Microsoft’s Secure Boot has been broken for a decade and no one noticed until nowArs Technica · Security·Jul 15, 00:00 UTC · Jul 15, 2026Vulnerability in the wildCVE-2015-5381160
BlackLotus Becomes First UEFI Bootkit Malware to Bypass Secure Boot on Windows 11The Hacker News·Jun 23, 08:42 UTC · Jun 23, 2023Malware in the wildCVE-2022-21894160
BlackLotus Malware Hijacks Windows Secure Boot ProcessSchneier on Security·Mar 15, 00:00 UTC · Mar 15, 2023Malware in the wildCVE-2022-2189460
⚡ Weekly Recap: Linux Kernel Flaws, AI Malware Tricks, Turla Backdoor, Infostealers and MoreThe Hacker News·Jun 29, 14:42 UTC · Jun 29, 2026Malware in the wildCVE-2026-43503CVE-2026-12569CVE-2026-47729+19 CVEs60
New bug in PC booting process could take years to fix, researchers sayCyberScoop·Jul 29, 18:01 UTC · Jul 29, 2020Ransomware in the wild60
September 2025 CVE LandscapeRecorded Future·Oct 17, 00:00 UTC · Oct 17, 2025Exploit / PoC in the wildCVE-2025-53690CVE-2021-21311CVE-2025-20333+6 CVEs60
Microsoft Patches 67 Vulnerabilities Including WEBDAV ZeroThe Hacker News·Jun 12, 15:47 UTC · Jun 12, 2025Vulnerability in the wildCVE-2025-33053CVE-2025-47966CVE-2025-32713+3 CVEs160
April’s Patch Tuesday Brings Record Number of FixesKrebs on Security·Apr 9, 20:55 UTC · Apr 9, 2024Vulnerability in the wildCVE-2024-20670CVE-2024-29063CVE-2024-29988+2 CVEs160
BlackLotus UEFI bootkit disables Windows security mechanismsHelp Net Security·Apr 17, 10:14 UTC · Apr 17, 2023Vulnerability in the wildCVE-2022-2189460
Unpatchable 'usbliter8' Exploit Breaks Apple A12 and A13 SecureROM Boot ChainThe Hacker News·Jun 19, 18:37 UTC · Jun 19, 2026Exploit / PoC in the wild60
Windows Zero-Days Expose BitLocker Bypasses And CTFMON Privilege EscalationThe Hacker News·May 15, 00:00 UTC · May 15, 2026Vulnerability in the wildCVE-2026-33825CVE-2025-48804160
Microsoft Fixes 114 Windows Flaws in January 2026 Patch, One Actively ExploitedThe Hacker News·Jan 15, 00:00 UTC · Jan 15, 2026Vulnerability in the wildCVE-2025-65046CVE-2026-0628CVE-2026-20805+5 CVEs160
Kernel shellcode persistence technique in APT attacks and SAS CTF challengeKaspersky Securelist·Oct 17, 14:20 UTC · Oct 17, 2024Vulnerability in the wildCVE-2010-4398160
Fastjson 1.x RCE Vulnerability Targeted in Attacks With No Patched AvailableThe Hacker News·Jul 25, 12:54 UTC · Jul 25, 2026Vulnerability in the wildCVE-2026-1672360
Week in review: High severity WordPress vulnerabilities, fake OAuth IDs bypass sign-in logsHelp Net Security·Jul 19, 00:00 UTC · Jul 19, 2026Vulnerability in the wildCVE-2026-15409CVE-2026-15410CVE-2026-56155+2 CVEs60
Microsoft fixes two actively exploited bugs, one used by BlackLotus bootkit (CVE-2023-29336, CVE-2023-24932)Help Net Security·May 9, 00:00 UTC · May 9, 2023Vulnerability in the wildCVE-2023-29336CVE-2023-24932CVE-2022-21882+10 CVEs160
Microsoft Patches 59 Vulnerabilities Including Six Actively Exploited ZeroThe Hacker News·Feb 11, 14:55 UTC · Feb 11, 2026Vulnerability in the wildCVE-2026-0391CVE-2026-21510CVE-2026-21513+5 CVEs60
Amazon boots Parler from web hosting service over violent contentCyberScoop·Jan 11, 14:43 UTC · Jan 11, 2021Exploit / PoC in the wild60
Facebook boots Roger Stone for relying on fake accounts to amplify WikiLeaksCyberScoop·Jul 8, 20:22 UTC · Jul 8, 2020Exploit / PoC in the wild60
Google gives the boot to more malwareCyberScoop·Feb 21, 14:36 UTC · Feb 21, 2020Malware in the wild60
New Senate bill aims to put the boot to botnetsCyberScoop·May 19, 15:00 UTC · May 19, 2016Malware in the wild60
Microsoft Releases RecordSecurity Affairs·Jun 9, 22:56 UTC · Jun 9, 2026Exploit / PoC in the wildCVE-2026-41091CVE-2026-45657CVE-2026-47291+5 CVEs160
Patch Tuesday, January 2026 EditionKrebs on Security·Jan 15, 00:00 UTC · Jan 15, 2026Vulnerability in the wildCVE-2026-20805CVE-2026-20952CVE-2026-20953+6 CVEs160
Microsoft Fixes 80 Flaws — Including SMB PrivEsc and Azure CVSS 10.0 BugsThe Hacker News·Sep 11, 08:56 UTC · Sep 11, 2025Vulnerability in the wildCVE-2025-53791CVE-2025-55234CVE-2025-54914+9 CVEs60
Microsoft Fixes 149 Flaws in Huge April Patch Release, ZeroThe Hacker News·Apr 11, 11:08 UTC · Apr 11, 2024Vulnerability in the wildCVE-2024-26234CVE-2024-29988CVE-2024-21412+2 CVEs60
Microsoft patches two actively exploited zero-days (CVE-2024-29988, CVE-2024-26234)Help Net Security·Apr 9, 00:00 UTC · Apr 9, 2024Exploit / PoC in the wildCVE-2024-29988CVE-2024-26234CVE-2024-21412+9 CVEs60
Microsoft's May Patch Tuesday Fixes 38 Flaws, Including 2 Exploited ZeroThe Hacker News·May 15, 00:00 UTC · May 15, 2023Vulnerability in the wildCVE-2023-29336CVE-2023-29325CVE-2023-24932+1 CVEs60
Microsoft Patch Tuesday, May 2023 EditionKrebs on Security·May 10, 07:06 UTC · May 10, 2023Vulnerability in the wildCVE-2023-29336CVE-2023-24932CVE-2023-24941+2 CVEs60
Microsoft Patch Tuesday for May 2023 fixed 2 zeroSecurity Affairs·May 10, 05:25 UTC · May 10, 2023Vulnerability in the wildCVE-2023-29336CVE-2023-24932CVE-2023-24941+2 CVEs60
Patch Tuesday for August 2022 fixed actively exploited zeroSecurity Affairs·Aug 9, 21:25 UTC · Aug 9, 2022Vulnerability in the wildCVE-2022-34713CVE-2022-30133CVE-2022-35744+46 CVEs160
ESET warns of three flaws that affect over 100 Lenovo notebook modelsSecurity Affairs·Apr 19, 14:38 UTC · Apr 19, 2022Vulnerability in the wildCVE-2021-3970CVE-2021-3971CVE-2021-397260
Microsoft Patches 138 Vulnerabilities, Including DNS and Netlogon RCE FlawsThe Hacker News·May 15, 00:00 UTC · May 15, 2026Vulnerability in the wildCVE-2025-54518CVE-2026-41096CVE-2026-42826+14 CVEs160
Week in review: Exploited newly patched BeyondTrust RCE, United Airlines CISO on building resilienceHelp Net Security·Feb 15, 00:00 UTC · Feb 15, 2026Vulnerability in the wildCVE-2026-1731CVE-2024-12356CVE-2026-1281+2 CVEs60
Microsoft Patch Tuesday security updates for January 2026 fixed actively exploited zeroSecurity Affairs·Jan 14, 08:43 UTC · Jan 14, 2026Vulnerability in the wildCVE-2026-20805CVE-2023-31096CVE-2026-21265+1 CVEs60
Cisco ASA Firewall Zero-Day Exploits Deploy RayInitiator and LINE VIPER MalwareThe Hacker News·Sep 27, 12:13 UTC · Sep 27, 2025Exploit / PoC in the wildCVE-2025-20362CVE-2025-20333CVE-2025-2036360
Microsoft Patch Tuesday security updates for August 2024 six actively exploited bugsSecurity Affairs·Aug 14, 07:17 UTC · Aug 14, 2024Vulnerability in the wildCVE-2024-38189CVE-2024-38178CVE-2024-38193+12 CVEs260
Microsoft Patches Three ZeroInfosecurity Magazine·May 10, 09:30 UTC · May 10, 2023Vulnerability in the wildCVE-2023-29336CVE-2023-24932CVE-2023-2932560
Attack techniques observed by Kaspersky MDRKaspersky Securelist·Dec 15, 10:00 UTC · Dec 15, 2021Exploit / PoC in the wildCVE-2021-1675CVE-2021-3452760
Serious Flaw Found in HP OMEN DriverInfosecurity Magazine·Sep 15, 17:51 UTC · Sep 15, 2021Exploit / PoC in the wild60
TrickBoot feature allows TrickBot bot to run UEFI attacksSecurity Affairs·Dec 3, 14:32 UTC · Dec 3, 2020Ransomware in the wild60