Over 100 VS Code Extensions Exposed Developers to Hidden Supply Chain RisksThe Hacker News·Oct 31, 07:59 UTC · Oct 31, 2025Ransomware60
Microsoft Issues Security Fixes for 56 Flaws, Including Active Exploit and Two ZeroThe Hacker News·Dec 10, 15:09 UTC · Dec 10, 2025Exploit / PoC in the wildCVE-2025-62223CVE-2025-62221CVE-2025-54100+6 CVEs60
⚡ Weekly Recap: Lazarus Hits Web3, Intel/AMD TEEs Cracked, Dark Web Leak Tool & MoreThe Hacker News·Nov 3, 17:59 UTC · Nov 3, 2025Threat actorCVE-2025-61932CVE-2025-55315CVE-2025-10680+18 CVEs160
⚡ Weekly Recap: Firewall Flaws, AI-Built Malware, Browser Traps, Critical CVEs & MoreThe Hacker News·Jan 26, 16:53 UTC · Jan 26, 2026MalwareCVE-2025-59718CVE-2025-59719CVE-2026-2406160
Critical Flaws Found in Four VS Code Extensions with Over 125 Million InstallsThe Hacker News·Feb 18, 13:16 UTC · Feb 18, 2026VulnerabilityCVE-2025-65717CVE-2025-65716CVE-2025-65715160
Week in review: High severity WordPress vulnerabilities, fake OAuth IDs bypass sign-in logsHelp Net Security·Jul 19, 00:00 UTC · Jul 19, 2026Vulnerability in the wildCVE-2026-15409CVE-2026-15410CVE-2026-56155+2 CVEs60
Mimecast confirms SolarWinds attackers breached security certificate, 'potentially exfiltrated' credentialsCyberScoop·Jan 26, 20:15 UTC · Jan 26, 2021Data breach in the wild60
SAP-Related npm Packages Compromised in CredentialThe Hacker News·Apr 30, 16:39 UTC · Apr 30, 2026Data breach60
Microsoft August 2020 Patch Tuesday fixed actively exploited zeroSecurity Affairs·Aug 12, 07:02 UTC · Aug 12, 2020Vulnerability in the wildCVE-2020-1464CVE-2020-138060
Researcher Drops a New VS Code Zero-Day After Losing Trust in Microsoft's Disclosure ProcessSecurity Affairs·Jun 4, 09:13 UTC · Jun 4, 2026Exploit / PoC in the wild160
Microsoft Issues Windows Update to Patch 0The Hacker News·Dec 15, 00:00 UTC · Dec 15, 2021Vulnerability in the wildCVE-2021-43890CVE-2021-43240CVE-2021-43883+10 CVEs60
ThreatsDay Bulletin: Wi-Fi Hack, npm Worm, DeFi Theft, Phishing Blasts— and 15 More StoriesThe Hacker News·Dec 4, 16:05 UTC · Dec 4, 2025Phishing & fraud55
Simple bug could lead to RCE flaw on apps built with Electron FrameworkThe Hacker News·May 15, 00:00 UTC · May 15, 2018VulnerabilityCVE-2018-100013660
⚡ Weekly Recap: Linux Flaws, Defender 0-Days, Router Botnets, and Supply Chain ChaosThe Hacker News·May 26, 04:39 UTC · May 26, 2026Malware in the wildCVE-2026-46333CVE-2026-41091CVE-2026-45498+31 CVEs60
Week in review: Cisco patches SD-WAN 0-day, unpatched Microsoft Exchange Server flaw exploitedHelp Net Security·May 17, 00:00 UTC · May 17, 2026Vulnerability in the wildCVE-2026-44413CVE-2026-41940CVE-2026-46300+2 CVEs160
Microsoft Issues Patches for Actively Exploited Excel, Exchange Server 0The Hacker News·Nov 10, 06:24 UTC · Nov 10, 2021Vulnerability in the wildCVE-2021-42321CVE-2021-42292CVE-2021-43208+16 CVEs60
North Korea-linked Actors Exploit React2Shell to Deploy New EtherRAT MalwareThe Hacker News·Dec 10, 07:33 UTC · Dec 10, 2025MalwareCVE-2025-5518260
Git LFS vulnerability allows attackers to compromise targets' Windows systems (CVE-2020-27955)Help Net Security·Nov 5, 00:00 UTC · Nov 5, 2020VulnerabilityCVE-2020-27955160
Patch Tuesday, February 2026 EditionKrebs on Security·Feb 11, 03:47 UTC · Feb 11, 2026VulnerabilityCVE-2026-21510CVE-2026-21513CVE-2026-21514+7 CVEs160
Micro Focus releases Visual COBOL 8.0 and Enterprise Suite 8.0 to modernize core business systemsHelp Net Security·Jul 15, 00:00 UTC · Jul 15, 2022Tools155
GitHub Breached — Employee Device Hack Led to Exfiltration of 3,800+ Internal ReposThe Hacker News·May 20, 16:10 UTC · May 20, 2026Data breach60
Unpatched Flaw in Linux Pling Store Apps Could Lead to SupplyThe Hacker News·Jun 23, 04:01 UTC · Jun 23, 2021Vulnerability55
‘Mini Shai-Hulud’ malware compromises hundreds of open-source packages in sprawling supplyCyberScoop·May 12, 21:38 UTC · May 12, 2026Malware155
Over 70 Malicious npm and VS Code Packages Found Stealing Data and CryptoThe Hacker News·May 26, 15:12 UTC · May 26, 2025Vulnerability55
SolarWinds Web Help Desk Exploited for RCE in MultiThe Hacker News·Mar 7, 07:03 UTC · Mar 7, 2026Vulnerability in the wildCVE-2025-40551CVE-2025-40536CVE-2025-26399+1 CVEs60
Microsoft Releases Fix for New ZeroThe Hacker News·May 11, 16:06 UTC · May 11, 2022Exploit / PoC in the wildCVE-2022-26925CVE-2022-29972CVE-2022-22713+14 CVEs60
Malicious Nx Packages in ‘s1ngularity’ Attack Leaked 2,349 GitHub, Cloud, and AI CredentialsThe Hacker News·Sep 6, 11:31 UTC · Sep 6, 2025Malware55
A Record-Breaking Patch Tuesday for June 2026Krebs on Security·Jun 10, 01:28 UTC · Jun 10, 2026VulnerabilityCVE-2026-49160CVE-2026-45586CVE-2026-5050760
Desktop and IoT malware report for Q3 2025Kaspersky Securelist·Nov 19, 10:00 UTC · Nov 19, 2025MalwareCVE-2024-4076660
ThreatsDay Bulletin: CarPlay Exploit, BYOVD Tactics, SQL C2 Attacks, iCloud Backdoor Demand & MoreThe Hacker News·Oct 3, 04:59 UTC · Oct 3, 2025MalwareCVE-2024-3400CVE-2017-792160
GitHub Confirms Breach of Internal RepositoriesInfosecurity Magazine·May 20, 10:45 UTC · May 20, 2026Ransomware60
Flaws in Popular IDE Extensions Allow Data ExfiltrationInfosecurity Magazine·Feb 19, 10:45 UTC · Feb 19, 2026VulnerabilityCVE-2025-65717CVE-2025-65716CVE-2025-6571560
Red Hat OpenShift 4.20 unifies enterprise IT, from virtual machines to AI workloadsHelp Net Security·Nov 11, 00:00 UTC · Nov 11, 2025Policy & legal55
RedDelta Deploys PlugX Malware to Target Mongolia and Taiwan in Espionage CampaignsThe Hacker News·Jan 10, 09:51 UTC · Jan 10, 2025Malware55
Check Point VPN zero-day exploited since beginning of April (CVE-2024-24919)Help Net Security·Jun 5, 08:26 UTC · Jun 5, 2024Exploit / PoC in the wildCVE-2024-2491960
Microsoft Patch Tuesday for February 2023 fixed actively exploited zeroSecurity Affairs·Feb 14, 20:11 UTC · Feb 14, 2023Vulnerability in the wildCVE-2023-21823CVE-2023-21715CVE-2023-2337660
Microsoft Patch Tuesday for October 2022 doesn't fix Exchange Server flawsSecurity Affairs·Oct 12, 15:41 UTC · Oct 12, 2022Vulnerability in the wildCVE-2022-41033CVE-2022-38048CVE-2022-37987+2 CVEs60
Microsoft and Other Major Software Firms Release February 2022 Patch UpdatesThe Hacker News·Feb 9, 06:40 UTC · Feb 9, 2022Vulnerability in the wildCVE-2022-21989CVE-2022-21984CVE-2022-22005+12 CVEs60