Microsoft Office Zero-Day (CVE-2026-21509) - Emergency Patch Issued for Active ExploitationThe Hacker News·Jan 27, 10:37 UTC · Jan 27, 2026Exploit / PoC in the wildCVE-2026-2150960
Emergency Microsoft update fixes in-the-wild Office zeroSecurity Affairs·Jan 26, 19:04 UTC · Jan 26, 2026Exploit / PoC in the wildCVE-2026-21509160
Macro Intruders: Sneaking Past Office DefensesCisco Talos·Aug 2, 13:42 UTC · Aug 2, 2016Exploit / PoC in the wild60
RSA Conference 2020 unveils keynote line-up with world-class expertsHelp Net Security·May 12, 11:26 UTC · May 12, 2020Exploit / PoC in the wildCVE-2026-8749160
National Cyber Director Harry Coker looks back (and ahead) on the Cyber Director officeCyberScoop·Jan 8, 00:52 UTC · Jan 8, 2025Exploit / PoC in the wild60
U.S. CISA adds Microsoft Office, GNU InetUtils, SmarterTools SmarterMail, and Linux Kernel flaws to its Known Exploited Vulnerabilities catalogSecurity Affairs·Jan 27, 14:54 UTC · Jan 27, 2026Exploit / PoC in the wildCVE-2018-14634CVE-2025-52691CVE-2026-21509+2 CVEs60
Zero-day bug exploited by attackers via macro-less Office documents (CVE-2022-30190)Help Net Security·May 31, 00:00 UTC · May 31, 2022Exploit / PoC in the wildCVE-2022-30190CVE-2021-4044460
Microsoft reveals actively exploited Office zero-day, provides emergency fix (CVE-2026-21509)Help Net Security·Feb 3, 18:36 UTC · Feb 3, 2026Exploit / PoC in the wildCVE-2026-2150960
Microsoft releases guidance for Office zero-day used to target orgs in Russia, India, TibetThe Record·Jan 13, 00:00 UTC · Jan 13, 2023Exploit / PoCCVE-2022-3019060
RSA Conference announces initial keynote speakers to address security topics and issues for 2022Help Net Security·Dec 6, 00:00 UTC · Dec 6, 2021Exploit / PoC in the wildCVE-2026-8749160
DHS: Georgia incident was legitimate work, not a hackCyberScoop·Dec 12, 15:53 UTC · Dec 12, 2016Exploit / PoC in the wild60
South Korea-linked group APT-C-60 exploited a WPS Office zeroSecurity Affairs·Aug 30, 11:09 UTC · Aug 30, 2024Exploit / PoCCVE-2924-726360
U.S. CISA adds Draytek VigorConnect and Kingsoft WPS Office bugs to its Known Exploited Vulnerabilities catalogSecurity Affairs·Sep 7, 16:19 UTC · Sep 7, 2024Exploit / PoC in the wildCVE-2021-20123CVE-2021-20124CVE-2024-726260
Unpatched Office zero-day CVE-2023-36884 actively exploited in targeted attacksSecurity Affairs·Jul 12, 07:39 UTC · Jul 12, 2023Exploit / PoC in the wildCVE-2023-3688460
DHS's top cyber office is about to get a name that reflects its missionCyberScoop·Oct 4, 15:14 UTC · Oct 4, 2018Exploit / PoC in the wild60
Cyber diplomacy office at State Department would return under HouseCyberScoop·Jan 17, 22:19 UTC · Jan 17, 2018Exploit / PoC in the wild60
An inspector general's office full of hackers? Two lawmakers say it's a good ideaCyberScoop·Jan 5, 22:18 UTC · Jan 5, 2017Exploit / PoC in the wild60
Copyright office criticizes AI ‘fair use’ before director’s dismissalCyberScoop·May 13, 20:57 UTC · May 13, 2025Exploit / PoC in the wild60
Chinese Hackers Begin Exploiting Latest Microsoft Office ZeroThe Hacker News·Jun 1, 10:00 UTC · Jun 1, 2022Exploit / PoC in the wildCVE-2022-30190160
Microsoft shared workarounds for the Microsoft Office Follina 0daySecurity Affairs·May 31, 11:19 UTC · May 31, 2022Exploit / PoCCVE-2022-30190160
Spin Technology introduces a new solution for Microsoft Office 365 customers to identify risky applicationsHelp Net Security·Apr 14, 00:00 UTC · Apr 14, 2022Exploit / PoC160
New 0-Day Attack Targeting Windows Users With Microsoft Office DocumentsThe Hacker News·Sep 8, 04:55 UTC · Sep 8, 2021Exploit / PoC in the wildCVE-2021-4044460
Pentagon office left military designs for body armor, vehicle gear open to hackers, watchdog findsCyberScoop·Jul 7, 17:43 UTC · Jul 7, 2021Exploit / PoC in the wild60
Disappearing bytes: Reverse engineering the MS Office RTF parserKaspersky Securelist·Feb 21, 14:00 UTC · Feb 21, 2018Exploit / PoC145
Department of Energy would get new cybersecurity office under White House proposalCyberScoop·Feb 12, 22:57 UTC · Feb 12, 2018Exploit / PoC in the wild60
Microsoft plugs 56 vulns, including Office flaw exploited in attacksHelp Net Security·Jan 10, 00:00 UTC · Jan 10, 2018Exploit / PoC in the wildCVE-2018-0802CVE-2017-11882CVE-2018-0786+3 CVEs60
Tillerson to officially eliminate cyber coordinator officeCyberScoop·Aug 29, 20:43 UTC · Aug 29, 2017Exploit / PoC in the wild60
U.S. Copyright Office seeks changes to anti-piracy law derided by whiteCyberScoop·Jun 27, 12:08 UTC · Jun 27, 2017Exploit / PoC in the wild60
⚡ Weekly Recap: Proxy Botnet, Office Zero-Day, MongoDB Ransoms, AI Hijacks & New ThreatsThe Hacker News·Feb 15, 00:00 UTC · Feb 15, 2026Exploit / PoC in the wildCVE-2026-21509CVE-2026-1281CVE-2026-134060
U.S. CISA adds Microsoft Office and Microsoft Windows flaws to its Known Exploited Vulnerabilities catalogSecurity Affairs·Feb 11, 07:37 UTC · Feb 11, 2026Exploit / PoC in the wildCVE-2026-21510CVE-2026-21513CVE-2026-21514+3 CVEs160
U.S. CISA adds HPE OneView and Microsoft Office PowerPoint flaws to its Known Exploited Vulnerabilities catalogSecurity Affairs·Jan 8, 10:43 UTC · Jan 8, 2026Exploit / PoC in the wildCVE-2009-0556CVE-2025-37164160
Coker’s top priorities: Federal cohesion, cyber workforce, other ‘hard problems’CyberScoop·Jul 18, 14:44 UTC · Jul 18, 2024Exploit / PoC in the wild60
Week in review: Macro-less Office documents zero-day bug, FluBot takedown, growing DDoS threatsHelp Net Security·Jun 5, 00:00 UTC · Jun 5, 2022Exploit / PoC in the wildCVE-2022-30190CVE-2022-26134160
Watch Out! Researchers Spot New Microsoft Office ZeroThe Hacker News·May 30, 15:44 UTC · May 30, 2022Exploit / PoCCVE-2021-40444160
Z-WASP attack: hackers used Zero-Width spaces to bypass Office 365 protectionsSecurity Affairs·Jan 12, 10:26 UTC · Jan 12, 2019Exploit / PoC145
South Korean Spies Exploit WPS Office ZeroInfosecurity Magazine·Aug 28, 09:50 UTC · Aug 28, 2024Exploit / PoCCVE-2024-7262CVE-2024-726360
Don't miss these keynotes at RSAC 2019Help Net Security·Feb 8, 09:54 UTC · Feb 8, 2024Exploit / PoC in the wildCVE-2026-8749160
Microsoft Office versions impacted by an actively exploited zeroSecurity Affairs·May 30, 12:06 UTC · May 30, 2022Exploit / PoC in the wild60
Owl Cyber Defense opens new regional office in Abu DhabiHelp Net Security·Jul 15, 00:00 UTC · Jul 15, 2021Exploit / PoC60
Dragos to open Saudi Arabia office, announces new funding roundCyberScoop·Nov 14, 23:41 UTC · Nov 14, 2018Exploit / PoC in the wild60