Search: “Next.js”

78 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Vulnerability 29 Malware 14 Exploit / PoC 8 Threat actor 7 Ransomware 7 Data breach 6 Phishing & fraud 2 AI tools & infra 1 Advisory 1 Industry 1 Policy & legal 1 Tools 1

SeverityAll critical 45 high 20 medium 9 low 2 info 2

TeamPCP Linked To Redis Attacks Dating Back To 2020 And Later Supply Chain Campaign

The Hacker NewsAug 7, 06:50 UTC · Aug 7, 2026Threat actor

60

Chinese Threat Actors Weaponize New Vulnerabilities in Under a Day

Infosecurity MagazineAug 3, 15:00 UTC · Aug 3, 2026Vulnerability in the wild

60

⚡ Weekly Recap: Rogue AI Models, $88M Bitcoin Theft, Water

The Hacker NewsAug 3, 14:03 UTC · Aug 3, 2026Data breach CVE-2026-42897 CVE-2026-66066

60

Agentic Software Development Field Guide

Help Net SecurityAug 3, 11:01 UTC · Aug 3, 2026Industry1

30

Fake Coding Tests Deliver OtterCookie-Aligned Malware Hidden in SVG Flag Images

The Hacker NewsJul 19, 18:14 UTC · Jul 19, 2026Malware

42

May 2026 CVE Landscape

Recorded FutureJun 15, 00:00 UTC · Jun 15, 2026Exploit / PoC in the wildCVE-2008-4250 CVE-2009-1537 CVE-2009-3459+19 CVEs

60

⚡ Weekly Recap: Exchange 0-Day, npm Worm, Fake AI Repo, Cisco Exploit and More

The Hacker NewsMay 19, 04:33 UTC · May 19, 2026Ransomware in the wildCVE-2026-42897 CVE-2026-20182 CVE-2026-20127

60

⚡ Weekly Recap: Linux Rootkit, macOS Crypto Stealer, WebSocket Skimmers and More

The Hacker NewsMay 11, 12:36 UTC · May 11, 2026Malware in the wildCVE-2026-6973 CVE-2026-0300

60

Vercel attack fallout expands to more customers and third

CyberScoopApr 23, 22:05 UTC · Apr 23, 2026Data breach in the wild1

60

Vercel Finds More Compromised Accounts in Context.ai

The Hacker NewsApr 23, 08:47 UTC · Apr 23, 2026Data breach

45

Vercel Breach Tied to Context AI Hack Exposes Limited Customer Credentials

The Hacker NewsApr 22, 15:14 UTC · Apr 22, 2026Data breach1

57

Vercel's security breach started with malware disguised as Roblox cheats

CyberScoopApr 20, 20:24 UTC · Apr 20, 2026Malware in the wild

60

Third-party AI hack triggers Vercel breach, internal environments accessed

Security AffairsApr 20, 10:11 UTC · Apr 20, 2026AI tools & infra

30

Vercel breached via compromised third-party AI tool

Help Net SecurityApr 20, 00:00 UTC · Apr 20, 2026Data breach

60

RondoDox botnet expands arsenal targeting 174 flaws, and hits 15,000 daily exploit attempts

Security AffairsMar 17, 15:02 UTC · Mar 17, 2026Malware in the wildCVE-2023-1389 CVE-2024-3721 CVE-2024-12856+2 CVEs

60

Aeternum C2 Botnet Stores Encrypted Commands on Polygon Blockchain to Evade Takedown

The Hacker NewsFeb 28, 09:34 UTC · Feb 28, 2026Malware

30

More than half of public vulnerabilities bypass leading WAFs

Help Net SecurityFeb 18, 05:11 UTC · Feb 18, 2026Vulnerability CVE-2025-55182

60

A security flaw at DavaIndia Pharmacy allowed attackers to access customers' data and more

Security AffairsFeb 16, 19:22 UTC · Feb 16, 2026Vulnerability

30

Pompelmi: Open-source secure file upload scanning for Node.js

Help Net SecurityFeb 2, 00:00 UTC · Feb 2, 2026Malware

30

IR Trends Q4 2025: Exploitation remains dominant, phishing campaign targets Native American tribal organizations

Cisco TalosJan 29, 11:00 UTC · Jan 29, 2026Threat actor CVE-2025-61882 CVE-2025-55182

60

ACME Flaw in Cloudflare allowed attackers to reach origin servers

Security AffairsJan 21, 15:10 UTC · Jan 21, 2026Vulnerability

30

Security Affairs newsletter Round 559 by Pierluigi Paganini

Security AffairsJan 18, 13:46 UTC · Jan 18, 2026Exploit / PoC in the wild

60

⚡ Weekly Recap: IoT Exploits, Wallet Breaches, Rogue Extensions, AI Abuse & More

The Hacker NewsJan 5, 12:56 UTC · Jan 5, 2026Vulnerability CVE-2025-55182 CVE-2025-13915 CVE-2025-52691+7 CVEs

60

React2Shell Vulnerability Actively Exploited to Deploy Linux Backdoors

The Hacker NewsDec 17, 07:26 UTC · Dec 17, 2025Vulnerability in the wildCVE-2025-55182 CVE-2025-29927 CVE-2025-66478

60

⚡ Weekly Recap: Apple 0-Days, WinRAR Exploit, LastPass Fines, .NET RCE, OAuth Scams & More

The Hacker NewsDec 15, 00:00 UTC · Dec 15, 2025Vulnerability in the wildCVE-2025-14174 CVE-2025-43529 CVE-2025-6218+43 CVEs

60

Federal agencies now only have one more day to patch React2Shell bug

The RecordDec 11, 19:54 UTC · Dec 11, 2025Vulnerability in the wildCVE-2025-55182

60

New EtherRAT backdoor surfaces in React2Shell attacks tied to North Korea

Security AffairsDec 10, 14:45 UTC · Dec 10, 2025Malware CVE-2025-55182

60

AWS: China-linked threat actors weaponized React2Shell hours after disclosure

Security AffairsDec 8, 13:37 UTC · Dec 8, 2025Threat actor in the wildCVE-2025-55182 CVE-2025-1338

60

React2Shell Under Active Exploitation by China

Infosecurity MagazineDec 8, 11:40 UTC · Dec 8, 2025Exploit / PoC in the wildCVE-2025-55182

60

⚡ Weekly Recap: Drift Breach Chaos, Zero-Days Active, Patch Warnings, Smarter Threats & More

The Hacker NewsDec 6, 11:14 UTC · Dec 6, 2025Vulnerability in the wildCVE-2025-53690 CVE-2025-38352 CVE-2025-48543+25 CVEs1

60

⚡ Weekly Recap: Hot CVEs, npm Worm Returns, Firefox RCE, M365 Email Raid & More

The Hacker NewsDec 2, 05:36 UTC · Dec 2, 2025Vulnerability CVE-2025-59287 CVE-2025-12972 CVE-2025-12970+17 CVEs1

47

It’s not personal, it’s just business

Cisco TalosNov 20, 19:00 UTC · Nov 20, 2025Ransomware

60

Over 67,000 Fake npm Packages Flood Registry in Worm

The Hacker NewsNov 15, 00:00 UTC · Nov 15, 2025Malware

42

NCSC Launches Vulnerability Research Institute to Boost UK Resilience

Infosecurity MagazineJul 15, 10:00 UTC · Jul 15, 2025Vulnerability

30

⚡ Weekly Recap: Chrome 0-Day, Ivanti Exploits, MacOS Stealers, Crypto Heists and More

The Hacker NewsJul 15, 00:00 UTC · Jul 15, 2025Malware in the wildCVE-2025-32462 CVE-2025-32463 CVE-2025-20309+23 CVEs

60

⚡ THN Weekly Recap: GitHub Supply Chain Attack, AI Malware, BYOVD Tactics, and More

The Hacker NewsMay 7, 10:33 UTC · May 7, 2025Malware CVE-2025-29927 CVE-2025-23120 CVE-2024-56346+13 CVEs

60

Horns&Hooves Campaign Delivers RATs via Fake Emails and JavaScript Payloads

The Hacker NewsDec 3, 05:23 UTC · Dec 3, 2024Threat actor

57

Kasada introduces CDN edge API integrations to block abuse and online fraud

Help Net SecurityMar 19, 00:00 UTC · Mar 19, 2024Phishing & fraud

42