Search: “cookie”

428 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Malware 858 Industry 455 Vulnerability 428 Ransomware 226 Exploit / PoC 188 Data breach 180 Phishing & fraud 164 Threat actor 152 Policy & legal 149 Research 24 Tools 13 AI tools & infra 12 Advisory 11 AI safety & security 6

SeverityAll critical 601 high 735 medium 828 low 662 info 44

Digital skimmer runs entirely on Google, defeats CSP

Sansec (Magento / e-commerce security)Apr 14, 19:49 UTC · Apr 14, 2026Vulnerability

30

5 Threats That Reshaped Web Security This Year [2025]

The Hacker NewsDec 4, 11:30 UTC · Dec 4, 2025Vulnerability CVE-2025-54135 CVE-2025-53109 CVE-2025-55284

60

The browser is eating your security stack

Help Net SecurityNov 13, 00:00 UTC · Nov 13, 2025Vulnerability

42

CVE-2025-5947: WordPress Plugin flaw lets hackers access Admin accounts

Security AffairsOct 9, 14:27 UTC · Oct 9, 2025Vulnerability CVE-2025-5947

60

Google Launches DBSC Open Beta in Chrome and Enhances Patch Transparency via Project Zero

The Hacker NewsJul 31, 17:01 UTC · Jul 31, 2025Vulnerability

55

AWS Patches Critical 'FlowFixation' Bug in Airflow Service to Prevent Session Hijacking

The Hacker NewsMar 22, 13:45 UTC · Mar 22, 2024Vulnerability

55

Thousands of publicly-exposed Apache Superset installs exposed to RCE attacks

Security AffairsApr 26, 13:34 UTC · Apr 26, 2023Vulnerability CVE-2023-27524

47

Two more malicious Python packages in the PyPI

Kaspersky SecurelistAug 16, 12:13 UTC · Aug 16, 2022Vulnerability1

30

Vulnerability Spotlight: How an attacker could chain several vulnerabilities in an industrial wireless router to gain root access

Cisco TalosMay 12, 12:00 UTC · May 12, 2022Vulnerability in the wild

57

#SecTorCa: How One Malicious Message Could Exploit an Enterprise

Infosecurity MagazineOct 23, 15:20 UTC · Oct 23, 2020Vulnerability

55

Hacking Password-Protected Computers via the USB Port

Schneier on SecurityJan 29, 08:02 UTC · Jan 29, 2020Vulnerability

30

UPS: Observations on CVE-2015-3113, Prior Zero

Palo Alto Unit 42Nov 1, 09:48 UTC · Nov 1, 2018Vulnerability CVE-2015-3113 CVE-2014-1776 CVE-2014-6332

60

Threat Roundup for June 16

Cisco TalosJun 22, 23:05 UTC · Jun 22, 2018Vulnerability

30

Severe XSS flaw affects fully patched Internet Explorer

Security AffairsFeb 4, 10:39 UTC · Feb 4, 2015Vulnerability in the wild

60

Automating web security reviews with Netsparker

Troy HuntSep 2, 23:00 UTC · Sep 2, 2014Vulnerability1

30

CVE-2026-86462: Apache Airflow FAB provider: FAB Admin password PATCH does not invalidate database-backed sessions

Apache Airflow FAB provider 3.2.0-3.8.x password changes do not invalidate database-backed sessions, letting stolen session cookies survive a password reset.

CVE-2026-86462 affects apache-airflow-providers-fab versions 3.2.0 before 3.9.0. Changing a user's password via the Admin user-edit PATCH endpoint does not invalidate that user's existing database-backed sessions. An attacker who already holds a copy of the victim's session cookie retains full access as that user after the password change. Severity is rated moderate.

oss-securitySep 15, 19:59 UTC · 1d agoVulnerability 3 sources CVE-2026-86462

30

Study of 85 Crypto Wallet Extensions Finds Address Leaks and Cross

The Hacker NewsJul 15, 00:00 UTC · Jul 15, 2026Vulnerability

30

Writer AI Flaw Could Let Agent Previews Leak Session Tokens Across Tenants

The Hacker NewsJul 9, 10:22 UTC · Jul 9, 2026Vulnerability

55

Digital skimmer hits global supermarket chain

Sansec (Magento / e-commerce security)Apr 14, 20:16 UTC · Apr 14, 2026Vulnerability in the wild

57

Browser Extensions Are the New AI Consumption Channel That No One Is Talking About

The Hacker NewsApr 10, 11:00 UTC · Apr 10, 2026Vulnerability

30

Why Unmonitored JavaScript Is Your Biggest Holiday Security Risk

The Hacker NewsOct 15, 00:00 UTC · Oct 15, 2025Vulnerability

55

Over 600 Laravel Apps Exposed to Remote Code Execution Due to Leaked APP_KEYs on GitHub

The Hacker NewsJul 15, 00:00 UTC · Jul 15, 2025Vulnerability in the wildCVE-2018-15133 CVE-2024-55556

60

Ketch Data Sentry uncovers hidden privacy risks

Help Net SecurityApr 22, 00:00 UTC · Apr 22, 2025Vulnerability

30

WordPress LiteSpeed Cache plugin flaw could allow site takeover

Security AffairsOct 5, 13:49 UTC · Oct 5, 2024Vulnerability CVE-2024-47374 CVE-2024-44000

47

Sourcepoint helps companies mitigate vulnerabilities across various privacy regulations

Help Net SecuritySep 16, 00:00 UTC · Sep 16, 2024Vulnerability

30

SQL injection issue in Anti

Security AffairsMay 9, 14:12 UTC · May 9, 2021Vulnerability CVE-2021-24295

47

How the SolarWinds Hackers Bypassed Duo's Multi-Factor Authentication

Schneier on SecurityDec 15, 00:00 UTC · Dec 15, 2020Vulnerability

30

D-Link releases firmware update that only fix 3 out 6 issues in DIR

Security AffairsJun 13, 14:59 UTC · Jun 13, 2020Vulnerability CVE-2020-13782 CVE-2020-13786 CVE-2020-13785+3 CVEs

60

Magecart Targets Emergency Services

The Hacker NewsJun 9, 07:07 UTC · Jun 9, 2020Vulnerability

30

Kaspersky Antivirus Flaw Exposed Users to Cross

The Hacker NewsAug 15, 00:00 UTC · Aug 15, 2019Vulnerability CVE-2019-8286

35

TeleGrab

Cisco TalosMay 16, 17:17 UTC · May 16, 2018Vulnerability

30

CVE-2018-2879 - Vulnerability in Oracle Access Manager can let attackers impersonate any user account

Security AffairsMay 3, 13:46 UTC · May 3, 2018Vulnerability CVE-2018-2879

60

Microsoft releases the open

Security AffairsOct 26, 20:20 UTC · Oct 26, 2017Vulnerability

30

Tens of thousands of compromised routers abused in WordPress attacks

Security AffairsMay 3, 11:13 UTC · May 3, 2017Vulnerability CVE-2014-9222

60

BT Wi-Fi extenders, extends to XSS and password changing vulnerabilities

Security AffairsSep 22, 19:33 UTC · Sep 22, 2016Vulnerability

30

Instagram hacked! Hacker compromised the entire platform

Security AffairsDec 19, 10:27 UTC · Dec 19, 2015Vulnerability

55

New WordPress Pre-Auth XSS Could Lead to PHP Code Execution

The Hacker NewsAug 8, 08:07 UTC · Aug 8, 2026Vulnerability in the wildCVE-2026-646381

60

OkoBot framework infection chain

Kaspersky SecurelistJul 14, 10:11 UTC · Jul 14, 2026Vulnerability

42

PAN-OS GlobalProtect Authentication Bypass (CVE-2026

The Hacker NewsMay 31, 12:13 UTC · May 31, 2026Vulnerability in the wildCVE-2026-0257 CVE-2026-35616

60

New infostealer reaches enterprise devices through FortiClient EMS vulnerability

Help Net SecurityMay 29, 00:00 UTC · May 29, 2026Vulnerability CVE-2026-356161

60