Barracuda thought it drove 0-day hackers out of customers’ networks. It was wrong.Ars Technica · Security·Aug 30, 17:31 UTC · Aug 30, 2023VulnerabilityCVE-2023-286860
Chinese hackers accused of using Barracuda bug against federal, local US agenciesThe Record·Aug 29, 18:50 UTC · Aug 29, 2023VulnerabilityCVE-2023-286847
Mandiant acquires Intrigue to add attack surface management technology to its SaaS portfolioHelp Net Security·Aug 12, 00:00 UTC · Aug 12, 2021Vulnerability55
Chinese spies targeting new Ivanti vulnerability, Mandiant saysThe Record·Jan 9, 20:38 UTC · Jan 9, 2025Vulnerability in the wildCVE-2025-0282CVE-2023-46805CVE-2024-21887160
FortiJump flaw CVE-2024-47575 has been exploited in zeroSecurity Affairs·Oct 24, 11:08 UTC · Oct 24, 2024Vulnerability in the wildCVE-2024-4757560
Vulnerability Exploitation on the Rise as Attackers Ditch PhishingInfosecurity Magazine·Apr 23, 13:01 UTC · Apr 23, 2024Vulnerability in the wildCVE-2023-34362CVE-2022-21587CVE-2023-286860
Nucleus Security partners with Mandiant to accelerate security and risk decision-making for organizationsHelp Net Security·Feb 2, 00:00 UTC · Feb 2, 2022Vulnerability30
Mandiant Cyber Risk Management Services addresses critical business and security requirementsHelp Net Security·May 20, 00:00 UTC · May 20, 2021Vulnerability55
FireEye insider threat security services from Mandiant protect orgs against malicious activitiesHelp Net Security·Mar 17, 00:00 UTC · Mar 17, 2021Vulnerability30
Mandiant identifies 3 hacktivist groups working in support of RussiaSecurity Affairs·Sep 27, 07:57 UTC · Sep 27, 2022Vulnerability30
Mandiant Advantage Attack Surface Management allows security teams to operationalize intelligenceHelp Net Security·Feb 3, 00:00 UTC · Feb 3, 2022Vulnerability55
Mandiant, the security firm Google bought for $5.4 billion, gets its X account hackedArs Technica · Security·Jan 4, 01:32 UTC · Jan 4, 2024Vulnerability42
Google security firm Mandiant working to resolve X account takeoverThe Record·Jan 3, 23:09 UTC · Jan 3, 2024Vulnerability30
Chinese Groups Deploy New TTPs to Exploit Ivanti VulnerabilitiesInfosecurity Magazine·Apr 5, 15:00 UTC · Apr 5, 2024VulnerabilityCVE-2023-46805CVE-2024-21887CVE-2024-2189347
Suspected Chinese hackers exploit vulnerability in Fortinet devicesThe Record·Feb 3, 00:00 UTC · Feb 3, 2023VulnerabilityCVE-2022-4247560
Fed agencies ordered to patch Dell bug by Saturday after exploitation warningThe Record·Feb 18, 21:09 UTC · Feb 18, 2026Vulnerability in the wildCVE-2026-2276960
CMS Provider Sitecore Patches Exploited Critical Zero DayInfosecurity Magazine·Sep 4, 13:30 UTC · Sep 4, 2025VulnerabilityCVE-2025-5369060
Accenture and Google Cloud expand collaboration to accelerate cybersecurity resilienceHelp Net Security·Apr 26, 00:00 UTC · Apr 26, 2023Vulnerability55
WinRAR vulnerability still a go-to tool for hackers, Mandiant warnsHelp Net Security·Jan 28, 00:00 UTC · Jan 28, 2026Vulnerability in the wildCVE-2025-808860
Critical Triofox bug exploited to run malicious payloads via AV configurationSecurity Affairs·Nov 11, 07:28 UTC · Nov 11, 2025VulnerabilityCVE-2025-12480CVE-2025-30406CVE-2025-1137160
How to chain flaws in Lenovo VIBE smartphones to gain root privilegesSecurity Affairs·Jul 4, 06:14 UTC · Jul 4, 2017VulnerabilityCVE-2017-3748CVE-2017-3749CVE-2017-375035
Cisco Vulnerability Exploited Months Before Disclosure, Google WarnsInfosecurity Magazine·Jun 25, 14:15 UTC · Jun 25, 2026VulnerabilityCVE-2026-20245CVE-2026-20127CVE-2026-2018260
Oracle PeopleSoft RCE Flaw Used as ZeroSecurity Affairs·Jun 12, 10:49 UTC · Jun 12, 2026VulnerabilityCVE-2026-35273160
Attackers exploited another Gladinet Triofox vulnerability (CVE-2025-12480)Help Net Security·Nov 11, 00:00 UTC · Nov 11, 2025VulnerabilityCVE-2025-12480CVE-2025-30406CVE-2025-31161+1 CVEs60
Vulnerability Exploitation and Credential Theft Now Top Initial AccessInfosecurity Magazine·Apr 23, 14:01 UTC · Apr 23, 2025Vulnerability30
Citrix Bleed: Mass exploitation in progress (CVE-2023-4966)Help Net Security·Nov 2, 14:31 UTC · Nov 2, 2023Vulnerability in the wildCVE-2023-496660
The latest high-severity Citrix vulnerability under attack isn’t easy to fixArs Technica · Security·Oct 19, 21:56 UTC · Oct 19, 2023Vulnerability in the wildCVE-2023-496660
3CX supply chain attack: What do we know?Help Net Security·Apr 3, 00:00 UTC · Apr 3, 2023VulnerabilityCVE-2013-3900147
Kalay cloud platform flaw exposes millions of IoT devices to hackSecurity Affairs·Aug 17, 16:55 UTC · Aug 17, 2021VulnerabilityCVE-2021-2837260
Google AI Threat Defense targets attackers using AI to find flaws fasterHelp Net Security·Jul 9, 05:49 UTC · Jul 9, 2026Vulnerability55
Oracle issued an emergency security update to fix new E-Business Suite flaw CVE-2025Security Affairs·Oct 14, 07:31 UTC · Oct 14, 2025VulnerabilityCVE-2025-61884CVE-2025-6188260
CISA orders federal agencies to patch Sitecore zeroThe Record·Sep 5, 13:37 UTC · Sep 5, 2025VulnerabilityCVE-2025-5369035
Ivanti Flaw CVE-2025-0282 Actively Exploited, Impacts Connect Secure and Policy SecureThe Hacker News·Jan 11, 06:31 UTC · Jan 11, 2025Vulnerability in the wildCVE-2025-0282CVE-2025-028360
Cybersecurity experts warn of new vulnerabilities affecting Apple, Atlassian and Fortra productsThe Record·Jan 23, 21:31 UTC · Jan 23, 2024Vulnerability in the wildCVE-2024-23222CVE-2024-0204CVE-2023-22527+2 CVEs60
Citrix warns admins to patch NetScaler CVE-2023Security Affairs·Oct 25, 09:56 UTC · Oct 25, 2023Vulnerability in the wildCVE-2023-496660
Threat actors have been exploiting CVE-2023-4966 in Citrix NetScaler ADC/Gateway devices since AugustSecurity Affairs·Oct 18, 13:56 UTC · Oct 18, 2023Vulnerability in the wildCVE-2023-4966CVE-2023-351960
Critical bug allows remote compromise, control of millions of IoT devices (CVE-2021-28372)Help Net Security·Jul 16, 13:38 UTC · Jul 16, 2023VulnerabilityCVE-2021-2837260
Chinese hackers used recently patched FortiOS SSL-VPN flaw as a zeroSecurity Affairs·Jan 20, 10:44 UTC · Jan 20, 2023Vulnerability in the wildCVE-2022-4247560
Russian hackers bypass 2FA by annoying victims with repeated push notificationsThe Record·Dec 21, 00:00 UTC · Dec 21, 2022Vulnerability42
CISA probes scope, potential fallout of Log4j vulnerabilityCyberScoop·Dec 15, 01:52 UTC · Dec 15, 2021Vulnerability in the wild60