Taking over Milesight UR32L routers behind a VPN: 22 vulnerabilities and a full chainCisco Talos·Jul 6, 15:38 UTC · Jul 6, 2023VulnerabilityCVE-2023-22319CVE-2023-2390247
THOR: Previously Unseen PlugX Variant Deployed During Microsoft Exchange Server Attacks by PKPLUG GroupPalo Alto Unit 42·Jun 6, 12:19 UTC · Jun 6, 2024VulnerabilityCVE-2021-26855CVE-2021-2706560
ReVault! When your SoC turns against you… deep dive editionCisco Talos·Aug 9, 13:00 UTC · Aug 9, 2025Vulnerability30
New Attack Lets Hackers Decrypt VoLTE Encryption to Spy on Phone CallsThe Hacker News·Aug 15, 00:00 UTC · Aug 15, 2020Vulnerability30
Fresh Baked HOMEKit-made CooklesPalo Alto Unit 42·Nov 1, 10:21 UTC · Nov 1, 2018VulnerabilityCVE-2012-015835
Filling a BlackHoleKaspersky Securelist·Sep 9, 20:25 UTC · Sep 9, 2013VulnerabilityCVE-2012-5076CVE-2012-0507CVE-2013-0422+2 CVEs35
DragonOK Updates Toolset and Targets Multiple Geographic RegionsPalo Alto Unit 42·Nov 1, 10:42 UTC · Nov 1, 2018VulnerabilityCVE-2015-164147
Tropic Trooper Targets Taiwanese Government and Fossil Fuel Provider With Poison IvyPalo Alto Unit 42·Nov 1, 10:39 UTC · Nov 1, 2018VulnerabilityCVE-2012-015835
Attacking Diffie-Hellman protocol implementation in the Angler Exploit KitKaspersky Securelist·Sep 8, 11:21 UTC · Sep 8, 2015VulnerabilityCVE-2015-2419CVE-2015-556035
New activity of the Blue Termite APTKaspersky Securelist·Aug 20, 10:55 UTC · Aug 20, 2015VulnerabilityCVE-2015-511947
Researchers found flaws in MEGA that allowed to decrypt of user dataSecurity Affairs·Jun 23, 07:53 UTC · Jun 23, 2022Vulnerability55
Analysis of CVE-2018-8174 VBScript 0day and APT actor related to Office targeted attackSecurity Affairs·May 10, 05:31 UTC · May 10, 2018VulnerabilityCVE-2018-8174CVE-2017-019947
Using Firepower to defend against encrypted RDP attacks like BlueKeepCisco Talos·May 31, 20:23 UTC · May 31, 2019VulnerabilityCVE-2019-070860
‘DealersChoice’ is Sofacy’s Flash Player Exploit PlatformPalo Alto Unit 42·Nov 1, 10:25 UTC · Nov 1, 2018Vulnerability42
A Cross-platform JavaKaspersky Securelist·Jan 28, 20:18 UTC · Jan 28, 2014VulnerabilityCVE-2013-2465147
PurpleBravo’s Targeting of the IT Software Supply ChainRecorded Future·Jul 22, 00:00 UTC · Jul 22, 2026Vulnerability42
Gigamon Precryption technology reveals concealed threat activity in the cloudHelp Net Security·Sep 12, 00:00 UTC · Sep 12, 2023Vulnerability55
Researchers Uncover Ways to Break the Encryption of 'MEGA' Cloud Storage ServiceThe Hacker News·Jun 22, 15:05 UTC · Jun 22, 2022Vulnerability55
The Mystery of Duqu: Part FiveKaspersky Securelist·Nov 15, 18:15 UTC · Nov 15, 2011VulnerabilityCVE-2011-340235
Flaws in several self-encrypting SSDs allows hackers to decrypt dataSecurity Affairs·Nov 6, 15:51 UTC · Nov 6, 2018Vulnerability55
Password managers' promise that they can't see your vaults isn't always trueArs Technica · Security·Feb 17, 20:43 UTC · Feb 17, 2026Vulnerability30
Decrypting TLS connections with new Raccoon AttackSecurity Affairs·Sep 11, 12:25 UTC · Sep 11, 2020VulnerabilityCVE-2020-592935
The latest on BlueKeep and DejaBlue vulnerabilities — Using Firepower to defend against encrypted DejaBlueCisco Talos·Nov 4, 15:43 UTC · Nov 4, 2019Vulnerability in the wildCVE-2019-0708CVE-2019-1181CVE-2019-118260
Decryption key for Apple iOS Secure Enclave Processor firmware revealedHelp Net Security·Mar 10, 16:33 UTC · Mar 10, 2019Vulnerability30
Attacks on industrial enterprises using RMS and TeamViewerKaspersky Securelist·Aug 1, 10:00 UTC · Aug 1, 2018Vulnerability30
GMR-2 issues allow satellite communications decryption in near realSecurity Affairs·Jul 8, 18:40 UTC · Jul 8, 2017Vulnerability30
New Project CAV3RN .NET Native AOT communication moduleKaspersky Securelist·Jul 22, 15:43 UTC · Jul 22, 2026Vulnerability30
The game is over: when “free” comes at too high a price. What we know about RenEngineKaspersky Securelist·Feb 11, 14:00 UTC · Feb 11, 2026Vulnerability30
Mysterious Elephant APT: TTPs and toolsKaspersky Securelist·Oct 15, 10:00 UTC · Oct 15, 2025VulnerabilityCVE-2017-1188247
macOS vulnerability allowed Keychain and iOS app decryption without a passwordHelp Net Security·Sep 4, 00:00 UTC · Sep 4, 2025Vulnerability in the wildCVE-2025-2420460
New malicious web shell from the Tropic Trooper group is found in the Middle EastKaspersky Securelist·Sep 5, 08:02 UTC · Sep 5, 2024Vulnerability in the wildCVE-2021-34473CVE-2021-34523CVE-2021-31207+1 CVEs60
Precious Gemstones: The New Generation of Kerberos AttacksPalo Alto Unit 42·Jun 5, 17:10 UTC · Jun 5, 2024Vulnerability130
Quantum risk is real now: How to navigate the evolving data harvesting threatHelp Net Security·Oct 13, 00:00 UTC · Oct 13, 2023Vulnerability42
ToddyCat: Unveiling an unknown APT actor attacking highKaspersky Securelist·Jun 21, 10:00 UTC · Jun 21, 2022Vulnerability42