Search: “retrieval”

90 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Exploit / PoC 134 Vulnerability 90 Malware 90 Ransomware 53 Threat actor 47 Phishing & fraud 23 AI safety & security 18 Data breach 12 Policy & legal 6 Industry 2

SeverityAll critical 279 high 105 medium 81 low 8 info 2

From LFI to RCE: Active Exploitation Detected in Gladinet and TrioFox Vulnerability

The Hacker NewsOct 15, 00:00 UTC · Oct 15, 2025Vulnerability in the wildCVE-2025-11371 CVE-2025-30406

60

Attackers Use LLM Agent for Post-Exploitation After Marimo CVE-2026

The Hacker NewsMay 31, 12:13 UTC · May 31, 2026Vulnerability in the wildCVE-2026-39987

60

Active exploitation of the MOVEit Transfer vulnerability — CVE-2023

Cisco TalosJun 16, 18:17 UTC · Jun 16, 2023Vulnerability in the wildCVE-2023-34362 CVE-2023-35036 CVE-2023-35708

60

SimpleHelp vulnerability exploited to deliver mighty Djinn Stealer (CVE-2026-48558)

Help Net SecurityJun 30, 00:00 UTC · Jun 30, 2026Vulnerability in the wildCVE-2026-485581

60

Attackers are exploiting Gladinet CentreStack, Triofox vulnerability with no patch (CVE-2025-11371)

Help Net SecurityOct 17, 08:06 UTC · Oct 17, 2025Vulnerability in the wildCVE-2025-11371 CVE-2025-30406

60

Cleo File Transfer Vulnerability Under Exploitation

The Hacker NewsDec 18, 04:09 UTC · Dec 18, 2024Vulnerability in the wildCVE-2024-50623 CVE-2024-55956

60

Critical Unpatched Ray AI Platform Vulnerability Exploited for Cryptocurrency Mining

The Hacker NewsMar 28, 04:46 UTC · Mar 28, 2024Vulnerability in the wildCVE-2023-48022

60

Fortinet Warns of Severe SQLi Vulnerability in FortiClientEMS Software

The Hacker NewsMar 22, 03:02 UTC · Mar 22, 2024Vulnerability in the wildCVE-2023-48788 CVE-2023-42789 CVE-2023-427901

60

Week in review: KeePass vulnerability, Apple fixes exploited WebKit 0-days

Help Net SecurityMay 21, 00:00 UTC · May 21, 2023Vulnerability in the wildCVE-2023-28204 CVE-2023-32373 CVE-2023-32409+1 CVEs

60

US CISA warns of a Samsung vulnerability under active exploitation

Security AffairsMay 20, 09:59 UTC · May 20, 2023Vulnerability in the wildCVE-2023-21492 CVE-2004-1464 CVE-2016-6415

60

Simjacker vulnerability actively exploited to track, spy on mobile phone owners

Help Net SecuritySep 12, 00:00 UTC · Sep 12, 2019Vulnerability in the wild

60

⚡ Weekly Recap: WordPress RCE, SonicWall 0-Days, AI Service Attacks, SharePoint 0

The Hacker NewsJul 21, 04:34 UTC · Jul 21, 2026Vulnerability in the wildCVE-2026-63030 CVE-2026-60137 CVE-2026-15409+26 CVEs1

60

Attackers Exploit SimpleHelp CVE-2026-48558 to Deploy TaskWeaver and Djinn Stealer

The Hacker NewsJun 30, 11:18 UTC · Jun 30, 2026Vulnerability in the wildCVE-2026-485582

60

Palo Alto Warns of Exploitation of VPN Bypass Exploits (CVE-2026-0257) in PAN

Security AffairsJun 15, 11:11 UTC · Jun 15, 2026Vulnerability in the wildCVE-2026-0257

60

CVE-2026-0257: Rapid7 Caught Attackers Abusing Forged VPN Cookies Against Multiple Customers

Security AffairsMay 31, 17:53 UTC · May 31, 2026Vulnerability in the wildCVE-2026-0257

60

Week in review: Cisco patches SD-WAN 0-day, unpatched Microsoft Exchange Server flaw exploited

Help Net SecurityMay 17, 00:00 UTC · May 17, 2026Vulnerability in the wildCVE-2026-44413 CVE-2026-41940 CVE-2026-46300+2 CVEs1

60

Weaver E-cology RCE Flaw CVE-2026

The Hacker NewsMay 6, 01:14 UTC · May 6, 2026Vulnerability in the wildCVE-2026-22679

60

SessionReaper, unauthenticated RCE in Magento & Adobe Commerce (CVE-2025

Sansec (Magento / e-commerce security)Apr 14, 19:49 UTC · Apr 14, 2026Vulnerability in the wildCVE-2025-542362

60

February 2026 CVE Landscape: 13 Critical Vulnerabilities Mark 43% Drop from January

Recorded FutureMar 13, 00:00 UTC · Mar 13, 2026Vulnerability in the wildCVE-2025-15556 CVE-2026-21513 CVE-2026-21533+4 CVEs1

60

Unpatched SolarWinds WHD instances under active attack

Help Net SecurityMar 9, 17:22 UTC · Mar 9, 2026Vulnerability in the wildCVE-2025-263991

60

Vulnerability landscape in Q4 2025

Kaspersky SecurelistMar 6, 10:00 UTC · Mar 6, 2026Vulnerability in the wildCVE-2018-0802 CVE-2017-11882 CVE-2017-0199+7 CVEs1

60

January 2026 CVE Landscape: 23 Critical Vulnerabilities Mark 5% Increase, APT28 Exploits Microsoft Office Zero

Recorded FutureFeb 24, 00:00 UTC · Feb 24, 2026Vulnerability in the wildCVE-2026-21509 CVE-2026-23760 CVE-2026-1281+1 CVEs1

60

Malicious NGINX Configurations Enable Large

The Hacker NewsFeb 6, 11:32 UTC · Feb 6, 2026Vulnerability in the wildCVE-2025-551821

60

SmarterMail Fixes Critical Unauthenticated RCE Flaw with CVSS 9.3 Score

The Hacker NewsFeb 6, 09:36 UTC · Feb 6, 2026Vulnerability in the wildCVE-2026-24423 CVE-2026-23760 CVE-2026-25067

60

Hackers Exploit Metro4Shell RCE Flaw in React Native CLI npm Package

The Hacker NewsFeb 6, 09:36 UTC · Feb 6, 2026Vulnerability in the wildCVE-2025-119531

60

SQL Injection Flaw Affects 40,000 WordPress Sites

Infosecurity MagazineFeb 3, 16:15 UTC · Feb 3, 2026Vulnerability in the wildCVE-2025-67987

60

React2Shell Vulnerability Actively Exploited to Deploy Linux Backdoors

The Hacker NewsDec 17, 07:26 UTC · Dec 17, 2025Vulnerability in the wildCVE-2025-55182 CVE-2025-29927 CVE-2025-66478

60

⚡ Weekly Recap: Apple 0-Days, WinRAR Exploit, LastPass Fines, .NET RCE, OAuth Scams & More

The Hacker NewsDec 15, 00:00 UTC · Dec 15, 2025Vulnerability in the wildCVE-2025-14174 CVE-2025-43529 CVE-2025-6218+43 CVEs

60

Leaked Oracle EBS exploit scripts expected to drive new wave of attacks (CVE-2025-61882)

Help Net SecurityOct 9, 16:24 UTC · Oct 9, 2025Vulnerability in the wildCVE-2025-61882

60

Microsoft Patches Critical Entra ID Flaw Enabling Global Admin Impersonation Across Tenants

The Hacker NewsSep 24, 10:50 UTC · Sep 24, 2025Vulnerability in the wildCVE-2025-55241 CVE-2025-537861

60

What to know about ToolShell, the SharePoint threat under mass exploitation

Ars Technica · SecurityJul 23, 20:14 UTC · Jul 23, 2025Vulnerability in the wildCVE-2025-49706 CVE-2025-49704

60

Over 600 Laravel Apps Exposed to Remote Code Execution Due to Leaked APP_KEYs on GitHub

The Hacker NewsJul 15, 00:00 UTC · Jul 15, 2025Vulnerability in the wildCVE-2018-15133 CVE-2024-55556

60

Microsoft Patches 130 Vulnerabilities, Including Critical Flaws in SPNEGO and SQL Server

The Hacker NewsJul 10, 07:02 UTC · Jul 10, 2025Vulnerability in the wildCVE-2025-49719 CVE-2025-47981 CVE-2025-49735+9 CVEs

60

Microsoft Patch Tuesday addresses 130 vulnerabilities, none actively exploited

CyberScoopJul 9, 16:02 UTC · Jul 9, 2025Vulnerability in the wildCVE-2025-49719 CVE-2025-47981

60

Critical Cisco Vulnerability in Unified CM Grants Root Access via Static Credentials

The Hacker NewsJul 3, 08:59 UTC · Jul 3, 2025Vulnerability in the wildCVE-2025-20309 CVE-2025-20281 CVE-2025-20282

60

New Flodrix Botnet Variant Exploits Langflow AI Server RCE Bug to Launch DDoS Attacks

The Hacker NewsJun 21, 09:10 UTC · Jun 21, 2025Vulnerability in the wildCVE-2025-3248

60

Wide-ranging Apple security update addresses over 30 vulnerabilities

CyberScoopMay 13, 15:15 UTC · May 13, 2025Vulnerability in the wildCVE-2025-31214

60

RCE flaw in tool for building AI agents exploited by attackers (CVE-2025-3248)

Help Net SecurityMay 6, 00:00 UTC · May 6, 2025Vulnerability in the wildCVE-2025-3248

60

CVE-2025-24054 Under Active Attack—Steals NTLM Credentials on File Download

The Hacker NewsApr 19, 08:34 UTC · Apr 19, 2025Vulnerability in the wildCVE-2025-24054 CVE-2024-434511

60

Windows NTLM vulnerability exploited in multiple attack campaigns (CVE-2025-24054)

Help Net SecurityApr 17, 00:00 UTC · Apr 17, 2025Vulnerability in the wildCVE-2025-24054 CVE-2025-24071 CVE-2024-434511

60