3 iOS 0-days, a cellular network compromise, and HTTP used to infect an iPhoneArs Technica · Security·Sep 23, 00:23 UTC · Sep 23, 2023VulnerabilityCVE-2023-41993CVE-2023-41991CVE-2023-41992+1 CVEs60
Bahraini activists targeted with new iOS zeroThe Record·Dec 15, 00:00 UTC · Dec 15, 2022Vulnerability30
iOS zero-click attacks used to deliver Graphite spyware (CVE-2025-43200)Help Net Security·Jun 16, 19:19 UTC · Jun 16, 2025Vulnerability in the wildCVE-2025-43200CVE-2025-2420060
A cyber-espionage effort against Tibetan leaders leveraged known Android, iOS vulnerabilitiesCyberScoop·Sep 24, 13:57 UTC · Sep 24, 2019Vulnerability in the wild60
Apple patches against alleged NSO Group zeroCyberScoop·Sep 13, 20:17 UTC · Sep 13, 2021Vulnerability in the wild60
Popular Chinese-language service Sogou exposed to ‘eavesdropper,’ report saysThe Record·Aug 9, 14:15 UTC · Aug 9, 2023Vulnerability55
Apple releases patches for NSO Group's ForcedEntry zeroThe Record·Dec 13, 00:00 UTC · Dec 13, 2022VulnerabilityCVE-2021-30860CVE-2021-3085860
Adobe, Apple, Google & Microsoft Patch 0-Day BugsKrebs on Security·Sep 15, 00:00 UTC · Sep 15, 2023Vulnerability in the wildCVE-2023-41064CVE-2023-36761CVE-2023-36802+3 CVEs60
Apple patches two zero-days under attack (CVE-2023-41064, CVE-2023-41061)Help Net Security·Sep 12, 08:26 UTC · Sep 12, 2023VulnerabilityCVE-2023-41064CVE-2023-4106160
Zoom Caught in Cybersecurity Debate — Here's Everything You Need To KnowThe Hacker News·Apr 7, 07:08 UTC · Apr 7, 2020Vulnerability55
China-Linked Hackers Target Asian Governments, NATO State, Journalists, and ActivistsThe Hacker News·May 2, 06:30 UTC · May 2, 2026VulnerabilityCVE-2025-5518260
WhatsApp fixed a spoofing flaw that could enable Remote Code ExecutionSecurity Affairs·Apr 8, 14:25 UTC · Apr 8, 2025VulnerabilityCVE-2025-3040160
Apple Patches Three Actively Exploited ZeroInfosecurity Magazine·Sep 22, 09:30 UTC · Sep 22, 2023Vulnerability in the wildCVE-2023-41991CVE-2023-41992CVE-2023-4199360
ICE Reinstates Contract with ParagonInfosecurity Magazine·Sep 2, 17:10 UTC · Sep 2, 2025VulnerabilityCVE-2025-4320060
Facebook Bans 7 'Cyber Mercenary' Companies for Spying on 50,000 UsersThe Hacker News·May 20, 09:06 UTC · May 20, 2022Vulnerability30
Mozilla, CISA urge users to patch Firefox security flawThe Record·Sep 14, 20:46 UTC · Sep 14, 2023Vulnerability in the wildCVE-2023-4863CVE-2023-4106460
Security Vulnerabilities in Covert CIA WebsitesSchneier on Security·Oct 12, 18:27 UTC · Oct 12, 2022Vulnerability30
Apple Patches Two ZeroInfosecurity Magazine·Sep 8, 09:30 UTC · Sep 8, 2023Vulnerability in the wildCVE-2023-41064CVE-2023-4106160
Google Patches Chrome ZeroInfosecurity Magazine·Sep 28, 10:00 UTC · Sep 28, 2023Vulnerability in the wildCVE-2023-5217CVE-2023-5186CVE-2023-518760
Microsoft Patch Tuesday, September 2021 EditionKrebs on Security·Sep 15, 00:00 UTC · Sep 15, 2021Vulnerability in the wildCVE-2021-40444CVE-2021-36965CVE-2021-28316+4 CVEs60
Update your Mac OS X — Apple has released Important Security UpdatesThe Hacker News·Sep 2, 10:18 UTC · Sep 2, 2016VulnerabilityCVE-2016-4654CVE-2016-4655CVE-2016-465660
Civil society under increasing threats from ‘malicious’ state cyber actors, USThe Record·May 14, 20:41 UTC · May 14, 2024Vulnerability42
Adobe Flash Player 0-day and HackingTeam’s Remote Control SystemKaspersky Securelist·Feb 12, 06:42 UTC · Feb 12, 2013VulnerabilityCVE-2013-0633CVE-2012-4167CVE-2010-3333+2 CVEs60
US Government Ordered to Urgently Patch Apple ZeroInfosecurity Magazine·Sep 12, 10:00 UTC · Sep 12, 2023Vulnerability in the wildCVE-2023-41064CVE-2023-4106160
Jury orders NSO Group to pay $168 million to WhatsApp for facilitating Pegasus hacks of its usersThe Record·May 7, 00:21 UTC · May 7, 2025Vulnerability55
Researchers Hack Olympic Games AppInfosecurity Magazine·Jan 19, 18:00 UTC · Jan 19, 2022Vulnerability30
Mozilla Rushes to Patch WebP Critical ZeroThe Hacker News·Sep 15, 00:00 UTC · Sep 15, 2023Vulnerability in the wildCVE-2023-486360
More on NSO Group and Cytrox: Two Cyberweapons Arms ManufacturersSchneier on Security·Dec 20, 15:17 UTC · Dec 20, 2021Vulnerability30
Chinese Hackers Operate Undetected in U.S. Critical Infrastructure for Half a DecadeThe Hacker News·Feb 9, 16:01 UTC · Feb 9, 2024Vulnerability55
Zero-Click Exploit in iPhonesSchneier on Security·Sep 15, 00:00 UTC · Sep 15, 2023VulnerabilityCVE-2023-41064CVE-2023-41061160
Security and Privacy Implications of ZoomSchneier on Security·Sep 7, 09:35 UTC · Sep 7, 2020Vulnerability42
Vulnerability in popular ‘libwebp’ code more widespread than expectedThe Record·Sep 27, 18:08 UTC · Sep 27, 2023Vulnerability in the wildCVE-2023-4863CVE-2023-5129CVE-2023-4106460
Major Security Flaws Expose Keystrokes of Over 1 Billion Chinese Keyboard App UsersThe Hacker News·Apr 25, 16:13 UTC · Apr 25, 2024Vulnerability42
IT Threat Evolution: Q1 2013Kaspersky Securelist·May 16, 17:06 UTC · May 16, 2013VulnerabilityCVE-2013-064047
Study of 281 Free Android VPN Apps Finds Traffic Leaks, Unencrypted Data, and TrackingThe Hacker News·Jul 12, 07:34 UTC · Jul 12, 2026VulnerabilityCVE-2016-6329CVE-2016-218347
Cell Phone Security and Heads of StateSchneier on Security·Jan 27, 14:36 UTC · Jan 27, 2020Vulnerability42
Kaspersky report on APT trends in Q3 2024Kaspersky Securelist·Nov 28, 10:00 UTC · Nov 28, 2024Vulnerability42
Friday Squid Blogging: Giant Squid ModelSchneier on Security·Jul 15, 00:00 UTC · Jul 15, 2021Vulnerability30
Android VPN apps used by millions are covertly connected AND insecureHelp Net Security·Aug 29, 18:28 UTC · Aug 29, 2025Vulnerability30