Unpatched Prototype Pollution Flaw Affects All Versions of Popular Lodash LibraryThe Hacker News·Jul 9, 16:08 UTC · Jul 9, 2019VulnerabilityCVE-2019-1074447
Naming & Shaming Web Polluters: XiongmaiKrebs on Security·Oct 10, 00:54 UTC · Oct 10, 2018Vulnerability42
Ivanti, Fortinet, SAP, VMware, n8n Patch RCE, SQL Injection, Privilege Escalation FlawsThe Hacker News·May 18, 17:02 UTC · May 18, 2026VulnerabilityCVE-2026-8043CVE-2026-44277CVE-2026-26083+8 CVEs160
Elastic Releases Urgent Fix for Critical Kibana Vulnerability Enabling Remote Code ExecutionThe Hacker News·Mar 9, 07:55 UTC · Mar 9, 2025VulnerabilityCVE-2025-25015CVE-2024-37287CVE-2024-37288+2 CVEs60
Six Proto6 Vulnerabilities in protobuf.js Expose Node.js Apps to RCE and DoSThe Hacker News·Jun 10, 05:08 UTC · Jun 10, 2026VulnerabilityCVE-2026-44289CVE-2026-44290CVE-2026-44291+3 CVEs47
Why React Didn't Kill XSS: The New JavaScript Injection PlaybookThe Hacker News·Jul 29, 10:00 UTC · Jul 29, 2025Vulnerability55
Adobe Patches Actively Exploited Acrobat Reader Flaw CVE-2026The Hacker News·Apr 15, 00:00 UTC · Apr 15, 2026Vulnerability in the wildCVE-2026-3462160
Elastic patches critical Kibana flaw allowing code executionSecurity Affairs·Mar 6, 21:35 UTC · Mar 6, 2025VulnerabilityCVE-2025-2501260
Week in review: Free online cybersec courses, Signal post-quantum upgrade, Patch Tuesday forecastHelp Net Security·Sep 11, 00:00 UTC · Sep 11, 2022Vulnerability55
New vulnerabilities in open source packages down 20% compared to last yearHelp Net Security·Jun 29, 00:00 UTC · Jun 29, 2020Vulnerability30
Friday Squid Blogging: Giant Squid Caught Off the Coast of IrelandSchneier on Security·Jan 29, 08:02 UTC · Jan 29, 2020Vulnerability30
Why metaphor may dictate your security strategyCisco Talos·Aug 6, 18:00 UTC · Aug 6, 2026Vulnerability155
What Mozilla learned running an AI security bug hunting pipeline on FirefoxHelp Net Security·Jul 9, 05:48 UTC · Jul 9, 2026Vulnerability30
vm2 Node.js Library Vulnerabilities Enable Sandbox Escape and Arbitrary Code ExecutionThe Hacker News·May 11, 03:55 UTC · May 11, 2026VulnerabilityCVE-2026-24118CVE-2026-24120CVE-2023-37466+11 CVEs60
Cohere AI Terrarium Sandbox Flaw Enables Root Code Execution, Container EscapeThe Hacker News·Apr 22, 07:16 UTC · Apr 22, 2026VulnerabilityCVE-2026-5752160
⚡ Weekly Recap: Fiber Optic Spying, Windows Rootkit, AI Vulnerability Hunting and MoreThe Hacker News·Apr 15, 00:00 UTC · Apr 15, 2026Vulnerability in the wildCVE-2026-34621160
Tiny Township Fears Iran Drone Strikes Because of New Nuclear Weapons Datacenter404 Media·Mar 20, 17:15 UTC · Mar 20, 2026Vulnerability30
Researcher Uncovers 30+ Flaws in AI Coding Tools Enabling Data Theft and RCE AttacksThe Hacker News·Dec 15, 00:00 UTC · Dec 15, 2025VulnerabilityCVE-2025-49150CVE-2025-53097CVE-2025-58335+8 CVEs147
5 Threats That Reshaped Web Security This Year [2025]The Hacker News·Dec 4, 11:30 UTC · Dec 4, 2025VulnerabilityCVE-2025-54135CVE-2025-53109CVE-2025-5528460
Yearn Finance yETH Pool Hit by $9M ExploitInfosecurity Magazine·Dec 3, 15:30 UTC · Dec 3, 2025Vulnerability55
Friday Squid Blogging: Live Colossal Squid FilmedSchneier on Security·Apr 18, 21:02 UTC · Apr 18, 2025Vulnerability130
Rethinking Democracy for the Age of AISchneier on Security·Jan 29, 02:55 UTC · Jan 29, 2025Vulnerability30
Critical OpenWrt Vulnerability Exposes Devices to Malicious Firmware InjectionThe Hacker News·Dec 15, 00:00 UTC · Dec 15, 2024Vulnerability in the wildCVE-2024-5414360
Geopolitical tensions combined with technology will drive new security risksHelp Net Security·Jan 16, 00:00 UTC · Jan 16, 2024Vulnerability55
Alert: New Vulnerabilities Discovered in QNAP and Kyocera Device ManagerThe Hacker News·Jan 9, 09:52 UTC · Jan 9, 2024Vulnerability in the wildCVE-2023-50916CVE-2023-39296CVE-2023-47559+4 CVEs60
Friday Squid Blogging: Balloon SquidSchneier on Security·Jul 15, 00:00 UTC · Jul 15, 2023Vulnerability55
Tech manufacturers are leaving the door open for Chinese hacking, Easterly warnsThe Record·Mar 7, 19:24 UTC · Mar 7, 2023Vulnerability55
The commercial satellite boom is leaving space vulnerable to hackersThe Record·Jan 11, 00:00 UTC · Jan 11, 2023Vulnerability55
China's Great Firewall is blocking around 311k domains, 41k by accidentThe Record·Dec 13, 00:00 UTC · Dec 13, 2022Vulnerability30
Red Sift acquires Hardenize to enhance its email security solutionsHelp Net Security·Oct 14, 00:00 UTC · Oct 14, 2022Vulnerability55
Solving the indirect vulnerability enigma - fixing indirect vulnerabilities without breaking your dependency treeThe Hacker News·Jul 1, 11:06 UTC · Jul 1, 2022VulnerabilityCVE-2021-44906CVE-2020-759835
Tails OS Users Advised Not to Use Tor Browser Until Critical Firefox Bugs are PatchedThe Hacker News·May 26, 09:08 UTC · May 26, 2022VulnerabilityCVE-2022-1802CVE-2022-152960
Vulnerability Spotlight: A deep dive into macOS SMB serverCisco Talos·Jun 2, 13:13 UTC · Jun 2, 2021Vulnerability42
National Security Risks of Late-Stage CapitalismSchneier on Security·Mar 1, 12:12 UTC · Mar 1, 2021Vulnerability30
Friday Squid Blogging: Japanese "Dude Food" Includes SquidSchneier on Security·Jun 22, 16:25 UTC · Jun 22, 2020Vulnerability42