H1 2025 Malware and Vulnerability TrendsRecorded Future·Nov 13, 00:00 UTC · Nov 13, 2025Vulnerability in the wild60
⚡ Weekly Recap: Drift Breach Chaos, Zero-Days Active, Patch Warnings, Smarter Threats & MoreThe Hacker News·Dec 6, 11:14 UTC · Dec 6, 2025Vulnerability in the wildCVE-2025-53690CVE-2025-38352CVE-2025-48543+25 CVEs160
Microsoft Targeted by 8 of 10 Top Vulnerabilities in 2018Recorded Future·Aug 11, 00:00 UTC · Aug 11, 2025Vulnerability in the wildCVE-2017-0199CVE-2016-0189CVE-2017-8750+8 CVEs60
Chinese hackers hit Citrix, Cisco vulnerabilities in sweeping campaignCyberScoop·Mar 25, 15:16 UTC · Mar 25, 2020Vulnerability in the wildCVE-2019-1978160
Russian APT targets Ukraine via Zimbra XSS flaw CVE-2025Security Affairs·Mar 19, 14:48 UTC · Mar 19, 2026Vulnerability in the wildCVE-2025-6637660
⚡ Weekly Recap: Apple 0-Days, WinRAR Exploit, LastPass Fines, .NET RCE, OAuth Scams & MoreThe Hacker News·Dec 15, 00:00 UTC · Dec 15, 2025Vulnerability in the wildCVE-2025-14174CVE-2025-43529CVE-2025-6218+43 CVEs60
iOS zero-click attacks used to deliver Graphite spyware (CVE-2025-43200)Help Net Security·Jun 16, 19:19 UTC · Jun 16, 2025Vulnerability in the wildCVE-2025-43200CVE-2025-2420060
State-Backed Hackers Exploit Microsoft 'Follina' Bug to Target Entities in Europe and U.SThe Hacker News·Jun 7, 12:27 UTC · Jun 7, 2022Vulnerability in the wildCVE-2022-30190160
⚡ Weekly Recap: Fiber Optic Spying, Windows Rootkit, AI Vulnerability Hunting and MoreThe Hacker News·Apr 15, 00:00 UTC · Apr 15, 2026Vulnerability in the wildCVE-2026-34621160
32% Of Top-Exploited Vulnerabilities Are Over A Decade OldHelp Net Security·Mar 24, 00:00 UTC · Mar 24, 2026Vulnerability in the wild157
ThreatsDay Bulletin: Codespaces RCE, AsyncRAT C2, BYOVD Abuse, AI Cloud Intrusions & 15+ StoriesThe Hacker News·Feb 5, 17:14 UTC · Feb 5, 2026Vulnerability in the wild160
Hackers Exploit Pandoc CVE-2025-51591 to Target AWS IMDS and Steal EC2 IAM CredentialsThe Hacker News·Sep 25, 17:16 UTC · Sep 25, 2025Vulnerability in the wildCVE-2025-51591CVE-2021-2131160
WhatsApp Patches Zero-Click Exploit Targeting iOS and macOS DevicesThe Hacker News·Sep 2, 16:27 UTC · Sep 2, 2025Vulnerability in the wildCVE-2025-55177CVE-2025-4330060
⚡ Weekly Recap: AI-Powered Phishing, Android Spying Tool, Linux Exploit, GitHub RCE & MoreThe Hacker News·May 5, 05:41 UTC · May 5, 2026Vulnerability in the wildCVE-2026-41940CVE-2026-31431CVE-2026-3854+2 CVEs160
Week in review: Notepad++ supply chain attack details and targets, Patch Tuesday forecastHelp Net Security·Feb 8, 00:00 UTC · Feb 8, 2026Vulnerability in the wildCVE-2026-21509CVE-2025-22225CVE-2026-2442360
ThreatsDay Bulletin: RustFS Flaw, Iranian Ops, WebUI RCE, Cloud Leaks, and 12 More StoriesThe Hacker News·Jan 8, 16:52 UTC · Jan 8, 2026Vulnerability in the wildCVE-2024-36401CVE-2007-0671CVE-2002-036760
New malicious web shell from the Tropic Trooper group is found in the Middle EastKaspersky Securelist·Sep 5, 08:02 UTC · Sep 5, 2024Vulnerability in the wildCVE-2021-34473CVE-2021-34523CVE-2021-31207+1 CVEs60
Watch Out! Cryptocurrency Miners Targeting Dockers, AWS and Alibaba CloudThe Hacker News·Apr 22, 09:30 UTC · Apr 22, 2022Vulnerability in the wildCVE-2022-2296560
Vulnerabilities grew like weeds in 2025, but only 1% were weaponized in attacksCyberScoop·Feb 25, 13:30 UTC · Feb 25, 2026Vulnerability in the wildCVE-2025-53770CVE-2025-53771CVE-2025-49706+1 CVEs60
Microsoft Fixes 80 Flaws — Including SMB PrivEsc and Azure CVSS 10.0 BugsThe Hacker News·Sep 11, 08:56 UTC · Sep 11, 2025Vulnerability in the wildCVE-2025-53791CVE-2025-55234CVE-2025-54914+9 CVEs60
Agencies warn about Russian government hackers going after unpatched vulnerabilitiesCyberScoop·Oct 11, 15:58 UTC · Oct 11, 2024Vulnerability in the wild60
Suspected Chinese Group Calypso APT Exploiting Vulnerable Microsoft Exchange ServersRecorded Future·Dec 13, 00:00 UTC · Dec 13, 2018Vulnerability in the wildCVE-2021-26855CVE-2021-27065CVE-2021-26857+1 CVEs60
Hackers target AI and crypto as software supply chain risks growHelp Net Security·Dec 3, 14:29 UTC · Dec 3, 2025Vulnerability in the wild60
Previously unidentified botnet targets unpatched TPThe Record·Mar 12, 14:52 UTC · Mar 12, 2025Vulnerability in the wildCVE-2023-138960
Ballista Botnet Exploits Unpatched TP-Link Vulnerability, Targets Over 6,000 DevicesThe Hacker News·Mar 12, 03:46 UTC · Mar 12, 2025Vulnerability in the wildCVE-2023-138960
Espionage group targeted hotels, governments, seized on Microsoft Exchange vulnerabilityCyberScoop·Sep 23, 09:30 UTC · Sep 23, 2021Vulnerability in the wild60
Week in review: Sudo vulnerability, Emotet takedown, execs targeted with Office 365 phishingHelp Net Security·Jan 31, 00:00 UTC · Jan 31, 2021Vulnerability in the wildCVE-2021-315660
Microsoft Patch Tuesday updates for March 2019 patches two Windows flaws exploited in targeted attacksSecurity Affairs·Mar 13, 06:20 UTC · Mar 13, 2019Vulnerability in the wildCVE-2019-0808CVE-2019-5786CVE-2019-079760
CISA Flags Langflow RCE, Tomcat, and NThe Hacker News·Aug 8, 05:44 UTC · Aug 8, 2026Vulnerability in the wildCVE-2026-9198CVE-2026-34486CVE-2026-18556+6 CVEs60
US Agencies Warn of Laundry Bear Campaign Targeting Unpatched Zimbra ServersSecurity Affairs·Jul 24, 08:31 UTC · Jul 24, 2026Vulnerability in the wildCVE-2025-6637660
Weekly Recap: Outlook Add-Ins Hijack, 0-Day Patches, Wormable Botnet & AI MalwareThe Hacker News·Feb 23, 11:00 UTC · Feb 23, 2026Vulnerability in the wildCVE-2026-2441CVE-2026-1731CVE-2026-2070060
Fed agencies ordered to patch Dell bug by Saturday after exploitation warningThe Record·Feb 18, 21:09 UTC · Feb 18, 2026Vulnerability in the wildCVE-2026-2276960
Week in review: Exploited newly patched BeyondTrust RCE, United Airlines CISO on building resilienceHelp Net Security·Feb 15, 00:00 UTC · Feb 15, 2026Vulnerability in the wildCVE-2026-1731CVE-2024-12356CVE-2026-1281+2 CVEs60
Newly Patched Critical Microsoft WSUS Flaw Comes Under Active ExploitationThe Hacker News·Oct 31, 08:31 UTC · Oct 31, 2025Vulnerability in the wildCVE-2025-5928760
Google addressed two Android flaws actively exploited in targeted attacksSecurity Affairs·Sep 3, 17:38 UTC · Sep 3, 2025Vulnerability in the wildCVE-2025-38352CVE-2025-48543CVE-2025-4853960
SonicWall customers hit by fresh, ongoing attacks targeting fully patched SMA 100 devicesCyberScoop·Jul 16, 17:52 UTC · Jul 16, 2025Vulnerability in the wildCVE-2021-20038CVE-2024-38475CVE-2021-20035+2 CVEs60
Attackers target Zyxel RCE vulnerability CVE-2023Security Affairs·Jun 17, 10:34 UTC · Jun 17, 2025Vulnerability in the wildCVE-2023-2877160
China-Linked APTs Exploit SAP CVE-2025-31324 to Breach 581 Critical Systems WorldwideThe Hacker News·May 15, 00:00 UTC · May 15, 2025Vulnerability in the wildCVE-2025-31324CVE-2025-4299960
Beyond Vulnerability ManagementThe Hacker News·May 9, 16:51 UTC · May 9, 2025Vulnerability in the wild60
Windows NTLM vulnerability exploited in multiple attack campaigns (CVE-2025-24054)Help Net Security·Apr 17, 00:00 UTC · Apr 17, 2025Vulnerability in the wildCVE-2025-24054CVE-2025-24071CVE-2024-43451160