January 2026 Patch Tuesday forecast: And so it continuesHelp Net Security·Jan 13, 21:29 UTC · Jan 13, 2026Vulnerability in the wildCVE-2025-14174CVE-2025-4352960
Microsoft Fixes Six Zero Day Vulnerability in February Patch TuesdayInfosecurity Magazine·Feb 11, 09:50 UTC · Feb 11, 2026Vulnerability in the wildCVE-2026-21510CVE-2026-21513CVE-2026-21514+5 CVEs60
September 2024 Patch Tuesday forecast: Downgrade is the new exploitHelp Net Security·Sep 10, 19:45 UTC · Sep 10, 2024VulnerabilityCVE-2024-38202CVE-2024-2130260
June 2022 Patch Tuesday forecast: Internet Explorer fades into the sunsetHelp Net Security·Jun 14, 18:58 UTC · Jun 14, 2022Vulnerability in the wildCVE-2022-3019060
August 2021 Patch Tuesday forecast: Dealing with emergency patchingHelp Net Security·Aug 10, 04:32 UTC · Aug 10, 2021VulnerabilityCVE-2021-3452760
Microsoft Patch Tuesday for September 2022 — Snort rules and prominent vulnerabilitiesCisco Talos·Sep 13, 18:01 UTC · Sep 13, 2022Vulnerability in the wildCVE-2022-34718CVE-2022-37969CVE-2022-34721+8 CVEs60
⚡ Weekly Recap: Apple 0-Days, WinRAR Exploit, LastPass Fines, .NET RCE, OAuth Scams & MoreThe Hacker News·Dec 15, 00:00 UTC · Dec 15, 2025Vulnerability in the wildCVE-2025-14174CVE-2025-43529CVE-2025-6218+43 CVEs60
IcePeony and Transparent Tribe Target Indian Entities with CloudThe Hacker News·Nov 11, 13:18 UTC · Nov 11, 2024VulnerabilityCVE-2022-3019047
Hackers Targeting Servers Running Database Services for Mining CryptocurrencyThe Hacker News·Dec 21, 14:59 UTC · Dec 21, 2017Vulnerability42
MS Patch Tuesday fixes 19 critical issues, including two NTLM zeroSecurity Affairs·Jul 12, 13:32 UTC · Jul 12, 2017VulnerabilityCVE-2017-856360
Patch Tuesday June 2011Kaspersky Securelist·Jun 14, 23:06 UTC · Jun 14, 2011VulnerabilityCVE-2011-1250CVE-2011-1251CVE-2011-1252+7 CVEs60
Chinese Threat Actors Exploit ToolShell SharePoint Flaw Weeks After Microsoft's July PatchThe Hacker News·Oct 22, 12:56 UTC · Oct 22, 2025VulnerabilityCVE-2025-53770CVE-2025-49704CVE-2025-49706+1 CVEs160
ThreatsDay: Odysseus RCE, Samsung One-Click Takeover, iCloud Backdoor Fight + 27 More StoriesThe Hacker News·Aug 6, 15:24 UTC · Aug 6, 2026VulnerabilityCVE-2025-21079CVE-2025-58486147
Shell No! Adversary Web Shell Trends and Mitigations (Part 1)Recorded Future·Jun 27, 00:00 UTC · Jun 27, 2025Vulnerability42
Why Patch Management Isn’t Enough: SharePoint, Webshells & the Modern Threat LandscapeRecorded Future·Aug 11, 00:00 UTC · Aug 11, 2025VulnerabilityCVE-2023-4724660
Low code, high stakes: Addressing SQL injectionHelp Net Security·Apr 23, 13:32 UTC · Apr 23, 2026Vulnerability55
April Patch Tuesday Fixes Critical Flaws Across SAP, Adobe, Microsoft, Fortinet, and MoreThe Hacker News·Apr 15, 00:00 UTC · Apr 15, 2026Vulnerability in the wildCVE-2026-27681CVE-2026-34621CVE-2026-34619+7 CVEs60
It's time to patch your MOVEit Transfer solution again!Help Net Security·Jun 12, 00:00 UTC · Jun 12, 2023Vulnerability in the wildCVE-2023-3436260
Oracle launches MySQL HeatWave on AWSHelp Net Security·Sep 14, 00:00 UTC · Sep 14, 2022Vulnerability30
The cybercrime ecosystem: attacking blogsKaspersky Securelist·Nov 21, 10:00 UTC · Nov 21, 2019Vulnerability42
⚡ Weekly Recap: Hot CVEs, npm Worm Returns, Firefox RCE, M365 Email Raid & MoreThe Hacker News·Dec 2, 05:36 UTC · Dec 2, 2025VulnerabilityCVE-2025-59287CVE-2025-12972CVE-2025-12970+17 CVEs147
Russian Hackers Exploit Email and VPN Vulnerabilities to Spy on Ukraine Aid LogisticsThe Hacker News·May 22, 07:30 UTC · May 22, 2025VulnerabilityCVE-2023-23397CVE-2020-12641CVE-2020-35730+2 CVEs35
Analyzing the vulnerability landscape in Q2 2024Kaspersky Securelist·Aug 21, 07:41 UTC · Aug 21, 2024VulnerabilityCVE-2018-0802CVE-2017-11882CVE-2017-0199+6 CVEs60
Ivanti, Fortinet, SAP, VMware, n8n Patch RCE, SQL Injection, Privilege Escalation FlawsThe Hacker News·May 18, 17:02 UTC · May 18, 2026VulnerabilityCVE-2026-8043CVE-2026-44277CVE-2026-26083+8 CVEs160
⚡ Weekly Recap: WordPress RCE, SonicWall 0-Days, AI Service Attacks, SharePoint 0The Hacker News·Jul 21, 04:34 UTC · Jul 21, 2026Vulnerability in the wildCVE-2026-63030CVE-2026-60137CVE-2026-15409+26 CVEs160
Active exploitation of the MOVEit Transfer vulnerability — CVE-2023Cisco Talos·Jun 16, 18:17 UTC · Jun 16, 2023Vulnerability in the wildCVE-2023-34362CVE-2023-35036CVE-2023-3570860
The Vulnerability of Zero Trust: Lessons from the Storm 0558 HackThe Hacker News·Aug 18, 11:52 UTC · Aug 18, 2023Vulnerability55
Discovering Exchange Servers: Leveling the Field Using Attack Surface IntelligenceRecorded Future·Jun 27, 00:00 UTC · Jun 27, 2025VulnerabilityCVE-2021-2685560
The Capgemini leak of Michael Page data via publicly facing database backupTroy Hunt·Nov 11, 21:42 UTC · Nov 11, 2016Vulnerability30
New(ish) Mirai Spreader Poses New RisksKaspersky Securelist·Feb 21, 08:56 UTC · Feb 21, 2017Vulnerability30
OWASP Top 10 for .NET developers part 1: InjectionTroy Hunt·May 11, 23:00 UTC · May 11, 2010Vulnerability55
Ancient Mac Site Harbors Botnet that Exploits IE VulnerabilityCisco Talos·Dec 15, 10:24 UTC · Dec 15, 2014VulnerabilityCVE-2014-633247
The Fundamentals of Cloud Security Stress TestingThe Hacker News·May 8, 11:01 UTC · May 8, 2024Vulnerability55
Week in review: How CISSP can change a career, rural hospitals cybersecurity, Patch Tuesday forecastHelp Net Security·Sep 12, 00:00 UTC · Sep 12, 2021VulnerabilityCVE-2021-4044460
H1 2025 Malware and Vulnerability TrendsRecorded Future·Nov 13, 00:00 UTC · Nov 13, 2025Vulnerability in the wild60
The many vulnerabilities Talos discovered in SOHO and industrial wireless routers postCisco Talos·Aug 2, 12:00 UTC · Aug 2, 2023Vulnerability30