Search: “png”

50 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Malware 173 Ransomware 58 Vulnerability 51 Threat actor 35 Exploit / PoC 23 Data breach 13 Phishing & fraud 12 Research 5 Policy & legal 4 AI safety & security 3 AI tools & infra 3 Industry 3 Tools 2 AI industry 1

SeverityAll critical 76 high 176 medium 112 low 17 info 7

When a PNG Isn’t a PNG: WordPress Patches an Author-Level Imagick RCE

WordPress 7.0.4 patches an author-level RCE in how uploaded media is handed to ImageMagick.

WordPress maintenance release 7.0.4 includes a security fix that changes how uploaded media is passed to ImageMagick, closing a path that let a logged-in author turn a crafted image upload into remote code execution. Patchstack's analysis explains the flaw as a file-type handling issue where a PNG may not be treated as a PNG. The text does not mention a CVE ID or observed exploitation, but the flaw affects extremely widely deployed software.

PatchstackAug 12, 15:32 UTC · Aug 12, 2026Vulnerability

68

Threat Roundup for August 27 to September 3

Cisco TalosSep 3, 16:57 UTC · Sep 3, 2021Vulnerability

30

Master Keys and Vulnerabilities

Kaspersky SecurelistJul 22, 01:37 UTC · Jul 22, 2013Vulnerability

55

Vulnerability Spotlight: Accusoft ImageGear PNG IHDR width code execution vulnerability

Cisco TalosDec 2, 18:38 UTC · Dec 2, 2019Vulnerability in the wildCVE-2019-5083 CVE-2019-5076 CVE-2019-5132+1 CVEs

60

ThreatsDay Bulletin: Pixel Zero-Click, Redis RCE, China C2s, RAT Ads, Crypto Scams & 15+ Stories

The Hacker NewsJan 24, 08:04 UTC · Jan 24, 2026Vulnerability

55

Sundown Exploit Kit now leverages on the steganography

Security AffairsDec 30, 20:33 UTC · Dec 30, 2016Vulnerability CVE-2015-2419 CVE-2016-0189 CVE-2016-4117

35

Multiple VLC Media Player Vulnerabilities Allow Attackers to Corrupt or Read Heap Memory

Two VLC 3.0 flaws, CVE-2026-56711 (heap corruption, CVSS 8.6) and CVE-2026-73324 (memory leak), let crafted PNGs or RTSP playlists corrupt memory or leak data.

Hap Security researcher Fabian Wahle disclosed two VLC Media Player flaws on September 9, 2026, affecting versions 3.0.0 through 3.0.23. CVE-2026-56711 (CVSS 8.6) is an integer overflow and out-of-bounds write in the AllocatePicture function, exploitable via a crafted PNG with oversized IHDR dimensions, potentially causing crashes or code execution. CVE-2026-73324 (CVSS 6.9) lets a malicious RTSP server read adjacent heap memory through an unterminated 4096-byte response line, triggerable via a realrtsp playlist URL. No patched release is confirmed yet; users should avoid untrusted media files, playlists, and RTSP streams.

Cyber Security NewsSep 12, 14:31 UTC · 4d agoVulnerability 2 sources CVE-2026-56711 CVE-2026-733241

52

CISA Urges Federal Agencies to Patch Versa Director Vulnerability by September

The Hacker NewsAug 24, 07:03 UTC · Aug 24, 2024Vulnerability in the wildCVE-2024-39717 CVE-2021-33044 CVE-2021-33045+2 CVEs1

60

North Korea-linked APT Diamond Sleet supply chain attack relies on CyberLink software

Security AffairsDec 6, 09:09 UTC · Dec 6, 2023Vulnerability CVE-2023-42793

60

APT28 Uses Microsoft Office CVE-2026-21509 in Espionage

The Hacker NewsFeb 4, 16:49 UTC · Feb 4, 2026Vulnerability CVE-2026-215091

47

Vulnerability Spotlight: Multiple code execution vulnerabilities in Accusoft ImageGear

Cisco TalosMay 5, 19:27 UTC · May 5, 2020Vulnerability in the wildCVE-2020-6075 CVE-2020-6076 CVE-2020-6082+1 CVEs

60

Microsoft Patch Tuesday for March 2015: 14 Bulletins Released; FREAK Patched

Cisco TalosMar 10, 12:45 UTC · Mar 10, 2015Vulnerability CVE-2015-0072 CVE-2015-0032 CVE-2015-0081+30 CVEs

60

Highly critical vulnerability in Netscape 7.x

Kaspersky SecurelistDec 3, 13:20 UTC · Dec 3, 2004Vulnerability

55

PolyShell: unrestricted file upload in Magento and Adobe Commerce

Sansec (Magento / e-commerce security)May 12, 10:55 UTC · May 12, 2026Vulnerability in the wild

60

Magento PolyShell Flaw Enables Unauthenticated Uploads, RCE and Account Takeover

The Hacker NewsMar 26, 06:26 UTC · Mar 26, 2026Vulnerability in the wild

60

⚡ Weekly Recap: IoT Exploits, Wallet Breaches, Rogue Extensions, AI Abuse & More

The Hacker NewsJan 5, 12:56 UTC · Jan 5, 2026Vulnerability CVE-2025-55182 CVE-2025-13915 CVE-2025-52691+7 CVEs

60

Fake "Windows Update" screen fuels new wave of ClickFix attacks

Help Net SecurityNov 28, 10:21 UTC · Nov 28, 2025Vulnerability

30

Banking Web Injects Are Top Cyber Threat for Financial Sector

Recorded FutureNov 21, 00:00 UTC · Nov 21, 2025Vulnerability

42

Rust Adoption Drives Android Memory Safety Bugs Below 20% for First Time

The Hacker NewsNov 17, 07:39 UTC · Nov 17, 2025Vulnerability CVE-2025-48530

60

Mysterious Elephant APT: TTPs and tools

Kaspersky SecurelistOct 15, 10:00 UTC · Oct 15, 2025Vulnerability CVE-2017-11882

47

Shell No! (Part 2) Introducing Cknife, China Chopper’s Sibling

Recorded FutureJun 27, 00:00 UTC · Jun 27, 2025Vulnerability

42

Fake Recruiter Emails Target CFOs Using Legit NetBird Tool Across 6 Global Regions

The Hacker NewsJun 2, 10:08 UTC · Jun 2, 2025Vulnerability CVE-2017-11882

35

Chinese Android Phones Shipped with Fake WhatsApp, Telegram Apps Targeting Crypto Users

The Hacker NewsApr 17, 11:00 UTC · Apr 17, 2025Vulnerability

42

GOFFEE’s recent attacks: new tools and techniques

Kaspersky SecurelistApr 10, 10:00 UTC · Apr 10, 2025Vulnerability1

30

IcePeony and Transparent Tribe Target Indian Entities with Cloud

The Hacker NewsNov 11, 13:18 UTC · Nov 11, 2024Vulnerability CVE-2022-30190

47

SideWinder APT’s post

Kaspersky SecurelistOct 15, 10:00 UTC · Oct 15, 2024Vulnerability CVE-2017-11882

47

North Korean attack on CyberLink impacted devices around the world, Microsoft says

The RecordNov 22, 22:56 UTC · Nov 22, 2023Vulnerability

42

Critical libwebp Vulnerability Under Active Exploitation

The Hacker NewsOct 3, 16:10 UTC · Oct 3, 2023Vulnerability in the wildCVE-2023-5129 CVE-2023-41064 CVE-2023-4863+5 CVEs

60

Watch out! CVE-2023-5129 in libwebp library affects millions apps

Security AffairsSep 27, 13:35 UTC · Sep 27, 2023Vulnerability in the wildCVE-2023-5129 CVE-2023-4863 CVE-2023-41064+1 CVEs1

60

Google quietly corrects previously submitted disclosure for critical webp 0

Ars Technica · SecuritySep 27, 00:47 UTC · Sep 27, 2023Vulnerability CVE-2023-4863 CVE-2023-5129

60

Unmasking XE Group: Experts Reveal Identity of Suspected Cybercrime Kingpin

The Hacker NewsJun 1, 14:55 UTC · Jun 1, 2023Vulnerability CVE-2019-18935

60

Multiple Hacker Groups Exploit 3-Year-Old Vulnerability to Breach U.S. Federal Agency

The Hacker NewsMar 15, 00:00 UTC · Mar 15, 2023Vulnerability in the wildCVE-2019-18935 CVE-2017-11317 CVE-2017-11357

60

Researchers Uncover New Bugs in Popular ImageMagick Image Processing Utility

The Hacker NewsFeb 2, 05:19 UTC · Feb 2, 2023Vulnerability CVE-2022-44267 CVE-2022-44268

47

Two more malicious Python packages in the PyPI

Kaspersky SecurelistAug 16, 12:13 UTC · Aug 16, 2022Vulnerability1

30

Watch Out! Cryptocurrency Miners Targeting Dockers, AWS and Alibaba Cloud

The Hacker NewsApr 22, 09:30 UTC · Apr 22, 2022Vulnerability in the wildCVE-2022-22965

60

Expert earned +$100K to hack Apple MacBook webcam and microphone

Security AffairsJan 31, 12:21 UTC · Jan 31, 2022Vulnerability CVE-2021-30861 CVE-2021-30975

35

Apple Pays $100,500 Bounty to Hacker Who Found Way to Hack MacBook Webcam

The Hacker NewsJan 31, 06:07 UTC · Jan 31, 2022Vulnerability CVE-2021-30861 CVE-2021-30975

35

GhostEmperor: From ProxyLogon to kernel mode

Kaspersky SecurelistSep 30, 10:00 UTC · Sep 30, 2021Vulnerability

42

WhatsApp CVE-2020-1910 bug could have led to user data exposure

Security AffairsSep 2, 21:20 UTC · Sep 2, 2021Vulnerability CVE-2020-1910

47

Vulnerability Spotlight: Multiple vulnerabilities in Pixar OpenUSD affects some versions of macOS

Cisco TalosNov 12, 20:15 UTC · Nov 12, 2020Vulnerability CVE-2020-6155 CVE-2020-13494 CVE-2020-13495+5 CVEs

47