It finally happened: Criminals exploit SS7 vulnerabilities, prompting concerns about 2FACyberScoop·May 8, 18:32 UTC · May 8, 2017Vulnerability in the wild60
Zoom and GitLab Release Security Updates Fixing RCE, DoS, and 2FA Bypass FlawsThe Hacker News·Jan 21, 15:42 UTC · Jan 21, 2026Vulnerability in the wildCVE-2026-22844CVE-2025-13927CVE-2025-13928+3 CVEs60
Week in review: Drupal-based sites open to attack, cPanel 2FA bypass vulnerabilityHelp Net Security·Nov 29, 00:00 UTC · Nov 29, 2020VulnerabilityCVE-2020-400660
cPanel 2FA bypass vulnerability can be exploited through brute forceHelp Net Security·Nov 25, 00:00 UTC · Nov 25, 2020Vulnerability55
Critical Copilot vulnerability allowed hackers to steal 2FA code from usersArs Technica · Security·Jun 15, 00:00 UTC · Jun 15, 2026Vulnerability155
ThreatsDay Bulletin: $15B Crypto Bust, Satellite Spying, BillionThe Hacker News·Oct 15, 00:00 UTC · Oct 15, 2025Vulnerability55
LastPass vulnerability 'beats the entire purpose' of twoCyberScoop·Apr 20, 22:27 UTC · Apr 20, 2017Vulnerability in the wild60
ThreatsDay Bulletin: RustFS Flaw, Iranian Ops, WebUI RCE, Cloud Leaks, and 12 More StoriesThe Hacker News·Jan 8, 16:52 UTC · Jan 8, 2026Vulnerability in the wildCVE-2024-36401CVE-2007-0671CVE-2002-036760
Bitwarden Authenticator protects online services and applicationsHelp Net Security·May 2, 00:00 UTC · May 2, 2024Vulnerability55
Most people still rely on memory or pen and paper for password managementHelp Net Security·Apr 26, 00:00 UTC · Apr 26, 2024Vulnerability55
Mirantis Container Cloud enables businesses to build and operate container and VM clouds anywhereHelp Net Security·Apr 21, 00:00 UTC · Apr 21, 2021Vulnerability55
Researchers steal bitcoin by exploiting SS7 vulnerabilitiesCyberScoop·Sep 19, 17:50 UTC · Sep 19, 2017Vulnerability in the wild60
Russian APT targets Ukraine via Zimbra XSS flaw CVE-2025Security Affairs·Mar 19, 14:48 UTC · Mar 19, 2026Vulnerability in the wildCVE-2025-6637660
Week in review: Weaponized OAuth redirection logic delivers malware, Patch Tuesday forecastHelp Net Security·Mar 8, 00:00 UTC · Mar 8, 2026VulnerabilityCVE-2025-14500CVE-2026-28289CVE-2026-20128+1 CVEs60
Week in review: Notepad++ supply chain attack details and targets, Patch Tuesday forecastHelp Net Security·Feb 8, 00:00 UTC · Feb 8, 2026Vulnerability in the wildCVE-2026-21509CVE-2025-22225CVE-2026-2442360
Week in review: ChatGPT and cybersecurity, hidden vulnerabilities in Docker containersHelp Net Security·Feb 26, 00:00 UTC · Feb 26, 2023VulnerabilityCVE-2023-20858CVE-2022-3995260
Week in review: PAN-OS flaws, securing AD accounts against password-based attacksHelp Net Security·Sep 13, 00:00 UTC · Sep 13, 2020Vulnerability55
Severe XSS flaw affects fully patched Internet ExplorerSecurity Affairs·Feb 4, 10:39 UTC · Feb 4, 2015Vulnerability in the wild60
Suspected China-Aligned Hackers Exploit Roundcube Flaws Against UniversitiesThe Hacker News·Jul 8, 05:07 UTC · Jul 8, 2026VulnerabilityCVE-2024-42009CVE-2025-4911360
⚡ Weekly Recap: IoT Exploits, Wallet Breaches, Rogue Extensions, AI Abuse & MoreThe Hacker News·Jan 5, 12:56 UTC · Jan 5, 2026VulnerabilityCVE-2025-55182CVE-2025-13915CVE-2025-52691+7 CVEs60
GitHub CISO on security strategy and collaborating with the open-source communityHelp Net Security·Jan 13, 00:00 UTC · Jan 13, 2025Vulnerability55
Alert: Over 700,000 DrayTek Routers Exposed to Hacking via 14 New VulnerabilitiesThe Hacker News·Oct 7, 06:12 UTC · Oct 7, 2024VulnerabilityCVE-2024-41592CVE-2024-41585CVE-2024-41589+11 CVEs60
GitLab Patches Critical SAML Authentication Bypass Flaw in CE and EE EditionsThe Hacker News·Sep 19, 05:07 UTC · Sep 19, 2024Vulnerability in the wildCVE-2024-45409CVE-2024-27348160
Unit 42 Cloud Threat Report Update: Cloud Security Weakens as More Organizations Fail to Secure IAMPalo Alto Unit 42·Jun 6, 12:17 UTC · Jun 6, 2024Vulnerability55
Critical GitLab flaw allows account takeover without user interaction, patch quickly! (CVE-2023-7028)Help Net Security·May 2, 08:55 UTC · May 2, 2024Vulnerability in the wildCVE-2023-7028CVE-2023-5356CVE-2023-4812+2 CVEs60
Week in review: 10 must-read cybersecurity books, AnyDesk hack, Patch Tuesday forecastHelp Net Security·Feb 11, 00:00 UTC · Feb 11, 2024VulnerabilityCVE-2024-23832CVE-2024-21893CVE-2024-23917160
Urgent: GitLab Releases Patch for Critical VulnerabilitiesThe Hacker News·Jan 12, 13:29 UTC · Jan 12, 2024VulnerabilityCVE-2023-7028CVE-2023-5356160
Kubernetes Secrets of Fortune 500 Companies Exposed in Public RepositoriesThe Hacker News·Nov 24, 15:20 UTC · Nov 24, 2023Vulnerability55
WinRAR Vulnerability Affects Traders WorldwideInfosecurity Magazine·Aug 23, 17:00 UTC · Aug 23, 2023VulnerabilityCVE-2023-3883160
Friday Squid Blogging: Balloon SquidSchneier on Security·Jul 15, 00:00 UTC · Jul 15, 2023Vulnerability55
Week in review: PaperCut vulnerabilities, VMware fixes critical flaws, RSA Conference 2023Help Net Security·Apr 30, 00:00 UTC · Apr 30, 2023VulnerabilityCVE-2023-27524CVE-2023-20869CVE-2023-20870+4 CVEs60
Week in review: Critical git vulnerabilities, increasingly malicious Google Search adsHelp Net Security·Jan 22, 00:00 UTC · Jan 22, 2023VulnerabilityCVE-2022-46169CVE-2022-47966CVE-2022-4873+3 CVEs60
Week in review: Free online cybersec courses, Signal post-quantum upgrade, Patch Tuesday forecastHelp Net Security·Sep 11, 00:00 UTC · Sep 11, 2022Vulnerability55
Two Additional Malicious Python Libraries Found on PyPI RepositoryInfosecurity Magazine·Aug 16, 17:30 UTC · Aug 16, 2022Vulnerability155
Cybersecurity Researchers Find Several Google Play Store Apps Stealing User DataInfosecurity Magazine·Jun 16, 19:00 UTC · Jun 16, 2022Vulnerability55
GitLab addressed critical account take over via SCIM email changeSecurity Affairs·Jun 4, 08:36 UTC · Jun 4, 2022VulnerabilityCVE-2022-168060
GitLab Issues Security Patch for Critical Account Takeover VulnerabilityThe Hacker News·Jun 3, 15:01 UTC · Jun 3, 2022VulnerabilityCVE-2022-168060
How do I select an ITSM solution for my business?Help Net Security·Jun 15, 00:00 UTC · Jun 15, 2021Vulnerability55