Session Hijacking 2.0 — The Latest Way That Attackers are Bypassing MFAThe Hacker News·Sep 30, 12:50 UTC · Sep 30, 2024Vulnerability30
Vulnerability Exploitation and Credential Theft Now Top Initial AccessInfosecurity Magazine·Apr 23, 14:01 UTC · Apr 23, 2025Vulnerability30
New infostealer reaches enterprise devices through FortiClient EMS vulnerabilityHelp Net Security·May 29, 00:00 UTC · May 29, 2026VulnerabilityCVE-2026-3561660
Attackers exploiting WSUS vulnerability drop Skuld infostealer (CVE-2025-59287)Help Net Security·Oct 30, 00:00 UTC · Oct 30, 2025Vulnerability in the wildCVE-2025-5928760
H1 2022: Malware and Vulnerability Trends ReportRecorded Future·Aug 22, 00:00 UTC · Aug 22, 2025VulnerabilityCVE-2021-34473CVE-2021-34523CVE-2021-3120760
8220 gang exploits old Oracle WebLogic vulnerability to deliver infostealers, cryptominersHelp Net Security·Dec 20, 00:00 UTC · Dec 20, 2023VulnerabilityCVE-2020-14883CVE-2017-3506CVE-2020-1488260
Week in review: High severity WordPress vulnerabilities, fake OAuth IDs bypass sign-in logsHelp Net Security·Jul 19, 00:00 UTC · Jul 19, 2026Vulnerability in the wildCVE-2026-15409CVE-2026-15410CVE-2026-56155+2 CVEs60
ThreatsDay Bulletin: Worm Code Leaked, AI Agent Phished, Claude Code Patch + 28 New StoriesThe Hacker News·Jun 12, 05:36 UTC · Jun 12, 2026Vulnerability142
ThreatsDay Bulletin: SMS Blaster Busts, OpenEMR Flaws, 600K Roblox Hacks and 25 More StoriesThe Hacker News·May 1, 07:21 UTC · May 1, 2026VulnerabilityCVE-2019-070847
Compromised WordPress Sites Deliver ClickFix AttacksInfosecurity Magazine·Mar 11, 14:45 UTC · Mar 11, 2026Vulnerability30
ThreatsDay Bulletin: Pixel Zero-Click, Redis RCE, China C2s, RAT Ads, Crypto Scams & 15+ StoriesThe Hacker News·Jan 24, 08:04 UTC · Jan 24, 2026Vulnerability55
Week in review: Fake ChatGPT desktop client steals data, Patch Tuesday forecastHelp Net Security·May 7, 00:00 UTC · May 7, 2023VulnerabilityCVE-2023-20126CVE-2018-9995CVE-2016-20016+1 CVEs60
Week in review: Cisco fixes IMC bug, Patch Tuesday forecast, Black Hat USA 2026Help Net Security·Aug 9, 00:00 UTC · Aug 9, 2026VulnerabilityCVE-2026-66066CVE-2026-18577160
ThreatsDay Bulletin: OpenSSL RCE, Foxit 0-Days, Copilot Leak, AI Password Flaws & 20+ StoriesThe Hacker News·Feb 23, 10:23 UTC · Feb 23, 2026Vulnerability55
Fake "Windows Update" screen fuels new wave of ClickFix attacksHelp Net Security·Nov 28, 10:21 UTC · Nov 28, 2025Vulnerability30
H1 2025 Malware and Vulnerability TrendsRecorded Future·Nov 13, 00:00 UTC · Nov 13, 2025Vulnerability in the wild60
Cybercriminals exploit RMM tools to steal real-world cargoHelp Net Security·Nov 4, 00:00 UTC · Nov 4, 2025Vulnerability42
Week in review: 300k+ Plex Media Server instances still vulnerable to attack, exploited Git RCE flawHelp Net Security·Aug 31, 00:00 UTC · Aug 31, 2025VulnerabilityCVE-2025-34158CVE-2025-48384CVE-2025-777560
Kaspersky crimeware report: Emotet, DarkGate and LokiBotKaspersky Securelist·Aug 3, 10:00 UTC · Aug 3, 2023VulnerabilityCVE-2017-0199CVE-2017-1188235
End of 2021 witnessed an explosion of RDP brute-force attacksHelp Net Security·Feb 9, 00:00 UTC · Feb 9, 2022VulnerabilityCVE-2017-1188247
How attackers hosted a fake Claude download page on the claude.ai domainHelp Net Security·Jul 23, 00:00 UTC · Jul 23, 2026Vulnerability30
PurpleBravo’s Targeting of the IT Software Supply ChainRecorded Future·Jul 22, 00:00 UTC · Jul 22, 2026Vulnerability42
Russian Hacker Turns Jailbroken Claude Into Pentest PlatformInfosecurity Magazine·Jul 21, 14:00 UTC · Jul 21, 2026Vulnerability55
⚡ Weekly Recap: WordPress RCE, SonicWall 0-Days, AI Service Attacks, SharePoint 0The Hacker News·Jul 21, 04:34 UTC · Jul 21, 2026Vulnerability in the wildCVE-2026-63030CVE-2026-60137CVE-2026-15409+26 CVEs60
Critical SimpleHelp Vulnerability Exploited For Malware DeliveryInfosecurity Magazine·Jun 30, 15:34 UTC · Jun 30, 2026Vulnerability in the wildCVE-2026-4855860
Beyond the Code: Unearthing the Subtle Business Ramifications of Six Months in VulnerabilitiesRecorded Future·Jun 23, 00:00 UTC · Jun 23, 2026VulnerabilityCVE-2022-41082CVE-2023-0669CVE-2023-286860
⚡ Weekly Recap: SharePoint 0-Day, Chrome Exploit, macOS Spyware, NVIDIA Toolkit RCE and MoreThe Hacker News·Jun 10, 04:47 UTC · Jun 10, 2026Vulnerability in the wildCVE-2025-53770CVE-2025-53771CVE-2025-49704+36 CVEs60
Emerging AI Threats: The Future of Automated OperationsRecorded Future·Jun 4, 00:00 UTC · Jun 4, 2026Vulnerability55
Miasma Supply Chain Attack Compromises Red Hat npm Packages with CredentialThe Hacker News·Jun 2, 08:55 UTC · Jun 2, 2026Vulnerability42
PAN-OS GlobalProtect Authentication Bypass (CVE-2026The Hacker News·May 31, 12:13 UTC · May 31, 2026Vulnerability in the wildCVE-2026-0257CVE-2026-3561660
CVE-2026-35616: FortiClient EMS Flaw Actively Exploited in Malware AttacksSecurity Affairs·May 29, 09:02 UTC · May 29, 2026Vulnerability in the wildCVE-2026-3561660
At Mythos Speed: A Defender's Playbook for the AI Vulnerability Surge in 2026Recorded Future·May 21, 00:00 UTC · May 21, 2026Vulnerability in the wildCVE-2025-5518260
Verizon DBIR: Vulnerability exploitation is the dominant initial access vectorHelp Net Security·May 20, 00:00 UTC · May 20, 2026Vulnerability in the wild60
ThreatsDay Bulletin: PAN-OS RCE, Mythos cURL Bug, AI Tokenizer Attacks, and 10+ StoriesThe Hacker News·May 15, 00:00 UTC · May 15, 2026VulnerabilityCVE-2026-030060
Australian Cyber Security Centre Issues Alert Over ClickFix AttacksInfosecurity Magazine·May 8, 11:00 UTC · May 8, 2026Vulnerability30
ThreatsDay Bulletin: Edge Plaintext Passwords, ICS 0-Days, Patch-orThe Hacker News·May 7, 17:59 UTC · May 7, 2026VulnerabilityCVE-2026-7411CVE-2026-7412CVE-2026-467060
⚡ Weekly Recap: Fiber Optic Spying, Windows Rootkit, AI Vulnerability Hunting and MoreThe Hacker News·Apr 15, 00:00 UTC · Apr 15, 2026Vulnerability in the wildCVE-2026-34621160
Critical Vulnerability in Ninja Forms Exposes WordPress SitesInfosecurity Magazine·Apr 8, 15:10 UTC · Apr 8, 2026Vulnerability55