⚡ Weekly Recap: Drift Breach Chaos, Zero-Days Active, Patch Warnings, Smarter Threats & MoreThe Hacker News·Dec 6, 11:14 UTC · Dec 6, 2025Vulnerability in the wildCVE-2025-53690CVE-2025-38352CVE-2025-48543+25 CVEs160
CISA Adds Actively Exploited XSS Bug CVE-2021The Hacker News·Dec 4, 04:57 UTC · Dec 4, 2025Vulnerability in the wildCVE-2021-26829CVE-2021-2682860
Microsoft patches three zero-days actively exploited by attackersHelp Net Security·Oct 15, 00:00 UTC · Oct 15, 2025Vulnerability in the wildCVE-2025-24990CVE-2025-59230CVE-2025-47827+5 CVEs60
NIST proposes new metric to gauge exploited vulnerabilitiesHelp Net Security·May 26, 00:00 UTC · May 26, 2025Vulnerability in the wild60
China-Linked APTs Exploit SAP CVE-2025-31324 to Breach 581 Critical Systems WorldwideThe Hacker News·May 15, 00:00 UTC · May 15, 2025Vulnerability in the wildCVE-2025-31324CVE-2025-4299960
Old Vulnerabilities Among the Most Widely ExploitedInfosecurity Magazine·Feb 28, 11:00 UTC · Feb 28, 2025Vulnerability in the wildCVE-1999-052660
5,000+ SonicWall firewalls still open to attack (CVE-2024-53704)Help Net Security·Feb 14, 10:26 UTC · Feb 14, 2025VulnerabilityCVE-2024-53704CVE-2024-40766CVE-2025-2300660
Fortinet Warns of Critical Vulnerability in FortiManager Under Active ExploitationThe Hacker News·Nov 15, 04:35 UTC · Nov 15, 2024Vulnerability in the wildCVE-2024-4757560
CISA Warns of Active Exploitation of Microsoft SharePoint Vulnerability (CVE-2024The Hacker News·Nov 3, 05:44 UTC · Nov 3, 2024Vulnerability in the wildCVE-2024-38094CVE-2024-4406860
Microsoft Issues Patches for 79 Flaws, Including 3 Actively Exploited Windows FlawsThe Hacker News·Sep 15, 00:00 UTC · Sep 15, 2024Vulnerability in the wildCVE-2024-38014CVE-2024-38217CVE-2024-38226+3 CVEs60
Actor Exploits Microsoft Exchange Server Vulnerabilities, Cortex XDR Blocks Harvesting of CredentialsPalo Alto Unit 42·Jun 6, 13:23 UTC · Jun 6, 2024Vulnerability in the wildCVE-2021-26855CVE-2021-26857CVE-2021-26858+1 CVEs60
NVD Leaves Exploited Vulnerabilities UncheckedInfosecurity Magazine·May 23, 14:00 UTC · May 23, 2024Vulnerability in the wild60
Cybercriminals are getting faster at exploiting vulnerabilitiesHelp Net Security·May 10, 00:00 UTC · May 10, 2024Vulnerability55
ownCloud vulnerability with maximum 10 severity score comes under “mass” exploitationArs Technica · Security·Nov 29, 00:38 UTC · Nov 29, 2023Vulnerability in the wildCVE-2023-49103CVE-2023-4966CVE-2023-94105+1 CVEs60
CISA orders civilian agencies to patch Zimbra bug after mass exploitationThe Record·Jan 11, 00:00 UTC · Jan 11, 2023Vulnerability in the wildCVE-2022-37042CVE-2022-27925CVE-2022-2792460
Threat Advisory: Microsoft warns of actively exploited vulnerabilities in Exchange ServerCisco Talos·Sep 30, 21:16 UTC · Sep 30, 2022Vulnerability in the wildCVE-2022-41040CVE-2022-4108260
Zerodium will pay $300K for WordPress RCE exploitsSecurity Affairs·Apr 9, 21:33 UTC · Apr 9, 2021Vulnerability55
When it comes to vulnerability triage, ditch CVSS and prioritize exploitabilityHelp Net Security·Feb 10, 00:00 UTC · Feb 10, 2021Vulnerability55
Google will pay up to $1.5m for full chain RCE for Android on Titan M chipsSecurity Affairs·Nov 21, 20:56 UTC · Nov 21, 2019Vulnerability55
Microsoft Tuesday August 2018Cisco Talos·Aug 14, 18:26 UTC · Aug 14, 2018VulnerabilityCVE-2018-8273CVE-2018-8302CVE-2018-8344+49 CVEs60
APT28 group is rushing to exploit recent CVE-2017-11292 Flash 0Security Affairs·Oct 22, 11:29 UTC · Oct 22, 2017VulnerabilityCVE-2017-11292CVE-2015-7645CVE-2016-1019+2 CVEs60
Microsoft Releases Patches for 3 Remaining NSA Windows ExploitsThe Hacker News·Jun 15, 00:00 UTC · Jun 15, 2017Vulnerability in the wild60
Why reforming the Vulnerability Equities Process would be a disasterCyberScoop·May 22, 15:37 UTC · May 22, 2017Vulnerability55
Turns Out Microsoft Has Already Patched Exploits Leaked By Shadow BrokersThe Hacker News·Apr 15, 00:00 UTC · Apr 15, 2017Vulnerability55
CVE-2026-20262: CISCO Catalyst SD-WAN Flaw Under Active Targeted ExploitationSecurity Affairs·Jun 16, 10:53 UTC · Jun 16, 2026Vulnerability in the wildCVE-2026-20262CVE-2026-20245CVE-2026-20122+5 CVEs60
Containers on fire: from container escapes to supply chain attacksKaspersky Securelist·Jun 1, 10:00 UTC · Jun 1, 2026Vulnerability in the wildCVE-2019-5736CVE-2022-0492CVE-2024-21626160
Nexcorium Mirai variant exploits TBK DVR flaw to launch DDoS attacksSecurity Affairs·Apr 18, 10:05 UTC · Apr 18, 2026VulnerabilityCVE-2024-3721CVE-2017-1721535
⚡ Weekly Recap: Fiber Optic Spying, Windows Rootkit, AI Vulnerability Hunting and MoreThe Hacker News·Apr 15, 00:00 UTC · Apr 15, 2026Vulnerability in the wildCVE-2026-34621160
Critical Fortinet FortiClient EMS flaw exploited for Remote Code ExecutionSecurity Affairs·Mar 30, 10:44 UTC · Mar 30, 2026Vulnerability in the wildCVE-2026-21643CVE-2023-4878860
Google Warns of Active Exploitation of WinRAR Vulnerability CVE-2025The Hacker News·Jan 29, 06:06 UTC · Jan 29, 2026Vulnerability in the wildCVE-2025-8088CVE-2025-621860
Microsoft Fixes 114 Windows Flaws in January 2026 Patch, One Actively ExploitedThe Hacker News·Jan 15, 00:00 UTC · Jan 15, 2026Vulnerability in the wildCVE-2025-65046CVE-2026-0628CVE-2026-20805+5 CVEs160
Three hacking groups, two vulnerabilities and all eyes on ChinaThe Record·Dec 8, 15:09 UTC · Dec 8, 2025VulnerabilityCVE-2025-49704CVE-2025-49706CVE-2025-53770+1 CVEs60
Addressing the vulnerability prioritization challengeRecorded Future·Nov 26, 00:00 UTC · Nov 26, 2025Vulnerability in the wild60
Microsoft Patch Tuesday addresses 63 defects, including one actively exploited zeroCyberScoop·Nov 11, 20:49 UTC · Nov 11, 2025Vulnerability in the wildCVE-2025-62215CVE-2025-60724CVE-2025-60719+2 CVEs60
Microsoft Patch Tuesday for November 2025 — Snort rules and prominent vulnerabilitiesCisco Talos·Nov 11, 18:19 UTC · Nov 11, 2025Vulnerability in the wildCVE-2025-62215CVE-2025-60724CVE-2025-60719+2 CVEs60
Oracle issued an emergency security update to fix new E-Business Suite flaw CVE-2025Security Affairs·Oct 14, 07:31 UTC · Oct 14, 2025VulnerabilityCVE-2025-61884CVE-2025-6188260
Citrix Patches Three Zero Days as One Sees Active ExploitationInfosecurity Magazine·Aug 27, 11:10 UTC · Aug 27, 2025Vulnerability in the wildCVE-2025-7775CVE-2025-7776CVE-2025-8424+1 CVEs60
Visualizing RedKit ExploitsRecorded Future·Aug 25, 00:00 UTC · Aug 25, 2025VulnerabilityCVE-2010-0188CVE-2012-0507CVE-2013-0431+1 CVEs35
Gold Melody IAB Exploits Exposed ASP.NET Machine Keys for Unauthorized Access to TargetsThe Hacker News·Jul 11, 04:04 UTC · Jul 11, 2025Vulnerability55
Mirai botnets exploit Wazuh RCE, Akamai warnedSecurity Affairs·Jun 10, 10:27 UTC · Jun 10, 2025Vulnerability in the wildCVE-2025-24016CVE-2024-3721160