AI-Enhanced Tuoni Framework Targets Major US Real Estate FirmInfosecurity Magazine·Nov 18, 14:45 UTC · Nov 18, 2025Vulnerability30
THOR: Previously Unseen PlugX Variant Deployed During Microsoft Exchange Server Attacks by PKPLUG GroupPalo Alto Unit 42·Jun 6, 12:19 UTC · Jun 6, 2024VulnerabilityCVE-2021-26855CVE-2021-2706560
GhostEmperor: From ProxyLogon to kernel modeKaspersky Securelist·Sep 30, 10:00 UTC · Sep 30, 2021Vulnerability42
Unpatched critical Atlassian Confluence ZeroSecurity Affairs·Jun 3, 10:13 UTC · Jun 3, 2022Vulnerability in the wildCVE-2022-26134CVE-2021-2608460
Vulnerability Spotlight: A deep dive into macOS SMB serverCisco Talos·Jun 2, 13:13 UTC · Jun 2, 2021Vulnerability42
Serious security issue affects SAP HANA systemsSecurity Affairs·Apr 13, 06:48 UTC · Apr 13, 2017Vulnerability30
ThreatsDay: Odysseus RCE, Samsung One-Click Takeover, iCloud Backdoor Fight + 27 More StoriesThe Hacker News·Aug 6, 15:24 UTC · Aug 6, 2026VulnerabilityCVE-2025-21079CVE-2025-58486247
New DirtyClone Linux Kernel Flaw Lets Local Users Gain Root via Cloned PacketsThe Hacker News·Jun 26, 13:40 UTC · Jun 26, 2026VulnerabilityCVE-2026-43503CVE-2026-31431CVE-2026-43284+2 CVEs35
ThreatsDay Bulletin: Worm Code Leaked, AI Agent Phished, Claude Code Patch + 28 New StoriesThe Hacker News·Jun 12, 05:36 UTC · Jun 12, 2026Vulnerability142
Google Adds Rust-Based DNS Parser into Pixel 10 Modem to Enhance SecurityThe Hacker News·Apr 15, 00:00 UTC · Apr 15, 2026VulnerabilityCVE-2024-27227147
ThreatsDay Bulletin: DDR5 Bot Scalping, Samsung TV Tracking, Reddit Privacy Fine & MoreThe Hacker News·Mar 5, 13:50 UTC · Mar 5, 2026Vulnerability42
ThreatsDay Bulletin: OpenSSL RCE, Foxit 0-Days, Copilot Leak, AI Password Flaws & 20+ StoriesThe Hacker News·Feb 23, 10:23 UTC · Feb 23, 2026Vulnerability55
Microsoft releases urgent Office patch. RussianArs Technica · Security·Feb 4, 23:08 UTC · Feb 4, 2026VulnerabilityCVE-2026-21509160
APT28 Uses Microsoft Office CVE-2026-21509 in EspionageThe Hacker News·Feb 4, 16:49 UTC · Feb 4, 2026VulnerabilityCVE-2026-21509147
ThreatsDay Bulletin: AI Voice Cloning Exploit, Wi-Fi Kill Switch, PLC Vulns, and 14 More StoriesThe Hacker News·Jan 19, 06:25 UTC · Jan 19, 2026VulnerabilityCVE-2025-62507CVE-2025-23304CVE-2026-22584160
New MongoDB Flaw Lets Unauthenticated Attackers Read Uninitialized MemoryThe Hacker News·Dec 29, 07:14 UTC · Dec 29, 2025VulnerabilityCVE-2025-1484747
Unpatched Windows vulnerability continues to be exploited by APTs (CVE-2025-9491)Help Net Security·Dec 5, 09:00 UTC · Dec 5, 2025VulnerabilityCVE-2025-949160
Fake "Windows Update" screen fuels new wave of ClickFix attacksHelp Net Security·Nov 28, 10:21 UTC · Nov 28, 2025Vulnerability30
Researchers Detail Tuoni C2's Role in an Attempted 2025 RealThe Hacker News·Nov 18, 14:00 UTC · Nov 18, 2025Vulnerability30
Leaked Oracle EBS exploit scripts expected to drive new wave of attacks (CVE-2025-61882)Help Net Security·Oct 9, 16:24 UTC · Oct 9, 2025Vulnerability in the wildCVE-2025-6188260
13-Year-Old Redis Flaw Exposed: CVSS 10.0 Vulnerability Lets Attackers Run Code RemotelyThe Hacker News·Oct 7, 09:30 UTC · Oct 7, 2025Vulnerability in the wildCVE-2025-4984460
Redis patches critical "RediShell" RCE vulnerability, update ASAP! (CVE-2025-49844)Help Net Security·Oct 7, 00:00 UTC · Oct 7, 2025Vulnerability in the wildCVE-2025-4984460
Chinese APT Actor Compromises Military Firm with Novel Fileless MalwarInfosecurity Magazine·Sep 11, 13:45 UTC · Sep 11, 2025Vulnerability42
Attackers use "Contact Us" forms and fake NDAs to phish industrial manufacturing firmsHelp Net Security·Aug 29, 00:00 UTC · Aug 29, 2025Vulnerability55
Train smarter, respond faster: Close the skill gaps in your SOCHelp Net Security·Jul 9, 00:00 UTC · Jul 9, 2025Vulnerability42
Cyber Intel Pros and Hobbyists Can Now Report Threats AnonymouslyInfosecurity Magazine·Jun 24, 08:00 UTC · Jun 24, 2025Vulnerability30
Kali Linux 2025.2 delivers Bloodhound CE, CARsenal, 13 new toolsHelp Net Security·Jun 14, 00:00 UTC · Jun 14, 2025Vulnerability30
UAT-6382 exploits Cityworks zeroCisco Talos·May 22, 10:00 UTC · May 22, 2025Vulnerability in the wildCVE-2025-0994CVE-2025-094460
Ivanti VPN customers targeted via unrecognized RCE vulnerability (CVE-2025-22457)Help Net Security·Apr 11, 10:14 UTC · Apr 11, 2025Vulnerability in the wildCVE-2025-22457CVE-2025-0282CVE-2023-46805+2 CVEs60
SideWinder APT attacks in H2 2024Kaspersky Securelist·Mar 10, 10:01 UTC · Mar 10, 2025VulnerabilityCVE-2017-1188247
Microsoft announces new and improved Windows 11 security featuresHelp Net Security·Nov 19, 00:00 UTC · Nov 19, 2024Vulnerability55
Windows Server 2025 gets hotpatching option, without rebootsHelp Net Security·Sep 23, 00:00 UTC · Sep 23, 2024Vulnerability130
Hackers Exploit PHP Vulnerability to Deploy Stealthy Msupedge BackdoorThe Hacker News·Aug 21, 03:50 UTC · Aug 21, 2024VulnerabilityCVE-2024-457760
Weaponization of Excel Add-Ins Part 2: Dridex Infection Chain Case StudiesPalo Alto Unit 42·Jun 5, 20:44 UTC · Jun 5, 2024Vulnerability30
Chinese actor 'Unfading Sea Haze' remained undetected for five yearsSecurity Affairs·May 23, 08:55 UTC · May 23, 2024Vulnerability42
Researchers Warn of Chinese-Aligned Hackers Targeting South China Sea CountriesThe Hacker News·May 22, 16:44 UTC · May 22, 2024Vulnerability55
Three New Critical Vulnerabilities Uncovered in ArgoInfosecurity Magazine·Mar 18, 14:00 UTC · Mar 18, 2024VulnerabilityCVE-2024-21662CVE-2024-21652CVE-2024-2166160