Flipper Zero firmware development gets a fresh set of community rulesHelp Net Security·Jul 6, 00:00 UTC · Jul 6, 2026AI tools & infra30
GitHub Copilot CLI gets a second-opinion feature built on cross-model reviewHelp Net Security·Jun 14, 15:32 UTC · Jun 14, 2026Model release150
GRU-Linked BlueDelta Evolves Credential HarvestingRecorded Future·May 26, 00:00 UTC · May 26, 2026Data breach45
TrapDoor Supply Chain Attack Spreads Credential-Stealing Malware via npm, PyPI, and CratesIOThe Hacker News·May 25, 05:59 UTC · May 25, 2026Malware42
Is your Google Analytics code malicious?Sansec (Magento / e-commerce security)·Apr 14, 20:16 UTC · Apr 14, 2026Malware30
Digital skimmer runs entirely on Google, defeats CSPSansec (Magento / e-commerce security)·Apr 14, 19:49 UTC · Apr 14, 2026Vulnerability30
57 payment gateways from Germany to Brazil targetedSansec (Magento / e-commerce security)·Apr 14, 19:49 UTC · Apr 14, 2026Vulnerability30
Rspamd 4.0.0 ships memory savings, a new scan protocol, and a required migration stepHelp Net Security·Mar 31, 00:00 UTC · Mar 31, 2026Threat actor45
Critical vm2 Node.js Flaw Allows Sandbox Escape and Arbitrary Code ExecutionThe Hacker News·Jan 29, 06:05 UTC · Jan 29, 2026VulnerabilityCVE-2026-22709CVE-2022-36067CVE-2023-29017+5 CVEs160
Osiris ransomware emerges, leveraging BYOVD technique to kill security toolsSecurity Affairs·Jan 24, 18:17 UTC · Jan 24, 2026Ransomware57
ThreatsDay Bulletin: 0-Days, LinkedIn Spies, Crypto Crimes, IoT Flaws and New Malware WavesThe Hacker News·Nov 21, 06:45 UTC · Nov 21, 2025MalwareCVE-2025-61757CVE-2025-1124360
PhantomCaptcha targets Ukraine relief groups with WebSocket RAT in October 2025Security Affairs·Oct 22, 20:01 UTC · Oct 22, 2025Malware42
Malicious Rust Crates Steal Solana and Ethereum Keys — 8,424 Downloads ConfirmedThe Hacker News·Sep 26, 12:35 UTC · Sep 26, 2025Malware42
North Korea-linked threat actors spread macOS NimDoor malware via fake Zoom updatesSecurity Affairs·Jul 5, 16:32 UTC · Jul 5, 2025Malware42
New BrowserVenom malware being distributed via fake DeepSeek phishing websiteKaspersky Securelist·Jun 11, 10:01 UTC · Jun 11, 2025Malware42
Malicious npm and PyPI target Solana Private keys to steal funds from victims' walletsSecurity Affairs·Jan 20, 12:32 UTC · Jan 20, 2025Malware30
Neosync: Open-source data anonymization, synthetic data orchestrationHelp Net Security·Dec 10, 00:00 UTC · Dec 10, 2024Policy & legal30
Closer to the Edge: Hyperscaling Have I Been Pwned with Cloudflare Workers and CachingTroy Hunt·Nov 21, 07:35 UTC · Nov 21, 2024Data breach57
Malicious NPM Packages Target Roblox Users with DataThe Hacker News·Nov 8, 11:53 UTC · Nov 8, 2024Malware42
Multi-Layered TDS Infrastructure Linked to Major Cyber ThreatsRecorded Future·Sep 5, 00:00 UTC · Sep 5, 2024Ransomware57
Security Affairs newsletter Round 485 by Pierluigi PaganiniSecurity Affairs·Aug 18, 08:23 UTC · Aug 18, 2024RansomwareCVE-2024-3821360
Tusk campaign uses infostealers and clippers for financial gainKaspersky Securelist·Aug 15, 12:00 UTC · Aug 15, 2024Malware30
Understanding NullBulge, the New AIInfosecurity Magazine·Jul 17, 15:00 UTC · Jul 17, 2024Ransomware57
A new flaw in OpenSSH can lead to remote code executionSecurity Affairs·Jul 10, 14:37 UTC · Jul 10, 2024VulnerabilityCVE-2024-6409CVE-2024-638747
New OpenSSH Vulnerability Discovered: Potential Remote Code Execution RiskThe Hacker News·Jul 10, 03:26 UTC · Jul 10, 2024VulnerabilityCVE-2024-6409CVE-2024-638747
New OpenSSH Vulnerability Could Lead to RCE as Root on Linux SystemsThe Hacker News·Jul 9, 04:22 UTC · Jul 9, 2024VulnerabilityCVE-2024-6387CVE-2006-5051CVE-2008-410960
New P2Pinfect version delivers miners and ransomware on Redis serversSecurity Affairs·Jun 27, 05:40 UTC · Jun 27, 2024RansomwareCVE-2022-054360
VMware fixed five memory corruption issues in vCenter ServerSecurity Affairs·Jun 23, 18:42 UTC · Jun 23, 2023VulnerabilityCVE-2023-20892CVE-2023-20893CVE-2023-20894+2 CVEs47
10 Open-Source Recon Tools Worth Your TimeHelp Net Security·Jun 20, 00:00 UTC · Jun 20, 2023Exploit / PoC45
Researchers disclose sandbox escape bug in vm2 sandbox librarySecurity Affairs·Apr 9, 20:34 UTC · Apr 9, 2023Exploit / PoCCVE-2023-29017CVE-2022-3606760
Hacked Cellebrite and MSAB Software ReleasedSchneier on Security·Jan 15, 00:00 UTC · Jan 15, 2023Exploit / PoC160
Google Chrome issue allows overwriting the notebook contentSecurity Affairs·Sep 2, 10:48 UTC · Sep 2, 2022Vulnerability30
10 malicious packages on PyPI used to steal developers' dataSecurity Affairs·Aug 10, 15:14 UTC · Aug 10, 2022Malware42
10 Credential Stealing Python Libraries Found on PyPI RepositoryThe Hacker News·Aug 10, 05:22 UTC · Aug 10, 2022Malware55
New Malicious Python Libraries Found on PyPI RepositoryInfosecurity Magazine·Aug 9, 17:30 UTC · Aug 9, 2022Malware155
Building Password Purgatory with Cloudflare Pages and WorkersTroy Hunt·Mar 11, 02:00 UTC · Mar 11, 2022AI tools & infra130
MysterySnail attacks with Windows zeroKaspersky Securelist·Oct 13, 14:49 UTC · Oct 13, 2021Exploit / PoCCVE-2016-3309CVE-2021-4044960