Critical Vulnerability in Anthropic's MCP Exposes Developer Machines to Remote ExploitsThe Hacker News·Jul 4, 09:23 UTC · Jul 4, 2025VulnerabilityCVE-2025-4959660
Critical React Native CLI Flaw Exposed Millions of Developers to Remote AttacksThe Hacker News·Nov 4, 14:24 UTC · Nov 4, 2025VulnerabilityCVE-2025-1195360
Vulnerability in popular AI developer could ‘shut down essentially everything you own’CyberScoop·Jan 29, 15:37 UTC · Jan 29, 2025Vulnerability in the wild60
Week in review: SimpleHelp vulnerability exploited, Oracle EBS Payments flaw under attackHelp Net Security·Jul 5, 00:00 UTC · Jul 5, 2026Vulnerability in the wildCVE-2026-12569CVE-2026-48558CVE-2026-4681760
Week in review: 74k Fortinet firewall credentials stolen, Splunk Enterprise RCE under active attackHelp Net Security·Jun 21, 00:00 UTC · Jun 21, 2026Vulnerability in the wildCVE-2026-20262CVE-2026-48558CVE-2026-39813+3 CVEs160
Week in review: Notepad++ supply chain attack details and targets, Patch Tuesday forecastHelp Net Security·Feb 8, 00:00 UTC · Feb 8, 2026Vulnerability in the wildCVE-2026-21509CVE-2025-22225CVE-2026-2442360
Apache alerts developers of remote code execution flawCyberScoop·Nov 7, 15:41 UTC · Nov 7, 2018VulnerabilityCVE-2016-100003160
Week in review: Weaponized OAuth redirection logic delivers malware, Patch Tuesday forecastHelp Net Security·Mar 8, 00:00 UTC · Mar 8, 2026VulnerabilityCVE-2025-14500CVE-2026-28289CVE-2026-20128+1 CVEs60
Flaws in Popular IDE Extensions Allow Data ExfiltrationInfosecurity Magazine·Feb 19, 10:45 UTC · Feb 19, 2026VulnerabilityCVE-2025-65717CVE-2025-65716CVE-2025-6571560
Cinterion EHS5 3G UMTS/HSPA Module ResearchKaspersky Securelist·Jun 13, 10:00 UTC · Jun 13, 2024VulnerabilityCVE-2020-1585860
Vulnerability Spotlight: Unsafe deserialization vulnerabilities in CODESYS Development SystemCisco Talos·Jul 26, 14:42 UTC · Jul 26, 2021Vulnerability in the wildCVE-2021-21863CVE-2021-21864CVE-2021-21865+4 CVEs60
Week in review: Cisco patches SD-WAN 0-day, unpatched Microsoft Exchange Server flaw exploitedHelp Net Security·May 17, 00:00 UTC · May 17, 2026Vulnerability in the wildCVE-2026-44413CVE-2026-41940CVE-2026-46300+2 CVEs160
⚡ Weekly Recap: Firewall Exploits, AI Data Theft, Android Hacks, APT Attacks, Insider Leaks & MoreThe Hacker News·Dec 27, 07:49 UTC · Dec 27, 2025VulnerabilityCVE-2025-20393CVE-2025-40602CVE-2025-23006+22 CVEs60
Developers scramble as critical React flaw threatens major appsCyberScoop·Dec 3, 19:23 UTC · Dec 3, 2025Vulnerability in the wildCVE-2025-55182CVE-2025-6647860
Week in review: cPanel vulnerability actively exploited, DigiCert breach, LinkedIn job scamsHelp Net Security·May 10, 00:00 UTC · May 10, 2026Vulnerability in the wildCVE-2026-41940CVE-2026-4670CVE-2026-5174+4 CVEs60
Week in review: High-severity LPE vulnerability in the Linux kernel, cPanel 0-day exploited for monthsHelp Net Security·May 3, 00:00 UTC · May 3, 2026Vulnerability in the wildCVE-2026-32202CVE-2026-21510CVE-2026-21513+3 CVEs260
Week in review: Fully patched FortiGate firewalls are getting compromised, attackers probe Cisco RCE flawHelp Net Security·Jan 25, 00:00 UTC · Jan 25, 2026VulnerabilityCVE-2026-20045CVE-2025-5971860
February 2025 Patch Tuesday forecast: New directions for AI developmentHelp Net Security·Feb 10, 00:00 UTC · Feb 10, 2025Vulnerability in the wildCVE-2025-21418CVE-2025-21391CVE-2025-2408560
Drupal developers fixed a code execution flaw in the popular CMSSecurity Affairs·Jul 25, 06:21 UTC · Jul 25, 2022VulnerabilityCVE-2022-2527760
'Eavesdropper' vulnerability strikes hundreds of mobile apps using TwilioCyberScoop·Nov 9, 15:17 UTC · Nov 9, 2017Vulnerability in the wild60
Virtual patching: Cut time to patch from 250 days toHelp Net Security·Apr 23, 13:38 UTC · Apr 23, 2026Vulnerability in the wild60
VS Code extensions with 125M+ installs expose users to cyberattacksSecurity Affairs·Feb 18, 15:14 UTC · Feb 18, 2026VulnerabilityCVE-2025-65715CVE-2025-65716CVE-2025-65717160
Hackers target AI and crypto as software supply chain risks growHelp Net Security·Dec 3, 14:29 UTC · Dec 3, 2025Vulnerability in the wild60
Jenkins patched a critical RCE flaw in its open source automation serverSecurity Affairs·Oct 4, 15:37 UTC · Oct 4, 2025VulnerabilityCVE-2017-1000353CVE-2017-1000354CVE-2017-100035560
ThreatsDay Bulletin: Rootkit Patch, Federal Breach, OnePlus SMS Leak, TikTok Scandal & MoreThe Hacker News·Oct 2, 12:19 UTC · Oct 2, 2025VulnerabilityCVE-2025-10184CVE-2024-36401160
MOVEit Developer Patches Critical File Transfer BugInfosecurity Magazine·Sep 29, 09:30 UTC · Sep 29, 2023VulnerabilityCVE-2023-40044CVE-2023-4265760
Researchers Disclose Critical RCE Vulnerability Affecting Quarkus Java FrameworkThe Hacker News·Dec 1, 11:45 UTC · Dec 1, 2022VulnerabilityCVE-2022-411660
Critical RCE Flaw Reported in Spotify's Backstage Software Catalog and Developer PlatformThe Hacker News·Nov 15, 00:00 UTC · Nov 15, 2022VulnerabilityCVE-2022-3606760
Experts developed exploits for CVE-2022-1388 RCE in F5 BIGSecurity Affairs·May 9, 09:22 UTC · May 9, 2022VulnerabilityCVE-2022-138860
Adobe addresses critical issues in Acrobat, Reader, and DNG SDKSecurity Affairs·May 12, 16:41 UTC · May 12, 2020VulnerabilityCVE-2020-9610CVE-2020-9612CVE-2020-9615+11 CVEs60
Simple bug could lead to RCE flaw on apps built with Electron FrameworkThe Hacker News·May 15, 00:00 UTC · May 15, 2018VulnerabilityCVE-2018-100013660
Analyze Recent Atlassian Vulnerabilities and Keep Your Infrastructure ProtectedRecorded Future·Dec 13, 00:00 UTC · Dec 13, 2017VulnerabilityCVE-2017-14589CVE-2019-3394CVE-2019-11581+11 CVEs60
Week in review: Cisco fixes IMC bug, Patch Tuesday forecast, Black Hat USA 2026Help Net Security·Aug 9, 00:00 UTC · Aug 9, 2026VulnerabilityCVE-2026-66066CVE-2026-18577160
Paperclip AI Flaws Let Unauthenticated Attackers Run CommandsInfosecurity Magazine·Aug 5, 14:30 UTC · Aug 5, 2026VulnerabilityCVE-2026-4167960
Patch Tuesday, February 2026 EditionKrebs on Security·Feb 11, 03:47 UTC · Feb 11, 2026VulnerabilityCVE-2026-21510CVE-2026-21513CVE-2026-21514+7 CVEs160
Android and Windows gamers worldwide potentially affected by bug in Unity game engineThe Record·Oct 6, 12:23 UTC · Oct 6, 2025Vulnerability in the wildCVE-2025-59489160
Week in review: Several companies affected by the Salesloft Drift breach, Sitecore 0-day vulnerabilityHelp Net Security·Sep 7, 00:00 UTC · Sep 7, 2025Vulnerability in the wildCVE-2025-53690CVE-2025-24204CVE-2025-48543+2 CVEs60
H1 2022: Malware and Vulnerability Trends ReportRecorded Future·Aug 22, 00:00 UTC · Aug 22, 2025VulnerabilityCVE-2021-34473CVE-2021-34523CVE-2021-31207160
DARPA’s AI Cyber Challenge reveals winning models for automated vulnerability discovery and patchingCyberScoop·Aug 8, 21:53 UTC · Aug 8, 2025Vulnerability in the wild60
Cursor AI Code Editor Vulnerability Enables RCE via Malicious MCP File Swaps Post ApprovalThe Hacker News·Aug 5, 13:04 UTC · Aug 5, 2025VulnerabilityCVE-2025-54136160