⚡ Weekly Recap: IoT Exploits, Wallet Breaches, Rogue Extensions, AI Abuse & MoreThe Hacker News·Jan 5, 12:56 UTC · Jan 5, 2026VulnerabilityCVE-2025-55182CVE-2025-13915CVE-2025-52691+7 CVEs60
What your browser knows about you, from contacts to card numbersHelp Net Security·May 9, 00:00 UTC · May 9, 2025Industry30
A new version of Triada spreads embedded in the firmware of Android devicesKaspersky Securelist·Apr 25, 10:00 UTC · Apr 25, 2025Vulnerability42
Critical Firefox, Tor Browser sandbox escape flaw fixed (CVE-2025-2857)Help Net Security·Apr 2, 08:44 UTC · Apr 2, 2025Vulnerability in the wildCVE-2025-2857CVE-2025-278360
Microsoft Uncovers New XCSSET macOS Malware Variant with Advanced Obfuscation TacticsThe Hacker News·Mar 12, 06:55 UTC · Mar 12, 2025MalwareCVE-2021-3071360
PlushDaemon APT Targets South Korean VPN Provider in Supply Chain AttackThe Hacker News·Jan 24, 05:24 UTC · Jan 24, 2025Vulnerability42
SteelFox Trojan imitates popular products to drop stealer and miner malwareKaspersky Securelist·Nov 6, 10:00 UTC · Nov 6, 2024MalwareCVE-2020-1497935
Apple removed 25 VPN apps from the App Store in RussiaSecurity Affairs·Jul 8, 10:18 UTC · Jul 8, 2024Policy & legal30
CISA adds Chrome zero-days to its Known Exploited Vulnerabilities catalogSecurity Affairs·May 17, 08:50 UTC · May 17, 2024Exploit / PoC in the wildCVE-2024-4761CVE-2024-4947CVE-2024-467160
Friendship Ended With GOOGLE Now KAGI Is My Best Friend404 Media·Apr 3, 13:48 UTC · Apr 3, 2024AI tools & infra130
SapphireStealer: Open-source information stealer enables credential and data theftCisco Talos·Aug 31, 12:00 UTC · Aug 31, 2023Malware42
National Gallery of Canada recovering from ransomware incidentThe Record·May 10, 14:30 UTC · May 10, 2023Ransomware57
Week in review: Fake ChatGPT desktop client steals data, Patch Tuesday forecastHelp Net Security·May 7, 00:00 UTC · May 7, 2023VulnerabilityCVE-2023-20126CVE-2018-9995CVE-2016-20016+1 CVEs60
Ransomware group takes credit for February attack on city of ModestoThe Record·Mar 28, 19:23 UTC · Mar 28, 2023Ransomware57
Kasada raises $23M to accelerate global momentum combating online fraudHelp Net Security·Mar 9, 18:57 UTC · Mar 9, 2023Phishing & fraud30
Philadelphia Orchestra, Kimmel Center websites down after cyberattack cripples ticket salesThe Record·Feb 14, 18:53 UTC · Feb 14, 2023Ransomware60
Malicious PyPI Packages Using Cloudflare Tunnels to Sneak Through FirewallsThe Hacker News·Jan 9, 08:47 UTC · Jan 9, 2023Malware42
Ad-blocker caught injecting ads in search resultsThe Record·Dec 17, 00:00 UTC · Dec 17, 2022Malware30
Spam email campaign targeting businesses delivers the Agent Tesla stealerKaspersky Securelist·Sep 23, 08:05 UTC · Sep 23, 2022Malware42
ZingoStealer crimeware released for free in the cybercrime ecosystemSecurity Affairs·Apr 15, 14:37 UTC · Apr 15, 2022Malware30
Haskers Gang Gives Away ZingoStealer Malware to Other Cybercriminals for FreeThe Hacker News·Apr 15, 00:00 UTC · Apr 15, 2022Malware30
Threat Spotlight: "Haskers Gang" Introduces New ZingoStealerCisco Talos·Apr 14, 11:59 UTC · Apr 14, 2022Malware30
New RedLine malware version distributed as fake Omicron stat counterSecurity Affairs·Jan 12, 15:42 UTC · Jan 12, 2022Malware30
Night Sky, a new ransomware operation in the threat landscapeSecurity Affairs·Jan 7, 05:41 UTC · Jan 7, 2022Ransomware57
14 New XS-Leaks (Cross-Site Leaks) Attacks Affect All Modern Web BrowsersThe Hacker News·Dec 6, 09:25 UTC · Dec 6, 2021Vulnerability30
'Lone Wolf' Hacker Group Targeting Afghanistan and India with Commodity RATsThe Hacker News·Oct 23, 04:23 UTC · Oct 23, 2021VulnerabilityCVE-2017-1188247
Malicious campaign uses a barrage of commodity RATs to target Afghanistan and IndiaCisco Talos·Oct 20, 00:00 UTC · Oct 20, 2021Threat actorCVE-2017-11882CVE-2012-11882260
Experts spotted an Ad-Blocking Chrome extension injecting malicious adsSecurity Affairs·Oct 18, 06:30 UTC · Oct 18, 2021Vulnerability30
Ad-Blocking Chrome Extension Caught Injecting Ads in Google Search PagesThe Hacker News·Oct 15, 00:00 UTC · Oct 15, 2021Malware30
New FamousSparrow APT group used ProxyLogon exploits in its attacksSecurity Affairs·Sep 24, 05:04 UTC · Sep 24, 2021Threat actor60
Friday Squid Blogging: Peru Defends Its Waters against Chinese Squid Fishing BoatsSchneier on Security·Nov 15, 00:00 UTC · Nov 15, 2020Phishing & fraud30
Popular Mobile Browsers Found Vulnerable To Address Bar Spoofing AttacksThe Hacker News·Oct 21, 07:12 UTC · Oct 21, 2020Exploit / PoC45
Is Your Browser Secure? How to Secure Web Browser Against Attacks!Security Affairs·Jun 30, 13:25 UTC · Jun 30, 2019Malware30
I know what you did last summer, MuddyWater blending in the crowdKaspersky Securelist·Apr 29, 08:00 UTC · Apr 29, 2019Exploit / PoC57
Cybaze-Yoroi ZLAB revealed the hidden link between Gootkit and AZORultSecurity Affairs·Feb 12, 18:16 UTC · Feb 12, 2019Malware30
The Social network giant Facebook confirms it shared data with 61 tech firmsSecurity Affairs·Jul 3, 07:04 UTC · Jul 3, 2018Policy & legal30