PurpleBravo’s Targeting of the IT Software Supply ChainRecorded Future·Jul 22, 00:00 UTC · Jul 22, 2026Vulnerability42
Why React Didn't Kill XSS: The New JavaScript Injection PlaybookThe Hacker News·Jul 29, 10:00 UTC · Jul 29, 2025Vulnerability55
ToddyCat: Unveiling an unknown APT actor attacking highKaspersky Securelist·Jun 21, 10:00 UTC · Jun 21, 2022Vulnerability42
Adobe released out-of-band updates for After Effects and Media EncoderSecurity Affairs·Feb 20, 15:36 UTC · Feb 20, 2020VulnerabilityCVE-2020-3765CVE-2020-376460
SVG Onload Tag Hides Magecart Skimmer on 99 StoresSansec (Magento / e-commerce security)·Apr 14, 19:49 UTC · Apr 14, 2026Vulnerability in the wild57
How AppTrana Managed Cloud WAF Tackles Evolving Attacking TechniquesThe Hacker News·Aug 17, 10:20 UTC · Aug 17, 2020Vulnerability30
Watchbog and the Importance of PatchingCisco Talos·Sep 11, 16:10 UTC · Sep 11, 2019VulnerabilityCVE-2018-100086135
Out-of-band security update fixes Adobe Media Encoder issueSecurity Affairs·Sep 15, 21:14 UTC · Sep 15, 2020VulnerabilityCVE-2020-9739CVE-2020-9744CVE-2020-974560
Adobe fixes over a dozen flaws in Media Encoder, Download ManagerSecurity Affairs·Jul 14, 17:59 UTC · Jul 14, 2020VulnerabilityCVE-2020-9688CVE-2020-9669CVE-2020-9671+3 CVEs60
Adobe Patches Critical Bugs Affecting Media Encoder and After EffectsThe Hacker News·Feb 20, 10:09 UTC · Feb 20, 2020Vulnerability in the wildCVE-2020-3765CVE-2020-376460
Adobe Releases Critical Patches for Flash, Acrobat Reader, and Media EncoderThe Hacker News·May 15, 00:00 UTC · May 15, 2019Vulnerability in the wildCVE-2019-7837CVE-2019-784260
Moodle vulnerability exposed users to account takeoverSecurity Affairs·Apr 8, 20:22 UTC · Apr 8, 2021Vulnerability55
GOFFEE’s recent attacks: new tools and techniquesKaspersky Securelist·Apr 10, 10:00 UTC · Apr 10, 2025Vulnerability130
Adobe Patch Tuesday patches fix over 80 flaws in Flash, Acrobat Reader, and Media EncoderSecurity Affairs·May 15, 06:14 UTC · May 15, 2019VulnerabilityCVE-2019-7837CVE-2019-784260
A new version of Triada spreads embedded in the firmware of Android devicesKaspersky Securelist·Apr 25, 10:00 UTC · Apr 25, 2025Vulnerability42
SideWinder APT’s postKaspersky Securelist·Oct 15, 10:00 UTC · Oct 15, 2024VulnerabilityCVE-2017-1188247
THOR: Previously Unseen PlugX Variant Deployed During Microsoft Exchange Server Attacks by PKPLUG GroupPalo Alto Unit 42·Jun 6, 12:19 UTC · Jun 6, 2024VulnerabilityCVE-2021-26855CVE-2021-2706560
DNA Contains Instructions for Biological and Computer VirusesSecurity Affairs·Aug 12, 08:23 UTC · Aug 12, 2017Vulnerability30
Equation Group: from Houston with loveKaspersky Securelist·Feb 19, 09:00 UTC · Feb 19, 2015Vulnerability55
CERT/CC Warns binary-parser Bug Allows Node.js PrivilegeThe Hacker News·Jan 27, 14:10 UTC · Jan 27, 2026VulnerabilityCVE-2026-124560
New RAMBO Attack Uses RAM Radio Signals to Steal Data from AirThe Hacker News·Sep 10, 12:29 UTC · Sep 10, 2024Vulnerability42
Actor Exploits Microsoft Exchange Server Vulnerabilities, Cortex XDR Blocks Harvesting of CredentialsPalo Alto Unit 42·Jun 6, 13:23 UTC · Jun 6, 2024Vulnerability in the wildCVE-2021-26855CVE-2021-26857CVE-2021-26858+1 CVEs60
Digium Phones Under Attack: Insight Into the Web Shell ImplantPalo Alto Unit 42·Jun 5, 20:19 UTC · Jun 5, 2024VulnerabilityCVE-2021-4546147
Lazarus Group exploits ManageEngine vulnerability to deploy QuiteRATCisco Talos·Aug 24, 12:02 UTC · Aug 24, 2023VulnerabilityCVE-2022-47966135
New 'Trojan Source' Technique Lets Hackers Hide Vulnerabilities in Source CodeThe Hacker News·Nov 2, 08:28 UTC · Nov 2, 2021VulnerabilityCVE-2021-42574CVE-2021-42694147
Vulnerability Deep Dive: TP-Link TL-R600VPN remote code execution vulnerabilitiesCisco Talos·Jan 15, 20:02 UTC · Jan 15, 2019Vulnerability42
UPS: Observations on CVE-2015-3113, Prior ZeroPalo Alto Unit 42·Nov 1, 09:48 UTC · Nov 1, 2018VulnerabilityCVE-2015-3113CVE-2014-1776CVE-2014-633260
Vulnerabiity Spotlight: Tarantool Denial of Service VulnerabilitiesCisco Talos·Dec 20, 19:27 UTC · Dec 20, 2016Vulnerability in the wildCVE-2016-9036CVE-2016-903760
Evolution of the Nuclear Exploit KitCisco Talos·Oct 9, 09:54 UTC · Oct 9, 2014VulnerabilityCVE-2014-0515CVE-2013-7331CVE-2013-2551+3 CVEs35
“Keep going, bro. You’ve got this!” A data-driven look at how adversaries are weaponizing AICisco Talos·Aug 4, 10:00 UTC · Aug 4, 2026Vulnerability55
CISA Adds Exploited Magento RCE Flaw CVE-2026The Hacker News·Jun 4, 11:53 UTC · Jun 4, 2026Vulnerability in the wildCVE-2026-4524760
Web Server Exploits and Mimikatz Used in Attacks Targeting Asian Critical InfrastructureThe Hacker News·Mar 9, 18:22 UTC · Mar 9, 2026Vulnerability55
5 Threats That Reshaped Web Security This Year [2025]The Hacker News·Dec 4, 11:30 UTC · Dec 4, 2025VulnerabilityCVE-2025-54135CVE-2025-53109CVE-2025-5528460
iframe Security Exposed: The Blind Spot Fueling Payment Skimmer AttacksThe Hacker News·Sep 24, 11:03 UTC · Sep 24, 2025Vulnerability in the wild60
Russia-Nexus UAC-0113 Emulating Telecommunication Providers in UkraineRecorded Future·Aug 22, 00:00 UTC · Aug 22, 2025Vulnerability42
Microsoft Identifies 3,000 Leaked ASP.NET Keys Enabling Code Injection AttacksThe Hacker News·Feb 7, 12:10 UTC · Feb 7, 2025Vulnerability42
Kaspersky found multiple memory corruptions in Suricata and FreeRDPKaspersky Securelist·Aug 22, 12:50 UTC · Aug 22, 2024VulnerabilityCVE-2024-32041CVE-2024-32039CVE-2024-32040+4 CVEs60