React2Shell Vulnerability Actively Exploited to Deploy Linux BackdoorsThe Hacker News·Dec 17, 07:26 UTC · Dec 17, 2025Vulnerability in the wildCVE-2025-55182CVE-2025-29927CVE-2025-6647860
April Patch Tuesday Fixes Critical Flaws Across SAP, Adobe, Microsoft, Fortinet, and MoreThe Hacker News·Apr 15, 00:00 UTC · Apr 15, 2026Vulnerability in the wildCVE-2026-27681CVE-2026-34621CVE-2026-34619+7 CVEs60
Microsoft Fixes 78 Flaws, 5 Zero-Days Exploited; CVSS 10 Bug Impacts Azure DevOps ServerThe Hacker News·May 15, 00:00 UTC · May 15, 2025Vulnerability in the wildCVE-2025-30397CVE-2025-30400CVE-2025-32701+10 CVEs160
Microsoft Patches 125 Flaws Including Actively Exploited Windows CLFS VulnerabilityThe Hacker News·Apr 10, 06:48 UTC · Apr 10, 2025Vulnerability in the wildCVE-2025-29824CVE-2022-24521CVE-2022-37969+15 CVEs60
Microsoft Patches 67 Vulnerabilities Including WEBDAV ZeroThe Hacker News·Jun 12, 15:47 UTC · Jun 12, 2025Vulnerability in the wildCVE-2025-33053CVE-2025-47966CVE-2025-32713+3 CVEs160
Microsoft’s Patch Tuesday Fixes 63 Flaws, Including Two Under Active ExploitationThe Hacker News·Feb 12, 10:28 UTC · Feb 12, 2025Vulnerability in the wildCVE-2025-21391CVE-2025-21418CVE-2024-38193+4 CVEs60
URGENT: Microsoft Patches 57 Security Flaws, Including 6 Actively Exploited ZeroThe Hacker News·Mar 15, 00:00 UTC · Mar 15, 2025Vulnerability in the wildCVE-2025-26643CVE-2025-24983CVE-2025-24984+5 CVEs160
Microsoft's July Update Patches 143 Flaws, Including Two Actively ExploitedThe Hacker News·Jul 11, 09:02 UTC · Jul 11, 2024Vulnerability in the wildCVE-2024-38080CVE-2024-38112CVE-2024-37985+3 CVEs60
Chinese Hackers Have Started Exploiting the Newly Disclosed React2Shell VulnerabilityThe Hacker News·Dec 5, 16:12 UTC · Dec 5, 2025Vulnerability in the wildCVE-2025-55182CVE-2025-31324CVE-2025-133860
Microsoft Fixes 114 Windows Flaws in January 2026 Patch, One Actively ExploitedThe Hacker News·Jan 15, 00:00 UTC · Jan 15, 2026Vulnerability in the wildCVE-2025-65046CVE-2026-0628CVE-2026-20805+5 CVEs160
ThreatsDay Bulletin: Codespaces RCE, AsyncRAT C2, BYOVD Abuse, AI Cloud Intrusions & 15+ StoriesThe Hacker News·Feb 5, 17:14 UTC · Feb 5, 2026Vulnerability in the wild160
Watch Out! Cryptocurrency Miners Targeting Dockers, AWS and Alibaba CloudThe Hacker News·Apr 22, 09:30 UTC · Apr 22, 2022Vulnerability in the wildCVE-2022-2296560
Microsoft Patches Critical Entra ID Flaw Enabling Global Admin Impersonation Across TenantsThe Hacker News·Sep 24, 10:50 UTC · Sep 24, 2025Vulnerability in the wildCVE-2025-55241CVE-2025-53786160
Over 600 Laravel Apps Exposed to Remote Code Execution Due to Leaked APP_KEYs on GitHubThe Hacker News·Jul 15, 00:00 UTC · Jul 15, 2025Vulnerability in the wildCVE-2018-15133CVE-2024-5555660
Microsoft's Final 2023 Patch Tuesday: 34 Flaws Fixed, Including 4 CriticalThe Hacker News·Jan 10, 04:07 UTC · Jan 10, 2024Vulnerability in the wildCVE-2023-35628CVE-2023-35630CVE-2023-35636+9 CVEs60
Microsoft Issues Patches for 51 Flaws, Including Critical MSMQ VulnerabilityThe Hacker News·Jun 12, 04:26 UTC · Jun 12, 2024Vulnerability in the wildCVE-2023-50868CVE-2023-50387CVE-2024-30080+5 CVEs60
Hackers Exploit Pandoc CVE-2025-51591 to Target AWS IMDS and Steal EC2 IAM CredentialsThe Hacker News·Sep 25, 17:16 UTC · Sep 25, 2025Vulnerability in the wildCVE-2025-51591CVE-2021-2131160
UK weakens proposed telecoms defenses against Chinese hackers after industry pushbackThe Record·Jun 10, 06:46 UTC · Jun 10, 2026Vulnerability in the wild60
Week in review: cPanel vulnerability actively exploited, DigiCert breach, LinkedIn job scamsHelp Net Security·May 10, 00:00 UTC · May 10, 2026Vulnerability in the wildCVE-2026-41940CVE-2026-4670CVE-2026-5174+4 CVEs60
Critical Unpatched Ray AI Platform Vulnerability Exploited for Cryptocurrency MiningThe Hacker News·Mar 28, 04:46 UTC · Mar 28, 2024Vulnerability in the wildCVE-2023-4802260
Amazon's Hotpatch for Log4j Flaw Found Vulnerable to Privilege Escalation BugThe Hacker News·Apr 23, 05:41 UTC · Apr 23, 2022Vulnerability in the wildCVE-2021-3100CVE-2021-3101CVE-2022-0070+1 CVEs60
CISA to brief critical infrastructure companies about urgent new Log4j vulnerabilityCyberScoop·Dec 13, 16:32 UTC · Dec 13, 2021Vulnerability in the wild60
Vulnerability remediation startup Vulcan Cyber launches with $4 million in seed fundingCyberScoop·May 30, 17:22 UTC · May 30, 2018Vulnerability in the wild60
Second Log4j Vulnerability (CVE-2021The Hacker News·Dec 18, 13:56 UTC · Dec 18, 2021Vulnerability in the wildCVE-2021-45046CVE-2021-4422860
Week in review: Cisco patches SD-WAN 0-day, unpatched Microsoft Exchange Server flaw exploitedHelp Net Security·May 17, 00:00 UTC · May 17, 2026Vulnerability in the wildCVE-2026-44413CVE-2026-41940CVE-2026-46300+2 CVEs160
Microsoft Issues Patches for 90 Flaws, Including 10 Critical ZeroThe Hacker News·Aug 15, 00:00 UTC · Aug 15, 2024Vulnerability in the wildCVE-2024-38189CVE-2024-38178CVE-2024-38193+13 CVEs160
Nine-year-old Linux kernel flaw enables reliable local privilege escalation (CVE-2026-31431)Help Net Security·May 11, 11:22 UTC · May 11, 2026Vulnerability in the wildCVE-2026-3143160
Week in review: Microsoft patches actively exploited 0-days, Amazon and HSBC employee data leakedHelp Net Security·Nov 17, 00:00 UTC · Nov 17, 2024Vulnerability in the wildCVE-2024-43451CVE-2024-49039CVE-2024-9463+1 CVEs160
Microsoft Fixes 72 Flaws, Including Patch for Actively Exploited CLFS VulnerabilityThe Hacker News·Dec 11, 15:01 UTC · Dec 11, 2024Vulnerability in the wildCVE-2024-49138CVE-2022-24521CVE-2022-37969+6 CVEs60
Vulnerability Spotlight: Vulnerabilities in Abode Systems home security kit could allow attacker to take over cameras, remotely disable themCisco Talos·Oct 20, 13:27 UTC · Oct 20, 2022Vulnerability in the wildCVE-2022-35884CVE-2022-35887CVE-2022-33938+20 CVEs60
Week in review: Cisco SD-WAN 0-day exploited, Patch Tuesday forecastHelp Net Security·Jun 7, 00:00 UTC · Jun 7, 2026Vulnerability in the wildCVE-2026-0257CVE-2026-41089CVE-2025-48595+1 CVEs60
Microsoft Issues Patches for 79 Flaws, Including 3 Actively Exploited Windows FlawsThe Hacker News·Sep 15, 00:00 UTC · Sep 15, 2024Vulnerability in the wildCVE-2024-38014CVE-2024-38217CVE-2024-38226+3 CVEs60