Weekly Recap: Outlook Add-Ins Hijack, 0-Day Patches, Wormable Botnet & AI MalwareThe Hacker News·Feb 23, 11:00 UTC · Feb 23, 2026Vulnerability in the wildCVE-2026-2441CVE-2026-1731CVE-2026-2070060
Patch now your vBulletin install before hacker will target your forumSecurity Affairs·May 12, 11:33 UTC · May 12, 2020VulnerabilityCVE-2020-1272060
Beyond Vulnerability ManagementThe Hacker News·May 9, 16:51 UTC · May 9, 2025Vulnerability in the wild60
Cyberespionage group stolen Microsoft vulnerabilities DB back in 2013Security Affairs·Oct 17, 11:17 UTC · Oct 17, 2017VulnerabilityCVE-2013-042260
Integrating Threat Intelligence and Vulnerability Management: A Modern ApproachRecorded Future·Dec 17, 00:00 UTC · Dec 17, 2025Vulnerability in the wild60
Cardbleed: 3% of Magento install base hackedSansec (Magento / e-commerce security)·Apr 14, 19:49 UTC · Apr 14, 2026Vulnerability in the wildCVE-2026-7565060
Dahua IP Camera Vulnerability Could Let Attackers Take Full Control Over DevicesThe Hacker News·Jul 29, 10:49 UTC · Jul 29, 2022VulnerabilityCVE-2022-3056360
Threat Source newsletter for Aug. 27, 2020Cisco Talos·Aug 27, 18:00 UTC · Aug 27, 2020Vulnerability42
Hacker discloses details and exploit code for unpatched 0Day in vBulletinSecurity Affairs·Sep 24, 21:35 UTC · Sep 24, 2019Vulnerability55
Opus Security empowers organizations to prioritize the most critical vulnerabilitiesHelp Net Security·Sep 11, 00:00 UTC · Sep 11, 2024Vulnerability55
Now-Patched Fortinet FortiWeb Flaw Exploited in Attacks to Create Admin AccountsThe Hacker News·Nov 17, 14:23 UTC · Nov 17, 2025Vulnerability in the wildCVE-2025-6444660
2017 Vulnerability Report: A Shift in Cybercriminal PreferencesRecorded Future·Aug 11, 00:00 UTC · Aug 11, 2025VulnerabilityCVE-2016-0189CVE-2015-7645CVE-2015-244460
French Authorities confirm XSS.is admin arrested in UkraineSecurity Affairs·Jul 23, 18:05 UTC · Jul 23, 2025Vulnerability55
Analyzing the vulnerability landscape in Q1 2024Kaspersky Securelist·May 7, 10:00 UTC · May 7, 2024VulnerabilityCVE-2023-38831CVE-2023-40477CVE-2023-28252160
Pro-ISIS Hackers Have Been Flexing Their MusclesSecurity Affairs·Sep 25, 08:36 UTC · Sep 25, 2017Vulnerability55
Critical Control Web Panel vulnerability is actively exploited (CVE-2025-48703)Help Net Security·Nov 5, 00:00 UTC · Nov 5, 2025Vulnerability in the wildCVE-2025-48703CVE-2025-1137160
High-Severity Vulnerability Discovered in Popular CMSInfosecurity Magazine·Sep 6, 11:30 UTC · Sep 6, 2023Vulnerability in the wildCVE-2023-2453CVE-2023-448060
Week in review: Most exploited vulns in 2019, Emotet sprads via Wi-Fi, Patch Tuesday forecastHelp Net Security·Feb 9, 00:00 UTC · Feb 9, 2020Vulnerability55
China vs. U.S.: The Race in Vulnerability ReportingRecorded Future·Jun 27, 00:00 UTC · Jun 27, 2025VulnerabilityCVE-2016-5195CVE-2017-563860
NIST Launches Metric to Measure Likelihood of Vulnerability ExploitsInfosecurity Magazine·May 26, 10:00 UTC · May 26, 2025Vulnerability in the wild57
NIST NVD Enrichment Policy Change: Prioritizing Vulnerabilities with Attacker Behavior SignalsRecorded Future·May 14, 00:00 UTC · May 14, 2026Vulnerability in the wild60
Ongoing exploitation of CVE-2022-41352 (Zimbra 0Kaspersky Securelist·Oct 13, 08:00 UTC · Oct 13, 2022VulnerabilityCVE-2022-41352CVE-2015-119747
Update to this Month’s Patch Tuesday Post on MS12-020/CVE-2012Kaspersky Securelist·Mar 16, 21:41 UTC · Mar 16, 2012VulnerabilityCVE-2012-000247
Turbocharge Your Threat Hunting Capability With Intelligent TTP AlertingRecorded Future·Jun 27, 00:00 UTC · Jun 27, 2025Vulnerability30
CERT-Bund warns of a critical vulnerability in VLC playerSecurity Affairs·Jul 23, 06:52 UTC · Jul 23, 2019VulnerabilityCVE-2019-1361560
LLMs Fall Short in Vulnerability Discovery and ExploitationInfosecurity Magazine·Jul 10, 15:00 UTC · Jul 10, 2025Vulnerability30
Critical Unpatched Flaw Disclosed in WordPress WooCommerce ExtensionThe Hacker News·Apr 26, 11:37 UTC · Apr 26, 2019Vulnerability55
Microsoft patches Office zeroThe Record·Dec 13, 00:00 UTC · Dec 13, 2022Vulnerability in the wildCVE-2021-40444CVE-2021-36968CVE-2021-36965+1 CVEs160
vBulletin fixes critical vulnerability, patch immediately!Help Net Security·May 28, 10:04 UTC · May 28, 2020VulnerabilityCVE-2020-1272060
Which vulnerabilities were most exploited by cybercriminals in 2019?Help Net Security·Feb 6, 00:00 UTC · Feb 6, 2020VulnerabilityCVE-2018-15982CVE-2018-8174CVE-2017-11882+9 CVEs47
CISA Sets a Deadline - Patch Juniper Junos OS Flaws Before November 17The Hacker News·Nov 15, 00:00 UTC · Nov 15, 2023Vulnerability in the wildCVE-2023-36844CVE-2023-36845CVE-2023-36846+2 CVEs60
Unmasking the limitations of yearly penetration testsHelp Net Security·Oct 12, 00:00 UTC · Oct 12, 2023Vulnerability30
Multiple Botnets Exploiting Critical Oracle WebLogic Bug — PATCH NOWThe Hacker News·Dec 2, 09:20 UTC · Dec 2, 2020VulnerabilityCVE-2020-14750CVE-2020-14882160
Operation Poisoned News: Hong Kong iOS users targeted with watering hole attacksSecurity Affairs·Mar 26, 23:16 UTC · Mar 26, 2020VulnerabilityCVE-2019-860547
Hackers Exploit Twitter Vulnerability to Exposes 5.4 Million AccountsThe Hacker News·Aug 8, 06:11 UTC · Aug 8, 2022Vulnerability55
When Attacks Come Faster Than Patches: Why 2026 Will be the Year of MachineThe Hacker News·Nov 15, 00:00 UTC · Nov 15, 2025Vulnerability in the wild60
From Cybercrime Saul Goodman to the Russian GRUKrebs on Security·Feb 7, 18:29 UTC · Feb 7, 2024Vulnerability30
April’s Patch Tuesday Brings Record Number of FixesKrebs on Security·Apr 9, 20:55 UTC · Apr 9, 2024Vulnerability in the wildCVE-2024-20670CVE-2024-29063CVE-2024-29988+2 CVEs160