Kaspersky found multiple memory corruptions in Suricata and FreeRDPKaspersky Securelist·Aug 22, 12:50 UTC · Aug 22, 2024VulnerabilityCVE-2024-32041CVE-2024-32039CVE-2024-32040+4 CVEs60
MongoDB Vulnerability CVE-2025-14847 Under Active Exploitation WorldwideThe Hacker News·Dec 30, 07:59 UTC · Dec 30, 2025Vulnerability in the wildCVE-2025-1484760
THOR: Previously Unseen PlugX Variant Deployed During Microsoft Exchange Server Attacks by PKPLUG GroupPalo Alto Unit 42·Jun 6, 12:19 UTC · Jun 6, 2024VulnerabilityCVE-2021-26855CVE-2021-2706560
‘DealersChoice’ is Sofacy’s Flash Player Exploit PlatformPalo Alto Unit 42·Nov 1, 10:25 UTC · Nov 1, 2018Vulnerability42
Vulnerability Spotlight: Lhasa Integer Underflow ExploitCisco Talos·Mar 31, 14:54 UTC · Mar 31, 2016VulnerabilityCVE-2016-234735
The Mystery of Duqu: Part FiveKaspersky Securelist·Nov 15, 18:15 UTC · Nov 15, 2011VulnerabilityCVE-2011-340235
FamousSparrow targets Azerbaijani energy sector in multiSecurity Affairs·May 14, 08:17 UTC · May 14, 2026Vulnerability55
Libbiosig, Tenda, SAIL, PDF XChange, Foxit vulnerabilitiesCisco Talos·Aug 27, 18:07 UTC · Aug 27, 2025VulnerabilityCVE-2025-53518CVE-2025-52581CVE-2025-54480+21 CVEs47
New Vulnerability Affecting Container Engines CRI-O and Podman (CVE-2021Palo Alto Unit 42·Jun 6, 13:23 UTC · Jun 6, 2024VulnerabilityCVE-2021-20291160
PoCs for critical Arcserve UDP vulnerabilities releasedHelp Net Security·Nov 29, 00:00 UTC · Nov 29, 2023VulnerabilityCVE-2023-41998CVE-2023-41999CVE-2023-4200060
Vulnerability Spotlight: Multiple vulnerabilities in AT&T Labs’ Xmill utilityCisco Talos·Aug 10, 17:22 UTC · Aug 10, 2021Vulnerability in the wildCVE-2021-21810CVE-2021-21811CVE-2021-21825+6 CVEs60
Vulnerability Spotlight: Accusoft ImageGear vulnerabilities could lead to code executionCisco Talos·Feb 9, 17:00 UTC · Feb 9, 2021Vulnerability in the wildCVE-2020-13561CVE-2020-13571CVE-2020-13572+1 CVEs60
SMBleed: A New Critical Vulnerability Affects Windows SMB ProtocolThe Hacker News·Jun 10, 03:44 UTC · Jun 10, 2020VulnerabilityCVE-2020-1206CVE-2020-079660
Are CloudAtlas and RedOctober managed by same APT?Security Affairs·Apr 13, 11:02 UTC · Apr 13, 2018VulnerabilityCVE-2012-015847
Vulnerability Spotlight: Simple DirectMedia Layer’s SDL2_ImageCisco Talos·Mar 1, 21:21 UTC · Mar 1, 2018Vulnerability in the wildCVE-2017-12122CVE-2017-14440CVE-2017-14441+4 CVEs60
Vulnerability Spotlight: ImageMagick Convert Tiff Out of Bounds WriteCisco Talos·Dec 6, 19:09 UTC · Dec 6, 2016Vulnerability in the wildCVE-2016-870760
Three bugs found in the LibTIFF, one of them yet to be patchedSecurity Affairs·Oct 28, 05:59 UTC · Oct 28, 2016VulnerabilityCVE-2016-8331CVE-2016-5652CVE-2016-5875147
Vulnerability Spotlight: LibTIFF Issues Lead To Code ExecutionCisco Talos·Oct 25, 15:47 UTC · Oct 25, 2016VulnerabilityCVE-2016-5652CVE-2016-8331CVE-2016-5875147
Remotely Exploitable flaws affect SAP solutionsSecurity Affairs·May 15, 08:07 UTC · May 15, 2015VulnerabilityCVE-2015-2282CVE-2015-227847
Cloud Atlas: RedOctober APT is back in styleKaspersky Securelist·Dec 10, 10:03 UTC · Dec 10, 2014VulnerabilityCVE-2012-015847
PurpleBravo’s Targeting of the IT Software Supply ChainRecorded Future·Jul 22, 00:00 UTC · Jul 22, 2026Vulnerability42
Critical 7-Zip Flaw Allows Code Execution by Opening Crafted XZSecurity Affairs·Jul 20, 10:58 UTC · Jul 20, 2026Vulnerability in the wildCVE-2025-1100160
Scientists Discover Vast Ancient ‘Necropolis’ Teeming With Strange New Creatures404 Media·Jun 13, 19:10 UTC · Jun 13, 2026Vulnerability30
Wordfence blocks 8.7M attacks exploiting old GutenKit and Hunk Companion flawsSecurity Affairs·Oct 27, 08:40 UTC · Oct 27, 2025VulnerabilityCVE-2024-9234CVE-2024-9707CVE-2024-1197260
Malicious Code in XZ Utils for Linux Systems Enables Remote Code ExecutionThe Hacker News·Aug 13, 10:32 UTC · Aug 13, 2025VulnerabilityCVE-2024-309447
Wireshark 4.4.2: Security updates, bug fixes, updated protocol supportHelp Net Security·Jan 9, 08:56 UTC · Jan 9, 2025Vulnerability30
SideWinder APT’s postKaspersky Securelist·Oct 15, 10:00 UTC · Oct 15, 2024VulnerabilityCVE-2017-1188247
Navigating the Vast Ocean of Sandbox EvasionsPalo Alto Unit 42·Jun 5, 17:00 UTC · Jun 5, 2024Vulnerability42
New R Programming Vulnerability Exposes Projects to Supply Chain AttacksThe Hacker News·Apr 30, 03:39 UTC · Apr 30, 2024VulnerabilityCVE-2024-27322147
Biggest DDoSes of all time generated by protocol 0Ars Technica · Security·Oct 15, 00:00 UTC · Oct 15, 2023Vulnerability55
ToddyCat: Keep calm and check logsKaspersky Securelist·Oct 12, 10:41 UTC · Oct 12, 2023Vulnerability42
How Joe Marshall helps defend everything from electrical grids to grain coCisco Talos·Jun 5, 11:00 UTC · Jun 5, 2023Vulnerability55
FortiOS flaw was exploited to compromise governmental targets (CVE-2022-42475)Help Net Security·Jan 13, 00:00 UTC · Jan 13, 2023Vulnerability in the wildCVE-2022-4247560
Malicious Tor Browser spreads through YouTubeKaspersky Securelist·Oct 4, 10:00 UTC · Oct 4, 2022Vulnerability30
ToddyCat: Unveiling an unknown APT actor attacking highKaspersky Securelist·Jun 21, 10:00 UTC · Jun 21, 2022Vulnerability42
The Latest Flash UAF Vulnerabilities in Exploit KitsPalo Alto Unit 42·Jan 28, 21:24 UTC · Jan 28, 2022VulnerabilityCVE-2015-0311CVE-2015-0313CVE-2015-035935
Experts found 14 new flaws in BusyBoxSecurity Affairs·Nov 10, 11:38 UTC · Nov 10, 2021VulnerabilityCVE-2021-42373CVE-2021-42374CVE-2021-42375+11 CVEs60
Chinese cyberspies used a new PlugX variant, dubbed THOR, in attacks against MS Exchange ServersSecurity Affairs·Jul 28, 16:18 UTC · Jul 28, 2021Vulnerability42