Guardian Agents: The Next Layer of Identity GovernanceThe Hacker News·Jun 26, 11:30 UTC · Jun 26, 2026Exploit / PoC145
New Flaw Lets Rogue Android Apps Access Camera Without PermissionThe Hacker News·Nov 20, 05:48 UTC · Nov 20, 2019Exploit / PoCCVE-2019-223460
The 'permission' question is much different for iOS and Android apps, researchers sayCyberScoop·Apr 3, 13:00 UTC · Apr 3, 2019Exploit / PoC in the wild60
How Just Visiting A Site Could Have Hacked Your iPhone or MacBook CameraThe Hacker News·Jan 31, 05:24 UTC · Jan 31, 2022Exploit / PoCCVE-2020-3852CVE-2020-3864CVE-2020-3865+4 CVEs60
iPhone Apps With Camera Permissions Can Secretly Take Your Photos Without You NoticingThe Hacker News·Oct 30, 09:43 UTC · Oct 30, 2017Exploit / PoC45
Millions of Android devices exposed to the Cloak and Dagger attackSecurity Affairs·Aug 2, 14:48 UTC · Aug 2, 2017Exploit / PoC57
Browser extension sales, updates pose hidden threat to enterprisesCyberScoop·Mar 27, 19:06 UTC · Mar 27, 2025Exploit / PoC60
New Attack Lets Android Apps Capture Loudspeaker Data Without Any PermissionThe Hacker News·Jul 17, 10:52 UTC · Jul 17, 2019Exploit / PoC45
Chrome design flaw allows sites to record Audio/Video without indicationSecurity Affairs·May 31, 13:18 UTC · May 31, 2017Exploit / PoC45
Finding Azurescape – Cross-Account Container Takeover in Azure Container InstancesPalo Alto Unit 42·Jun 6, 01:32 UTC · Jun 6, 2024Exploit / PoC in the wildCVE-2019-5736CVE-2018-1002102160
Preventing cybersecurity's perfect stormHelp Net Security·Oct 21, 00:00 UTC · Oct 21, 2020Exploit / PoC60
Unpatched Strandhogg Android Vulnerability Actively Exploited in the WildThe Hacker News·Dec 3, 07:28 UTC · Dec 3, 2019Exploit / PoC in the wild60
Stop Your Legacy Infrastructure from Hijacking Your AI AgentsThe Hacker News·Jul 20, 06:32 UTC · Jul 20, 2026Exploit / PoC in the wildCVE-2025-2481360
Identity discovery: The overlooked lever in strategic risk reductionHelp Net Security·Apr 29, 00:00 UTC · Apr 29, 2026Exploit / PoC60
New Pixnapping Android Flaw Lets Rogue Apps Steal 2FA Codes Without PermissionsThe Hacker News·Oct 20, 18:54 UTC · Oct 20, 2025Exploit / PoC in the wildCVE-2025-4856160
When trust turns toxic: Lessons from the Salesloft Drift incidentCyberScoop·Nov 24, 11:00 UTC · Nov 24, 2025Exploit / PoC in the wild60
Researcher Finds Five Zero-Days and 20 Misconfigurations in SalesforceInfosecurity Magazine·Jun 11, 11:30 UTC · Jun 11, 2025Exploit / PoCCVE-2025-4399CVE-2025-43700CVE-2025-43701+2 CVEs60
Android camera apps could be hijacked to spy on usersHelp Net Security·Sep 18, 09:34 UTC · Sep 18, 2024Exploit / PoCCVE-2019-223450
The FBI Is Now Securing Networks Without Their Owners' PermissionSchneier on Security·Apr 15, 00:00 UTC · Apr 15, 2021Exploit / PoC60
A Zero-Day in Steam client for Windows affects over 100 Million usersSecurity Affairs·Aug 9, 07:52 UTC · Aug 9, 2019Exploit / PoC60
Zoom flaw could enable hackers to activate Mac webcams without permissionCyberScoop·Jul 9, 22:10 UTC · Jul 9, 2019Exploit / PoC in the wild60
Security researchers and industry reps clash over voting machine security testingCyberScoop·Apr 11, 15:34 UTC · Apr 11, 2018Exploit / PoC in the wild60
TeamViewer fixes a flaw that allows users sharing a desktop session to gain control of the other’s PCSecurity Affairs·Dec 6, 04:13 UTC · Dec 6, 2017Exploit / PoC45
Gmail Worm Requiring You To Give It A Push And Apparently You All Are Really HelpfulCisco Talos·May 3, 21:28 UTC · May 3, 2017Exploit / PoC45
Atlassian Rovo Can Be Tricked Into Sending Jira and Confluence Data to AttackersThe Hacker News·Aug 8, 08:54 UTC · Aug 8, 2026Exploit / PoC in the wild60
Coolify Discloses 11 Critical Flaws Enabling Full Server Compromise on SelfThe Hacker News·Jan 10, 14:26 UTC · Jan 10, 2026Exploit / PoC in the wildCVE-2025-66209CVE-2025-66210CVE-2025-66211+8 CVEs60
Two Critical Flaws Uncovered in Wondershare RepairIt Exposing User Data and AI ModelsThe Hacker News·Sep 24, 13:55 UTC · Sep 24, 2025Exploit / PoCCVE-2025-10643CVE-2025-1064460
Researchers Uncover 20+ Configuration Risks, Including Five CVEs, in Salesforce Industry CloudThe Hacker News·Jun 15, 00:00 UTC · Jun 15, 2025Exploit / PoCCVE-2025-43697CVE-2025-43698CVE-2025-43699+3 CVEs60
SaaS Security is Now Accessible and Affordable to AllThe Hacker News·Nov 2, 09:24 UTC · Nov 2, 2023Exploit / PoC60
Apple fixes macOS zero-day exploited by malware (CVE-2021-30713)Help Net Security·May 25, 00:00 UTC · May 25, 2021Exploit / PoCCVE-2021-3071360
StrandHogg 2.0 Android flaw affects over 1 Billion devicesSecurity Affairs·May 26, 20:57 UTC · May 26, 2020Exploit / PoCCVE-2020-009660
Google researcher found Fortnite Android App vulnerable to MitD attacksSecurity Affairs·Aug 27, 06:50 UTC · Aug 27, 2018Exploit / PoC45
New TeamViewer Hack Could Allow Clients to Hijack Viewers' ComputerThe Hacker News·Dec 6, 16:28 UTC · Dec 6, 2017Exploit / PoC60
iPhone Apps you granted camera access can secretly take photos and record videoSecurity Affairs·Oct 30, 13:55 UTC · Oct 30, 2017Exploit / PoC45
'Cloak & Dagger' attack hits all the typical Android security weaknessesCyberScoop·May 25, 18:14 UTC · May 25, 2017Exploit / PoC in the wild60
Leaked n8n API Tokens Exposed Live Instances to Credential TheftThe Hacker News·Aug 5, 10:35 UTC · Aug 5, 2026Exploit / PoC in the wildCVE-2025-6861360
RussianTA488 Returns With Persistent Outlook Web Access AttackInfosecurity Magazine·Jul 29, 15:10 UTC · Jul 29, 2026Exploit / PoCCVE-2026-4289760
Critical OpenWrt DHCPv6 Flaw Could Let Unauthenticated Attackers Run Code as RootThe Hacker News·Jul 28, 13:10 UTC · Jul 28, 2026Exploit / PoC in the wildCVE-2026-53921CVE-2026-62948CVE-2026-62947160