Spam report: June 2010Kaspersky Securelist·Jul 21, 17:08 UTC · Jul 21, 2010Vulnerability in the wild60
Russian APT targets Ukraine via Zimbra XSS flaw CVE-2025Security Affairs·Mar 19, 14:48 UTC · Mar 19, 2026Vulnerability in the wildCVE-2025-6637660
Why React Didn't Kill XSS: The New JavaScript Injection PlaybookThe Hacker News·Jul 29, 10:00 UTC · Jul 29, 2025Vulnerability55
Void Banshee exploits CVE-2024-38112 zeroSecurity Affairs·Jul 17, 14:16 UTC · Jul 17, 2024Vulnerability in the wildCVE-2024-38112CVE-2021-4044460
Researchers disclosed details of #EFAIL attacks on in PGP and S/MIME tools. Experts believe claims are overblownSecurity Affairs·May 14, 18:07 UTC · May 14, 2018VulnerabilityCVE-2017-17688CVE-2017-1768960
GitLab Duo Vulnerability Enabled Attackers to Hijack AI Responses with Hidden PromptsThe Hacker News·May 23, 04:34 UTC · May 23, 2025Vulnerability55
Threat Brief: CVE-2022-30190Palo Alto Unit 42·Jun 5, 20:40 UTC · Jun 5, 2024VulnerabilityCVE-2022-3019060
Moodle vulnerability exposed users to account takeoverSecurity Affairs·Apr 8, 20:22 UTC · Apr 8, 2021Vulnerability55
Adobe fixes flaws in Adobe InDesign,Framemaker, Experience ManagerSecurity Affairs·Sep 8, 20:43 UTC · Sep 8, 2020VulnerabilityCVE-2020-9727CVE-2020-9728CVE-2020-9729+15 CVEs60
Thunderbird Version 52.9 addresses several issues, including the EFAIL flawSecurity Affairs·Jul 5, 15:28 UTC · Jul 5, 2018VulnerabilityCVE-2018-12372CVE-2018-12373CVE-2018-12359+2 CVEs60
Microsoft Patch TuesdayCisco Talos·Jun 13, 20:48 UTC · Jun 13, 2017VulnerabilityCVE-2017-0283CVE-2017-0291CVE-2017-0292+37 CVEs60
TA577 Exploits NTLM Authentication VulnerabilityInfosecurity Magazine·Mar 4, 16:30 UTC · Mar 4, 2024Vulnerability55
Critical RCE Vulnerability Discovered in Popular Cobalt Strike Hacking SoftwareThe Hacker News·Oct 19, 06:29 UTC · Oct 19, 2022VulnerabilityCVE-2022-42948CVE-2022-3919760
Critical RCE impacts popular postSecurity Affairs·Oct 18, 12:27 UTC · Oct 18, 2022VulnerabilityCVE-2022-42948CVE-2022-3919760
Microsoft Patch Tuesday, June 2022 EditionKrebs on Security·Jun 15, 00:00 UTC · Jun 15, 2022Vulnerability in the wildCVE-2022-30190CVE-2022-3013660
Microsoft March 2022 Patch Tuesday updates fix 89 vulnerabilitiesSecurity Affairs·Mar 9, 00:26 UTC · Mar 9, 2022Vulnerability in the wildCVE-2022-21990CVE-2022-24459CVE-2022-24512+64 CVEs160
Gamaredon Uses WinRAR Vulnerability to Launch Modular Spy Campaign on Ukrainian TargetsSecurity Affairs·Jun 4, 10:53 UTC · Jun 4, 2026VulnerabilityCVE-2025-808860
Gamaredon Exploits WinRAR to Deliver GammaWorm and GammaSteel Against UkraineThe Hacker News·Jun 2, 18:21 UTC · Jun 2, 2026VulnerabilityCVE-2025-8088CVE-2026-2150960
Attackers use MS Teams, fake mailbox repair utility to breach organizationsHelp Net Security·Apr 27, 00:00 UTC · Apr 27, 2026Vulnerability55
APT28 Tied to CVE-2026-21513 MSHTML 0-Day Exploited Before Feb 2026 Patch TuesdayThe Hacker News·Mar 2, 10:36 UTC · Mar 2, 2026VulnerabilityCVE-2026-21513CVE-2026-21509160
Flaws in Popular IDE Extensions Allow Data ExfiltrationInfosecurity Magazine·Feb 19, 10:45 UTC · Feb 19, 2026VulnerabilityCVE-2025-65717CVE-2025-65716CVE-2025-6571560
Microsoft Patches 59 Vulnerabilities Including Six Actively Exploited ZeroThe Hacker News·Feb 11, 14:55 UTC · Feb 11, 2026Vulnerability in the wildCVE-2026-0391CVE-2026-21510CVE-2026-21513+5 CVEs60
Critical AdonisJS Bodyparser Flaw (CVSS 9.2) Enables Arbitrary File Write on ServersThe Hacker News·Jan 8, 04:45 UTC · Jan 8, 2026VulnerabilityCVE-2026-21440CVE-2025-6842860
CVE-2025-10585 is the sixth actively exploited Chrome zeroSecurity Affairs·Nov 18, 08:52 UTC · Nov 18, 2025Vulnerability in the wildCVE-2025-10585CVE-2025-5419CVE-2025-4664+3 CVEs60
CVE-2025-6554 is the fourth Chrome zeroSecurity Affairs·Jul 2, 08:21 UTC · Jul 2, 2025Vulnerability in the wildCVE-2025-6554CVE-2025-5419CVE-2025-4664+1 CVEs60
WordPress 6.4.2 fixed a Remote Code Execution (RCE) flawSecurity Affairs·Dec 10, 12:57 UTC · Dec 10, 2023Vulnerability55
WordPress Releases Update 6.4.2 to Address Critical Remote Attack VulnerabilityThe Hacker News·Dec 8, 09:23 UTC · Dec 8, 2023Vulnerability55
Mastodon Social Network Patches Critical Flaws Allowing Server TakeoverThe Hacker News·Jul 7, 12:55 UTC · Jul 7, 2023VulnerabilityCVE-2023-36460CVE-2023-3645960
How configuration assessments help improve cyber defensesHelp Net Security·Mar 9, 20:13 UTC · Mar 9, 2023Vulnerability55
Patch Tuesday: Microsoft Issues Fix for Actively Exploited 'Follina' VulnerabilityThe Hacker News·Jun 15, 00:00 UTC · Jun 15, 2022Vulnerability in the wildCVE-2022-30190CVE-2022-30136CVE-2022-30163+1 CVEs60
Researchers Warn of Unpatched "DogWalk" Microsoft Windows VulnerabilityThe Hacker News·Jun 9, 05:26 UTC · Jun 9, 2022Vulnerability in the wildCVE-2022-3019060
CVE-2022-30190 (Follina) vulnerability in MSDT: description and counteractionKaspersky Securelist·Jun 6, 08:00 UTC · Jun 6, 2022Vulnerability in the wildCVE-2022-30190CVE-2017-0199CVE-2021-4044460
Adobe fixes critical flaws in Magento, patch it immediatelySecurity Affairs·Aug 11, 08:07 UTC · Aug 11, 2021VulnerabilityCVE-2020-9697CVE-2020-971260
Microsoft's March Patch Tuesday fixes 14 Critical flawsSecurity Affairs·Mar 10, 08:16 UTC · Mar 10, 2021Vulnerability in the wildCVE-2021-26411CVE-2021-26897CVE-2021-27074+2 CVEs60
Cisco Reissues Patches for Critical Bugs in Jabber Video Conferencing SoftwareThe Hacker News·Dec 10, 16:37 UTC · Dec 10, 2020VulnerabilityCVE-2020-26085CVE-2020-3495CVE-2020-27132+1 CVEs60
Mozilla offers rewards for Bypassing Firefox Exploit MitigationsSecurity Affairs·Aug 21, 15:55 UTC · Aug 21, 2020Vulnerability55
Google WordPress Site Kit plugin grants attacker Search Console AccessSecurity Affairs·May 14, 10:20 UTC · May 14, 2020Vulnerability55
Drupal addresses two XSS flaws by updating the CKEditorSecurity Affairs·Mar 20, 08:31 UTC · Mar 20, 2020Vulnerability55
Expert awarded $10,000 for a new XSS flaw in Yahoo MailSecurity Affairs·Feb 25, 10:02 UTC · Feb 25, 2019Vulnerability55