ServiceNow Flaw CVE-2025-3648 Could Lead to Data Exposure via Misconfigured ACLsThe Hacker News·Jul 10, 07:51 UTC · Jul 10, 2025Vulnerability in the wildCVE-2025-3648CVE-2025-1729CVE-2025-4797860
Snowpick: Open-source ServiceNow exposure scannerHelp Net Security·Jul 22, 00:00 UTC · Jul 22, 2026VulnerabilityCVE-2025-364860
The 3 most common post-compromise tactics on network infrastructureCisco Talos·Mar 7, 15:00 UTC · Mar 7, 2024Ransomware60
Threat Actors Uses Agentic AI to Rapidly Compromise Cloud TargetInfosecurity Magazine·Jul 8, 12:30 UTC · Jul 8, 2026Threat actor60
The Gentlemen RaaS: rapid growth and a new ransomware variantKaspersky Securelist·Jun 30, 10:06 UTC · Jun 30, 2026Ransomware160
CISA Adds Cisco, Chrome, and Arista Flaws to KEV Catalog Amid Active ExploitationThe Hacker News·Jun 10, 14:44 UTC · Jun 10, 2026Exploit / PoC in the wildCVE-2026-20245CVE-2026-11645CVE-2026-747360
Autonomous AI Tool Finds 2-Year-Old RCE Flaw in Redis (CVE-2026The Hacker News·Jun 4, 11:51 UTC · Jun 4, 2026Vulnerability in the wildCVE-2026-23479160
From critical to controlled: Cutting vulnerabilities in a live manufacturing environmentHelp Net Security·Jun 4, 00:00 UTC · Jun 4, 2026VulnerabilityCVE-2025-2749560
Russian state-sponsored espionage group Static Tundra compromises unpatched end-ofCisco Talos·Aug 20, 13:00 UTC · Aug 20, 2025VulnerabilityCVE-2018-017160
Wormable AirPlay Flaws Enable Zero-Click RCE on Apple Devices via Public WiThe Hacker News·May 6, 07:42 UTC · May 6, 2025VulnerabilityCVE-2025-24252CVE-2025-24132CVE-2025-24206+8 CVEs60
Joint Advisory Warns of PRC-Backed Cyber Espionage Targeting Telecom NetworksThe Hacker News·Dec 6, 03:36 UTC · Dec 6, 2024Threat actor60
Hammerspace announces metadata driven workflow enhancements to simplify access to global dataHelp Net Security·Oct 7, 00:00 UTC · Oct 7, 2022Ransomware60
HP OMEN Gaming Hub Flaw Affects Millions of Windows ComputersThe Hacker News·Sep 15, 00:00 UTC · Sep 15, 2021Vulnerability in the wildCVE-2021-3437CVE-2020-14979CVE-2019-633360
Attackers are exploiting two zero-day flaws in Cisco enterprise-grade routersHelp Net Security·Sep 1, 00:00 UTC · Sep 1, 2020Exploit / PoCCVE-2020-3566CVE-2020-356960
CVE-2020-3952 flaw could allow attackers to hack VMware vCenter ServerSecurity Affairs·Apr 10, 14:25 UTC · Apr 10, 2020VulnerabilityCVE-2020-3952CVE-2020-3950CVE-2020-395160
Millions of Exim mail servers vulnerable to cyber attacksSecurity Affairs·Jun 9, 15:54 UTC · Jun 9, 2019VulnerabilityCVE-2019-1014960
Critical Infrastructure at Risk: Advanced Actors Target Smart Install ClientCisco Talos·Apr 5, 13:55 UTC · Apr 5, 2018Exploit / PoC60
The Plone community claims the FBI hack is a fake, it's a mysterySecurity Affairs·Jan 6, 12:40 UTC · Jan 6, 2017Data breach in the wild160
Week in review: Claude breached three companies during tests, AD CS domain-takeover PoC releasedHelp Net Security·Aug 2, 00:00 UTC · Aug 2, 2026Data breachCVE-2026-54121CVE-2026-63077CVE-2026-20316+1 CVEs60
AI-driven bug hunting fuels record Microsoft Patch TuesdayHelp Net Security·Jul 22, 10:08 UTC · Jul 22, 2026Vulnerability in the wildCVE-2026-56155CVE-2026-56164CVE-2026-50661+5 CVEs160
US and allied Governments' Recommendations: Securing Network Devices Against Russian APT GroupsSecurity Affairs·Jul 15, 18:59 UTC · Jul 15, 2026Threat actorCVE-2018-0171CVE-2008-412860
U.S. Sanctions First VPN Service and Malware Cryptor Seller Over Ransomware SupportThe Hacker News·Jul 15, 00:00 UTC · Jul 15, 2026Ransomware in the wildCVE-2018-0171CVE-2008-412860
Attacker Uses Suspected AI-Generated PowerShell Script to Map Active DirectoryThe Hacker News·Jul 15, 00:00 UTC · Jul 15, 2026Ransomware160
Zero trust physical security needs trust decisions at the edgeHelp Net Security·Jun 2, 00:00 UTC · Jun 2, 2026Exploit / PoC60
AI Flaws in Amazon Bedrock, LangSmith, and SGLang Enable Data Exfiltration and RCEThe Hacker News·Mar 17, 16:39 UTC · Mar 17, 2026Vulnerability in the wildCVE-2026-25750CVE-2026-3059CVE-2026-3060+1 CVEs60
Hewlett Packard Enterprise fixes critical authentication bypass in Aruba AOSSecurity Affairs·Mar 11, 11:28 UTC · Mar 11, 2026VulnerabilityCVE-2026-23813CVE-2026-23814CVE-2026-23815+3 CVEs60
Juniper issues emergency patch for critical PTX router RCESecurity Affairs·Feb 27, 11:40 UTC · Feb 27, 2026Vulnerability in the wildCVE-2026-2190260
Cybersecurity jobs available right now: January 28, 2025Help Net Security·Jan 30, 10:49 UTC · Jan 30, 2026Data breach60
China-linked APT UAT-8837 targets North American critical infrastructureSecurity Affairs·Jan 17, 15:50 UTC · Jan 17, 2026Exploit / PoCCVE-2025-5369060
Redis patches 13-Year-Old Lua flaw enabling Remote Code ExecutionSecurity Affairs·Oct 8, 09:10 UTC · Oct 8, 2025VulnerabilityCVE-2025-4984460
13-Year-Old Redis Flaw Exposed: CVSS 10.0 Vulnerability Lets Attackers Run Code RemotelyThe Hacker News·Oct 7, 09:30 UTC · Oct 7, 2025Vulnerability in the wildCVE-2025-4984460
Redis patches critical "RediShell" RCE vulnerability, update ASAP! (CVE-2025-49844)Help Net Security·Oct 7, 00:00 UTC · Oct 7, 2025Vulnerability in the wildCVE-2025-4984460
FreePBX Servers Targeted by ZeroThe Hacker News·Sep 12, 12:01 UTC · Sep 12, 2025Ransomware in the wildCVE-2025-5781960
Salt Typhoon Exploits Flaws in Edge Network Devices to Breach 600 Organizations WorldwideThe Hacker News·Sep 5, 12:40 UTC · Sep 5, 2025Threat actorCVE-2018-0171CVE-2023-20198CVE-2023-20273+3 CVEs60
NSA, NCSC, and allies detailed TTPs associated with Chinese APT actors targeting critical infrastructure OrgsSecurity Affairs·Aug 28, 10:48 UTC · Aug 28, 2025Exploit / PoCCVE-2024-21887CVE-2023-46805CVE-2024-3400+3 CVEs160
FBI: Russia-linked group Static Tundra exploit old Cisco flaw for espionageSecurity Affairs·Aug 21, 07:51 UTC · Aug 21, 2025Threat actorCVE-2018-017160
Backups Are Under Attack: How to Protect Your BackupsThe Hacker News·Jun 17, 10:30 UTC · Jun 17, 2025Ransomware60
Automating Zero Trust in Healthcare: From Risk Scoring to Dynamic Policy Enforcement Without Network RedesignThe Hacker News·May 29, 16:58 UTC · May 29, 2025Ransomware60
Ivanti Patches EPMM Vulnerabilities Exploited for Remote Code Execution in Limited AttacksThe Hacker News·May 21, 06:53 UTC · May 21, 2025Vulnerability in the wildCVE-2025-4427CVE-2025-4428CVE-2025-2246260
5 BCDR Essentials for Effective Ransomware DefenseThe Hacker News·May 15, 00:00 UTC · May 15, 2025Ransomware60