⚡ Weekly Recap: SharePoint 0-Day, Chrome Exploit, macOS Spyware, NVIDIA Toolkit RCE and MoreThe Hacker News·Jun 10, 04:47 UTC · Jun 10, 2026Vulnerability in the wildCVE-2025-53770CVE-2025-53771CVE-2025-49704+36 CVEs60
SimpleHelp vulnerability exploited to deliver mighty Djinn Stealer (CVE-2026-48558)Help Net Security·Jun 30, 00:00 UTC · Jun 30, 2026Vulnerability in the wildCVE-2026-48558160
H1 2022: Malware and Vulnerability Trends ReportRecorded Future·Aug 22, 00:00 UTC · Aug 22, 2025VulnerabilityCVE-2021-34473CVE-2021-34523CVE-2021-31207160
New malicious web shell from the Tropic Trooper group is found in the Middle EastKaspersky Securelist·Sep 5, 08:02 UTC · Sep 5, 2024Vulnerability in the wildCVE-2021-34473CVE-2021-34523CVE-2021-31207+1 CVEs60
Gamaredon Uses WinRAR Vulnerability to Launch Modular Spy Campaign on Ukrainian TargetsSecurity Affairs·Jun 4, 10:53 UTC · Jun 4, 2026VulnerabilityCVE-2025-808860
PolyShell: unrestricted file upload in Magento and Adobe CommerceSansec (Magento / e-commerce security)·May 12, 10:55 UTC · May 12, 2026Vulnerability in the wild60
ThreatsDay Bulletin: RustFS Flaw, Iranian Ops, WebUI RCE, Cloud Leaks, and 12 More StoriesThe Hacker News·Jan 8, 16:52 UTC · Jan 8, 2026Vulnerability in the wildCVE-2024-36401CVE-2007-0671CVE-2002-036760
⚡ Weekly Recap: Firewall Exploits, AI Data Theft, Android Hacks, APT Attacks, Insider Leaks & MoreThe Hacker News·Dec 27, 07:49 UTC · Dec 27, 2025VulnerabilityCVE-2025-20393CVE-2025-40602CVE-2025-23006+22 CVEs160
RondoDox expands botnet by exploiting XWiki RCE bug left unpatched since February 2025Security Affairs·Nov 17, 08:04 UTC · Nov 17, 2025Vulnerability in the wildCVE-2025-2489360
H1 2025 Malware and Vulnerability TrendsRecorded Future·Nov 13, 00:00 UTC · Nov 13, 2025Vulnerability in the wild60
Wordfence blocks 8.7M attacks exploiting old GutenKit and Hunk Companion flawsSecurity Affairs·Oct 27, 08:40 UTC · Oct 27, 2025VulnerabilityCVE-2024-9234CVE-2024-9707CVE-2024-1197260
New Flodrix Botnet Variant Exploits Langflow AI Server RCE Bug to Launch DDoS AttacksThe Hacker News·Jun 21, 09:10 UTC · Jun 21, 2025Vulnerability in the wildCVE-2025-324860
Beware! Backdoor found in XZ utilities used by many Linux distros (CVE-2024-3094)Help Net Security·Apr 8, 13:25 UTC · Apr 8, 2024VulnerabilityCVE-2024-309460
FreakOut! Ongoing Botnet Attack Exploiting Recent Linux VulnerabilitiesThe Hacker News·Jan 19, 13:40 UTC · Jan 19, 2021VulnerabilityCVE-2020-28188CVE-2021-3007CVE-2020-796160
CVE-2019-2725 Oracle WebLogic flaw exploited in cryptojacking campaignSecurity Affairs·Jun 11, 05:53 UTC · Jun 11, 2019Vulnerability in the wildCVE-2019-272560
China's national vulnerability database is merely a tool for its intelligence agenciesCyberScoop·Mar 9, 16:34 UTC · Mar 9, 2018Vulnerability in the wildCVE-2017-019960
US Agencies Warn of Laundry Bear Campaign Targeting Unpatched Zimbra ServersSecurity Affairs·Jul 24, 08:31 UTC · Jul 24, 2026Vulnerability in the wildCVE-2025-6637660
⚡ Weekly Recap: WordPress RCE, SonicWall 0-Days, AI Service Attacks, SharePoint 0The Hacker News·Jul 21, 04:34 UTC · Jul 21, 2026Vulnerability in the wildCVE-2026-63030CVE-2026-60137CVE-2026-15409+26 CVEs160
Critical SimpleHelp Vulnerability Exploited For Malware DeliveryInfosecurity Magazine·Jun 30, 15:34 UTC · Jun 30, 2026Vulnerability in the wildCVE-2026-4855860
Attackers Exploit SimpleHelp CVE-2026-48558 to Deploy TaskWeaver and Djinn StealerThe Hacker News·Jun 30, 11:18 UTC · Jun 30, 2026Vulnerability in the wildCVE-2026-48558260
Hackers Exploit Critical Everest Forms Pro WordPress Plugin Flaw to Take Over SitesThe Hacker News·Jun 5, 08:38 UTC · Jun 5, 2026VulnerabilityCVE-2026-330060
Gamaredon Exploits WinRAR to Deliver GammaWorm and GammaSteel Against UkraineThe Hacker News·Jun 2, 18:21 UTC · Jun 2, 2026VulnerabilityCVE-2025-8088CVE-2026-2150960
ThreatsDay Bulletin: PAN-OS RCE, Mythos cURL Bug, AI Tokenizer Attacks, and 10+ StoriesThe Hacker News·May 15, 00:00 UTC · May 15, 2026VulnerabilityCVE-2026-0300160
ThreatsDay Bulletin: Edge Plaintext Passwords, ICS 0-Days, Patch-orThe Hacker News·May 7, 17:59 UTC · May 7, 2026VulnerabilityCVE-2026-7411CVE-2026-7412CVE-2026-467060
⚡ Weekly Recap: AI-Powered Phishing, Android Spying Tool, Linux Exploit, GitHub RCE & MoreThe Hacker News·May 5, 05:41 UTC · May 5, 2026Vulnerability in the wildCVE-2026-41940CVE-2026-31431CVE-2026-3854+2 CVEs160
Found defunct.dat on your site? You've got a problem.Sansec (Magento / e-commerce security)·Apr 14, 19:49 UTC · Apr 14, 2026Vulnerability in the wildCVE-2026-7565060
Mass PolyShell attack wave hits 471 stores in one hourSansec (Magento / e-commerce security)·Mar 31, 07:45 UTC · Mar 31, 2026Vulnerability in the wildCVE-2026-7565060
Russian APT targets Ukraine via Zimbra XSS flaw CVE-2025Security Affairs·Mar 19, 14:48 UTC · Mar 19, 2026Vulnerability in the wildCVE-2025-6637660
Feds take notice of iOS vulnerabilities exploited under mysterious circumstancesArs Technica · Security·Mar 6, 19:41 UTC · Mar 6, 2026VulnerabilityCVE-2025-23222CVE-2023-43000CVE-2021-30952+10 CVEs60
Weekly Recap: Outlook Add-Ins Hijack, 0-Day Patches, Wormable Botnet & AI MalwareThe Hacker News·Feb 23, 11:00 UTC · Feb 23, 2026Vulnerability in the wildCVE-2026-2441CVE-2026-1731CVE-2026-2070060
Notepad++ patches flaw used to hijack update systemSecurity Affairs·Feb 18, 19:28 UTC · Feb 18, 2026VulnerabilityCVE-2026-25926160
Cisco Talos DNS SecurityCisco Talos·Jan 16, 14:32 UTC · Jan 16, 2026Vulnerability in the wildCVE-2026-2018260
Critical React2Shell Vulnerability Under Active Exploitation by Chinese Threat ActorsRecorded Future·Dec 9, 00:00 UTC · Dec 9, 2025Vulnerability in the wildCVE-2025-5518260
Three hacking groups, two vulnerabilities and all eyes on ChinaThe Record·Dec 8, 15:09 UTC · Dec 8, 2025VulnerabilityCVE-2025-49704CVE-2025-49706CVE-2025-53770+1 CVEs60
Unpatched Windows vulnerability continues to be exploited by APTs (CVE-2025-9491)Help Net Security·Dec 5, 09:00 UTC · Dec 5, 2025VulnerabilityCVE-2025-949160
5 Threats That Reshaped Web Security This Year [2025]The Hacker News·Dec 4, 11:30 UTC · Dec 4, 2025VulnerabilityCVE-2025-54135CVE-2025-53109CVE-2025-5528460
Analyzing the vulnerability landscape in Q3 2025Kaspersky Securelist·Dec 3, 10:00 UTC · Dec 3, 2025VulnerabilityCVE-2018-0802CVE-2017-11882CVE-2017-0199+6 CVEs160
Russia-Aligned TAG-110 Targets Asia and Europe with HATVIBE and CHERRYSPYRecorded Future·Aug 22, 00:00 UTC · Aug 22, 2025VulnerabilityCVE-2024-2369260
Russian state-sponsored espionage group Static Tundra compromises unpatched end-ofCisco Talos·Aug 20, 13:00 UTC · Aug 20, 2025VulnerabilityCVE-2018-017160
GreyNoise enhances threat response with real-time blocklists, feeds, and SOAR integrationsHelp Net Security·Jul 31, 00:00 UTC · Jul 31, 2025Vulnerability in the wild60