Meta's Llama Framework Flaw Exposes AI Systems to Remote Code Execution RisksThe Hacker News·Jan 28, 05:26 UTC · Jan 28, 2025VulnerabilityCVE-2024-50050CVE-2024-3660160
Researchers Find Serious AI Bugs Exposing Meta, Nvidia, and Microsoft Inference FrameworksThe Hacker News·Nov 15, 00:00 UTC · Nov 15, 2025VulnerabilityCVE-2024-50050CVE-2025-30165CVE-2025-23254+1 CVEs60
Meta Warns of FreeType Vulnerability (CVE-2025The Hacker News·Mar 15, 00:00 UTC · Mar 15, 2025Vulnerability in the wildCVE-2025-2736360
Week in review: Weaponized OAuth redirection logic delivers malware, Patch Tuesday forecastHelp Net Security·Mar 8, 00:00 UTC · Mar 8, 2026VulnerabilityCVE-2025-14500CVE-2026-28289CVE-2026-20128+1 CVEs60
Week in review: Cisco SD-WAN 0-day exploited, Patch Tuesday forecastHelp Net Security·Jun 7, 00:00 UTC · Jun 7, 2026Vulnerability in the wildCVE-2026-0257CVE-2026-41089CVE-2025-48595+1 CVEs60
Week in review: Cisco patches SD-WAN 0-day, unpatched Microsoft Exchange Server flaw exploitedHelp Net Security·May 17, 00:00 UTC · May 17, 2026Vulnerability in the wildCVE-2026-44413CVE-2026-41940CVE-2026-46300+2 CVEs160
Week in review: cPanel vulnerability actively exploited, DigiCert breach, LinkedIn job scamsHelp Net Security·May 10, 00:00 UTC · May 10, 2026Vulnerability in the wildCVE-2026-41940CVE-2026-4670CVE-2026-5174+4 CVEs60
ThreatsDay Bulletin: Edge Plaintext Passwords, ICS 0-Days, Patch-orThe Hacker News·May 7, 17:59 UTC · May 7, 2026VulnerabilityCVE-2026-7411CVE-2026-7412CVE-2026-467060
December 2025 CVE Landscape: 22 Critical Vulnerabilities Mark 120% Surge, React2Shell Dominates Threat ActivityRecorded Future·Jan 13, 00:00 UTC · Jan 13, 2026Vulnerability in the wildCVE-2025-55182CVE-2025-20393CVE-2025-8110+1 CVEs60
Developers scramble as critical React flaw threatens major appsCyberScoop·Dec 3, 19:23 UTC · Dec 3, 2025Vulnerability in the wildCVE-2025-55182CVE-2025-6647860
WhatsApp fixed a spoofing flaw that could enable Remote Code ExecutionSecurity Affairs·Apr 8, 14:25 UTC · Apr 8, 2025VulnerabilityCVE-2025-3040160
AWS warns of ‘ShellTorch’ issue affecting code related to AI modelsThe Record·Oct 4, 16:35 UTC · Oct 4, 2023VulnerabilityCVE-2023-43654CVE-2022-147160
Analyze Recent Atlassian Vulnerabilities and Keep Your Infrastructure ProtectedRecorded Future·Dec 13, 00:00 UTC · Dec 13, 2017VulnerabilityCVE-2017-14589CVE-2019-3394CVE-2019-11581+11 CVEs60
ThreatsDay Bulletin: PAN-OS RCE, Mythos cURL Bug, AI Tokenizer Attacks, and 10+ StoriesThe Hacker News·May 15, 00:00 UTC · May 15, 2026VulnerabilityCVE-2026-0300160
Hackers Exploiting Unpatched WordPress Plugin Flaw to Create Secret Admin AccountsThe Hacker News·Jul 4, 17:49 UTC · Jul 4, 2023Vulnerability in the wildCVE-2023-346060
Week in review: Exploited newly patched BeyondTrust RCE, United Airlines CISO on building resilienceHelp Net Security·Feb 15, 00:00 UTC · Feb 15, 2026Vulnerability in the wildCVE-2026-1731CVE-2024-12356CVE-2026-1281+2 CVEs60
Over 100,000 WordPress Sites at Risk from Critical CVSS 10.0 Vulnerability in Wishlist PluginThe Hacker News·May 29, 08:52 UTC · May 29, 2025VulnerabilityCVE-2025-4757760
PostgreSQL Vulnerability Exploited Alongside BeyondTrust ZeroThe Hacker News·Feb 15, 00:00 UTC · Feb 15, 2025Vulnerability in the wildCVE-2025-1094CVE-2024-12356CVE-2024-5772760
TP-Link Archer C5400X gaming router is affected by a critical flawSecurity Affairs·May 28, 06:23 UTC · May 28, 2024VulnerabilityCVE-2024-503560
Week in review: Malware delivery via Microsoft Teams, law firms under cyberattack, CVSS 4.0 is outHelp Net Security·Dec 5, 09:04 UTC · Dec 5, 2023Vulnerability in the wildCVE-2023-3595CVE-2023-3596CVE-2023-36884+3 CVEs60
Vulnerability Spotlight: Code execution, memory corruption vulnerabilities in Accusoft ImageGearCisco Talos·Sep 1, 18:49 UTC · Sep 1, 2020Vulnerability in the wildCVE-2020-6151CVE-2020-615260
New Cache Poisoning Attack Lets Attackers Target CDN Protected SitesThe Hacker News·Oct 24, 05:34 UTC · Oct 24, 2019VulnerabilityCVE-2019-094160
Ruflo MCP Flaw Lets Unauthenticated Attackers Run Commands and Poison AI MemoryThe Hacker News·Jul 29, 15:39 UTC · Jul 29, 2026VulnerabilityCVE-2026-59726160
Ivanti, Fortinet, SAP, VMware, n8n Patch RCE, SQL Injection, Privilege Escalation FlawsThe Hacker News·May 18, 17:02 UTC · May 18, 2026VulnerabilityCVE-2026-8043CVE-2026-44277CVE-2026-26083+8 CVEs160
Vulnerabilities grew like weeds in 2025, but only 1% were weaponized in attacksCyberScoop·Feb 25, 13:30 UTC · Feb 25, 2026Vulnerability in the wildCVE-2025-53770CVE-2025-53771CVE-2025-49706+1 CVEs60
ThreatsDay Bulletin: AI Voice Cloning Exploit, Wi-Fi Kill Switch, PLC Vulns, and 14 More StoriesThe Hacker News·Jan 19, 06:25 UTC · Jan 19, 2026VulnerabilityCVE-2025-62507CVE-2025-23304CVE-2026-22584160
⚡ Weekly Recap: Firewall Exploits, AI Data Theft, Android Hacks, APT Attacks, Insider Leaks & MoreThe Hacker News·Dec 27, 07:49 UTC · Dec 27, 2025VulnerabilityCVE-2025-20393CVE-2025-40602CVE-2025-23006+22 CVEs160
New React RSC Vulnerabilities Enable DoS and Source Code ExposureThe Hacker News·Dec 12, 18:36 UTC · Dec 12, 2025VulnerabilityCVE-2025-55182CVE-2025-55184CVE-2025-67779+1 CVEs60
Critical React2Shell Vulnerability Under Active Exploitation by Chinese Threat ActorsRecorded Future·Dec 9, 00:00 UTC · Dec 9, 2025Vulnerability in the wildCVE-2025-5518260
Critical RSC Bugs in React and Next.js Allow Unauthenticated Remote Code ExecutionThe Hacker News·Dec 4, 15:38 UTC · Dec 4, 2025VulnerabilityCVE-2025-55182CVE-2025-6647860
5 Threats That Reshaped Web Security This Year [2025]The Hacker News·Dec 4, 11:30 UTC · Dec 4, 2025VulnerabilityCVE-2025-54135CVE-2025-53109CVE-2025-5528460
Synology patches critical BeeStation RCE flaw shown at Pwn2Own Ireland 2025Security Affairs·Nov 12, 10:02 UTC · Nov 12, 2025VulnerabilityCVE-2025-1268660
Critical React Native CLI Flaw Exposed Millions of Developers to Remote AttacksThe Hacker News·Nov 4, 14:24 UTC · Nov 4, 2025VulnerabilityCVE-2025-1195360
Android and Windows gamers worldwide potentially affected by bug in Unity game engineThe Record·Oct 6, 12:23 UTC · Oct 6, 2025Vulnerability in the wildCVE-2025-59489160
WhatsApp Patches Zero-Click Exploit Targeting iOS and macOS DevicesThe Hacker News·Sep 2, 16:27 UTC · Sep 2, 2025Vulnerability in the wildCVE-2025-55177CVE-2025-4330060
2017 Vulnerability Report: A Shift in Cybercriminal PreferencesRecorded Future·Aug 11, 00:00 UTC · Aug 11, 2025VulnerabilityCVE-2016-0189CVE-2015-7645CVE-2015-244460
Week in review: Sudo local privilege escalation flaws fixed, Google patches actively exploited ChromeHelp Net Security·Jul 6, 00:00 UTC · Jul 6, 2025Vulnerability in the wildCVE-2025-32462CVE-2025-32463CVE-2025-6554+4 CVEs60
Week in review: Backdoor found in SOHO devices running Linux, high-risk WinRAR RCE flaw patchedHelp Net Security·Jun 29, 00:00 UTC · Jun 29, 2025VulnerabilityCVE-2025-6218CVE-2025-49144CVE-2025-577760
New Kit, Same Player: Top 10 Vulnerabilities Used by Exploit Kits in 2016Recorded Future·Jun 27, 00:00 UTC · Jun 27, 2025VulnerabilityCVE-2015-2419CVE-2015-1671CVE-2015-0313+2 CVEs60
Microsoft Patches 125 Flaws Including Actively Exploited Windows CLFS VulnerabilityThe Hacker News·Apr 10, 06:48 UTC · Apr 10, 2025Vulnerability in the wildCVE-2025-29824CVE-2022-24521CVE-2022-37969+15 CVEs60