The Hidden Security Risks of Shadow AI in EnterprisesThe Hacker News·Apr 9, 11:31 UTC · Apr 9, 2026Policy & legal55
New Browser Security Report Reveals Emerging Threats for EnterprisesThe Hacker News·Nov 10, 13:30 UTC · Nov 10, 2025Ransomware60
VMWare addressed severe Code Execution vulnerabilities in several productsSecurity Affairs·Dec 21, 16:09 UTC · Dec 21, 2017VulnerabilityCVE-2017-4941CVE-2017-4933CVE-2017-4940+1 CVEs60
Obsidian Plugin Abuse Delivers PHANTOMPULSE RAT in Targeted Finance, Crypto AttacksThe Hacker News·Jun 2, 08:55 UTC · Jun 2, 2026Malware55
Companies keep bolting AI onto their products, and the security bill is coming dueHelp Net Security·Jul 7, 05:46 UTC · Jul 7, 2026Policy & legal55
How LiteLLM Turned Developer Machines Into Credential Vaults for AttackersThe Hacker News·Apr 8, 10:59 UTC · Apr 8, 2026Vulnerability155
Sansec adds support for Sylius 1 & 2Sansec (Magento / e-commerce security)·Jun 1, 13:10 UTC · Jun 1, 2026Policy & legalCVE-2026-31822CVE-2024-34349CVE-2024-2937660
Flaw in WordPress plugin allowed unauthorized admin access, backdoorsCyberScoop·Nov 12, 16:01 UTC · Nov 12, 2018Malware in the wild60
Flaws in Popup Builder WordPress plugin expose 100K+ websites to hackSecurity Affairs·Mar 13, 11:42 UTC · Mar 13, 2020Exploit / PoC in the wildCVE-2020-10196CVE-2020-1019560
More than 8,800 WordPress Plugins out of 44,705 are flawedSecurity Affairs·Dec 16, 07:46 UTC · Dec 16, 2016Vulnerability55
GhostSec’s joint ransomware operation and evolution of their arsenalCisco Talos·Mar 5, 13:00 UTC · Mar 5, 2024Ransomware60
Anthropic and OpenAI Security Tools Could Fuel CyberInfosecurity Magazine·Jul 10, 13:45 UTC · Jul 10, 2026Exploit / PoC60
⚡ Weekly Recap: VPN 0-Day, Encryption Backdoor, AI Malware, macOS Flaw, ATM Hack & MoreThe Hacker News·Aug 5, 04:38 UTC · Aug 5, 2025Malware in the wildCVE-2025-40596CVE-2025-40597CVE-2025-40598+8 CVEs60
Hackers are actively exploiting critical RCE in WordPress sites using File Manager pluginSecurity Affairs·Sep 2, 14:58 UTC · Sep 2, 2020Vulnerability55
North Korea-linked Lazarus APT behind recent ActiveX attacksSecurity Affairs·Jun 12, 21:09 UTC · Jun 12, 2018Threat actor60
THN Recap: Top Cybersecurity Threats, Tools and Tips (Nov 25The Hacker News·Dec 2, 11:25 UTC · Dec 2, 2024RansomwareCVE-2024-9680CVE-2024-49039CVE-2024-11680+14 CVEs60
The Epic Turla OperationKaspersky Securelist·Aug 7, 13:55 UTC · Aug 7, 2014Threat actorCVE-2013-5065CVE-2013-3346CVE-2012-172360
Analyze Recent Atlassian Vulnerabilities and Keep Your Infrastructure ProtectedRecorded Future·Dec 13, 00:00 UTC · Dec 13, 2017VulnerabilityCVE-2017-14589CVE-2019-3394CVE-2019-11581+11 CVEs60
5 Popular Web Hosting Services Found Vulnerable to Multiple FlawsThe Hacker News·Jan 15, 00:00 UTC · Jan 15, 2019Exploit / PoC60
Over 70 Malicious npm and VS Code Packages Found Stealing Data and CryptoThe Hacker News·May 26, 15:12 UTC · May 26, 2025Vulnerability55
State-Sponsored Espionage Campaign Exploits Cisco VulnerabilitiesInfosecurity Magazine·Apr 25, 14:00 UTC · Apr 25, 2024VulnerabilityCVE-2024-20353CVE-2024-2035960
Malware Hijacks Microphones to Spy On Ukrainian Businesses, Scientists and MediaThe Hacker News·Feb 21, 08:50 UTC · Feb 21, 2017Malware55
⚡ Weekly Recap: Chrome 0-Day, 7.3 Tbps DDoS, MFA Bypass Tricks, Banking Trojan and MoreThe Hacker News·Jun 30, 13:01 UTC · Jun 30, 2025MalwareCVE-2025-2783CVE-2025-34509CVE-2025-34510+17 CVEs60
⚡ Weekly Recap: Qualcomm 0-Day, iOS Exploit Chains, AirSnitch Attack & VibeThe Hacker News·Mar 9, 18:22 UTC · Mar 9, 2026Data breach in the wildCVE-2026-21385CVE-2026-2796CVE-2026-2256+13 CVEs60
⚡ Weekly Recap: Chrome 0-Day, Ivanti Exploits, MacOS Stealers, Crypto Heists and MoreThe Hacker News·Jul 15, 00:00 UTC · Jul 15, 2025Malware in the wildCVE-2025-32462CVE-2025-32463CVE-2025-20309+23 CVEs60
Hackers Used AI to Develop First Known ZeroThe Hacker News·May 15, 00:00 UTC · May 15, 2026Exploit / PoC160
Good news, the Facebook OSquery tool is now available also for WindowsSecurity Affairs·Sep 28, 07:21 UTC · Sep 28, 2016Tools55
Alert: Juniper Firewalls, Openfire, and Apache RocketMQ Under Attack from New ExploitsThe Hacker News·Sep 6, 07:46 UTC · Sep 6, 2023Ransomware in the wildCVE-2023-36844CVE-2023-36845CVE-2023-36846+3 CVEs60
New Flaw in WordPress Plugin Used by Over a Million Sites Under Active ExploitationThe Hacker News·May 20, 04:02 UTC · May 20, 2023Exploit / PoC in the wildCVE-2023-3224360
Sports brand Puma infected with advanced malwareSansec (Magento / e-commerce security)·Apr 14, 19:49 UTC · Apr 14, 2026Malware55
⚡ Weekly Recap: Fortinet Exploit, Chrome 0-Day, BadIIS Malware, Record DDoS, SaaS Breach & MoreThe Hacker News·Nov 24, 12:32 UTC · Nov 24, 2025Malware in the wildCVE-2025-58034CVE-2025-64446CVE-2025-13223+12 CVEs60
What’s in the container? Analyzing vulnerabilities, risks and protection with Kaspersky Container Security and the KIRA AI assistantKaspersky Securelist·May 29, 07:00 UTC · May 29, 2026VulnerabilityCVE-2025-55182CVE-2023-4911CVE-2021-4034+3 CVEs60
⚡ Weekly Recap: Bootkit Malware, AI-Powered Attacks, Supply Chain Breaches, ZeroThe Hacker News·Oct 14, 10:56 UTC · Oct 14, 2025Malware in the wildCVE-2025-2104360
Network Security Trends: AugustPalo Alto Unit 42·Jun 6, 00:57 UTC · Jun 6, 2024Exploit / PoC in the wildCVE-2021-40438CVE-2021-34473CVE-2021-38647+9 CVEs60
European firm DSIRF behind the attacks with Subzero surveillance malwareSecurity Affairs·Jul 28, 11:04 UTC · Jul 28, 2022MalwareCVE-2022-22047CVE-2021-31199CVE-2021-31201+2 CVEs60
ThreatsDay Bulletin: AI Agents Gone Wrong, Sketchy C2 Tools, ClickFix Tricks, JS Backdoors & 20+ New StoriesThe Hacker News·Jun 4, 14:00 UTC · Jun 4, 2026Malware in the wildCVE-2026-20230160
Week in review: JetBrains GitHub plugin vulnerability, 20k FortiGate appliances compromisedHelp Net Security·Jun 16, 00:00 UTC · Jun 16, 2024VulnerabilityCVE-2024-37051CVE-2024-4577CVE-2024-30080+1 CVEs160
Cryptomining Malware Found in Popular Open Source PackagesInfosecurity Magazine·Dec 23, 16:30 UTC · Dec 23, 2024Malware55