Operation Rusty Flag: Azerbaijan Targeted in New RustThe Hacker News·Sep 30, 08:43 UTC · Sep 30, 2023VulnerabilityCVE-2017-11882CVE-2023-36884147
MuddyWater Targets MENA Organizations with GhostFetch, CHAR, and HTTP_VIPThe Hacker News·Feb 23, 17:21 UTC · Feb 23, 2026Vulnerability42
ThreatsDay: Odysseus RCE, Samsung One-Click Takeover, iCloud Backdoor Fight + 27 More StoriesThe Hacker News·Aug 6, 15:24 UTC · Aug 6, 2026VulnerabilityCVE-2025-21079CVE-2025-58486147
North Korean hackers employ new tactics to compromise crypto-related businessesHelp Net Security·Nov 7, 00:00 UTC · Nov 7, 2024Vulnerability42
ThreatsDay Bulletin: Worm Code Leaked, AI Agent Phished, Claude Code Patch + 28 New StoriesThe Hacker News·Jun 12, 05:36 UTC · Jun 12, 2026Vulnerability142
China-linked hackers exploit patched ToolShell flaw to breach Middle East telecomSecurity Affairs·Oct 24, 08:37 UTC · Oct 24, 2025Vulnerability in the wildCVE-2025-53770CVE-2021-3694260
China-Linked APTs Exploit SAP CVE-2025-31324 to Breach 581 Critical Systems WorldwideThe Hacker News·May 15, 00:00 UTC · May 15, 2025Vulnerability in the wildCVE-2025-31324CVE-2025-4299960
Bypassing On-Camera Age-Verification ChecksSchneier on Security·May 15, 00:00 UTC · May 15, 2026Vulnerability42
UAT-6382 exploits Cityworks zeroCisco Talos·May 22, 10:00 UTC · May 22, 2025Vulnerability in the wildCVE-2025-0994CVE-2025-094460
Discovery of Alchimist C2 tool, revealed a new attack frameworkSecurity Affairs·Oct 13, 14:59 UTC · Oct 13, 2022VulnerabilityCVE-2021-403447
Week in review: cPanel vulnerability actively exploited, DigiCert breach, LinkedIn job scamsHelp Net Security·May 10, 00:00 UTC · May 10, 2026Vulnerability in the wildCVE-2026-41940CVE-2026-4670CVE-2026-5174+4 CVEs60
PhantomCore Exploits TrueConf Vulnerabilities to Breach Russian NetworksThe Hacker News·Apr 27, 14:07 UTC · Apr 27, 2026Vulnerability42
Why Patch Management Isn’t Enough: SharePoint, Webshells & the Modern Threat LandscapeRecorded Future·Aug 11, 00:00 UTC · Aug 11, 2025VulnerabilityCVE-2023-4724660
Week in review: High severity WordPress vulnerabilities, fake OAuth IDs bypass sign-in logsHelp Net Security·Jul 19, 00:00 UTC · Jul 19, 2026Vulnerability in the wildCVE-2026-15409CVE-2026-15410CVE-2026-56155+2 CVEs60
Week in review: Sudo local privilege escalation flaws fixed, Google patches actively exploited ChromeHelp Net Security·Jul 6, 00:00 UTC · Jul 6, 2025Vulnerability in the wildCVE-2025-32462CVE-2025-32463CVE-2025-6554+4 CVEs60
Microsoft Fixes 149 Flaws in Huge April Patch Release, ZeroThe Hacker News·Apr 11, 11:08 UTC · Apr 11, 2024Vulnerability in the wildCVE-2024-26234CVE-2024-29988CVE-2024-21412+2 CVEs60
Week in review: Cisco patches SD-WAN 0-day, unpatched Microsoft Exchange Server flaw exploitedHelp Net Security·May 17, 00:00 UTC · May 17, 2026Vulnerability in the wildCVE-2026-44413CVE-2026-41940CVE-2026-46300+2 CVEs160
⚡ Weekly Recap: WordPress RCE, SonicWall 0-Days, AI Service Attacks, SharePoint 0The Hacker News·Jul 21, 04:34 UTC · Jul 21, 2026Vulnerability in the wildCVE-2026-63030CVE-2026-60137CVE-2026-15409+26 CVEs60
Defcon's new badge is a security key you can see insideArs Technica · Security·Aug 1, 10:05 UTC · Aug 1, 2026Vulnerability42
ThreatsDay Bulletin: Pixel Zero-Click, Redis RCE, China C2s, RAT Ads, Crypto Scams & 15+ StoriesThe Hacker News·Jan 24, 08:04 UTC · Jan 24, 2026Vulnerability55
Friday Squid Blogging: International Squid Awareness DaySchneier on Security·Jan 29, 08:02 UTC · Jan 29, 2020Vulnerability55
Week in review: Fully patched FortiGate firewalls are getting compromised, attackers probe Cisco RCE flawHelp Net Security·Jan 25, 00:00 UTC · Jan 25, 2026VulnerabilityCVE-2026-20045CVE-2025-5971860