Search: “Box”

42 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Exploit / PoC 105 Ransomware 77 Vulnerability 42 Malware 36 Data breach 20 Threat actor 18 Policy & legal 13 Phishing & fraud 5 Advisory 1 AI tools & infra 1 Research 1 Industry 1 AI safety & security 1

SeverityAll critical 261 high 41 medium 15 low 0 info 4

Vulnerability Spotlight: Bitdefender BOX 2 bootstrap remote code execution vulnerabilities

Cisco TalosJan 21, 17:29 UTC · Jan 21, 2020Vulnerability in the wildCVE-2019-17095 CVE-2019-17096

60

YesWeHack automates penetration testing with AI-powered agents

Help Net SecurityJun 25, 00:00 UTC · Jun 25, 2026Vulnerability in the wild

60

Microsoft Patches Record 622 Flaws, Including Two Zero

The Hacker NewsJul 15, 00:00 UTC · Jul 15, 2026Vulnerability in the wildCVE-2026-56164 CVE-2026-56155 CVE-2026-50661+6 CVEs

60

Juniper issues emergency patch for critical PTX router RCE

Security AffairsFeb 27, 11:40 UTC · Feb 27, 2026Vulnerability in the wildCVE-2026-21902

60

Week in review: F5 BIG-IP RCE exploitation, URL spoofing flaws in Zoom, Google Docs

Help Net SecurityMay 15, 00:00 UTC · May 15, 2022Vulnerability in the wildCVE-2022-26925 CVE-2022-29972 CVE-2022-22713+2 CVEs

60

Critical Gitea Docker Bug Under Active Exploitation Exposes Repositories and Secrets

Security AffairsJul 7, 21:16 UTC · Jul 7, 2026Vulnerability in the wildCVE-2026-208961

60

CISA Orders Agencies to Patch by Risk, Not Severity

Infosecurity MagazineJun 11, 15:00 UTC · Jun 11, 2026Vulnerability in the wild

60

Microsoft breaks Patch Tuesday record with 206 vulnerabilities

CyberScoopJun 9, 19:53 UTC · Jun 9, 2026Vulnerability in the wildCVE-2026-45586 CVE-2026-50507 CVE-2026-49160+2 CVEs

60

Cisco Patches CVE-2026-20230 in Unified CM as Exploit Code Goes Public

The Hacker NewsJun 4, 16:55 UTC · Jun 4, 2026Vulnerability in the wildCVE-2026-20230 CVE-2025-20309 CVE-2026-20045

60

Adobe patches critical Magento admin takeover via menu injection

Sansec (Magento / e-commerce security)Apr 14, 20:16 UTC · Apr 14, 2026Vulnerability in the wildCVE-2025-47110 CVE-2026-75650

60

Digital skimmer hits global supermarket chain

Sansec (Magento / e-commerce security)Apr 14, 20:16 UTC · Apr 14, 2026Vulnerability in the wild

57

ThreatsDay Bulletin: Codespaces RCE, AsyncRAT C2, BYOVD Abuse, AI Cloud Intrusions & 15+ Stories

The Hacker NewsFeb 5, 17:14 UTC · Feb 5, 2026Vulnerability in the wild1

60

Cisco Talos Web Filtering

Cisco TalosDec 19, 16:46 UTC · Dec 19, 2025Vulnerability in the wildCVE-2026-20182 CVE-2026-20127

60

Sudo local privilege escalation vulnerabilities fixed (CVE-2025-32462, CVE-2025-32463)

Help Net SecuritySep 30, 09:28 UTC · Sep 30, 2025Vulnerability in the wildCVE-2025-32462 CVE-2025-32463

60

iframe Security Exposed: The Blind Spot Fueling Payment Skimmer Attacks

The Hacker NewsSep 24, 11:03 UTC · Sep 24, 2025Vulnerability in the wild

60

Week in review: Sudo local privilege escalation flaws fixed, Google patches actively exploited Chrome

Help Net SecurityJul 6, 00:00 UTC · Jul 6, 2025Vulnerability in the wildCVE-2025-32462 CVE-2025-32463 CVE-2025-6554+4 CVEs

60

Palo Alto Networks Patches Authentication Bypass Exploit in PAN

The Hacker NewsFeb 18, 06:46 UTC · Feb 18, 2025Vulnerability in the wildCVE-2025-0108 CVE-2025-0109 CVE-2025-0110+1 CVEs

60

FortiGate admins report active exploitation 0

Ars Technica · SecurityOct 22, 19:49 UTC · Oct 22, 2024Vulnerability in the wild

57

Week in review: CDK Global cyberattack, critical vCenter Server RCE fixed

Help Net SecurityJun 23, 00:00 UTC · Jun 23, 2024Vulnerability in the wildCVE-2024-0762 CVE-2024-37079 CVE-2024-37080

60

Five Eyes Warn of Ivanti Vulnerabilities Exploitation

Infosecurity MagazineMar 1, 12:00 UTC · Mar 1, 2024Vulnerability in the wildCVE-2023-46805 CVE-2024-21887 CVE-2024-21893

60

‘Citrix Bleed’ vulnerability targeted by nation

The RecordNov 21, 19:18 UTC · Nov 21, 2023Vulnerability in the wildCVE-2023-4966 CVE-2023-4911

60

Attackers are attempting to exploit critical F5 BIG-IP RCE

Help Net SecurityFeb 21, 17:27 UTC · Feb 21, 2023Vulnerability in the wildCVE-2022-1388

60

CISA adds F5 vulnerability to catalog of exploited bugs

The RecordJan 12, 00:00 UTC · Jan 12, 2023Vulnerability in the wildCVE-2022-1388

60

NETGEAR fixes a severe bug in its routers. Patch it asap!

Security AffairsDec 30, 14:40 UTC · Dec 30, 2022Vulnerability in the wild

60

Microsoft releases patches for 68 vulnerabilities, including ‘ProxyNotShell’ zero

The RecordDec 21, 00:00 UTC · Dec 21, 2022Vulnerability in the wildCVE-2022-41073 CVE-2020-1337 CVE-2022-41091+2 CVEs

60

‘Wormable’ Flaw Leads January 2022 Patch Tuesday

Krebs on SecurityJan 11, 22:53 UTC · Jan 11, 2022Vulnerability in the wildCVE-2022-21907 CVE-2022-21846 CVE-2021-22947+2 CVEs

60

How Can You Leave Log4J in 2021?

The Hacker NewsJan 11, 20:29 UTC · Jan 11, 2022Vulnerability in the wild

57

Extremely Critical Log4J Vulnerability Leaves Much of the Internet at Risk

The Hacker NewsDec 11, 05:29 UTC · Dec 11, 2021Vulnerability in the wildCVE-2021-44228

60

CISA recommends immediately patch Exchange ProxyShell flaws

Security AffairsAug 23, 20:22 UTC · Aug 23, 2021Vulnerability in the wildCVE-2021-34473 CVE-2021-34523 CVE-2021-31207

60

CVE-2021-20090 actively exploited to target millions of IoT devices

Security AffairsAug 7, 20:10 UTC · Aug 7, 2021Vulnerability in the wildCVE-2021-20090 CVE-2020-29557 CVE-2021-1497+4 CVEs

60

Using a WordPress flaw to leverage zerologon vulnerability and attack companies’ Domain Controllers

Security AffairsOct 7, 06:03 UTC · Oct 7, 2020Vulnerability in the wildCVE-2020-25213 CVE-2020-1472

60

Attackers are bypassing F5 BIG-IP RCE mitigation - you might want to patch after all

Help Net SecurityJul 8, 00:00 UTC · Jul 8, 2020Vulnerability in the wildCVE-2020-5902

60

Hackers exploit SQL injection zero

Security AffairsApr 26, 12:56 UTC · Apr 26, 2020Vulnerability in the wild

60

Hackers are racing to exploit a Citrix bug that the company hasn't patched yet

CyberScoopJan 18, 00:16 UTC · Jan 18, 2020Vulnerability in the wild

60

Patch Tuesday, December 2019 Edition

Krebs on SecurityDec 12, 12:01 UTC · Dec 12, 2019Vulnerability in the wildCVE-2019-1458 CVE-2019-0859 CVE-2019-1468+1 CVEs

60

Patch Tuesday, November 2019 Edition

Krebs on SecurityNov 12, 22:16 UTC · Nov 12, 2019Vulnerability in the wildCVE-2019-1429 CVE-2019-1457 CVE-2019-13720

60

The latest on BlueKeep and DejaBlue vulnerabilities — Using Firepower to defend against encrypted DejaBlue

Cisco TalosNov 4, 15:43 UTC · Nov 4, 2019Vulnerability in the wildCVE-2019-0708 CVE-2019-1181 CVE-2019-1182

60

Patch Tuesday Lowdown, October 2019 Edition

Krebs on SecurityOct 9, 06:42 UTC · Oct 9, 2019Vulnerability in the wildCVE-2019-1367

60

Microsoft patches critical vulnerability comparable to WannaCry

CyberScoopMay 15, 13:44 UTC · May 15, 2019Vulnerability in the wild

60

ATT&CKized Splunk - Threat Hunting with MITRE’s ATT&CK using Splunk

Security AffairsFeb 19, 06:32 UTC · Feb 19, 2019Vulnerability in the wild

60