LLMs Fall Short in Vulnerability Discovery and ExploitationInfosecurity Magazine·Jul 10, 15:00 UTC · Jul 10, 2025Vulnerability30
Citrix Releases Emergency Patches for Actively Exploited CVE-2025The Hacker News·Jul 1, 13:29 UTC · Jul 1, 2025Vulnerability in the wildCVE-2025-6543CVE-2025-5777CVE-2023-496660
Understanding Exploitation of Medium and Low CVSS Score VulnerabilitiesRecorded Future·Jun 27, 00:00 UTC · Jun 27, 2025Vulnerability in the wild60
How Analysts Can Deep Dive Into CVE VulnerabilitiesRecorded Future·Jun 27, 00:00 UTC · Jun 27, 2025Vulnerability in the wildCVE-2015-865160
Microsoft Fixes 78 Flaws, 5 Zero-Days Exploited; CVSS 10 Bug Impacts Azure DevOps ServerThe Hacker News·May 15, 00:00 UTC · May 15, 2025Vulnerability in the wildCVE-2025-30397CVE-2025-30400CVE-2025-32701+10 CVEs160
Microsoft's Patch Tuesday closes 72 vulnerabilities, including 5 zeroCyberScoop·May 13, 22:38 UTC · May 13, 2025Vulnerability in the wildCVE-2025-30397CVE-2025-30400CVE-2025-32701+14 CVEs60
Verizon's DBIR Reveals 34% Jump in Vulnerability ExploitationInfosecurity Magazine·Apr 23, 16:15 UTC · Apr 23, 2025Vulnerability55
Attackers are exploiting recently disclosed OttoKit WordPress plugin flawSecurity Affairs·Apr 12, 10:44 UTC · Apr 12, 2025Vulnerability in the wildCVE-2025-310260
Experts warn of a coordinated surge in the exploitation attempts of SSRF vulnerabilitiesSecurity Affairs·Mar 13, 14:31 UTC · Mar 13, 2025Vulnerability in the wildCVE-2020-7796CVE-2021-22214CVE-2021-39935+7 CVEs60
Microsoft Patch Tuesday for March 2025 — Snort rules and prominent vulnerabilitiesCisco Talos·Mar 11, 21:55 UTC · Mar 11, 2025Vulnerability in the wildCVE-2025-26633CVE-2025-24984CVE-2025-24991+12 CVEs60
Ivanti Flaw CVE-2025-0282 Actively Exploited, Impacts Connect Secure and Policy SecureThe Hacker News·Jan 11, 06:31 UTC · Jan 11, 2025Vulnerability in the wildCVE-2025-0282CVE-2025-028360
CISA adds Spring4Shell to list of exploited vulnerabilitiesHelp Net Security·Jan 10, 14:38 UTC · Jan 10, 2025Vulnerability in the wildCVE-2022-22965CVE-2021-4422860
November Patch Tuesday release contains three critical remote code execution vulnerabilitiesCisco Talos·Nov 12, 23:11 UTC · Nov 12, 2024Vulnerability in the wildCVE-2024-43639CVE-2024-43625CVE-2024-43602+10 CVEs160
Exploited: Cisco, SharePoint, Chrome vulnerabilitiesHelp Net Security·Nov 4, 10:40 UTC · Nov 4, 2024Vulnerability in the wildCVE-2024-20481CVE-2024-38094CVE-2024-4947+3 CVEs60
APT group exploits WPS Office for Windows RCE vulnerability (CVE-2024-7262)Help Net Security·Aug 28, 00:00 UTC · Aug 28, 2024VulnerabilityCVE-2024-7262CVE-2924-7263CVE-2024-726347
Log4J Still Among Top Exploited Vulnerabilities, Cato FindsInfosecurity Magazine·May 7, 17:22 UTC · May 7, 2024VulnerabilityCVE-2021-44228CVE-2017-984160
Fortinet warns of a new actively exploited RCE flaw in FortiOS SSL VPNSecurity Affairs·Feb 9, 09:05 UTC · Feb 9, 2024Vulnerability in the wildCVE-2024-21762CVE-2024-23113CVE-2022-4247560
Cybersecurity experts warn of new vulnerabilities affecting Apple, Atlassian and Fortra productsThe Record·Jan 23, 21:31 UTC · Jan 23, 2024Vulnerability in the wildCVE-2024-23222CVE-2024-0204CVE-2023-22527+2 CVEs60
Exploits for Citrix ADC and Gateway flaw abound, attacks are ongoingHelp Net Security·Jan 19, 12:41 UTC · Jan 19, 2024VulnerabilityCVE-2019-1978147
Ivanti EPMM and MobileIron Core vulnerability is actively exploited, CISA confirms (CVE-2023-35082)Help Net Security·Jan 19, 00:00 UTC · Jan 19, 2024Vulnerability in the wildCVE-2023-35082CVE-2023-35078CVE-2023-46805+1 CVEs60
Critical vulnerability in Atlassian Confluence server is under “mass exploitation”Ars Technica · Security·Nov 6, 23:40 UTC · Nov 6, 2023Vulnerability in the wildCVE-2023-2251860
Vulnerabilities in Supermicro BMCs could allow for unkillable server rootkitsArs Technica · Security·Oct 4, 22:21 UTC · Oct 4, 2023VulnerabilityCVE-2023-40289CVE-2023-40284CVE-2023-40287+4 CVEs60
They’ve begun: Attacks exploiting vulnerability with maximum 10 severity ratingArs Technica · Security·Oct 3, 21:53 UTC · Oct 3, 2023Vulnerability in the wildCVE-2023-40044CVE-2023-4265760
Microsoft Patch Tuesday for August 2023 fixed 2 actively exploited flawsSecurity Affairs·Aug 8, 22:30 UTC · Aug 8, 2023Vulnerability in the wildCVE-2023-36884CVE-2023-38180CVE-2023-3538560
Major Cybersecurity Agencies Collaborate to Unveil 2022's Most Exploited VulnerabilitiesThe Hacker News·Aug 4, 07:02 UTC · Aug 4, 2023VulnerabilityCVE-2018-13379CVE-2021-34473CVE-2021-31207+9 CVEs160
Fortinet VPN bug tops CISA’s list of most exploited vulnerabilities in 2022The Record·Aug 3, 14:44 UTC · Aug 3, 2023VulnerabilityCVE-2021-44228CVE-2021-40539CVE-2018-13379+8 CVEs60
Apple fixed new actively exploited CVE-2023-38606 zeroSecurity Affairs·Jul 25, 06:53 UTC · Jul 25, 2023Vulnerability in the wildCVE-2023-38606CVE-2023-32434CVE-2023-32435+1 CVEs60
Google triples reward for Chrome full chain exploitsHelp Net Security·Jun 2, 00:00 UTC · Jun 2, 2023Vulnerability30
Another Chrome and Edge exploit published online as browser makers deal with patch gap issuesThe Record·Jan 26, 00:00 UTC · Jan 26, 2023Vulnerability30
Bahraini activists targeted with new iOS zeroThe Record·Dec 15, 00:00 UTC · Dec 15, 2022Vulnerability30
CISA orders to patch actively exploited flaw in Confluence serversSecurity Affairs·Jul 30, 17:44 UTC · Jul 30, 2022Vulnerability in the wildCVE-2022-2613860
Determined APT is exploiting ManageEngine ServiceDesk Plus vulnerability (CVE-2021-44077)Help Net Security·Dec 3, 00:00 UTC · Dec 3, 2021Vulnerability in the wildCVE-2021-44077CVE-2021-33617160
Threat actors are attempting to exploit the CVE-2021-22986 flaw in F5 BIGSecurity Affairs·Mar 19, 21:47 UTC · Mar 19, 2021Vulnerability in the wildCVE-2021-22986CVE-2020-2818860
A New vBulletin 0-Day RCE Vulnerability and Exploit Disclosed PubliclyThe Hacker News·Aug 11, 14:36 UTC · Aug 11, 2020Vulnerability in the wildCVE-2019-1675960
CVE-2020-3452 flaw in Cisco ASA/FTD exploited within hours after the disclosureSecurity Affairs·Jul 24, 12:51 UTC · Jul 24, 2020Vulnerability in the wildCVE-2020-345260
April 2020 Patch Tuesday: Microsoft fixes three actively exploited vulnerabilitiesHelp Net Security·Apr 14, 00:00 UTC · Apr 14, 2020Vulnerability in the wildCVE-2020-1020CVE-2020-0938CVE-2020-0935+8 CVEs60
Vulnerability Spotlight: WAGO products contain remote code execution, other vulnerabilitiesCisco Talos·Mar 9, 14:47 UTC · Mar 9, 2020VulnerabilityCVE-2019-5107CVE-2019-5134CVE-2019-5135+9 CVEs47
April 2019 Patch Tuesday: Microsoft fixes two actively exploited bugsHelp Net Security·Apr 10, 00:00 UTC · Apr 10, 2019Vulnerability in the wildCVE-2019-7096CVE-2019-0803CVE-2019-0859+4 CVEs60
Hackers Actively Exploiting Latest Drupal RCE Flaw Published Last WeekThe Hacker News·Feb 26, 13:56 UTC · Feb 26, 2019Vulnerability in the wildCVE-2019-634060
Vulnerability Spotlight: Multiple Vulnerabilities in Yi Technology Home CameraCisco Talos·Oct 31, 20:18 UTC · Oct 31, 2018VulnerabilityCVE-2018-3891CVE-2018-3898CVE-2018-3899+5 CVEs47