AI Flaws in Amazon Bedrock, LangSmith, and SGLang Enable Data Exfiltration and RCEThe Hacker News·Mar 17, 16:39 UTC · Mar 17, 2026Vulnerability in the wildCVE-2026-25750CVE-2026-3059CVE-2026-3060+1 CVEs60
New UEFI Flaw Enables Early-Boot DMA Attacks on ASRock, ASUS, GIGABYTE, MSI MotherboardsThe Hacker News·Dec 20, 13:28 UTC · Dec 20, 2025VulnerabilityCVE-2025-14304CVE-2025-11901CVE-2025-14302+1 CVEs60
ASRock, ASUS, GIGABYTE, MSI Boards vulnerable to preSecurity Affairs·Dec 19, 10:27 UTC · Dec 19, 2025VulnerabilityCVE-2025-11901CVE-2025-14302CVE-2025-14303+1 CVEs60
Three PCIe Encryption Weaknesses Expose PCIe 5.0+ Systems to Faulty Data HandlingThe Hacker News·Dec 10, 15:09 UTC · Dec 10, 2025VulnerabilityCVE-2025-9612CVE-2025-9613CVE-2025-961435
⚡ Weekly Recap: F5 Breached, Linux Rootkits, Pixnapping Attack, EtherHiding & MoreThe Hacker News·Oct 20, 19:00 UTC · Oct 20, 2025Data breachCVE-2025-20352CVE-2025-48561CVE-2025-24990+18 CVEs60
⚡ Weekly Recap: Scattered Spider Arrests, Car Exploits, macOS Malware, Fortinet RCE and MoreThe Hacker News·Jul 15, 00:00 UTC · Jul 15, 2025RansomwareCVE-2025-25257CVE-2025-25251CVE-2025-31365+36 CVEs160
Vulnerable firmware for Gigabyte motherboards could allow bootkit installationHelp Net Security·Jul 15, 00:00 UTC · Jul 15, 2025VulnerabilityCVE-2025-7029CVE-2025-7028CVE-2025-7027+1 CVEs35
New Reports Uncover Jailbreaks, Unsafe Code, and Data Theft Risks in Leading AI SystemsThe Hacker News·Apr 29, 16:18 UTC · Apr 29, 2025AI safety & security30
Hackers Exploit Paragon Partition Manager Driver Vulnerability in Ransomware AttacksThe Hacker News·Mar 3, 13:56 UTC · Mar 3, 2025RansomwareCVE-2025-0289CVE-2025-0285CVE-2025-0286+2 CVEs60
BYOVD Attacks Exploit ZeroInfosecurity Magazine·Mar 3, 09:35 UTC · Mar 3, 2025RansomwareCVE-2025-0289CVE-2025-0288CVE-2025-0287+2 CVEs60
New UEFI Secure Boot Vulnerability Could Allow Attackers to Load Malicious BootkitsThe Hacker News·Jan 15, 00:00 UTC · Jan 15, 2025VulnerabilityCVE-2024-734435
Google Cloud Researchers Uncover Flaws in Rsync File Synchronization ToolThe Hacker News·Jan 15, 00:00 UTC · Jan 15, 2025VulnerabilityCVE-2024-12084CVE-2024-12085CVE-2024-12086+3 CVEs135
Critical Flaw in Microchip ASF Exposes IoT Devices to Remote Code Execution RiskThe Hacker News·Sep 23, 09:58 UTC · Sep 23, 2024VulnerabilityCVE-2024-7490CVE-2024-2001760
RADIUS Protocol Vulnerability Exposes Networks to MitM AttacksThe Hacker News·Jul 10, 03:02 UTC · Jul 10, 2024Vulnerability in the wildCVE-2024-359660
New R Programming Vulnerability Exposes Projects to Supply Chain AttacksThe Hacker News·Apr 30, 03:39 UTC · Apr 30, 2024VulnerabilityCVE-2024-27322147
Critical 'BatBadBut' Rust Vulnerability Exposes Windows Systems to AttacksThe Hacker News·Apr 15, 00:00 UTC · Apr 15, 2024VulnerabilityCVE-2024-24576CVE-2024-3566CVE-2024-27980+2 CVEs60
New HTTP/2 Vulnerability Exposes Web Servers to DoS AttacksThe Hacker News·Apr 5, 03:55 UTC · Apr 5, 2024VulnerabilityCVE-2024-2653CVE-2024-27316CVE-2024-24549+7 CVEs35
SMTP Smuggling: New Flaw Lets Attackers Bypass Security and Spoof EmailsThe Hacker News·Jan 17, 01:53 UTC · Jan 17, 2024Vulnerability42
LogoFAIL: UEFI Vulnerabilities Expose Devices to Stealth Malware AttacksThe Hacker News·Dec 7, 07:08 UTC · Dec 7, 2023Vulnerability30
Dangerous vulnerability in fleet management software seemingly ignored by vendorCyberScoop·Dec 6, 23:38 UTC · Dec 6, 2023VulnerabilityCVE-2023-624860
Trusted Platform Module 2.0 flaws could impact billions of devicesSecurity Affairs·Mar 3, 13:49 UTC · Mar 3, 2023VulnerabilityCVE-2023-1017CVE-2023-101835
Vulnerable NetComm routers and a public PoC exploit (CVE-2022-4873, CVE-2022-4874)Help Net Security·Jan 18, 00:00 UTC · Jan 18, 2023Exploit / PoCCVE-2022-4873CVE-2022-487460
A bug in McAfee Agent allows to run code with SYSTEM privilegesSecurity Affairs·Jan 21, 22:20 UTC · Jan 21, 2022VulnerabilityCVE-2022-0166CVE-2021-3185447
Easily exploitable, unpatched Windows privilege escalation flaw revealed (CVE-2021-36934)Help Net Security·Jul 23, 07:46 UTC · Jul 23, 2021VulnerabilityCVE-2021-3693460
New Windows and Linux Flaws Give Attackers Highest System PrivilegesThe Hacker News·Jul 22, 03:36 UTC · Jul 22, 2021VulnerabilityCVE-2021-36934CVE-2021-33909CVE-2021-3391035
Microsoft's Emergency Patch Fails to Fully Fix PrintNightmare RCE VulnerabilityThe Hacker News·Jul 9, 09:52 UTC · Jul 9, 2021VulnerabilityCVE-2021-34527CVE-2021-167560
Microsoft says that the emergency patch recently released correctly fix the PrintNightmare flawSecurity Affairs·Jul 9, 07:43 UTC · Jul 9, 2021VulnerabilityCVE-2021-3452747
New High-Severity Vulnerability Reported in Pulse Connect Secure VPNThe Hacker News·May 25, 07:37 UTC · May 25, 2021Vulnerability in the wildCVE-2021-22908CVE-2021-22893CVE-2021-22894+2 CVEs60
Dnsmasq vulnerabilities open networking devices, Linux distros to DNS cache poisoningHelp Net Security·Jan 19, 00:00 UTC · Jan 19, 2021VulnerabilityCVE-2020-2568147
Netgear is releasing fixes for ten issues affecting 79 productsSecurity Affairs·Jul 2, 06:38 UTC · Jul 2, 2020Vulnerability55
The CallStranger UPnP vulnerability affects billions of devicesSecurity Affairs·Jun 9, 07:54 UTC · Jun 9, 2020VulnerabilityCVE-2020-1269547
Experts disclose security flaws in Oracle's iPlanet Web ServerSecurity Affairs·May 11, 14:20 UTC · May 11, 2020VulnerabilityCVE-2020-9315CVE-2020-9314CVE-2012-051635
Zyxel NAS, firewalls and LILIN DVRs and IP cameras conscripted into IoT botnetsHelp Net Security·Mar 23, 00:00 UTC · Mar 23, 2020MalwareCVE-2020-905460
Mukashi, the new Mirai variant that targets Zyxel NASSecurity Affairs·Mar 21, 15:46 UTC · Mar 21, 2020Exploit / PoCCVE-2020-905460
Zyxel Fixes 0day in Network Storage DevicesKrebs on Security·Feb 24, 18:06 UTC · Feb 24, 2020Ransomware in the wildCVE-2020-905460
Patch Tuesday, November 2019 EditionKrebs on Security·Nov 12, 22:16 UTC · Nov 12, 2019Vulnerability in the wildCVE-2019-1429CVE-2019-1457CVE-2019-1372060
0patch released micropatch for BearLPE flaw in Win 10 Task SchedulerSecurity Affairs·May 31, 19:44 UTC · May 31, 2019Vulnerability55
VPN apps insecurely store session cookies in memory and log filesSecurity Affairs·Apr 12, 10:17 UTC · Apr 12, 2019Data breachCVE-2019-157360
Enterprise VPN apps store authentication and session cookies insecurelyHelp Net Security·Apr 12, 00:00 UTC · Apr 12, 2019VulnerabilityCVE-2019-157335