SimpleHelp vulnerability exploited to deliver mighty Djinn Stealer (CVE-2026-48558)Help Net Security·Jun 30, 00:00 UTC · Jun 30, 2026Vulnerability in the wildCVE-2026-4855860
Aikido Security acquires Root to expand backported fixes for open source vulnerabilitiesHelp Net Security·Jun 30, 00:00 UTC · Jun 30, 2026Vulnerability in the wild60
Week in review: 74k Fortinet firewall credentials stolen, Splunk Enterprise RCE under active attackHelp Net Security·Jun 21, 00:00 UTC · Jun 21, 2026Vulnerability in the wildCVE-2026-20262CVE-2026-48558CVE-2026-39813+3 CVEs160
Fedora Hummingbird brings the container security model to a Linux host OSHelp Net Security·Jun 19, 11:21 UTC · Jun 19, 2026Vulnerability30
⚡ Weekly Recap: SharePoint 0-Day, Chrome Exploit, macOS Spyware, NVIDIA Toolkit RCE and MoreThe Hacker News·Jun 10, 04:47 UTC · Jun 10, 2026Vulnerability in the wildCVE-2025-53770CVE-2025-53771CVE-2025-49704+36 CVEs60
AgentGG: Open-source agentic SAST scannerHelp Net Security·Jun 5, 00:00 UTC · Jun 5, 2026Vulnerability30
Mythos Outperforms GPT5.5 on Google Chrome Vulnerability ExploitsInfosecurity Magazine·Jun 4, 13:00 UTC · Jun 4, 2026Vulnerability55
HEIDI: Free IDE security plugin for open-source vulnerability checksHelp Net Security·May 12, 00:00 UTC · May 12, 2026Vulnerability42
Microsoft Issues Patches for SharePoint ZeroThe Hacker News·Apr 15, 00:00 UTC · Apr 15, 2026Vulnerability in the wildCVE-2023-20585CVE-2026-21637CVE-2026-25250+4 CVEs160
April Patch Tuesday Fixes Critical Flaws Across SAP, Adobe, Microsoft, Fortinet, and MoreThe Hacker News·Apr 15, 00:00 UTC · Apr 15, 2026Vulnerability in the wildCVE-2026-27681CVE-2026-34621CVE-2026-34619+7 CVEs60
Flowise AI Agent Builder Under Active CVSS 10.0 RCE Exploitation; 12,000+ Instances ExposedThe Hacker News·Apr 7, 05:56 UTC · Apr 7, 2026Vulnerability in the wildCVE-2025-59528CVE-2025-8943CVE-2025-2631960
36 Malicious npm Packages Exploited Redis, PostgreSQL to Deploy Persistent ImplantsThe Hacker News·Apr 6, 06:40 UTC · Apr 6, 2026Vulnerability142
Microsoft Fixes 114 Windows Flaws in January 2026 Patch, One Actively ExploitedThe Hacker News·Jan 15, 00:00 UTC · Jan 15, 2026Vulnerability in the wildCVE-2025-65046CVE-2026-0628CVE-2026-20805+5 CVEs160
December 2025 CVE Landscape: 22 Critical Vulnerabilities Mark 120% Surge, React2Shell Dominates Threat ActivityRecorded Future·Jan 13, 00:00 UTC · Jan 13, 2026Vulnerability in the wildCVE-2025-55182CVE-2025-20393CVE-2025-8110+1 CVEs60
Critical n8n Vulnerability (CVSS 10.0) Allows Unauthenticated Attackers to Take Full ControlThe Hacker News·Jan 8, 09:26 UTC · Jan 8, 2026VulnerabilityCVE-2026-21858CVE-2025-68613CVE-2025-68668+1 CVEs60
Critical RSC Bugs in React and Next.js Allow Unauthenticated Remote Code ExecutionThe Hacker News·Dec 4, 15:38 UTC · Dec 4, 2025VulnerabilityCVE-2025-55182CVE-2025-6647860
Minimus debuts Image Creator for building secure, hardened container imagesHelp Net Security·Nov 20, 00:00 UTC · Nov 20, 2025Vulnerability42
Researchers Find Serious AI Bugs Exposing Meta, Nvidia, and Microsoft Inference FrameworksThe Hacker News·Nov 15, 00:00 UTC · Nov 15, 2025VulnerabilityCVE-2024-50050CVE-2025-30165CVE-2025-23254+1 CVEs60
After Shai-Hulud, GitHub tightens npm publishing securityHelp Net Security·Sep 23, 00:00 UTC · Sep 23, 2025Vulnerability30
EntraGoat: Vulnerable Microsoft Entra ID infrastructure to simulate identity security misconfigurationsHelp Net Security·Aug 12, 00:00 UTC · Aug 12, 2025Vulnerability130
AI-Generated Malicious npm Package Drains Solana Funds from 1,500+ Before TakedownThe Hacker News·Aug 1, 12:48 UTC · Aug 1, 2025Vulnerability42
Why app modernization can leave you less secureHelp Net Security·May 27, 00:00 UTC · May 27, 2025Vulnerability55
Over 70 Malicious npm and VS Code Packages Found Stealing Data and CryptoThe Hacker News·May 26, 15:12 UTC · May 26, 2025Vulnerability55
Duping Cloud Functions: An emerging serverless attack vectorCisco Talos·May 20, 10:00 UTC · May 20, 2025Vulnerability30
Surge in Malicious Software Packages Exploits System FlawsInfosecurity Magazine·Mar 10, 14:00 UTC · Mar 10, 2025Vulnerability55
What "Nigerian" spam looks like in the midKaspersky Securelist·Feb 5, 12:00 UTC · Feb 5, 2025Vulnerability30
QScanner: Linux command-line utility for scanning container images, conducting SCAHelp Net Security·Nov 27, 00:00 UTC · Nov 27, 2024Vulnerability30
AlmaLinux 9.5 released: Security updates, new packages, and more!Help Net Security·Nov 19, 00:00 UTC · Nov 19, 2024Vulnerability130
Red Hat Enterprise Linux 9.5 helps organizations simplify operationsHelp Net Security·Nov 14, 00:00 UTC · Nov 14, 2024Vulnerability30
Digging Inside Azure Functions: HyperV Is the Last Line of DefensePalo Alto Unit 42·Jun 5, 17:09 UTC · Jun 5, 2024Vulnerability30
AI Copilot: Launching Innovation Rockets, But Beware of the Darkness AheadThe Hacker News·Apr 15, 00:00 UTC · Apr 15, 2024Vulnerability155
New HTTP/2 Vulnerability Exposes Web Servers to DoS AttacksThe Hacker News·Apr 5, 03:55 UTC · Apr 5, 2024VulnerabilityCVE-2024-2653CVE-2024-27316CVE-2024-24549+7 CVEs35
HTTP/2 CONTINUATION Flood technique can be exploited in DoS attacksSecurity Affairs·Apr 5, 02:41 UTC · Apr 5, 2024Vulnerability in the wildCVE-2024-27983CVE-2024-27919CVE-2024-2758+6 CVEs60
Secure Code Warrior and Manicode Security to lead Learning Lab at RSA Conference 2020Help Net Security·Feb 8, 09:58 UTC · Feb 8, 2024Vulnerability30
Updated MATA attacks industrial companies in Eastern EuropeKaspersky Securelist·Oct 18, 09:49 UTC · Oct 18, 2023VulnerabilityCVE-2021-26411CVE-2021-4044947
Vulnerability in popular ‘libwebp’ code more widespread than expectedThe Record·Sep 27, 18:08 UTC · Sep 27, 2023Vulnerability in the wildCVE-2023-4863CVE-2023-5129CVE-2023-4106460
Watch out! CVE-2023-5129 in libwebp library affects millions appsSecurity Affairs·Sep 27, 13:35 UTC · Sep 27, 2023Vulnerability in the wildCVE-2023-5129CVE-2023-4863CVE-2023-41064+1 CVEs160
Critical vm2 sandbox escape flaw uncovered, patch ASAP! (CVE-2022-36067)Help Net Security·Apr 24, 13:36 UTC · Apr 24, 2023VulnerabilityCVE-2022-3606760
Researchers Discover Critical Remote Code Execution Flaw in vm2 Sandbox LibraryThe Hacker News·Apr 8, 07:06 UTC · Apr 8, 2023VulnerabilityCVE-2023-29017CVE-2022-3606760
Ubuntu Pro: Comprehensive subscription for open-source software securityHelp Net Security·Jan 26, 00:00 UTC · Jan 26, 2023Vulnerability55