Hardcoded SSH Key in Cisco Policy Suite Lets Remote Hackers Gain Root AccessThe Hacker News·Nov 5, 06:15 UTC · Nov 5, 2021VulnerabilityCVE-2021-40119CVE-2021-34795CVE-2021-40113+3 CVEs60
New malicious web shell from the Tropic Trooper group is found in the Middle EastKaspersky Securelist·Sep 5, 08:02 UTC · Sep 5, 2024Vulnerability in the wildCVE-2021-34473CVE-2021-34523CVE-2021-31207+1 CVEs60
"Smart city" governments should also be smart about securityHelp Net Security·Oct 15, 00:00 UTC · Oct 15, 2019Vulnerability55
‘Critical’ vulnerability found in Siemens industrial tool, allowing theft of cryptographic keysThe Record·Dec 16, 00:00 UTC · Dec 16, 2022VulnerabilityCVE-2022-3846560
WAGO Industrial Switches affected by multiple flawsSecurity Affairs·Jun 13, 21:42 UTC · Jun 13, 2019VulnerabilityCVE-2017-16544CVE-2015-0235CVE-2019-1255060
Cybercriminals Target Ethereum Developers with Fake Hardhat npm PackagesThe Hacker News·Jan 6, 11:09 UTC · Jan 6, 2025Vulnerability55
Patch now: TP-Link Archer NX routers vulnerable to firmware takeoverSecurity Affairs·Mar 25, 14:44 UTC · Mar 25, 2026Vulnerability in the wildCVE-2025-15517CVE-2025-15605CVE-2025-9377+1 CVEs60
The AI code vulnerabilities that grow with your appHelp Net Security·Jul 28, 12:11 UTC · Jul 28, 2026Vulnerability155
FamousSparrow targets Azerbaijani energy sector in multiSecurity Affairs·May 14, 08:17 UTC · May 14, 2026Vulnerability55
Chinese Hackers Use Trusted ArcGIS App For YearInfosecurity Magazine·Oct 14, 13:00 UTC · Oct 14, 2025Vulnerability55
Secure Vibe Coding: The Complete New GuideThe Hacker News·Jun 19, 11:25 UTC · Jun 19, 2025Vulnerability55
Critical SimpleHelp vulnerabilities fixed, update your server instances!Help Net Security·May 28, 10:03 UTC · May 28, 2025VulnerabilityCVE-2024-57727CVE-2024-57728CVE-2024-5772660
First patches for the Citrix ADC, Gateway RCE flaw releasedHelp Net Security·Jan 23, 13:30 UTC · Jan 23, 2024Vulnerability in the wildCVE-2019-1978160
Critical Vulnerabilities in GPS TrackersSchneier on Security·Jul 21, 13:36 UTC · Jul 21, 2022Vulnerability55
Cisco fixes small business routers, kills eavesdropping vulnerability in conferencing devicesHelp Net Security·Nov 10, 10:47 UTC · Nov 10, 2019Vulnerability in the wild60
ThreatsDay Bulletin: Edge Plaintext Passwords, ICS 0-Days, Patch-orThe Hacker News·May 7, 17:59 UTC · May 7, 2026VulnerabilityCVE-2026-7411CVE-2026-7412CVE-2026-467060
Z-Wave Downgrade Attack Left Over 100 Million IoT Devices Open to HackersThe Hacker News·May 25, 09:16 UTC · May 25, 2018Vulnerability55
Gladinet’s Triofox and CentreStack Under Active Exploitation via Critical RCE VulnerabilityThe Hacker News·Apr 21, 14:48 UTC · Apr 21, 2025Vulnerability in the wildCVE-2025-3040660
9 Popular Password Manager Apps Found Leaking Your SecretsThe Hacker News·Mar 1, 11:50 UTC · Mar 1, 2017Vulnerability55
XM Cyber advances AI security with enhanced exposure and attack path visibilityHelp Net Security·Mar 25, 09:46 UTC · Mar 25, 2026Vulnerability55
Patch this critical Safeguard for Privileged Passwords auth bypass flaw (CVE-2024-45488)Help Net Security·Sep 19, 00:00 UTC · Sep 19, 2024VulnerabilityCVE-2024-4548860
Humanoid robot found vulnerable to Bluetooth hack, data leaks to ChinaHelp Net Security·Oct 16, 00:00 UTC · Oct 16, 2025Vulnerability55
Next-gen OSDP was supposed to make it harder to break in to secure facilities. It failed.Ars Technica · Security·Aug 9, 14:30 UTC · Aug 9, 2023Vulnerability55
The Impact of Robotic Process Automation (RPA) on Identity and Access ManagementThe Hacker News·Dec 11, 11:30 UTC · Dec 11, 2025Vulnerability55
PayU Plugin Flaw Allows Account Takeover on 5000 WordPress SitesInfosecurity Magazine·Jun 9, 16:45 UTC · Jun 9, 2025VulnerabilityCVE-2025-3102260
Why AI code assistants need a security reality checkHelp Net Security·Jun 19, 00:00 UTC · Jun 19, 2025Vulnerability55
THOR: Previously Unseen PlugX Variant Deployed During Microsoft Exchange Server Attacks by PKPLUG GroupPalo Alto Unit 42·Jun 6, 12:19 UTC · Jun 6, 2024VulnerabilityCVE-2021-26855CVE-2021-2706560
Power struggle: Government-funded researchers investigate vulnerabilities in EV charging stationsCyberScoop·Feb 25, 16:36 UTC · Feb 25, 2019Vulnerability in the wild60
Schneider Electric's car charging stations get crucial patchesCyberScoop·Jan 14, 17:58 UTC · Jan 14, 2019Vulnerability55
January 2026 CVE Landscape: 23 Critical Vulnerabilities Mark 5% Increase, APT28 Exploits Microsoft Office ZeroRecorded Future·Feb 24, 00:00 UTC · Feb 24, 2026Vulnerability in the wildCVE-2026-21509CVE-2026-23760CVE-2026-1281+1 CVEs160
The Persistence Problem: Why Exposed Credentials Remain Unfixed—and How to Change ThatThe Hacker News·May 12, 11:00 UTC · May 12, 2025Vulnerability55
November 2025 CVE Landscape: 10 Critical Vulnerabilities Show 69% Drop from OctoberRecorded Future·Dec 10, 00:00 UTC · Dec 10, 2025Vulnerability in the wildCVE-2025-64446CVE-2025-58034CVE-2025-21042+1 CVEs60
How CTEM Boosts Visibility and Shrinks Attack Surfaces in Hybrid and Cloud EnvironmentsSecurity Affairs·Aug 7, 07:17 UTC · Aug 7, 2025Vulnerability55
miniOrange’s WordPress Social Login and Register plugin affected by a critical auth bypassSecurity Affairs·Jun 30, 04:03 UTC · Jun 30, 2023VulnerabilityCVE-2023-298260
Still problems for Schneider Electric, Schneider Modicon TM221CE16R has a hardcoded passwordSecurity Affairs·Apr 5, 13:16 UTC · Apr 5, 2017Vulnerability55
Cisco warns of hard-coded credentials and default SSH key issues in some productsSecurity Affairs·Nov 4, 20:19 UTC · Nov 4, 2021VulnerabilityCVE-2021-34795CVE-2021-4011960
Do We Really Need The OWASP NHI Top 10?The Hacker News·Jan 27, 15:00 UTC · Jan 27, 2025Vulnerability55
The AI security crisis no one is preparing forHelp Net Security·Aug 20, 00:00 UTC · Aug 20, 2025Vulnerability55
Crickets from Chirp Systems in Smart Lock Key LeakKrebs on Security·Apr 15, 00:00 UTC · Apr 15, 2024Vulnerability55
The Secret Vulnerability Finance Execs are MissingThe Hacker News·Feb 23, 14:40 UTC · Feb 23, 2023Vulnerability55