Shai-Hulud v2 Spreads From npm to Maven, as Campaign Exposes Thousands of SecretsThe Hacker News·Nov 27, 03:43 UTC · Nov 27, 2025Threat actor60
Week in review: Salesloft Drift breach investigation results, malicious GitHub Desktop installersHelp Net Security·Sep 14, 00:00 UTC · Sep 14, 2025Ransomware in the wildCVE-2024-4076660
⚡ THN Weekly Recap: GitHub Supply Chain Attack, AI Malware, BYOVD Tactics, and MoreThe Hacker News·May 7, 10:33 UTC · May 7, 2025MalwareCVE-2025-29927CVE-2025-23120CVE-2024-56346+13 CVEs60
Are Your SaaS Backups as Secure as Your Production Data?The Hacker News·May 23, 11:14 UTC · May 23, 2024Vulnerability55
Critical GitHub Enterprise Server Flaw Allows Authentication BypassThe Hacker News·May 21, 16:16 UTC · May 21, 2024VulnerabilityCVE-2024-4985160
Old certificate, new signature: Open-source tools forge signature timestamps on Windows driversCisco Talos·Jul 11, 17:04 UTC · Jul 11, 2023Malware55
Hackers are spreading malware via trending TikTok challenge: reportThe Record·Jan 9, 00:00 UTC · Jan 9, 2023Malware55
Unpatched Travis CI API Bug Exposes Thousands of Secret User Access TokensThe Hacker News·Jun 15, 00:00 UTC · Jun 15, 2022Vulnerability155
Apple's iBoot Source Code for iPhone Leaked on GithubThe Hacker News·Feb 8, 08:55 UTC · Feb 8, 2018Exploit / PoC160
A regular GitHub user accidentally triggered a flaw Ethereum Parity Wallet that locked up $280 million in EtherSecurity Affairs·Nov 8, 08:23 UTC · Nov 8, 2017Vulnerability55
Week in review: SimpleHelp vulnerability exploited, Oracle EBS Payments flaw under attackHelp Net Security·Jul 5, 00:00 UTC · Jul 5, 2026Vulnerability in the wildCVE-2026-12569CVE-2026-48558CVE-2026-4681760
Microsoft Slams Public Zero-Day Disclosures Amid GitHub Researcher Account RemovalThe Hacker News·May 29, 05:43 UTC · May 29, 2026Exploit / PoC in the wildCVE-2026-33825CVE-2026-41091CVE-2026-45498+1 CVEs60
Week in review: GitHub breached via poisoned VS Code extension, critical NGINX flaw exploitedHelp Net Security·May 24, 00:00 UTC · May 24, 2026Data breach in the wildCVE-2026-42945CVE-2026-45585CVE-2026-41091+1 CVEs60
Senator presses CISA for answers about alleged GitHub repository leakThe Record·May 20, 12:20 UTC · May 20, 2026Vulnerability55
Week in review: NIST updates DNS security guidance, compromised LiteLLM PyPI packagesHelp Net Security·Mar 29, 00:00 UTC · Mar 29, 2026Exploit / PoC in the wildCVE-2025-53521CVE-2026-21992CVE-2026-305560
⚡ Weekly Recap: CI/CD Backdoor, FBI Buys Location Data, WhatsApp Ditches Numbers & MoreThe Hacker News·Mar 26, 15:38 UTC · Mar 26, 2026Malware in the wildCVE-2026-33017CVE-2026-2013160
CodeBuild Flaw Put AWS Console Supply Chain At RiskInfosecurity Magazine·Jan 15, 15:00 UTC · Jan 15, 2026Vulnerability in the wild160
August 2025 CVE LandscapeRecorded Future·Nov 21, 00:00 UTC · Nov 21, 2025Ransomware in the wildCVE-2025-8088CVE-2025-7775CVE-2025-57819+5 CVEs60
Salesloft Drift security incident started with undetected GitHub accessCyberScoop·Sep 8, 22:44 UTC · Sep 8, 2025Exploit / PoC in the wild60
How To Automate Ticket Creation, Device Identification and Threat Triage With TinesThe Hacker News·Jul 9, 11:00 UTC · Jul 9, 2025Malware55
GitHub Uncovers New ruby-saml Vulnerabilities Allowing Account Takeover AttacksThe Hacker News·Mar 15, 00:00 UTC · Mar 15, 2025VulnerabilityCVE-2025-25291CVE-2025-25292CVE-2025-25293+1 CVEs60
Week in review: JetBrains GitHub plugin vulnerability, 20k FortiGate appliances compromisedHelp Net Security·Jun 16, 00:00 UTC · Jun 16, 2024VulnerabilityCVE-2024-37051CVE-2024-4577CVE-2024-30080+1 CVEs160
Unveiling the Cyber Threats to Healthcare: Beyond the MythsThe Hacker News·Dec 12, 18:09 UTC · Dec 12, 2023RansomwareCVE-2023-2906460
Fake Researcher Profiles Spread Malware through GitHub Repositories as PoC ExploitsThe Hacker News·Jun 15, 00:00 UTC · Jun 15, 2023Exploit / PoC60
GrammaTech CodeSonar extends DevSecOps to embedded software developmentHelp Net Security·Aug 19, 00:00 UTC · Aug 19, 2021Tools55
Clues to the alleged Capital One hacker's crimes were all over the internetCyberScoop·Jul 30, 15:25 UTC · Jul 30, 2019Exploit / PoC in the wild60
Snapchat source Code leaked after an iOS update exposed itSecurity Affairs·Aug 8, 21:10 UTC · Aug 8, 2018Vulnerability55
Cordyceps CI/CD Flaws Expose 300+ GitHub Repositories to SupplyThe Hacker News·Jun 24, 12:48 UTC · Jun 24, 2026Vulnerability55
AI is drowning software maintainers in junk security reportsHelp Net Security·May 18, 00:00 UTC · May 18, 2026Exploit / PoC60
Week in review: High-severity LPE vulnerability in the Linux kernel, cPanel 0-day exploited for monthsHelp Net Security·May 3, 00:00 UTC · May 3, 2026Vulnerability in the wildCVE-2026-32202CVE-2026-21510CVE-2026-21513+3 CVEs260
Week in review: Windows zero-day exploit leaked, Patch Tuesday forecastHelp Net Security·Apr 12, 00:00 UTC · Apr 12, 2026Exploit / PoC in the wildCVE-2026-34197160
ThreatsDay Bulletin: Hybrid P2P Botnet, 13-YearThe Hacker News·Apr 9, 16:23 UTC · Apr 9, 2026MalwareCVE-2024-32114CVE-2026-34197CVE-2022-41678160
Shai-Hulud worm returns stronger and more automated than ever beforeCyberScoop·Nov 24, 22:45 UTC · Nov 24, 2025Data breach in the wild60
CISO's Expert Guide To AI Supply Chain AttacksThe Hacker News·Nov 11, 11:58 UTC · Nov 11, 2025Ransomware60
GlassWorm malware has resurfaced on the Open VSX registrySecurity Affairs·Nov 10, 20:06 UTC · Nov 10, 2025Malware55
Dynamic binary instrumentation (DBI) with DynamoRioCisco Talos·Oct 30, 09:59 UTC · Oct 30, 2025Vulnerability55
Malicious npm Packages Exploit Ethereum Smart Contracts to Target Crypto DevelopersThe Hacker News·Sep 4, 09:51 UTC · Sep 4, 2025Malware155
SOC files: an APT41 attack on government IT services in AfricaKaspersky Securelist·Jul 21, 08:00 UTC · Jul 21, 2025Threat actor60