TuxBot v3 Evolution Shows Signs of LLMThe Hacker News·Jul 15, 00:00 UTC · Jul 15, 2026Vulnerability30
The security impact of HTTPS interception in the wildHelp Net Security·Feb 10, 00:00 UTC · Feb 10, 2017Vulnerability30
Chinese hackers have unleashed a never-beforeArs Technica · Security·Sep 18, 23:25 UTC · Sep 18, 2023Vulnerability42
CVE-2026-39987: Marimo RCE exploited in hours after disclosureSecurity Affairs·Apr 11, 09:44 UTC · Apr 11, 2026Vulnerability in the wildCVE-2026-39987CVE-2026-3301760
Cline Kanban Flaw Lets Websites Hijack AI Coding AgentsInfosecurity Magazine·May 7, 14:30 UTC · May 7, 2026Vulnerability55
ThreatsDay Bulletin: SMS Blaster Busts, OpenEMR Flaws, 600K Roblox Hacks and 25 More StoriesThe Hacker News·May 1, 07:21 UTC · May 1, 2026VulnerabilityCVE-2019-0708147
Threat Spotlight: Group 72, Opening the ZxShellCisco Talos·Oct 28, 15:10 UTC · Oct 28, 2014VulnerabilityCVE-2011-2462CVE-2013-3163CVE-2014-032235
Secure connections: how secure are they?Kaspersky Securelist·Mar 16, 16:45 UTC · Mar 16, 2007Vulnerability30
Log4J Still Among Top Exploited Vulnerabilities, Cato FindsInfosecurity Magazine·May 7, 17:22 UTC · May 7, 2024VulnerabilityCVE-2021-44228CVE-2017-984160
Wget Utility Potential Leaked Password Via Extended Filesystem AttributesSecurity Affairs·Jan 2, 13:51 UTC · Jan 2, 2019VulnerabilityCVE-2018-2048335
Buffer overflow exposes unpatched Squid servers to RCE and DoS attacksSecurity Affairs·Aug 24, 08:28 UTC · Aug 24, 2019VulnerabilityCVE-2019-1252760
PurpleBravo’s Targeting of the IT Software Supply ChainRecorded Future·Jul 22, 00:00 UTC · Jul 22, 2026Vulnerability42
Realtek SDK Vulnerability Attacks Highlight IoT Supply Chain ThreatsPalo Alto Unit 42·Jun 5, 17:03 UTC · Jun 5, 2024VulnerabilityCVE-2021-3539447
Critical remote code execution flaw affects older Diebold Nixdorf ATMsSecurity Affairs·Jun 9, 09:28 UTC · Jun 9, 2019Vulnerability55
Ruflo MCP Flaw Lets Unauthenticated Attackers Run Commands and Poison AI MemoryThe Hacker News·Jul 29, 15:39 UTC · Jul 29, 2026VulnerabilityCVE-2026-59726160
Can you trust your Android VPN client?Help Net Security·Mar 21, 20:17 UTC · Mar 21, 2017Vulnerability42
Grandstream GXP1600 VoIP Phones Exposed to Unauthenticated Remote Code ExecutionThe Hacker News·Feb 18, 16:35 UTC · Feb 18, 2026VulnerabilityCVE-2026-232960
Cybercriminals Targeting Apache NiFi Instances for Cryptocurrency MiningThe Hacker News·May 31, 15:44 UTC · May 31, 2023VulnerabilityCVE-2020-14882CVE-2020-1488360
HTTP/2 CONTINUATION Flood technique can be exploited in DoS attacksSecurity Affairs·Apr 5, 02:41 UTC · Apr 5, 2024Vulnerability in the wildCVE-2024-27983CVE-2024-27919CVE-2024-2758+6 CVEs60
Zyxel CPE Devices Face Active Exploitation Due to Unpatched CVE-2024The Hacker News·Feb 5, 04:14 UTC · Feb 5, 2025Vulnerability in the wildCVE-2024-40891CVE-2024-40890CVE-2024-57726+3 CVEs60
Analyzing the security properties of a ZKTeco biometric terminalKaspersky Securelist·Jun 11, 08:00 UTC · Jun 11, 2024VulnerabilityCVE-2023-3938CVE-2023-3939CVE-2023-3940+3 CVEs35
SAP April 2018 Security Patch Day address critical flaws in web browser controls in SAP Business ClientSecurity Affairs·Apr 12, 06:14 UTC · Apr 12, 2018VulnerabilityCVE-2017-7668CVE-2018-2408CVE-2018-2409+8 CVEs60
Citrix Patches Six NetScaler Flaws Allowing File Read and Denial-ofThe Hacker News·Jul 2, 15:49 UTC · Jul 2, 2026Vulnerability in the wildCVE-2026-8451CVE-2026-8452CVE-2026-8655+4 CVEs60
4-year old Misfortune Cookie flaw threatens medical gateway deviceSecurity Affairs·Aug 30, 12:51 UTC · Aug 30, 2018VulnerabilityCVE-2014-922247
Critical Remote Hacking Flaws Disclosed in Linphone and MicroSIP SoftphonesThe Hacker News·Oct 15, 00:00 UTC · Oct 15, 2021VulnerabilityCVE-2021-3305660
3 iOS 0-days, a cellular network compromise, and HTTP used to infect an iPhoneArs Technica · Security·Sep 23, 00:23 UTC · Sep 23, 2023VulnerabilityCVE-2023-41993CVE-2023-41991CVE-2023-41992+1 CVEs60
Malicious website evolution: JanuaryKaspersky Securelist·Oct 22, 10:00 UTC · Oct 22, 2007Vulnerability42
Chinese actor 'Unfading Sea Haze' remained undetected for five yearsSecurity Affairs·May 23, 08:55 UTC · May 23, 2024Vulnerability42
Hackers Exploit MinIO Storage System Vulnerabilities to Compromise ServersThe Hacker News·Sep 5, 02:55 UTC · Sep 5, 2023Vulnerability in the wildCVE-2023-28432CVE-2023-2843460
Threat Spotlight: Holiday Greetings from Pro PoS – Is your payment card data someone else’s Christmas present?Cisco Talos·Dec 17, 16:23 UTC · Dec 17, 2015Vulnerability30
From Android TVs to routers: the xlabs_v1 MiraiSecurity Affairs·May 7, 10:15 UTC · May 7, 2026Vulnerability30
Kali Linux 2023.2 released: New tools, a pre-built Hyper-V image, a new audio stack, and more!Help Net Security·May 31, 00:00 UTC · May 31, 2023Vulnerability30
Kali Linux 2025.2 delivers Bloodhound CE, CARsenal, 13 new toolsHelp Net Security·Jun 14, 00:00 UTC · Jun 14, 2025Vulnerability30
Biggest DDoSes of all time generated by protocol 0Ars Technica · Security·Oct 15, 00:00 UTC · Oct 15, 2023Vulnerability55
UPS: Observations on CVE-2015-3113, Prior ZeroPalo Alto Unit 42·Nov 1, 09:48 UTC · Nov 1, 2018VulnerabilityCVE-2015-3113CVE-2014-1776CVE-2014-633260
Friday Squid Blogging: New Vulnerability in Squid HTTP Proxy ServerSchneier on Security·Aug 8, 23:22 UTC · Aug 8, 2025Vulnerability30
Magento wish list exploit bypasses WAF protectionSansec (Magento / e-commerce security)·Apr 14, 19:49 UTC · Apr 14, 2026VulnerabilityCVE-2022-2408660
Digging Inside Azure Functions: HyperV Is the Last Line of DefensePalo Alto Unit 42·Jun 5, 17:09 UTC · Jun 5, 2024Vulnerability30
CitrixBleed 2:a nightmare that echoes CitrixBleed flaw in NetScalerSecurity Affairs·Jun 26, 07:31 UTC · Jun 26, 2025VulnerabilityCVE-2025-5777CVE-2023-4966CVE-2025-534960