ThreatsDay Bulletin: Codespaces RCE, AsyncRAT C2, BYOVD Abuse, AI Cloud Intrusions & 15+ StoriesThe Hacker News·Feb 5, 17:14 UTC · Feb 5, 2026Vulnerability in the wild160
ToddyCat: Keep calm and check logsKaspersky Securelist·Oct 12, 10:41 UTC · Oct 12, 2023Vulnerability42
Cloud Services: Holes in Corporate Network SecurityKaspersky Securelist·Jul 9, 11:00 UTC · Jul 9, 2014VulnerabilityCVE-2010-256847
Microsoft Patch TuesdayCisco Talos·Dec 12, 23:32 UTC · Dec 12, 2017Vulnerability in the wildCVE-2017-11886CVE-2017-11888CVE-2017-11889+31 CVEs60
Initial Access Brokers Target Brazil Execs via NFThe Hacker News·May 9, 11:40 UTC · May 9, 2025VulnerabilityCVE-2017-1188247
Microsoft OneDrive Flaw Exposes Users to Data Overreach RisksInfosecurity Magazine·May 28, 14:00 UTC · May 28, 2025Vulnerability42
Dropbox strengthens security ecosystem with Google Cloud Identity and expanded partnershipsHelp Net Security·Nov 9, 00:00 UTC · Nov 9, 2018Vulnerability30
Week in review: High-severity OpenSSL vulnerabilities fixed, Patch Tuesday forecastHelp Net Security·Nov 6, 00:00 UTC · Nov 6, 2022VulnerabilityCVE-2022-3602CVE-2022-378660
Flaw Exposes WP Migration Plugin to HacksInfosecurity Magazine·Aug 30, 17:30 UTC · Aug 30, 2023Vulnerability42
Review: Group-IB Threat Intelligence & Attribution (TI&A)Help Net Security·Feb 1, 00:00 UTC · Feb 1, 2022Vulnerability142
Google’s Bazel Exposed to Command Injection ThreatInfosecurity Magazine·Feb 1, 14:30 UTC · Feb 1, 2024Vulnerability42
Vulnerability Spotlight: OpenJPEG JPEG2000 mcc record Code Execution VulnerabilityCisco Talos·Oct 1, 00:17 UTC · Oct 1, 2016VulnerabilityCVE-2016-833235
5 Major Concerns With Employees Using The BrowserThe Hacker News·Apr 22, 11:00 UTC · Apr 22, 2025Vulnerability55
Vulnerability Spotlight: Multiple Unpatched Vulnerabilities in Blender IdentifiedCisco Talos·Jan 11, 15:17 UTC · Jan 11, 2018Vulnerability30
BestCrypt Explorer: Create and access storage space for data encryption on AndroidHelp Net Security·Oct 17, 00:00 UTC · Oct 17, 2018Vulnerability42
Hackers Spied on a Stock Exchange Executive's Outlook Mailbox for Five MonthsThe Hacker News·Jun 4, 09:33 UTC · Jun 4, 2026Vulnerability42
Attacker “Patches” Vulnerability Post Exploitation to Lock Out CompetiInfosecurity Magazine·Aug 19, 14:00 UTC · Aug 19, 2025Vulnerability in the wildCVE-2023-4660460
ThreatsDay Bulletin: OpenSSL RCE, Foxit 0-Days, Copilot Leak, AI Password Flaws & 20+ StoriesThe Hacker News·Feb 23, 10:23 UTC · Feb 23, 2026Vulnerability55
NTLM Hash Exploit Targets Poland and Romania Days After PatchInfosecurity Magazine·Apr 17, 16:45 UTC · Apr 17, 2025Vulnerability in the wildCVE-2025-24054CVE-2024-43451CVE-2025-2407160
Dropbox paid more than $1 Million via its bug bounty programSecurity Affairs·Feb 5, 12:00 UTC · Feb 5, 2020Vulnerability55
Lakera raises $20 million to secure GenAI applicationsHelp Net Security·Jul 25, 00:00 UTC · Jul 25, 2024Vulnerability55
Friday Squid Blogging: Squid PursesSchneier on Security·May 3, 21:05 UTC · May 3, 2024VulnerabilityCVE-2023-23397135
CVE-2025-24054 Under Active Attack—Steals NTLM Credentials on File DownloadThe Hacker News·Apr 19, 08:34 UTC · Apr 19, 2025Vulnerability in the wildCVE-2025-24054CVE-2024-4345160
Friday Squid Blogging: Squid and ChipsSchneier on Security·Jan 29, 08:02 UTC · Jan 29, 2020Vulnerability30
Azure AD Connect vulnerability allows attackers to reset admin passwordsHelp Net Security·Jun 29, 00:00 UTC · Jun 29, 2017Vulnerability30
Account pre-hijacking attacks possible on many online servicesHelp Net Security·May 24, 00:00 UTC · May 24, 2022Vulnerability30
Critical 'Sign in with Apple' Bug Could Have Let Attackers Hijack Anyone's AccountThe Hacker News·May 30, 15:43 UTC · May 30, 2020Vulnerability55
ThreatsDay Bulletin: PAN-OS RCE, Mythos cURL Bug, AI Tokenizer Attacks, and 10+ StoriesThe Hacker News·May 15, 00:00 UTC · May 15, 2026VulnerabilityCVE-2026-030060
Yahoo awarded $7,000 a bug hunter for Flickr account hijacking vulnerabilitySecurity Affairs·May 1, 18:13 UTC · May 1, 2017Vulnerability30
Crooks Bypassed Google’s Email Verification to Create Workspace Accounts, Access 3rd-Party ServicesKrebs on Security·Jul 26, 22:34 UTC · Jul 26, 2024Vulnerability30
Facebook to Pay Hackers for Reporting Data Scraping Bugs and Scraped DatasetsThe Hacker News·Dec 15, 00:00 UTC · Dec 15, 2021Vulnerability42
New HawkEye Reborn Variant Emerges Following Ownership ChangeCisco Talos·Apr 15, 16:37 UTC · Apr 15, 2019VulnerabilityCVE-2017-1188235
Critical Microsoft Azure RCE flaw impacted multiple servicesSecurity Affairs·Jan 19, 16:02 UTC · Jan 19, 2023Vulnerability55
ThreatsDay Bulletin: AI Prompt RCE, Claude 0-Click, RenEngine Loader, Auto 0The Hacker News·Feb 15, 00:00 UTC · Feb 15, 2026VulnerabilityCVE-2026-2084147
Blind Eagle Hacks Colombian Institutions Using NTLM Flaw, RATs and GitHubThe Hacker News·Mar 11, 16:06 UTC · Mar 11, 2025VulnerabilityCVE-2024-4345147
New Microsoft Azure Vulnerability Uncovered — EmojiDeploy for RCE AttacksThe Hacker News·Jan 19, 16:17 UTC · Jan 19, 2023Vulnerability55
New "DoubleClickjacking" Exploit Bypasses Clickjacking Protections on Major WebsitesThe Hacker News·Jan 3, 04:53 UTC · Jan 3, 2025Vulnerability55
Tech manufacturers are leaving the door open for Chinese hacking, Easterly warnsThe Record·Mar 7, 19:24 UTC · Mar 7, 2023Vulnerability55