Five defender priorities from the Talos Year in ReviewCisco Talos·Apr 28, 13:23 UTC · Apr 28, 2026Ransomware60
⚡ Weekly Recap: Vercel Hack, Push Fraud, QEMU Abused, New Android RATs Emerge & MoreThe Hacker News·Apr 21, 04:29 UTC · Apr 21, 2026Phishing & fraud55
April Patch Tuesday Fixes Critical Flaws Across SAP, Adobe, Microsoft, Fortinet, and MoreThe Hacker News·Apr 15, 00:00 UTC · Apr 15, 2026Vulnerability in the wildCVE-2026-27681CVE-2026-34621CVE-2026-34619+7 CVEs60
Year in Review: Vulnerabilities old and new and something React2Cisco Talos·Apr 7, 10:00 UTC · Apr 7, 2026Vulnerability42
32% Of Top-Exploited Vulnerabilities Are Over A Decade OldHelp Net Security·Mar 24, 00:00 UTC · Mar 24, 2026Vulnerability in the wild157
China-linked hackers exploit patched ToolShell flaw to breach Middle East telecomSecurity Affairs·Oct 24, 08:37 UTC · Oct 24, 2025Vulnerability in the wildCVE-2025-53770CVE-2021-3694260
Chinese Threat Actors Exploit ToolShell SharePoint Flaw Weeks After Microsoft's July PatchThe Hacker News·Oct 22, 12:56 UTC · Oct 22, 2025VulnerabilityCVE-2025-53770CVE-2025-49704CVE-2025-49706+1 CVEs60
Storm-0501 Exploits Entra ID to Exfiltrate and Delete Azure Data in Hybrid Cloud AttacksThe Hacker News·Aug 28, 03:58 UTC · Aug 28, 2025Ransomware60
Microsoft Patch Tuesday, July 2025 EditionKrebs on Security·Jul 9, 01:47 UTC · Jul 9, 2025Vulnerability in the wildCVE-2025-49719CVE-2025-47981CVE-2025-49695+5 CVEs60
Patch Tuesday, April 2025 EditionKrebs on Security·Apr 9, 10:19 UTC · Apr 9, 2025Vulnerability in the wildCVE-2025-29824CVE-2025-26663CVE-2025-26671+2 CVEs160
Leaked Black Basta Ransomware Chat Logs Reveal Inner Workings and Internal ConflictsThe Hacker News·Feb 27, 05:08 UTC · Feb 27, 2025Ransomware in the wildCVE-2024-50623CVE-2009-3960CVE-2010-2861+8 CVEs60
CISA Adds Microsoft and Zimbra Flaws to KEV Catalog Amid Active ExploitationThe Hacker News·Feb 26, 04:33 UTC · Feb 26, 2025Exploit / PoC in the wildCVE-2024-49035CVE-2023-3419260
CISA and FBI Warn of Global Threat from Ghost RansomwareInfosecurity Magazine·Feb 20, 09:45 UTC · Feb 20, 2025RansomwareCVE-2018-13379CVE-2010-2861CVE-2009-3960+3 CVEs60
Recent Ghost/Cring ransomware activity prompts alert from FBI, CISAThe Record·Feb 19, 21:13 UTC · Feb 19, 2025Ransomware60
Security Affairs newsletter Round 504 by Pierluigi PaganiniSecurity Affairs·Dec 29, 13:00 UTC · Dec 29, 2024Ransomware57
CISA and FBI Raise Alerts on Exploited Flaws and Expanding HiatusRAT CampaignThe Hacker News·Dec 17, 06:34 UTC · Dec 17, 2024Malware in the wildCVE-2024-20767CVE-2024-35250CVE-2017-7921+6 CVEs60
Microsoft Identifies Storm-0501 as Major Threat in Hybrid Cloud Ransomware AttacksThe Hacker News·Sep 28, 05:55 UTC · Sep 28, 2024Ransomware57
Bug Left Some Windows PCs Dangerously UnpatchedKrebs on Security·Sep 10, 22:59 UTC · Sep 10, 2024Vulnerability in the wildCVE-2024-43491CVE-2024-38226CVE-2024-38217+1 CVEs60
Chinese-Speaking Hacker Group Targets Human Rights Studies in Middle EastThe Hacker News·Sep 5, 16:19 UTC · Sep 5, 2024VulnerabilityCVE-2023-26360CVE-2021-34473CVE-2021-34523+1 CVEs60
New malicious web shell from the Tropic Trooper group is found in the Middle EastKaspersky Securelist·Sep 5, 08:02 UTC · Sep 5, 2024Vulnerability in the wildCVE-2021-34473CVE-2021-34523CVE-2021-31207+1 CVEs60
Patch Tuesday, June 2024 “Recall” EditionKrebs on Security·Jun 12, 01:42 UTC · Jun 12, 2024VulnerabilityCVE-2024-30080CVE-2024-30078CVE-2024-30101+1 CVEs60
Finnish Hacker sentenced to more than six years in prisonSecurity Affairs·Apr 30, 21:32 UTC · Apr 30, 2024Policy & legal55
Patch Tuesday, March 2024 EditionKrebs on Security·Mar 12, 22:47 UTC · Mar 12, 2024Vulnerability in the wildCVE-2024-23225CVE-2024-23296CVE-2024-26182+6 CVEs60
CISA adds Apache Superset bug to its Known Exploited Vulnerabilities catalogSecurity Affairs·Jan 9, 18:33 UTC · Jan 9, 2024Exploit / PoC in the wildCVE-2023-27524CVE-2023-38203CVE-2023-29300+3 CVEs160
Adobe out-of-band security updates for Photoshop, Prelude, BridgeHelp Net Security·Jan 9, 10:10 UTC · Jan 9, 2024Vulnerability in the wild60
PoC Exploit Released for Critical VMware Aria's SSH Auth Bypass VulnerabilityThe Hacker News·Sep 4, 04:00 UTC · Sep 4, 2023Exploit / PoCCVE-2023-34039CVE-2023-20890CVE-2023-2090060
Adobe releases patches for dozens of vulnerabilities affecting suite of programsThe Record·Aug 9, 15:06 UTC · Aug 9, 2023Vulnerability55
Zero-Day Attacks Exploited Critical Vulnerability in Citrix ADC and GatewayThe Hacker News·Jul 22, 03:57 UTC · Jul 22, 2023Exploit / PoC in the wildCVE-2023-3519CVE-2023-3466CVE-2023-3467+3 CVEs60
Microsoft Patch Tuesday, October 2022 EditionKrebs on Security·Oct 12, 05:04 UTC · Oct 12, 2022Vulnerability in the wildCVE-2022-41033CVE-2022-3796860
EnemyBot Linux Botnet Now Exploits Web Server, Android and CMS VulnerabilitiesThe Hacker News·May 31, 04:11 UTC · May 31, 2022VulnerabilityCVE-2022-22954CVE-2022-1388CVE-2022-22947+5 CVEs47
EnemyBot malware adds new exploits to target CMS servers and Android devicesSecurity Affairs·May 30, 07:09 UTC · May 30, 2022MalwareCVE-2020-17456CVE-2018-10823CVE-2022-27226+19 CVEs60
New Cryptojacking Malware Targeting Apache, Oracle, Redis ServersThe Hacker News·Feb 1, 11:15 UTC · Feb 1, 2021MalwareCVE-2016-3088CVE-2017-1027147
Apple paid a $50K bounty to two bug bounty hunters for hacking its hostsSecurity Affairs·Jan 18, 16:59 UTC · Jan 18, 2021Vulnerability55
25 vulnerabilities exploited by Chinese state-sponsored hackersHelp Net Security·Oct 21, 00:00 UTC · Oct 21, 2020VulnerabilityCVE-2019-11510CVE-2020-5902CVE-2019-19781+22 CVEs60
NSA details top 25 flaws exploited by ChinaSecurity Affairs·Oct 20, 19:28 UTC · Oct 20, 2020Exploit / PoCCVE-2019-11510CVE-2020-5902CVE-2019-19781+22 CVEs60
Adobe fixed critical code execution flaws in Bridge, Photoshop and Prelude productsSecurity Affairs·Jul 22, 06:07 UTC · Jul 22, 2020VulnerabilityCVE-2020-9675CVE-2020-9674CVE-2020-9676+5 CVEs60
Week in review: Counterfeit Cisco switches, hijacked Twitter accounts, vulnerable SAP applicationsHelp Net Security·Jul 19, 00:00 UTC · Jul 19, 2020RansomwareCVE-2020-628760
With the threat landscape continuously changing, businesses must be ready for anythingHelp Net Security·May 20, 00:00 UTC · May 20, 2020Ransomware60
Web shell malware continues to evade many security toolsHelp Net Security·Apr 23, 00:00 UTC · Apr 23, 2020MalwareCVE-2019-0604CVE-2019-19781CVE-2019-3396+10 CVEs47