⚡ Weekly Recap: VPN Exploits, Oracle's Silent Breach, ClickFix Surge and MoreThe Hacker News·May 6, 07:05 UTC · May 6, 2025Data breachCVE-2025-22457CVE-2025-24061CVE-2025-2407+15 CVEs60
New Malware Variant RESURGE Exploits Ivanti VulnerabilityInfosecurity Magazine·Mar 31, 16:45 UTC · Mar 31, 2025Vulnerability in the wildCVE-2025-028260
RESURGE Malware Exploits Ivanti Flaw with Rootkit and Web Shell FeaturesThe Hacker News·Mar 31, 09:11 UTC · Mar 31, 2025MalwareCVE-2025-028260
New Mandrake Android spyware version discovered on Google PlayKaspersky Securelist·Jul 29, 10:05 UTC · Jul 29, 2024Malware30
Grype: Open-source vulnerability scanner for container images, filesystemsHelp Net Security·Jul 18, 00:00 UTC · Jul 18, 2024Vulnerability30
Vulnerabilities in employee management system could lead to remote code execution, login credential theftCisco Talos·May 1, 16:00 UTC · May 1, 2024VulnerabilityCVE-2023-43491CVE-2023-45209CVE-2023-40146+10 CVEs47
Lynis: Open-source security auditing toolHelp Net Security·Mar 25, 07:14 UTC · Mar 25, 2024Vulnerability30
Nation-State Actors Weaponize Ivanti VPN ZeroThe Hacker News·Jan 17, 01:56 UTC · Jan 17, 2024Threat actor in the wildCVE-2023-46805CVE-2024-21887160
Over Two-Thirds of FortiGate Firewalls Still at RiskInfosecurity Magazine·Jul 4, 17:00 UTC · Jul 4, 2023VulnerabilityCVE-2023-2799760
336,000 servers remain unpatched against critical Fortigate vulnerabilityArs Technica · Security·Jul 3, 19:46 UTC · Jul 3, 2023Vulnerability in the wildCVE-2023-2799760
IoT/connected Device Discovery and Security Auditing in Corporate NetworksThe Hacker News·Feb 7, 09:20 UTC · Feb 7, 2022Vulnerability30
Hundreds of vulnerabilities in common WiSecurity Affairs·Dec 5, 12:30 UTC · Dec 5, 2021Vulnerability55
An Azure Sphere kernel exploit — or how I learned to stop worrying and love the IoTCisco Talos·Nov 29, 15:00 UTC · Nov 29, 2021Exploit / PoC45
Friday Squid Blogging: Possible Evidence of Squid Paternal CareSchneier on Security·Sep 10, 21:13 UTC · Sep 10, 2021Phishing & fraud30
#DEFCON: A Bad eBook Can Take Over Your Kindle (or Worse)Infosecurity Magazine·Aug 6, 19:44 UTC · Aug 6, 2021VulnerabilityCVE-2021-30354CVE-2021-3035547
Kali Linux 2021.1 released: Tweaked DEs and terminals, new tools, Kali ARM for Apple Silicon MacsHelp Net Security·Feb 24, 00:00 UTC · Feb 24, 2021Tools30
OpenWRT forum hacked, intruders stole user dataSecurity Affairs·Jan 18, 22:54 UTC · Jan 18, 2021Data breach57
Vulnerability Spotlight: A deep dive into WAGO’s cloud connectivity and the vulnerabilities that ariseCisco Talos·Oct 21, 19:30 UTC · Oct 21, 2020VulnerabilityCVE-2019-5161CVE-2019-5155CVE-2019-5157+1 CVEs47
Vulnerability Spotlight: Multiple vulnerabilities in Moxa AWKCisco Talos·Feb 24, 15:04 UTC · Feb 24, 2020Vulnerability in the wildCVE-2019-5136CVE-2019-5137CVE-2019-5138+9 CVEs60
Million of Telestar Digital GmbH IoT radio devices can be remotely hackedSecurity Affairs·Sep 10, 16:27 UTC · Sep 10, 2019Exploit / PoCCVE-2019-13473CVE-2019-1347460
WAGO Industrial Switches affected by multiple flawsSecurity Affairs·Jun 13, 21:42 UTC · Jun 13, 2019VulnerabilityCVE-2017-16544CVE-2015-0235CVE-2019-1255060
Securing your home increasingly means securing all of your IoT devicesHelp Net Security·Apr 3, 00:00 UTC · Apr 3, 2019Exploit / PoC57
HenBox: The Chickens Come Home to RoostPalo Alto Unit 42·Jan 18, 21:13 UTC · Jan 18, 2019Vulnerability30
IoT Malware Evolves to Harvest Bots by Exploiting a ZeroPalo Alto Unit 42·Nov 1, 10:59 UTC · Nov 1, 2018MalwareCVE-2014-8361CVE-2017-1721560
A flaw in Alpine Linux could allow executing arbitrary codeSecurity Affairs·Sep 18, 13:40 UTC · Sep 18, 2018Exploit / PoC145
Leaked: Source code for Mirai IoT DDoS botnetHelp Net Security·Jun 26, 21:25 UTC · Jun 26, 2018Malware30
New VPNFilter malware targets at least 500K networking devices worldwideCisco Talos·May 23, 13:00 UTC · May 23, 2018Malware55
Vulnerability Spotlight: Moxa AWK-3131A Multiple Features Login Username Parameter OS Command Injection VulnerabilityCisco Talos·Apr 3, 13:21 UTC · Apr 3, 2018VulnerabilityCVE-2017-1445960
Using deception to gain enterprise IoT attack visibilityHelp Net Security·Mar 28, 00:00 UTC · Mar 28, 2018Vulnerability42
The source code behind the Mirai IoT botnet leaked online. Do you trust it?Security Affairs·Dec 13, 23:37 UTC · Dec 13, 2017Malware42
The Mirai botnet is back and includes a Bitcoin Mining componentSecurity Affairs·Nov 7, 08:45 UTC · Nov 7, 2017Malware42
Ztorg: money for infecting your smartphoneKaspersky Securelist·May 15, 08:57 UTC · May 15, 2017Vulnerability30
Week in review: Leaked Windows exploits, mobile payment card cloningHelp Net Security·Apr 16, 00:00 UTC · Apr 16, 2017Data breach60
Brickerbot botnet, the thingbot that permanently destroys IoT devicesSecurity Affairs·Apr 9, 20:05 UTC · Apr 9, 2017Malware30
ELF_IMEIJ, a new Linux malware is spreading in the wildSecurity Affairs·Mar 12, 08:04 UTC · Mar 12, 2017Malware30
This Hack Gives Linux Root Shell Just By Pressing 'ENTER' for 70 SecondsThe Hacker News·Nov 15, 00:00 UTC · Nov 15, 2016VulnerabilityCVE-2016-448447
Chinese Electronics Firm to Recall its Smart Cameras recently used to Take Down InternetThe Hacker News·Oct 24, 16:34 UTC · Oct 24, 2016Vulnerability42