Guide: The Ultimate Pentest Checklist for FullThe Hacker News·Oct 21, 11:25 UTC · Oct 21, 2024Vulnerability55
The Future of Serverless Security in 2025: From Logs to Runtime ProtectionThe Hacker News·Nov 28, 11:30 UTC · Nov 28, 2024Vulnerability in the wild60
Cisco flags ongoing exploitation of two recently patched Catalyst SDSecurity Affairs·Mar 6, 15:14 UTC · Mar 6, 2026Vulnerability in the wildCVE-2026-20128CVE-2026-20122CVE-2026-20127+1 CVEs60
65% of Leading AI Companies Found With Verified Secrets LeaksInfosecurity Magazine·Nov 10, 16:45 UTC · Nov 10, 2025Vulnerability55
Amazon Fixes High Severity Vulnerability in Amazon Photos Android AppInfosecurity Magazine·Jun 29, 17:00 UTC · Jun 29, 2022Vulnerability55
STEALTHbits provides AD admins with new insight into “shadow access” and other vulnerabilitiesHelp Net Security·Nov 7, 11:54 UTC · Nov 7, 2019Vulnerability55
Vulnerability Spotlight: Multiple Simple DirectMedia Layer VulnerabilitiesCisco Talos·Apr 11, 16:15 UTC · Apr 11, 2018Vulnerability in the wildCVE-2018-3837CVE-2018-3838CVE-2018-383960
Vulnerability Spotlight: Simple DirectMedia Layer’s SDL2_ImageCisco Talos·Mar 1, 21:21 UTC · Mar 1, 2018Vulnerability in the wildCVE-2017-12122CVE-2017-14440CVE-2017-14441+4 CVEs60
Claude Security enters public beta with Opus 4.7 vulnerability scanning and patchingHelp Net Security·May 4, 00:00 UTC · May 4, 2026Vulnerability55
How AI Assistants are Moving the Security GoalpostsKrebs on Security·Mar 9, 00:57 UTC · Mar 9, 2026Vulnerability55
New covert SharePoint data exfiltration techniques revealedHelp Net Security·Apr 10, 00:00 UTC · Apr 10, 2024Vulnerability30
Vulnerability Spotlight: YAML Parsing Remote Code Execution Vulnerabilities in Ansible Vault and TablibCisco Talos·Sep 14, 14:30 UTC · Sep 14, 2017Vulnerability in the wildCVE-2017-2809CVE-2017-2810160
Attacks on industrial enterprises using RMS and TeamViewerKaspersky Securelist·Aug 1, 10:00 UTC · Aug 1, 2018Vulnerability30
Now Available: Recorded Future's New API for Threat IntelligenceRecorded Future·Jun 27, 00:00 UTC · Jun 27, 2025Vulnerability30
Oracle E-Business Suite Payments flaw under attack (CVE-2026-46817)Help Net Security·Jun 30, 00:00 UTC · Jun 30, 2026Vulnerability in the wildCVE-2026-4681760
Researchers Uncover Vulnerabilities in OpenThe Hacker News·Oct 29, 16:00 UTC · Oct 29, 2024VulnerabilityCVE-2024-7474CVE-2024-7475CVE-2024-7473+5 CVEs60
Researchers Detail DifyTap Flaws in Dify That Could Expose AI Chats Across TenantsThe Hacker News·Jun 22, 16:13 UTC · Jun 22, 2026VulnerabilityCVE-2024-5846CVE-2026-41947CVE-2026-41948+2 CVEs160
Chinese Threat Group 'Jewelbug' Quietly Infiltrated Russian IT Network for MonthsThe Hacker News·Oct 15, 00:00 UTC · Oct 15, 2025Vulnerability242
Palo Alto Networks firewalls, Expedition under attack (CVE-2024-9463, CVE-2024-9465)Help Net Security·Nov 15, 00:00 UTC · Nov 15, 2024Vulnerability in the wildCVE-2024-9463CVE-2024-9465CVE-2024-9464+1 CVEs60
Vulnerability Spotlight: Multiple vulnerabilities in Aspose PDF APICisco Talos·Sep 17, 14:58 UTC · Sep 17, 2019Vulnerability in the wildCVE-2019-5042CVE-2019-5066CVE-2019-506760
CSA Issues Alert on Critical SmarterMail Bug Allowing Remote Code ExecutionThe Hacker News·Jan 9, 09:18 UTC · Jan 9, 2026Vulnerability in the wildCVE-2025-5269160
Critical Patches Issued for Cisco Expressway Series, TelePresence VCS ProductsThe Hacker News·Mar 3, 13:33 UTC · Mar 3, 2022Vulnerability in the wildCVE-2022-20754CVE-2022-20755CVE-2022-20665+2 CVEs60
Open source package with 1 million monthly downloads stole user credentialsArs Technica · Security·Apr 27, 21:04 UTC · Apr 27, 2026Vulnerability42
PyPI Python Package Repository Patches Critical Supply Chain FlawThe Hacker News·Aug 2, 10:50 UTC · Aug 2, 2021Vulnerability155
LangChain, LangGraph Flaws Expose Files, Secrets, Databases in Widely Used AI FrameworksThe Hacker News·Mar 27, 08:07 UTC · Mar 27, 2026Vulnerability in the wildCVE-2026-34070CVE-2025-68664CVE-2025-67644+2 CVEs160
Bad bots make up 40% of internet trafficHelp Net Security·Jun 19, 12:06 UTC · Jun 19, 2026Vulnerability55
Claude Discovers Apache ActiveMQ Bug Hidden for 13 YearsInfosecurity Magazine·Apr 8, 09:15 UTC · Apr 8, 2026VulnerabilityCVE-2026-34197CVE-2024-32114147
RCE in popular ThemeREX WordPress Plugin has been actively exploitedSecurity Affairs·Mar 11, 21:27 UTC · Mar 11, 2020Vulnerability in the wild60
Fuzzing µC/OS protocol stacks, Part 1: HTTP server fuzzingCisco Talos·Aug 28, 16:00 UTC · Aug 28, 2024Vulnerability55
A silver bullet for the attackerKaspersky Securelist·Jan 22, 15:51 UTC · Jan 22, 2018VulnerabilityCVE-2017-11496CVE-2017-11497CVE-2017-11498+4 CVEs47
Critical CVSS 9.8 Flaw Found in IBM API Connect Authentication SystemThe Hacker News·Jan 1, 05:05 UTC · Jan 1, 2026Vulnerability in the wildCVE-2025-1391560
Cisco addresses CVE-2019-12643 critical flaw in virtual Service Container for IOS XESecurity Affairs·Sep 1, 15:09 UTC · Sep 1, 2019VulnerabilityCVE-2019-1264360
Docker Fixes CVE-2025-9074, Critical Container Escape Vulnerability With CVSS Score 9.3The Hacker News·Aug 25, 17:53 UTC · Aug 25, 2025VulnerabilityCVE-2025-9074160
New Sofacy Attacks Against US Government AgencyPalo Alto Unit 42·Nov 1, 10:16 UTC · Nov 1, 2018VulnerabilityCVE-2015-164135
Threat Roundup for October 16 to October 23Cisco Talos·Oct 23, 22:09 UTC · Oct 23, 2020Vulnerability130
Threat Roundup for November 3 to November 10Cisco Talos·Nov 9, 18:32 UTC · Nov 9, 2023Vulnerability30
Biotech platforms keep missing the mark on security fundamentalsHelp Net Security·Oct 2, 00:00 UTC · Oct 2, 2025Vulnerability42
Threat Roundup for September 18 to September 25Cisco Talos·Sep 25, 20:23 UTC · Sep 25, 2020Vulnerability42
ownCloud vulnerability with maximum 10 severity score comes under “mass” exploitationArs Technica · Security·Nov 29, 00:38 UTC · Nov 29, 2023Vulnerability in the wildCVE-2023-49103CVE-2023-4966CVE-2023-94105+1 CVEs60
ToddyCat’s New Hacking Tools Steal Outlook Emails and Microsoft 365 Access TokensThe Hacker News·Nov 25, 16:23 UTC · Nov 25, 2025VulnerabilityCVE-2024-11859147