Week in review: Log4Shell exploitation, DevSecOps myths, 56 vulnerabilities impacting OT devicesHelp Net Security·Jun 26, 00:00 UTC · Jun 26, 2022VulnerabilityCVE-2021-4422847
Week in review: How QR code attacks work and how to protect yourself, 10 must-reads for CISOsHelp Net Security·Mar 9, 00:00 UTC · Mar 9, 2025Vulnerability42
Unpatched flaws turn Ollama's auto-updater into a persistent RCE vector, researchers sayHelp Net Security·May 5, 00:00 UTC · May 5, 2026VulnerabilityCVE-2026-42248CVE-2026-4224947
Heisenberg: Open-source software supply chain health check toolHelp Net Security·Nov 3, 00:00 UTC · Nov 3, 2025Vulnerability42
Week in review: Medical device IP protection, how to select a CDR solution, Patch Tuesday forecastHelp Net Security·Mar 6, 00:00 UTC · Mar 6, 2022Vulnerability42
HEIDI: Free IDE security plugin for open-source vulnerability checksHelp Net Security·May 12, 00:00 UTC · May 12, 2026Vulnerability42
CVE Lite CLI: Open-source dependency vulnerability scannerHelp Net Security·May 20, 00:00 UTC · May 20, 2026Vulnerability42
Cisco discloses second exploited SD-WAN vulnerability in two weeks (CVE-2026-20262)Help Net Security·Jun 16, 00:00 UTC · Jun 16, 2026Vulnerability in the wildCVE-2026-20262CVE-2026-20245CVE-2026-20182+4 CVEs60
eScan AV users targeted with malicious updatesHelp Net Security·Jan 29, 00:00 UTC · Jan 29, 2026Vulnerability42
Be prepared to patch high-severity vulnerability in curl and libcurlHelp Net Security·Feb 15, 12:02 UTC · Feb 15, 2024VulnerabilityCVE-2023-38545CVE-2023-3854647
Attackers are exploiting Gladinet CentreStack, Triofox vulnerability with no patch (CVE-2025-11371)Help Net Security·Oct 17, 08:06 UTC · Oct 17, 2025Vulnerability in the wildCVE-2025-11371CVE-2025-3040660
SimpleHelp RMM vulnerabilities may have been exploited to breach healthcare orgsHelp Net Security·Feb 14, 08:44 UTC · Feb 14, 2025VulnerabilityCVE-2024-57726CVE-2024-57727CVE-2024-5772847
North Korean hackers employ new tactics to compromise crypto-related businessesHelp Net Security·Nov 7, 00:00 UTC · Nov 7, 2024Vulnerability42
CDPwn vulnerabilities open millions of Cisco enterprise devices to attackHelp Net Security·Feb 5, 00:00 UTC · Feb 5, 2020VulnerabilityCVE-2020-3110CVE-2020-3111CVE-2020-3118+2 CVEs47
Dnsmasq vulnerabilities open networking devices, Linux distros to DNS cache poisoningHelp Net Security·Jan 19, 00:00 UTC · Jan 19, 2021VulnerabilityCVE-2020-2568147
LLMs are everywhere in your stack and every layer brings new riskHelp Net Security·Dec 10, 00:00 UTC · Dec 10, 2025Vulnerability42
Training an AI agent to attack LLM applications like a real adversaryHelp Net Security·Mar 25, 00:00 UTC · Mar 25, 2026Vulnerability42
Treating MCP like an API creates security blind spotsHelp Net Security·Dec 1, 00:00 UTC · Dec 1, 2025Vulnerability142
Enterprises are racing to secure agentic AI deploymentsHelp Net Security·May 13, 10:11 UTC · May 13, 2026Vulnerability42
Attackers exploiting WSUS vulnerability drop Skuld infostealer (CVE-2025-59287)Help Net Security·Oct 30, 00:00 UTC · Oct 30, 2025Vulnerability in the wildCVE-2025-59287160
Securing the connected home: A joint task for homeowners and their ISPHelp Net Security·Jan 12, 00:00 UTC · Jan 12, 2021Vulnerability42
Rethinking OT security for project heavy shipyardsHelp Net Security·Jan 12, 00:00 UTC · Jan 12, 2026Vulnerability42
Beyond PQC: Building adaptive security programs for the unknownHelp Net Security·Aug 7, 00:00 UTC · Aug 7, 2025Vulnerability42
Uncle Sam closes the door on all new foreign-made routersHelp Net Security·Mar 24, 00:00 UTC · Mar 24, 2026Vulnerability42
European standards org releases consumer IoT cybersecurity standardHelp Net Security·Feb 20, 00:00 UTC · Feb 20, 2019Vulnerability42
Enhancing security through collaboration with the open-source communityHelp Net Security·Jun 18, 00:00 UTC · Jun 18, 2024Vulnerability42
AI went from assistant to autonomous actor and security never caught upHelp Net Security·Mar 3, 00:00 UTC · Mar 3, 2026Vulnerability42
Kali Linux 2026.2 trims VM boot times, refreshes its desktopsHelp Net Security·Jun 30, 00:00 UTC · Jun 30, 2026Vulnerability42
Vulnerability reports are arriving faster than GitHub can review themHelp Net Security·Jun 30, 00:00 UTC · Jun 30, 2026Vulnerability in the wild57
Open-source CI/CD abuse detector guards against stolen credential attacksHelp Net Security·Jun 15, 00:00 UTC · Jun 15, 2026Vulnerability42
Dependency-Track: Open-source component analysis platformHelp Net Security·Oct 27, 00:00 UTC · Oct 27, 2025Vulnerability42
SmokedMeat: Open-source tool shows what attackers do inside CI/CD pipelinesHelp Net Security·Apr 20, 00:00 UTC · Apr 20, 2026Vulnerability42
Legitify: Open-source scanner for security misconfigurations on GitHub and GitLabHelp Net Security·Apr 15, 00:00 UTC · Apr 15, 2026Vulnerability142
New AirDroid releases fix major security issuesHelp Net Security·Nov 22, 09:17 UTC · Nov 22, 2023Vulnerability42
How digital content security stays resilient amid evolving threatsHelp Net Security·Aug 11, 00:00 UTC · Aug 11, 2023Vulnerability42
Securing GitHub Actions for a safer DevOps pipelineHelp Net Security·Oct 2, 00:00 UTC · Oct 2, 2023Vulnerability42
CISO-approved strategies for software supply chain securityHelp Net Security·May 29, 00:00 UTC · May 29, 2023Vulnerability42
Half the defense base still builds security around complianceHelp Net Security·Jul 7, 05:44 UTC · Jul 7, 2026Vulnerability42
Google introduces agentic threat intelligence for faster, conversational threat analysisHelp Net Security·Jan 7, 10:56 UTC · Jan 7, 2026Vulnerability42
Google Cloud Platform allows data exfiltration without a (forensic) traceHelp Net Security·Mar 1, 00:00 UTC · Mar 1, 2023Vulnerability42