The anatomy of a completely fileless attackHelp Net Security·Jun 26, 21:22 UTC · Jun 26, 2018Malware55
PuzzleMaker attacks with Chrome zeroKaspersky Securelist·Jun 8, 17:32 UTC · Jun 8, 2021Exploit / PoCCVE-2021-31955CVE-2021-31956CVE-2021-21220+1 CVEs60
48 Malicious npm Packages Found Deploying Reverse Shells on Developer SystemsThe Hacker News·Nov 6, 16:38 UTC · Nov 6, 2023Malware155
Week in review: Popular npm package hijacked, zero trust security key tenets, wildcard certificate risksHelp Net Security·Oct 31, 00:00 UTC · Oct 31, 2021Ransomware in the wildCVE-2021-30892CVE-2021-3088360
Opera GX Flaw Let Malicious Sites Auto-Install Mods to Steal Data From Visited PagesThe Hacker News·Jul 8, 12:17 UTC · Jul 8, 2026Exploit / PoC in the wild60
Avoiding Death by a Thousand Scripts: Using Automated Content Security PoliciesThe Hacker News·Jul 12, 11:28 UTC · Jul 12, 2022Vulnerability55
Ghost CMS CVE-2026-26980 Exploited to Hijack 700+ Sites for ClickFix AttacksThe Hacker News·Jun 26, 07:33 UTC · Jun 26, 2026VulnerabilityCVE-2026-2698060
Attack on axios software developer tool threatens widespread compromisesCyberScoop·Mar 31, 18:24 UTC · Mar 31, 2026Data breach in the wild160
Return of Necurs botnet brings new ransomware threatHelp Net Security·Jun 26, 21:21 UTC · Jun 26, 2018Ransomware60
Over 70 Malicious npm and VS Code Packages Found Stealing Data and CryptoThe Hacker News·May 26, 15:12 UTC · May 26, 2025Vulnerability55
Week in review: Infostealer dropped via FortiClient EMS flaw, exploited Trend Micro Apex One flawHelp Net Security·May 31, 00:00 UTC · May 31, 2026Malware in the wildCVE-2026-45659CVE-2026-34926CVE-2026-3561660
North Korean ScarCruft Exploits Windows ZeroThe Hacker News·Oct 15, 00:00 UTC · Oct 15, 2024Exploit / PoCCVE-2024-38178CVE-2020-1380CVE-2022-4112860
Popular NPM package PacSecurity Affairs·Sep 14, 04:33 UTC · Sep 14, 2021VulnerabilityCVE-2021-2340660
Unpatched Flaw in Linux Pling Store Apps Could Lead to SupplyThe Hacker News·Jun 23, 04:01 UTC · Jun 23, 2021Vulnerability55
Cryptomining Malware Found in Popular Open Source PackagesInfosecurity Magazine·Dec 23, 16:30 UTC · Dec 23, 2024Malware55
CERT/CC Warns binary-parser Bug Allows Node.js PrivilegeThe Hacker News·Jan 27, 14:10 UTC · Jan 27, 2026VulnerabilityCVE-2026-1245160
Blockchain companies are being targeted by North Korean hackers, US agencies warnThe Record·Apr 21, 00:00 UTC · Apr 21, 2022Malware55
Week in review: Acunetix 11 review, BEC scams exposed, innovation and cybercrimeHelp Net Security·Jul 16, 00:00 UTC · Jul 16, 2017Phishing & fraud55
CISA Warns of Active Exploitation of Flaws in Zyxel, ProjectSend, and CyberPanelThe Hacker News·Dec 5, 07:17 UTC · Dec 5, 2024Advisory in the wildCVE-2024-51378CVE-2023-45727CVE-2024-11680+4 CVEs60
Fake Telegram app on more than 100,000 phones infected U.S., UAE AndroidsCyberScoop·Jul 16, 14:39 UTC · Jul 16, 2019Exploit / PoC in the wild60
cPanel CVE-2026-41940 Under Active Exploitation to Deploy Filemanager BackdoorThe Hacker News·May 15, 00:00 UTC · May 15, 2026Vulnerability in the wildCVE-2026-41940160
0-Days Found in iPhone X, Samsung Galaxy S9, Xiaomi Mi6 PhonesThe Hacker News·Nov 15, 00:00 UTC · Nov 15, 2018Exploit / PoC60
Desktop and IoT threat statistics for Q1 2026Kaspersky Securelist·May 18, 12:00 UTC · May 18, 2026Ransomware in the wildCVE-2026-2013160
⚡ Weekly Recap: VPN 0-Day, Encryption Backdoor, AI Malware, macOS Flaw, ATM Hack & MoreThe Hacker News·Aug 5, 04:38 UTC · Aug 5, 2025Malware in the wildCVE-2025-40596CVE-2025-40597CVE-2025-40598+8 CVEs60
ThreatsDay Bulletin: OpenSSL RCE, Foxit 0-Days, Copilot Leak, AI Password Flaws & 20+ StoriesThe Hacker News·Feb 23, 10:23 UTC · Feb 23, 2026Vulnerability55
New Exploit Targeting Java Vulnerability Found in BlackHole ArsenalKaspersky Securelist·Dec 13, 13:48 UTC · Dec 13, 2011VulnerabilityCVE-2011-3544CVE-2010-018860
Emerging Android threat ‘Albiriox’ enables full On‑Device FraudSecurity Affairs·Dec 1, 10:38 UTC · Dec 1, 2025Phishing & fraud55
December 2022 Patch Tuesday: Get Latest Security Updates from Microsoft and MoreThe Hacker News·Dec 15, 00:00 UTC · Dec 15, 2022Vulnerability in the wildCVE-2022-44698CVE-2022-41091CVE-2022-44710+4 CVEs60
When Browsers Become the Attack Surface: Rethinking Security for Scattered SpiderThe Hacker News·Sep 1, 11:55 UTC · Sep 1, 2025Ransomware60
Hackers Exploit AnySign4PC via Hacked Korean Sites to Install Backdoors Without PromptsThe Hacker News·Jul 30, 10:33 UTC · Jul 30, 2026Malware55
Kaspersky Managed Detection and Response report 2024Kaspersky Securelist·Feb 20, 11:21 UTC · Feb 20, 2025Malware55
Russian Cybercrime Groups Exploiting 7-Zip Flaw to Bypass Windows MotW ProtectionsThe Hacker News·Feb 6, 03:48 UTC · Feb 6, 2025Exploit / PoC in the wildCVE-2025-041160
DragonOK APT adopts new tactics, techniques and proceduresSecurity Affairs·Sep 2, 15:59 UTC · Sep 2, 2017Malware55
BlueDelta Exploits Ukrainian Government Roundcube Mail Servers to Support Espionage ActivitiesRecorded Future·Aug 21, 00:00 UTC · Aug 21, 2025Threat actorCVE-2020-35730CVE-2023-23397CVE-2020-12641+1 CVEs60
Critical React Native CLI Flaw Exposed Millions of Developers to Remote AttacksThe Hacker News·Nov 4, 14:24 UTC · Nov 4, 2025VulnerabilityCVE-2025-1195360
2017 Vulnerability Report: A Shift in Cybercriminal PreferencesRecorded Future·Aug 11, 00:00 UTC · Aug 11, 2025VulnerabilityCVE-2016-0189CVE-2015-7645CVE-2015-244460
New Kit, Same Player: Top 10 Vulnerabilities Used by Exploit Kits in 2016Recorded Future·Jun 27, 00:00 UTC · Jun 27, 2025VulnerabilityCVE-2015-2419CVE-2015-1671CVE-2015-0313+2 CVEs60