Surge in Magento 2 template attacksSansec (Magento / e-commerce security)·Apr 14, 19:49 UTC · Apr 14, 2026Vulnerability in the wildCVE-2026-7565060
Unpatched Java Spring Framework 0-Day RCE Bug Threatens Enterprise Web Apps SecurityThe Hacker News·Mar 31, 15:27 UTC · Mar 31, 2022Vulnerability in the wildCVE-2010-1622CVE-2022-22950CVE-2022-2296360
CISA Issues Warning on Active Exploitation of ZK Java Web Framework VulnerabilityThe Hacker News·Feb 28, 13:28 UTC · Feb 28, 2023Vulnerability in the wildCVE-2022-3653760
Vendors defeat Magento security patch (+ simple check)Sansec (Magento / e-commerce security)·Apr 14, 19:49 UTC · Apr 14, 2026Vulnerability in the wildCVE-2022-24086CVE-2022-24087CVE-2026-7565060
Vulnerability landscape in Q4 2025Kaspersky Securelist·Mar 6, 10:00 UTC · Mar 6, 2026Vulnerability in the wildCVE-2018-0802CVE-2017-11882CVE-2017-0199+7 CVEs160
December 2025 CVE Landscape: 22 Critical Vulnerabilities Mark 120% Surge, React2Shell Dominates Threat ActivityRecorded Future·Jan 13, 00:00 UTC · Jan 13, 2026Vulnerability in the wildCVE-2025-55182CVE-2025-20393CVE-2025-8110+1 CVEs60
Lazarus Group exploited ManageEngine vulnerability to target critical infrastructureHelp Net Security·Aug 25, 00:00 UTC · Aug 25, 2023Vulnerability in the wildCVE-2022-4796660
Week in review: Cisco SD-WAN 0-day exploited, Patch Tuesday forecastHelp Net Security·Jun 7, 00:00 UTC · Jun 7, 2026Vulnerability in the wildCVE-2026-0257CVE-2026-41089CVE-2025-48595+1 CVEs60
LangChain, LangGraph Flaws Expose Files, Secrets, Databases in Widely Used AI FrameworksThe Hacker News·Mar 27, 08:07 UTC · Mar 27, 2026Vulnerability in the wildCVE-2026-34070CVE-2025-68664CVE-2025-67644+2 CVEs160
Developers scramble as critical React flaw threatens major appsCyberScoop·Dec 3, 19:23 UTC · Dec 3, 2025Vulnerability in the wildCVE-2025-55182CVE-2025-6647860
Addressing the vulnerability prioritization challengeRecorded Future·Nov 26, 00:00 UTC · Nov 26, 2025Vulnerability in the wild60
Critical Next.js auth bypass vulnerability opens web apps to compromise (CVE-2025-29927)Help Net Security·Apr 2, 08:44 UTC · Apr 2, 2025Vulnerability in the wildCVE-2025-2992760
Spring4Shell (CVE-2022Kaspersky Securelist·Apr 4, 16:42 UTC · Apr 4, 2022Vulnerability in the wildCVE-2022-22965CVE-2022-22963CVE-2010-162260
Backdoor vulnerability in open source tool exposes thousands of apps to remote code executionCyberScoop·Apr 4, 20:51 UTC · Apr 4, 2019Vulnerability in the wild60
ATT&CKized Splunk - Threat Hunting with MITRE’s ATT&CK using SplunkSecurity Affairs·Feb 19, 06:32 UTC · Feb 19, 2019Vulnerability in the wild60
⚡ Weekly Recap: WordPress RCE, SonicWall 0-Days, AI Service Attacks, SharePoint 0The Hacker News·Jul 21, 04:34 UTC · Jul 21, 2026Vulnerability in the wildCVE-2026-63030CVE-2026-60137CVE-2026-15409+26 CVEs160
Week in review: Several companies affected by the Salesloft Drift breach, Sitecore 0-day vulnerabilityHelp Net Security·Sep 7, 00:00 UTC · Sep 7, 2025Vulnerability in the wildCVE-2025-53690CVE-2025-24204CVE-2025-48543+2 CVEs60
Oracle Releases January 2025 Patch to Address 318 Flaws Across Major ProductsThe Hacker News·Jan 22, 13:39 UTC · Jan 22, 2025Vulnerability in the wildCVE-2025-21556CVE-2024-21287CVE-2025-21524+10 CVEs60
A Mirai-based botnet is exploiting the Spring4Shell vulnerabilitySecurity Affairs·Apr 9, 07:45 UTC · Apr 9, 2022Vulnerability in the wildCVE-2022-2296560
Severe Electron framework vulnerability impacts apps like Skype and SlackCyberScoop·Jan 23, 20:38 UTC · Jan 23, 2018Vulnerability in the wildCVE-2018-100000660
⚡ Weekly Recap: Fiber Optic Spying, Windows Rootkit, AI Vulnerability Hunting and MoreThe Hacker News·Apr 15, 00:00 UTC · Apr 15, 2026Vulnerability in the wildCVE-2026-34621160
Digital skimmer hits global supermarket chainSansec (Magento / e-commerce security)·Apr 14, 20:16 UTC · Apr 14, 2026Vulnerability in the wild57
Android's March 2026 security patch fixes over 100 flaws, one under targeted exploitationHelp Net Security·Mar 3, 00:00 UTC · Mar 3, 2026Vulnerability in the wildCVE-2026-21385CVE-2026-0006CVE-2025-48631+8 CVEs60
ThreatsDay Bulletin: Codespaces RCE, AsyncRAT C2, BYOVD Abuse, AI Cloud Intrusions & 15+ StoriesThe Hacker News·Feb 5, 17:14 UTC · Feb 5, 2026Vulnerability in the wild160
Oracle patches exploited Agile PLM vulnerability (CVE-2024-21287)Help Net Security·Nov 19, 00:00 UTC · Nov 19, 2024Vulnerability in the wildCVE-2024-2128760
Creating a formula for effective vulnerability prioritizationHelp Net Security·Dec 18, 00:00 UTC · Dec 18, 2023Vulnerability in the wild60
Microsoft May 2020 Patch Tuesday fixes 111 flaws, 13 CriticalSecurity Affairs·May 13, 10:56 UTC · May 13, 2020Vulnerability in the wildCVE-2020-1071CVE-2020-1135CVE-2020-1067+65 CVEs60
Android July 2019 Security Update Patches 33 New VulnerabilitiesThe Hacker News·Jul 2, 09:07 UTC · Jul 2, 2019Vulnerability in the wildCVE-2019-2104CVE-2019-2276CVE-2019-2307+4 CVEs60
Wyden demands answers from telecom giants, NSA over SS7 vulnerabilitiesCyberScoop·Sep 15, 14:53 UTC · Sep 15, 2017Vulnerability in the wild60
Lookout identifies exploitable vulnerabilities in mobile appsHelp Net Security·Jul 22, 00:00 UTC · Jul 22, 2026Vulnerability in the wild160
UK weakens proposed telecoms defenses against Chinese hackers after industry pushbackThe Record·Jun 10, 06:46 UTC · Jun 10, 2026Vulnerability in the wild60
⚡ Weekly Recap: SharePoint 0-Day, Chrome Exploit, macOS Spyware, NVIDIA Toolkit RCE and MoreThe Hacker News·Jun 10, 04:47 UTC · Jun 10, 2026Vulnerability in the wildCVE-2025-53770CVE-2025-53771CVE-2025-49704+36 CVEs60
Google fixes actively exploited Android vulnerability (CVE-2025-48595)Help Net Security·Jun 2, 00:00 UTC · Jun 2, 2026Vulnerability in the wildCVE-2025-4859560
Juniper issues emergency patch for critical PTX router RCESecurity Affairs·Feb 27, 11:40 UTC · Feb 27, 2026Vulnerability in the wildCVE-2026-2190260
Microsoft Patches 59 Vulnerabilities Including Six Actively Exploited ZeroThe Hacker News·Feb 11, 14:55 UTC · Feb 11, 2026Vulnerability in the wildCVE-2026-0391CVE-2026-21510CVE-2026-21513+5 CVEs60
⚡ Weekly Recap: Drift Breach Chaos, Zero-Days Active, Patch Warnings, Smarter Threats & MoreThe Hacker News·Dec 6, 11:14 UTC · Dec 6, 2025Vulnerability in the wildCVE-2025-53690CVE-2025-38352CVE-2025-48543+25 CVEs160
Google’s latest Android security update fixes two actively exploited flawsSecurity Affairs·Dec 2, 21:00 UTC · Dec 2, 2025Vulnerability in the wildCVE-2025-48572CVE-2025-48633CVE-2025-48623+5 CVEs60
Google Releases Patches for ZeroInfosecurity Magazine·Dec 2, 11:15 UTC · Dec 2, 2025Vulnerability in the wildCVE-2025-48633CVE-2025-48572CVE-2025-4863160
Google addresses 107 Android vulnerabilities, including two zeroCyberScoop·Dec 1, 22:17 UTC · Dec 1, 2025Vulnerability in the wildCVE-2025-48633CVE-2025-48572CVE-2025-4863160
iframe Security Exposed: The Blind Spot Fueling Payment Skimmer AttacksThe Hacker News·Sep 24, 11:03 UTC · Sep 24, 2025Vulnerability in the wild60