December 2025 CVE Landscape: 22 Critical Vulnerabilities Mark 120% Surge, React2Shell Dominates Threat ActivityRecorded Future·Jan 13, 00:00 UTC · Jan 13, 2026Vulnerability in the wildCVE-2025-55182CVE-2025-20393CVE-2025-8110+1 CVEs60
Critical n8n Vulnerability (CVSS 10.0) Allows Unauthenticated Attackers to Take Full ControlThe Hacker News·Jan 8, 09:26 UTC · Jan 8, 2026VulnerabilityCVE-2026-21858CVE-2025-68613CVE-2025-68668+1 CVEs60
React2Shell Exploitation Escalates into Large-Scale Global Attacks, Forcing Emergency MitigationThe Hacker News·Dec 15, 00:00 UTC · Dec 15, 2025Exploit / PoC in the wildCVE-2025-55182CVE-2021-4422860
The Bug That Won't Die: 10 Years of the Same MistakeRecorded Future·Dec 9, 00:00 UTC · Dec 9, 2025Exploit / PoCCVE-2025-55182CVE-2025-66478CVE-2015-485260
Critical RSC Bugs in React and Next.js Allow Unauthenticated Remote Code ExecutionThe Hacker News·Dec 4, 15:38 UTC · Dec 4, 2025VulnerabilityCVE-2025-55182CVE-2025-6647860
Shai-Hulud worm returns stronger and more automated than ever beforeCyberScoop·Nov 24, 22:45 UTC · Nov 24, 2025Data breach in the wild60
U.S. CISA adds a Google Chromium V8 flaw to its Known Exploited Vulnerabilities catalogSecurity Affairs·Nov 19, 21:12 UTC · Nov 19, 2025Exploit / PoC in the wildCVE-2025-1322360
Google fixed the seventh Chrome zeroSecurity Affairs·Nov 18, 08:59 UTC · Nov 18, 2025Exploit / PoC in the wildCVE-2025-13223CVE-2025-13224CVE-2025-10585+5 CVEs60
Researchers Find Serious AI Bugs Exposing Meta, Nvidia, and Microsoft Inference FrameworksThe Hacker News·Nov 15, 00:00 UTC · Nov 15, 2025VulnerabilityCVE-2024-50050CVE-2025-30165CVE-2025-23254+1 CVEs60
Week in review: Cisco ASA zero-day vulnerabilities exploited, Fortra GoAnywhere instances at riskHelp Net Security·Sep 28, 00:00 UTC · Sep 28, 2025Exploit / PoCCVE-2025-10035CVE-2025-59689CVE-2025-26399+1 CVEs60
The npm incident frightened everyone, but ended up being nothing to fret aboutCyberScoop·Sep 10, 14:35 UTC · Sep 10, 2025Exploit / PoC in the wild60
Analyzing the TTPs of hacktivists and APTs targeting Russian organizationsKaspersky Securelist·Sep 10, 14:00 UTC · Sep 10, 2025Data breach60
⚡ Weekly Recap: Zero-Day Exploits, Insider Threats, APT Targeting, Botnets and MoreThe Hacker News·May 19, 14:35 UTC · May 19, 2025Exploit / PoC in the wildCVE-2025-30397CVE-2025-30400CVE-2025-32701+22 CVEs60
Security Affairs newsletter Round 520 by Pierluigi PaganiniSecurity Affairs·Apr 20, 16:14 UTC · Apr 20, 2025Exploit / PoC in the wildCVE-2025-30406CVE-2025-24054CVE-2021-2003560
Kaspersky ICS CERT predictions for the industrial threat landscape in 2025Kaspersky Securelist·Jan 29, 10:01 UTC · Jan 29, 2025Ransomware60
Fortinet Warns of New Zero-Day Used in Attacks on Firewalls with Exposed InterfacesThe Hacker News·Jan 28, 13:09 UTC · Jan 28, 2025Exploit / PoC in the wildCVE-2024-5559160
Fortinet fixes FortiOS zero-day exploited by attackers for months (CVE-2024-55591)Help Net Security·Jan 17, 09:05 UTC · Jan 17, 2025Exploit / PoC in the wildCVE-2024-5559160
Thai Officials Targeted in Yokai Backdoor Campaign Using DLL SideThe Hacker News·Dec 15, 00:00 UTC · Dec 15, 2024MalwareCVE-2017-11882160
Review of supply chain attacks in 2024 and potential disruption scenarios for 2025Kaspersky Securelist·Dec 9, 10:54 UTC · Dec 9, 2024Data breach in the wild60
Crimeware and financial predictions for 2025Kaspersky Securelist·Nov 14, 09:01 UTC · Nov 14, 2024Ransomware60
Malware report for Q2 2024 — a quarterly reviewKaspersky Securelist·Sep 5, 07:45 UTC · Sep 5, 2024MalwareCVE-2024-309460
Network Attack Trends: FebruaryPalo Alto Unit 42·Jun 6, 12:33 UTC · Jun 6, 2024Exploit / PoC in the wildCVE-2021-25296CVE-2021-25297CVE-2021-25298+4 CVEs60
QakBot attacks with Windows zero-day (CVE-2024Kaspersky Securelist·May 14, 17:14 UTC · May 14, 2024Exploit / PoC in the wildCVE-2023-36033CVE-2024-30051160
HTTP/2 CONTINUATION Flood technique can be exploited in DoS attacksSecurity Affairs·Apr 5, 02:41 UTC · Apr 5, 2024Vulnerability in the wildCVE-2024-27983CVE-2024-27919CVE-2024-2758+6 CVEs60
Kaspersky predictions about ICS and OT threats in 2024Kaspersky Securelist·Jan 31, 10:00 UTC · Jan 31, 2024Ransomware60
Crimeware and financial cyberthreat predictions for 2024Kaspersky Securelist·Nov 21, 10:00 UTC · Nov 21, 2023Ransomware60
A cascade of compromise: unveiling Lazarus' new campaignKaspersky Securelist·Oct 27, 05:41 UTC · Oct 27, 2023Threat actor160
Vulnerability in popular ‘libwebp’ code more widespread than expectedThe Record·Sep 27, 18:08 UTC · Sep 27, 2023Vulnerability in the wildCVE-2023-4863CVE-2023-5129CVE-2023-4106460
Watch out! CVE-2023-5129 in libwebp library affects millions appsSecurity Affairs·Sep 27, 13:35 UTC · Sep 27, 2023Vulnerability in the wildCVE-2023-5129CVE-2023-4863CVE-2023-41064+1 CVEs160
Asylum Ambuscade: A Cybercrime Group with Espionage AmbitionsThe Hacker News·Jun 9, 13:37 UTC · Jun 9, 2023Threat actorCVE-2022-3019060
Critical vm2 sandbox escape flaw uncovered, patch ASAP! (CVE-2022-36067)Help Net Security·Apr 24, 13:36 UTC · Apr 24, 2023VulnerabilityCVE-2022-3606760
Researchers disclose sandbox escape bug in vm2 sandbox librarySecurity Affairs·Apr 9, 20:34 UTC · Apr 9, 2023Exploit / PoCCVE-2023-29017CVE-2022-3606760
Researchers Discover Critical Remote Code Execution Flaw in vm2 Sandbox LibraryThe Hacker News·Apr 8, 07:06 UTC · Apr 8, 2023VulnerabilityCVE-2023-29017CVE-2022-3606760
Crimeware and financial cyberthreats in 2023Kaspersky Securelist·Nov 22, 08:00 UTC · Nov 22, 2022Ransomware60
OldGremlin Ransomware Targeted Over a Dozen Russian Entities in MultiThe Hacker News·Oct 24, 05:48 UTC · Oct 24, 2022RansomwareCVE-2020-3153CVE-2020-343360
Researchers Detail Critical RCE Flaw Reported in Popular vm2 JavaScript SandboxThe Hacker News·Oct 11, 11:28 UTC · Oct 11, 2022VulnerabilityCVE-2022-3606760
CVE-2022-30190 (Follina) vulnerability in MSDT: description and counteractionKaspersky Securelist·Jun 6, 08:00 UTC · Jun 6, 2022Vulnerability in the wildCVE-2022-30190CVE-2017-0199CVE-2021-4044460
Notes on CVE-2022Kaspersky Securelist·Mar 14, 14:11 UTC · Mar 14, 2022Exploit / PoC in the wildCVE-2022-084760
US CISA added 17 flaws to its Known Exploited Vulnerabilities CatalogSecurity Affairs·Jan 23, 18:13 UTC · Jan 23, 2022Exploit / PoC in the wildCVE-2021-32648CVE-2021-21315CVE-2021-21975+14 CVEs160