Ongoing Attacks Exploiting Critical RCE Vulnerability in Legacy DThe Hacker News·Jan 7, 09:23 UTC · Jan 7, 2026Vulnerability in the wildCVE-2026-062560
U.S. CISA adds a flaw in Digiever DS-2105 Pro to its Known Exploited Vulnerabilities catalogSecurity Affairs·Dec 23, 08:43 UTC · Dec 23, 2025Exploit / PoC in the wildCVE-2023-5216360
Ivanti warns customers of new EPM flaw enabling remote code executionSecurity Affairs·Dec 9, 22:11 UTC · Dec 9, 2025Vulnerability in the wildCVE-2025-10573CVE-2024-13159CVE-2024-13160+1 CVEs60
Now-Patched Fortinet FortiWeb Flaw Exploited in Attacks to Create Admin AccountsThe Hacker News·Nov 17, 14:23 UTC · Nov 17, 2025Vulnerability in the wildCVE-2025-6444660
Hackers Exploit WordPress Sites to Power NextThe Hacker News·Oct 10, 06:51 UTC · Oct 10, 2025Malware30
CISA Adds 3 D-Link Vulnerabilities to KEV Catalog Amid Active Exploitation EvidenceThe Hacker News·Aug 6, 06:51 UTC · Aug 6, 2025Exploit / PoC in the wildCVE-2020-25078CVE-2020-25079CVE-2020-4079960
U.S. CISA adds D-Link cameras and Network Video Recorder flaws to its Known Exploited Vulnerabilities catalogSecurity Affairs·Aug 6, 06:09 UTC · Aug 6, 2025Exploit / PoC in the wildCVE-2020-25078CVE-2020-25079CVE-2022-4079960
Glasgow City Council Warns of Parking Fine ScamInfosecurity Magazine·Jun 30, 09:30 UTC · Jun 30, 2025Phishing & fraud30
Over 1,000 SOHO Devices Hacked in ChinaThe Hacker News·Jun 28, 07:01 UTC · Jun 28, 2025VulnerabilityCVE-2015-1548CVE-2017-17663147
Supply Chain Incident Imperils Glasgow Council Services and DataInfosecurity Magazine·Jun 26, 09:30 UTC · Jun 26, 2025Ransomware57
Glasgow City Council impacted by ‘cyber incident’The Record·Jun 25, 14:06 UTC · Jun 25, 2025Ransomware57
⚡ Weekly Recap: APT Intrusions, AI Malware, ZeroThe Hacker News·Jun 3, 04:04 UTC · Jun 3, 2025Malware in the wildCVE-2025-3935CVE-2025-47577CVE-2025-2760+14 CVEs60
251 Amazon-Hosted IPs Used in Exploit Scan Targeting ColdFusion, Struts, and ElasticsearchThe Hacker News·May 28, 09:23 UTC · May 28, 2025Vulnerability in the wildCVE-2018-15961CVE-2017-5638CVE-2022-26134+2 CVEs60
CISA Warns of Sitecore RCE Flaws; Active Exploits Hit Next.js and DrayTek DevicesThe Hacker News·Mar 29, 03:45 UTC · Mar 29, 2025Vulnerability in the wildCVE-2019-9874CVE-2019-9875CVE-2020-8515+2 CVEs60
Hackers Exploit Severe PHP Flaw to Deploy Quasar RAT and XMRig MinersThe Hacker News·Mar 19, 15:52 UTC · Mar 19, 2025Malware in the wildCVE-2024-457760
Patch it up: Old vulnerabilities are everyone’s problemsCisco Talos·Mar 13, 18:04 UTC · Mar 13, 2025Vulnerability in the wildCVE-2025-22224CVE-2024-457760
CISA Adds Five Actively Exploited Vulnerabilities in Advantive VeraCore and Ivanti EPM to KEV ListThe Hacker News·Mar 11, 04:06 UTC · Mar 11, 2025Exploit / PoC in the wildCVE-2024-57968CVE-2025-25181CVE-2024-13159+3 CVEs60
Bug affecting PHP scripts demands ‘immediate action from defenders globally’The Record·Mar 7, 21:24 UTC · Mar 7, 2025VulnerabilityCVE-2024-457735
Winnti APT41 Targets Japanese Firms in RevivalStone Cyber Espionage CampaignThe Hacker News·Feb 20, 03:54 UTC · Feb 20, 2025Threat actor60
U.S. CISA adds Microsoft Windows, Zyxel device flaws to its Known Exploited Vulnerabilities catalogSecurity Affairs·Feb 12, 08:01 UTC · Feb 12, 2025Exploit / PoC in the wildCVE-2024-40891CVE-2024-40890CVE-2025-21418+1 CVEs60
Zyxel CPE Devices Face Active Exploitation Due to Unpatched CVE-2024The Hacker News·Feb 5, 04:14 UTC · Feb 5, 2025Vulnerability in the wildCVE-2024-40891CVE-2024-40890CVE-2024-57726+3 CVEs60
⚡ THN Weekly Recap: Top Cybersecurity Threats, Tools and Tips [6 Jan]The Hacker News·Jan 6, 12:05 UTC · Jan 6, 2025Exploit / PoCCVE-2024-49113CVE-2024-49112160
Apache Tomcat Vulnerability CVE-2024The Hacker News·Dec 24, 06:06 UTC · Dec 24, 2024VulnerabilityCVE-2024-56337CVE-2024-50379CVE-2024-1282860
AndroxGh0st Malware Integrates Mozi Botnet to Target IoT and Cloud ServicesThe Hacker News·Dec 18, 10:49 UTC · Dec 18, 2024MalwareCVE-2021-41773CVE-2018-15133CVE-2017-9841+12 CVEs60
Ivanti Releases Urgent Security Updates for Endpoint Manager VulnerabilitiesThe Hacker News·Sep 12, 04:16 UTC · Sep 12, 2024Vulnerability in the wildCVE-2024-29847CVE-2024-32840CVE-2024-32842+8 CVEs60
Zyxel fixes critical command injection flaw in EOL NAS devices (CVE-2024-6342)Help Net Security·Sep 10, 00:00 UTC · Sep 10, 2024Vulnerability in the wildCVE-2024-6342CVE-2024-2997360
Critical flaw in Zyxel's secure routers allows OS command execution via cookie (CVE-2024-7261)Help Net Security·Sep 3, 00:00 UTC · Sep 3, 2024VulnerabilityCVE-2024-7261CVE-2024-6343CVE-2024-7203+6 CVEs60
New DNS-Based Backdoor Threat Discovered at Taiwanese UniversityInfosecurity Magazine·Aug 20, 17:15 UTC · Aug 20, 2024MalwareCVE-2024-457747
Multiple threat actors exploit PHP flaw CVE-2024Security Affairs·Jul 11, 14:31 UTC · Jul 11, 2024Threat actor in the wildCVE-2024-4577CVE-2012-182360
Ransomware Surges Annually Despite Law Enforcement TakedownsInfosecurity Magazine·Jul 11, 10:45 UTC · Jul 11, 2024RansomwareCVE-2024-457760
Multiple vulnerabilities in TP-Link Omada system could lead to root accessCisco Talos·Jun 26, 16:00 UTC · Jun 26, 2024VulnerabilityCVE-2023-49906CVE-2023-49913CVE-2023-48724+11 CVEs47
Week in review: JetBrains GitHub plugin vulnerability, 20k FortiGate appliances compromisedHelp Net Security·Jun 16, 00:00 UTC · Jun 16, 2024VulnerabilityCVE-2024-37051CVE-2024-4577CVE-2024-30080+1 CVEs160
Ransomware attackers quickly weaponize PHP vulnerability with 9.8 severity ratingArs Technica · Security·Jun 15, 00:00 UTC · Jun 15, 2024Ransomware57
Tech Policy Expert Calls for Law Overhaul to Combat DeepfakesInfosecurity Magazine·Jun 14, 14:30 UTC · Jun 14, 2024Threat actor45
CISA adds Arm Mali GPU Kernel Driver, PHP bugs to its Known Exploited Vulnerabilities catalogSecurity Affairs·Jun 13, 20:45 UTC · Jun 13, 2024Exploit / PoC in the wildCVE-2024-4610CVE-2024-4577CVE-2012-1823160
Top 10 Critical Pentest Findings 2024: What You Need to KnowThe Hacker News·Jun 11, 12:43 UTC · Jun 11, 2024Data breachCVE-2019-0708CVE-2018-120760
PHP addressed critical RCE potentially impacting millions of serversSecurity Affairs·Jun 9, 13:27 UTC · Jun 9, 2024VulnerabilityCVE-2024-4577CVE-2012-182360