DirtyMoe Botnet Gains New Exploits in Wormable Module to Spread RapidlyThe Hacker News·Mar 28, 07:26 UTC · Mar 28, 2022MalwareCVE-2019-9082CVE-2019-2725CVE-2019-1458+2 CVEs60
Rocke: The Champion of Monero MinersCisco Talos·Aug 30, 15:26 UTC · Aug 30, 2018VulnerabilityCVE-2017-10271CVE-2017-306660
Ransomware operators target CVE-2020Security Affairs·Nov 7, 17:28 UTC · Nov 7, 2020RansomwareCVE-2020-1488260
Sophos Web Appliance vulnerability exploited in the wild (CVE-2023-1671)Help Net Security·Nov 22, 09:12 UTC · Nov 22, 2023Exploit / PoC in the wildCVE-2023-1671CVE-2020-255160
25 vulnerabilities exploited by Chinese state-sponsored hackersHelp Net Security·Oct 21, 00:00 UTC · Oct 21, 2020VulnerabilityCVE-2019-11510CVE-2020-5902CVE-2019-19781+22 CVEs60
Zero-day vulnerability in Oracle WebLogic yet to be patchedSecurity Affairs·Apr 24, 20:35 UTC · Apr 24, 2019Exploit / PoC60
Hackers Targeting WebLogic Servers and Docker APIs for Mining CryptocurrenciesThe Hacker News·Sep 15, 00:00 UTC · Sep 15, 2022Vulnerability in the wildCVE-2022-26134CVE-2020-14882160
CL0P-Linked Hackers Breach Dozens of Organizations Through Oracle Software FlawThe Hacker News·Oct 10, 06:41 UTC · Oct 10, 2025Ransomware in the wildCVE-2025-61882160
UK and US share more vulnerabilities exploited by Russia's APT29 hackersThe Record·Dec 9, 00:00 UTC · Dec 9, 2022Vulnerability in the wildCVE-2018-13379CVE-2019-1653CVE-2019-2725+9 CVEs60
Oracle To Address 320 Vulnerabilities in January Patch UpdateInfosecurity Magazine·Jan 21, 12:45 UTC · Jan 21, 2025Vulnerability in the wildCVE-2020-288360
US warns of Russian state-sponsored attacks on critical infrastructureThe Record·Jan 17, 00:00 UTC · Jan 17, 2023Threat actorCVE-2018-13379CVE-2019-1653CVE-2019-2725+10 CVEs60
FBI, NSA and CISA Warns of Russian Hackers Targeting Critical InfrastructureThe Hacker News·Jan 12, 10:47 UTC · Jan 12, 2022AdvisoryCVE-2018-13379CVE-2019-1653CVE-2019-2725+13 CVEs60
June 2026 CVE LandscapeRecorded Future·Jul 17, 00:00 UTC · Jul 17, 2026Ransomware in the wildCVE-2026-35616CVE-2026-25939CVE-2020-17103+53 CVEs60
Pre-auth RCE in Oracle Fusion Middleware exploited in the wild (CVE-2021-35587)Help Net Security·Nov 29, 00:00 UTC · Nov 29, 2022Exploit / PoC in the wildCVE-2021-3558760
Cybercriminals Targeting Apache NiFi Instances for Cryptocurrency MiningThe Hacker News·May 31, 15:44 UTC · May 31, 2023VulnerabilityCVE-2020-14882CVE-2020-1488360
Attackers actively exploiting Atlassian Confluence and Oracle WebLogic flawsHelp Net Security·May 2, 00:00 UTC · May 2, 2019RansomwareCVE-2019-2725CVE-2019-339660
Hackers Exploiting Drupal Vulnerability to Inject Cryptocurrency MinersThe Hacker News·Apr 18, 09:50 UTC · Apr 18, 2018Vulnerability in the wildCVE-2018-7600CVE-2017-1027160
Week in review: Terrapin SSH attack, Mr. Cooper breachHelp Net Security·Dec 24, 00:00 UTC · Dec 24, 2023RansomwareCVE-2023-48795CVE-2020-1488360
DirtyMoe modules expand the bot using wormSecurity Affairs·Mar 21, 08:03 UTC · Mar 21, 2022Exploit / PoCCVE-2020-0674CVE-2019-9082CVE-2019-2725+3 CVEs60
Top 15 Vulnerabilities Attackers Exploited Millions of Times to Hack Linux SystemsThe Hacker News·Aug 23, 13:27 UTC · Aug 23, 2021Vulnerability in the wildCVE-2017-5638CVE-2017-9805CVE-2018-7600+12 CVEs60
Sodinokibi ransomware gang launches an eBaySecurity Affairs·Jun 3, 10:54 UTC · Jun 3, 2020Ransomware60
CyrusOne, one of the major US data center provider, hit by ransomwareSecurity Affairs·Dec 5, 07:34 UTC · Dec 5, 2019Ransomware60
Week in review: Oracle WebLogic zero-day under attack, a new way to improve network securityHelp Net Security·Apr 28, 00:00 UTC · Apr 28, 2019Exploit / PoC60
CVE-2018-7602 - Drupal addressed a new vulnerability associated with Drupalgeddon2 flawSecurity Affairs·Apr 26, 12:49 UTC · Apr 26, 2018Vulnerability in the wildCVE-2018-7602CVE-2018-7600CVE-2017-1027160
Experts are observing Drupalgeddon2 (CVE-2018Security Affairs·Apr 19, 04:02 UTC · Apr 19, 2018Exploit / PoCCVE-2018-7600CVE-2017-1027160
Meet Sodinokibi, a ransomware strain that exploits a critical Oracle server flawCyberScoop·Apr 30, 19:34 UTC · Apr 30, 2019Ransomware in the wildCVE-2019-272560
NSA details top 25 flaws exploited by ChinaSecurity Affairs·Oct 20, 19:28 UTC · Oct 20, 2020Exploit / PoCCVE-2019-11510CVE-2020-5902CVE-2019-19781+22 CVEs60
CISA adds 15 new flaws to its Known Exploited Vulnerabilities CatalogSecurity Affairs·Feb 16, 09:58 UTC · Feb 16, 2022Exploit / PoC in the wildCVE-2021-36934CVE-2020-0796CVE-2018-1000861+12 CVEs60
New Lucifer DDoS botnet targets Windows systems with multiple exploitsSecurity Affairs·Jun 26, 06:42 UTC · Jun 26, 2020MalwareCVE-2019-9081CVE-2014-6287CVE-2018-1000861+7 CVEs60
Sodinokibi ransomware plagues Travelex currency exchange as investigation continuesCyberScoop·Jan 7, 20:17 UTC · Jan 7, 2020Ransomware in the wild60
Oracle releases security patches for Apache Struts CVE-2017Security Affairs·Sep 26, 06:34 UTC · Sep 26, 2017Vulnerability in the wildCVE-2017-9805CVE-2017-7672CVE-2017-9787+5 CVEs60
New Pro-Ocean crypto-miner targets Apache ActiveMQ, Oracle WebLogic, and Redis installsSecurity Affairs·Jan 31, 11:27 UTC · Jan 31, 2021VulnerabilityCVE-2017-10271CVE-2016-308860
San Francisco Rail System Hacker HackedKrebs on Security·Nov 29, 22:30 UTC · Nov 29, 2016Ransomware60
Microsoft SharePoint vulnerability allows hackers to sift through servers, Saudi authorities warnCyberScoop·May 9, 17:13 UTC · May 9, 2019Vulnerability in the wild60
Oracle critical patch advisory addresses 284 flaws, 33 criticalSecurity Affairs·Jan 18, 13:15 UTC · Jan 18, 2019VulnerabilityCVE-2016-1000031CVE-2017-5645CVE-2018-11776+3 CVEs60
Threat AdvisoryCisco Talos·Dec 19, 16:50 UTC · Dec 19, 2025Advisory in the wildCVE-2026-20182CVE-2025-20333CVE-2025-20362+6 CVEs160
Google Chrome, D-Link bugs among twelve added to CISA’s list of known exploited vulnerabilitiesThe Record·Jan 10, 00:00 UTC · Jan 10, 2023Exploit / PoC in the wildCVE-2022-3075CVE-2018-2628CVE-2020-993460
The number of exploits in the Echobot botnet reached 59Security Affairs·Aug 7, 11:55 UTC · Aug 7, 2019Malware55
Oracle Out of Cycle Apache Patch – CVE-2011Kaspersky Securelist·Sep 16, 22:32 UTC · Sep 16, 2011Vulnerability in the wildCVE-2011-3192CVE-2007-008660
Cryptomining malware digs into nearly 40% of organizations worldwideHelp Net Security·Jun 26, 21:20 UTC · Jun 26, 2018MalwareCVE-2017-7269CVE-2017-1027160