BlackLotus UEFI bootkit disables Windows security mechanismsHelp Net Security·Apr 17, 10:14 UTC · Apr 17, 2023Vulnerability in the wildCVE-2022-2189460
Microsoft’s Secure Boot has been broken for a decade and no one noticed until nowArs Technica · Security·Jul 15, 00:00 UTC · Jul 15, 2026Vulnerability in the wildCVE-2015-5381160
Microsoft's May Patch Tuesday Fixes 38 Flaws, Including 2 Exploited ZeroThe Hacker News·May 15, 00:00 UTC · May 15, 2023Vulnerability in the wildCVE-2023-29336CVE-2023-29325CVE-2023-24932+1 CVEs60
Microsoft fixes two actively exploited bugs, one used by BlackLotus bootkit (CVE-2023-29336, CVE-2023-24932)Help Net Security·May 9, 00:00 UTC · May 9, 2023Vulnerability in the wildCVE-2023-29336CVE-2023-24932CVE-2022-21882+10 CVEs160
New WordPress Pre-Auth XSS Could Lead to PHP Code ExecutionThe Hacker News·Aug 8, 08:07 UTC · Aug 8, 2026Vulnerability in the wildCVE-2026-64638160
Week in review: Fully patched FortiGate firewalls are getting compromised, attackers probe Cisco RCE flawHelp Net Security·Jan 25, 00:00 UTC · Jan 25, 2026VulnerabilityCVE-2026-20045CVE-2025-5971860
Week in review: Microsoft patches exploited Windows CLFS 0-day, WinRAR MotW bypass flaw fixedHelp Net Security·Apr 13, 00:00 UTC · Apr 13, 2025Vulnerability in the wildCVE-2025-29824CVE-2025-31334CVE-2024-48887+2 CVEs160
Users of JetBrains IDEs at risk of GitHub access token compromise (CVE-2024-37051)Help Net Security·Jun 11, 00:00 UTC · Jun 11, 2024Vulnerability in the wildCVE-2024-3705160
Microsoft Fixes 149 Flaws in Huge April Patch Release, ZeroThe Hacker News·Apr 11, 11:08 UTC · Apr 11, 2024Vulnerability in the wildCVE-2024-26234CVE-2024-29988CVE-2024-21412+2 CVEs60
BlackLotus is first bootkit bypassing UEFI Secure Boot on Win 11Security Affairs·Mar 1, 20:57 UTC · Mar 1, 2023VulnerabilityCVE-2022-2189460
Technical Details Released for 'SynLapse' RCE Vulnerability Reported in Microsoft AzureThe Hacker News·Jun 15, 00:00 UTC · Jun 15, 2022VulnerabilityCVE-2022-2997260
Critical DoS Flaw found in OpenSSL — How It WorksThe Hacker News·Sep 23, 12:13 UTC · Sep 23, 2016VulnerabilityCVE-2016-6304CVE-2016-630560