Search: “xml”

62 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Vulnerability 264 Malware 159 Exploit / PoC 115 Ransomware 54 Data breach 30 Threat actor 25 Advisory 19 Phishing & fraud 16 Policy & legal 16 Tools 8 Industry 6 AI safety & security 5 Research 4 AI industry 1

SeverityAll critical 279 high 218 medium 178 low 39 info 10

iOS XML Bug

Schneier on SecurityAug 20, 12:52 UTC · Aug 20, 2020Vulnerability

30

Vulnerability Spotlight: Multiple vulnerabilities in the Roav A1 Dashcam

Cisco TalosMay 13, 14:04 UTC · May 13, 2019Vulnerability CVE-2018-4014 CVE-2018-4016 CVE-2018-4017+8 CVEs

35

Hackers Exploited Krpano Framework Flaw to Inject Spam Ads on 350+ Websites

The Hacker NewsFeb 26, 17:19 UTC · Feb 26, 2025Vulnerability CVE-2020-24901

35

Apple fixes serious flaws in the Productivity Apps

Security AffairsOct 21, 19:44 UTC · Oct 21, 2015Vulnerability CVE-2015-3784 CVE-2015-7032 CVE-2015-7033+1 CVEs

35

Attracting flies with Honey(gain): Adversarial abuse of proxyware

Cisco TalosAug 31, 11:52 UTC · Aug 31, 2021Vulnerability

30

Severe flaws found in German e

Security AffairsJul 3, 10:38 UTC · Jul 3, 2017Vulnerability CVE-2017-10670 CVE-2017-10668 CVE-2017-10669

35

Hacker discovered security flaws in Amazon, Apple and Google epub services

Security AffairsJan 27, 08:44 UTC · Jan 27, 2017Vulnerability CVE-2016-7666

35

TruffleHog, Fade In and BSAFE Crypto

Cisco TalosNov 4, 14:26 UTC · Nov 4, 2025Vulnerability CVE-2025-53855 CVE-2025-53814 CVE-2025-41390+1 CVEs

35

New Windows Task Scheduler Bugs Let Attackers Bypass UAC and Tamper with Logs

The Hacker NewsApr 17, 01:48 UTC · Apr 17, 2025Vulnerability CVE-2023-21726

35

GOFFEE’s recent attacks: new tools and techniques

Kaspersky SecurelistApr 10, 10:00 UTC · Apr 10, 2025Vulnerability1

30

Four vulnerabilities found in Dell SonicWALL Email Security virtual appliance application

Help Net SecurityMay 24, 08:31 UTC · May 24, 2023Vulnerability

30

API Vulnerabilities Discovered in LEGO Marketplace

Infosecurity MagazineDec 19, 09:30 UTC · Dec 19, 2022Vulnerability

30

Researcher Hijacks a Microsoft Service Using Loophole in Azure Cloud Platform

The Hacker NewsApr 17, 20:16 UTC · Apr 17, 2019Vulnerability

30

High risk vulnerability discovered in Sauter CASE Suite building automation software

Help Net SecurityNov 6, 00:00 UTC · Nov 6, 2018Vulnerability

30

Unpatched MS Word Flaw Could Allow Hackers to Infect Your Computer

The Hacker NewsOct 31, 08:50 UTC · Oct 31, 2018Vulnerability

30

WordPress 4.7.5 release addresses six security vulnerabilities

Security AffairsMay 19, 12:52 UTC · May 19, 2017Vulnerability CVE-2017-9066

35

Chaining Zoom bugs is possible to hack users with a message

Security AffairsMay 25, 11:12 UTC · May 25, 2022Vulnerability CVE-2022-22784 CVE-2022-22785 CVE-2022-22786+1 CVEs

35

Siemens fixed tens of flaws in Siemens Digital Industries Software products

Security AffairsJan 16, 14:14 UTC · Jan 16, 2021Vulnerability CVE-2020-26989 CVE-2020-26990 CVE-2020-26991

35

Expert found hundred of vulnerable Jenkins Plugins

Security AffairsMay 4, 09:45 UTC · May 4, 2019Vulnerability

30

My Little FormBook

Cisco TalosJun 20, 15:00 UTC · Jun 20, 2018Vulnerability CVE-2017-0199 CVE-2017-11882

35

Rule release for today

Cisco TalosMar 31, 23:18 UTC · Mar 31, 2009Vulnerability CVE-2009-0819

35

GeoNetwork Fixes Unauthenticated RCE Chain Affecting Government Geoportal Backends

GeoNetwork patched two chained flaws (CVE-2026-63219, CVE-2026-58400) enabling unauthenticated RCE in government geospatial metadata catalogs.

Two flaws in the open-source GeoNetwork catalog chain into unauthenticated RCE: a missing authorization check on the formatter upload endpoint (CVE-2026-63219, CVSS 8.6) and an unsafe Saxon XSLT processor configuration allowing Java execution (CVE-2026-58400, CVSS 9.1). Fixes shipped in versions 4.4.12 and 4.2.17 on July 8, 2026, with details published August 31. Ethiack fingerprinted 121 internet-exposed vulnerable deployments across 39 countries, 89% tied to government or military agencies. No exploitation in the wild or KEV listing was reported at disclosure.

The Hacker NewsSep 2, 09:18 UTC · 14d agoVulnerability CVE-2026-63219 CVE-2026-58400 CVE-2024-36401+1 CVEs

50

Dependency-Check: Open-source Software Composition Analysis (SCA) tool

Help Net SecurityAug 5, 11:29 UTC · Aug 5, 2026Vulnerability1

30

Meet Dusseldorf, Microsoft's open-source out-of-band security platform

Help Net SecurityJul 20, 00:00 UTC · Jul 20, 2026Vulnerability

30

AirDrop and Quick Share Flaws Let Nearby Attackers Trigger Crashes and Bypass Checks

The Hacker NewsJun 30, 09:27 UTC · Jun 30, 2026Vulnerability CVE-2024-38271 CVE-2024-38272 CVE-2024-106681

35

DefectDojo’s SOC capabilities simplify cybersecurity operations

Help Net SecurityApr 21, 11:12 UTC · Apr 21, 2026Vulnerability

30

Ireland Proposes Giving Police New Digital Surveillance Powers

Schneier on SecurityJan 26, 12:04 UTC · Jan 26, 2026Vulnerability

30

Cybersecurity jobs available right now: June 24, 2025

Help Net SecurityOct 30, 10:58 UTC · Oct 30, 2025Vulnerability

30

Mapping and Monitoring Cyber Threats

Recorded FutureJun 27, 00:00 UTC · Jun 27, 2025Vulnerability

30

reNgine: Open-source automated reconnaissance framework for web applications

Help Net SecurityMay 2, 00:00 UTC · May 2, 2024Vulnerability

30

Experts Detail New Flaws in Azure HDInsight Spark, Kafka, and Hadoop Services

The Hacker NewsFeb 6, 16:38 UTC · Feb 6, 2024Vulnerability CVE-2023-36419 CVE-2023-381561

35

The emergence of trinity attacks on APIs

Help Net SecurityFeb 2, 00:00 UTC · Feb 2, 2023Vulnerability

30

4 key shifts in the breach and attack simulation (BAS) market

Help Net SecurityJan 11, 00:00 UTC · Jan 11, 2023Vulnerability

30

Sparrow's new solutions and features help users identify vulnerabilities in source code and web applications

Help Net SecurityAug 9, 17:30 UTC · Aug 9, 2022Vulnerability

30

Vicarius Nmap Scan Analysis helps security professionals identify high risk assets

Help Net SecurityApr 22, 00:00 UTC · Apr 22, 2022Vulnerability

30

Threat Roundup for April 8 to April 15

Cisco TalosApr 15, 20:04 UTC · Apr 15, 2022Vulnerability

30

New Cyber Operation Targets Italy: Digging Into the Netwire Attack Chain

Security AffairsJun 5, 18:26 UTC · Jun 5, 2020Vulnerability

30

Review: FourV Systems GreySpark

Help Net SecurityMay 28, 10:08 UTC · May 28, 2020Vulnerability

30

Apple delivers March 2020 security updates for iDevices and software

Help Net SecurityMar 26, 00:00 UTC · Mar 26, 2020Vulnerability CVE-2020-9770 CVE-2020-9776 CVE-2020-3906

35

12,000+ Jenkins servers can be exploited to launch, amplify DDoS attacks

Help Net SecurityFeb 11, 00:00 UTC · Feb 11, 2020Vulnerability CVE-2020-2100

35