Session Hijacking 2.0 — The Latest Way That Attackers are Bypassing MFAThe Hacker News·Sep 30, 12:50 UTC · Sep 30, 2024Vulnerability30
⚡ Weekly Recap: Fiber Optic Spying, Windows Rootkit, AI Vulnerability Hunting and MoreThe Hacker News·Apr 15, 00:00 UTC · Apr 15, 2026Vulnerability in the wildCVE-2026-34621160
SSH protects the world’s most sensitive networks. It just got a lot weakerArs Technica · Security·Dec 19, 17:35 UTC · Dec 19, 2023VulnerabilityCVE-2023-48795CVE-2023-46445CVE-2023-4644647
Poisoned "Office 365" search results lead to stolen paychecksHelp Net Security·Apr 10, 00:00 UTC · Apr 10, 2026Vulnerability130
Russia Hacked Routers to Steal Microsoft Office TokensKrebs on Security·Apr 7, 17:52 UTC · Apr 7, 2026Vulnerability155
SaaS Breaches Skyrocket 300% as Traditional Defenses Fall ShortInfosecurity Magazine·Jan 27, 14:00 UTC · Jan 27, 2025Vulnerability55
New Wi-Fi Vulnerability Enables Network Eavesdropping via Downgrade AttacksThe Hacker News·May 17, 04:21 UTC · May 17, 2024VulnerabilityCVE-2023-5242435
Millions still haven’t patched Terrapin SSH protocol vulnerabilityArs Technica · Security·Jan 3, 21:49 UTC · Jan 3, 2024VulnerabilityCVE-2023-4879535
New BLUFFS Bluetooth Attack Expose Devices to Adversary-in-theThe Hacker News·Dec 4, 13:16 UTC · Dec 4, 2023VulnerabilityCVE-2023-2402335
#InfosecurityEurope: Experts Highlight Evolving Attack TechniquesInfosecurity Magazine·Jun 22, 17:45 UTC · Jun 22, 2023Vulnerability42
Critical Firmware Vulnerability in Gigabyte Systems Exposes ~7 Million DevicesThe Hacker News·Jun 6, 03:50 UTC · Jun 6, 2023Vulnerability55
RTLS Systems Found Vulnerable to MiTM Attacks and Location TamperingThe Hacker News·Aug 23, 02:48 UTC · Aug 23, 2022Vulnerability55
RabbitMQ Flaws Could Leak OAuth Secrets and Expose CrossThe Hacker News·Jul 15, 00:00 UTC · Jul 15, 2026Vulnerability in the wildCVE-2026-57219CVE-2026-5722160
⚡ Weekly Recap: SharePoint 0-Day, Chrome Exploit, macOS Spyware, NVIDIA Toolkit RCE and MoreThe Hacker News·Jun 10, 04:47 UTC · Jun 10, 2026Vulnerability in the wildCVE-2025-53770CVE-2025-53771CVE-2025-49704+36 CVEs60
18-Year-Old NGINX Rewrite Module Flaw Enables Unauthenticated RCEThe Hacker News·May 21, 07:24 UTC · May 21, 2026VulnerabilityCVE-2026-42945CVE-2026-42946CVE-2026-40701+1 CVEs60
ThreatsDay Bulletin: Edge Plaintext Passwords, ICS 0-Days, Patch-orThe Hacker News·May 7, 17:59 UTC · May 7, 2026VulnerabilityCVE-2026-7411CVE-2026-7412CVE-2026-467060
China-Linked Hackers Target Asian Governments, NATO State, Journalists, and ActivistsThe Hacker News·May 2, 06:30 UTC · May 2, 2026VulnerabilityCVE-2025-5518260
ThreatsDay Bulletin: SMS Blaster Busts, OpenEMR Flaws, 600K Roblox Hacks and 25 More StoriesThe Hacker News·May 1, 07:21 UTC · May 1, 2026VulnerabilityCVE-2019-0708147
Researchers Observe In-the-Wild Exploitation of BeyondTrust CVSS 9.9 VulnerabilityThe Hacker News·Feb 15, 00:00 UTC · Feb 15, 2026Vulnerability in the wildCVE-2026-1731CVE-2026-20700CVE-2025-15556+4 CVEs60
Week in review: Fully patched FortiGate firewalls are getting compromised, attackers probe Cisco RCE flawHelp Net Security·Jan 25, 00:00 UTC · Jan 25, 2026VulnerabilityCVE-2026-20045CVE-2025-5971860
ThreatsDay Bulletin: RustFS Flaw, Iranian Ops, WebUI RCE, Cloud Leaks, and 12 More StoriesThe Hacker News·Jan 8, 16:52 UTC · Jan 8, 2026Vulnerability in the wildCVE-2024-36401CVE-2007-0671CVE-2002-036760
Chinese DeepSeek-R1 AI Generates Insecure Code When Prompts Mention Tibet or UyghursThe Hacker News·Nov 24, 11:08 UTC · Nov 24, 2025Vulnerability55
Researchers Detail Windows EPM Poisoning Exploit Chain Leading to Domain Privilege EscalationThe Hacker News·Aug 10, 15:02 UTC · Aug 10, 2025VulnerabilityCVE-2025-4976035
Critical Flaws in Niagara Framework Threaten Smart Buildings and Industrial Systems WorldwideThe Hacker News·Jul 29, 04:20 UTC · Jul 29, 2025VulnerabilityCVE-2025-3936CVE-2025-3937CVE-2025-3938+6 CVEs60
RSA enhances passwordless identity platformHelp Net Security·Jun 3, 00:00 UTC · Jun 3, 2025Vulnerability55
Fake Recruiter Emails Target CFOs Using Legit NetBird Tool Across 6 Global RegionsThe Hacker News·Jun 2, 10:08 UTC · Jun 2, 2025VulnerabilityCVE-2017-1188235
Initial Access Brokers Target Brazil Execs via NFThe Hacker News·May 9, 11:40 UTC · May 9, 2025VulnerabilityCVE-2017-1188247
Wormable AirPlay Flaws Enable Zero-Click RCE on Apple Devices via Public WiThe Hacker News·May 6, 07:42 UTC · May 6, 2025VulnerabilityCVE-2025-24252CVE-2025-24132CVE-2025-24206+8 CVEs60
Vulnerability Exploitation and Credential Theft Now Top Initial AccessInfosecurity Magazine·Apr 23, 14:01 UTC · Apr 23, 2025Vulnerability30
ClearFake Infects 9,300 Sites, Uses Fake reCAPTCHA and Turnstile to Spread InfoThe Hacker News·Mar 19, 10:59 UTC · Mar 19, 2025VulnerabilityCVE-2017-019947
⚡ THN Weekly Recap: Top Cybersecurity Threats, Tools and Tips [27 January]The Hacker News·Jan 27, 12:39 UTC · Jan 27, 2025VulnerabilityCVE-2025-23006CVE-2025-20156CVE-2025-21556+7 CVEs60
PlushDaemon APT Targets South Korean VPN Provider in Supply Chain AttackThe Hacker News·Jan 24, 05:24 UTC · Jan 24, 2025Vulnerability42
Opera Browser Fixes Big Security Hole That Could Have Exposed Your InformationThe Hacker News·Oct 31, 10:12 UTC · Oct 31, 2024Vulnerability30
Alert: Over 700,000 DrayTek Routers Exposed to Hacking via 14 New VulnerabilitiesThe Hacker News·Oct 7, 06:12 UTC · Oct 7, 2024VulnerabilityCVE-2024-41592CVE-2024-41585CVE-2024-41589+11 CVEs60
Palo Alto Networks Patches Critical Flaw in Expedition Migration ToolThe Hacker News·Jul 12, 03:38 UTC · Jul 12, 2024Vulnerability in the wildCVE-2024-5910CVE-2024-359660
New SnailLoad Attack Exploits Network Latency to Spy on Users' Web ActivitiesThe Hacker News·Jun 28, 09:59 UTC · Jun 28, 2024Vulnerability30
New Attack Technique 'Sleepy Pickle' Targets Machine Learning ModelsThe Hacker News·Jun 17, 05:02 UTC · Jun 17, 2024Vulnerability42
New TunnelVision Attack Allows Hijacking of VPN Traffic via DHCP ManipulationThe Hacker News·May 9, 17:55 UTC · May 9, 2024VulnerabilityCVE-2024-366135