Vulnerability Spotlight: Code execution vulnerability in Microsoft ExcelCisco Talos·Feb 11, 19:31 UTC · Feb 11, 2020Vulnerability in the wildCVE-2020-0759160
Crooks bypass a Microsoft Office patch for CVE-2021Security Affairs·Dec 23, 14:49 UTC · Dec 23, 2021VulnerabilityCVE-2021-40444147
Hackers Exploited MSHTML Flaw to Spy on Government and Defense TargetsThe Hacker News·Jan 29, 08:06 UTC · Jan 29, 2022VulnerabilityCVE-2021-4044447
Vulnerability Spotlight: Code execution vulnerability in Microsoft Media FoundationCisco Talos·Feb 11, 19:31 UTC · Feb 11, 2020Vulnerability in the wildCVE-2020-0738160
Vulnerability Spotlight: Remote code execution vulnerability in Microsoft Media FoundationCisco Talos·Nov 12, 19:07 UTC · Nov 12, 2019Vulnerability in the wildCVE-2019-1430160
APT Hackers Turn to Malicious Excel AddThe Hacker News·Dec 30, 05:05 UTC · Dec 30, 2022Vulnerability142
APT28 Uses Microsoft Office CVE-2026-21509 in EspionageThe Hacker News·Feb 4, 16:49 UTC · Feb 4, 2026VulnerabilityCVE-2026-21509147
Vulnerability Spotlight: Information disclosure vulnerability in Microsoft Media FoundationCisco Talos·Apr 14, 18:08 UTC · Apr 14, 2020Vulnerability in the wildCVE-2020-0939160
Operation “Armor Piercer:” Targeted attacks in the Indian subcontinent using commercial RATsCisco Talos·Sep 23, 12:01 UTC · Sep 23, 2021Vulnerability42
A simple example of a complex cyberattackKaspersky Securelist·Sep 25, 12:23 UTC · Sep 25, 2017VulnerabilityCVE-2015-164147
SideWinder APT Strikes Middle East and Africa With Stealthy MultiThe Hacker News·Oct 28, 03:55 UTC · Oct 28, 2025VulnerabilityCVE-2017-1188247
Microsoft’s Secure Boot has been broken for a decade and no one noticed until nowArs Technica · Security·Jul 15, 00:00 UTC · Jul 15, 2026Vulnerability in the wildCVE-2015-5381160
MuddyWater Targets MENA Organizations with GhostFetch, CHAR, and HTTP_VIPThe Hacker News·Feb 23, 17:21 UTC · Feb 23, 2026Vulnerability42
Using virtualization to isolate risky applications and other endpoint threatsHelp Net Security·Jun 14, 11:08 UTC · Jun 14, 2022Vulnerability42
Paper Werewolf Deploys PowerModul Implant in Targeted Cyberattacks on Russian SectorsThe Hacker News·Apr 12, 05:17 UTC · Apr 12, 2025Vulnerability42
Chinese Hackers May Be Behind Attacks Targeting Eastern Europe and AfghanistanInfosecurity Magazine·Aug 8, 16:00 UTC · Aug 8, 2022VulnerabilityCVE-2017-1188247
ToddyCat: Keep calm and check logsKaspersky Securelist·Oct 12, 10:41 UTC · Oct 12, 2023Vulnerability42
Malicious website evolution: JanuaryKaspersky Securelist·Oct 22, 10:00 UTC · Oct 22, 2007Vulnerability42
Severe Vulnerabilities Reported in Microsoft Azure Bastion and Container RegistryThe Hacker News·Jun 15, 00:00 UTC · Jun 15, 2023Vulnerability in the wild157
Operation ShadowHammer: A High Profile Supply Chain AttackKaspersky Securelist·Apr 23, 10:00 UTC · Apr 23, 2019Vulnerability42
ThreatsDay Bulletin: AI Prompt RCE, Claude 0-Click, RenEngine Loader, Auto 0The Hacker News·Feb 15, 00:00 UTC · Feb 15, 2026VulnerabilityCVE-2026-2084147
Spam is up, QR codes emerge as a significant threat vectorHelp Net Security·Sep 4, 00:00 UTC · Sep 4, 2023VulnerabilityCVE-2022-3019047
“Red October” Diplomatic Cyber Attacks InvestigationKaspersky Securelist·Jan 14, 17:00 UTC · Jan 14, 2013VulnerabilityCVE-2009-3129CVE-2010-3333CVE-2012-0158+1 CVEs47
Cloud Atlas group acquires PowerCloud, ReverseSocks, SSHKaspersky Securelist·May 22, 09:12 UTC · May 22, 2026VulnerabilityCVE-2018-080247
Microsoft Warns Cryptocurrency Firms Against Complex CyberInfosecurity Magazine·Dec 7, 18:00 UTC · Dec 7, 2022Vulnerability42
Vulnerability Spotlight: Remote code execution vulnerability in Antenna House Rainbow PDF Office Server Document ConverterCisco Talos·Feb 28, 15:22 UTC · Feb 28, 2019Vulnerability in the wildCVE-2019-501960
Who’s Really Spreading through the Bright Star?Kaspersky Securelist·Mar 4, 17:14 UTC · Mar 4, 2015Vulnerability42
APT group ToddyCat exploits a vulnerability in ESET for DLL proxyingKaspersky Securelist·Apr 7, 10:01 UTC · Apr 7, 2025VulnerabilityCVE-2024-11859CVE-2021-3627647
DragonRank, a Chinese-speaking SEO manipulator service providerCisco Talos·Sep 10, 04:00 UTC · Sep 10, 2024Vulnerability42
Threat Roundup for February 21 to February 28Cisco Talos·Feb 28, 17:52 UTC · Feb 28, 2020Vulnerability42
Vulnerability Spotlight: A deep dive into WAGO’s cloud connectivity and the vulnerabilities that ariseCisco Talos·Oct 21, 19:30 UTC · Oct 21, 2020VulnerabilityCVE-2019-5161CVE-2019-5155CVE-2019-5157+1 CVEs47
US Government Warns of a New Strain of Chinese 'Taidoor' VirusThe Hacker News·Aug 4, 08:32 UTC · Aug 4, 2020Vulnerability42
PlushDaemon APT Targets South Korean VPN Provider in Supply Chain AttackThe Hacker News·Jan 24, 05:24 UTC · Jan 24, 2025Vulnerability42
Miasma Supply Chain Attack Compromises Red Hat npm Packages with CredentialThe Hacker News·Jun 2, 08:55 UTC · Jun 2, 2026Vulnerability42
State-Backed Hackers Exploit Microsoft 'Follina' Bug to Target Entities in Europe and U.SThe Hacker News·Jun 7, 12:27 UTC · Jun 7, 2022Vulnerability in the wildCVE-2022-30190160
Researchers Uncover TLS Bootstrap Attack on Azure Kubernetes ClustersThe Hacker News·Aug 21, 03:51 UTC · Aug 21, 2024VulnerabilityCVE-2024-764647
The Chronicles of the Hellsing APT: the Empire Strikes BackKaspersky Securelist·Apr 15, 02:30 UTC · Apr 15, 2015VulnerabilityCVE-2012-015847
ThreatsDay: Odysseus RCE, Samsung One-Click Takeover, iCloud Backdoor Fight + 27 More StoriesThe Hacker News·Aug 6, 15:24 UTC · Aug 6, 2026VulnerabilityCVE-2025-21079CVE-2025-58486147