Search: “middleware”

205 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Vulnerability 80 Exploit / PoC 28 Industry 16 Data breach 11 Ransomware 11 Malware 9 Policy & legal 8 AI tools & infra 8 Phishing & fraud 8 Advisory 7 Research 5 AI safety & security 5 AI industry 3 Threat actor 3

SeverityAll critical 106 high 30 medium 29 low 26 info 16

Oracle issues emergency fix for pre-auth RCE in Identity Manager (CVE-2026-21992)

Help Net SecurityMar 23, 00:00 UTC · Mar 23, 2026Vulnerability in the wildCVE-2026-21992 CVE-2025-61757

60

Oracle fixes critical RCE flaw CVE-2026

Security AffairsMar 22, 15:37 UTC · Mar 22, 2026Vulnerability in the wildCVE-2026-21992 CVE-2025-61757

60

Docker Fixes Critical Ask Gordon AI Flaw Allowing Code Execution via Image Metadata

The Hacker NewsFeb 3, 16:41 UTC · Feb 3, 2026Vulnerability1

55

Critical WordPress Modular DS Plugin Flaw Actively Exploited to Gain Admin Access

The Hacker NewsJan 15, 00:00 UTC · Jan 15, 2026Exploit / PoC in the wildCVE-2026-23550

60

Maximum Severity “Ni8mare” Bug Lets Hackers Hijack n8n Servers

Infosecurity MagazineJan 8, 10:00 UTC · Jan 8, 2026Ransomware CVE-2026-21858

60

LLMs are everywhere in your stack and every layer brings new risk

Help Net SecurityDec 10, 00:00 UTC · Dec 10, 2025Vulnerability

42

Critical Infrastructure Protection: The Role of Attack Surface Intelligence

Recorded FutureNov 28, 00:00 UTC · Nov 28, 2025Ransomware

60

CISA Urges Patch of Actively Exploited Flaw in Oracle Identity Manager

Infosecurity MagazineNov 24, 11:07 UTC · Nov 24, 2025Vulnerability in the wildCVE-2025-61757 CVE-2021-35587

60

CISA Warns of Actively Exploited Critical Oracle Identity Manager Zero

The Hacker NewsNov 22, 14:50 UTC · Nov 22, 2025Advisory in the wildCVE-2025-61757

60

ThreatsDay Bulletin: 0-Days, LinkedIn Spies, Crypto Crimes, IoT Flaws and New Malware Waves

The Hacker NewsNov 21, 06:45 UTC · Nov 21, 2025Malware CVE-2025-61757 CVE-2025-11243

60

Preparing for the Digital Battlefield of 2026: Ghost Identities, Poisoned Accounts, & AI Agent Havoc

The Hacker NewsOct 29, 11:55 UTC · Oct 29, 2025Vulnerability

55

Critical Vulnerability in Salesforce AgentForce Exposed

Infosecurity MagazineSep 25, 17:00 UTC · Sep 25, 2025Vulnerability

55

A Cyberattack Victim Notification Framework

Schneier on SecuritySep 12, 21:04 UTC · Sep 12, 2025Phishing & fraud

30

Axios User Agent Helps Automate Phishing on “Unprecedented Scale”

Infosecurity MagazineSep 9, 13:00 UTC · Sep 9, 2025Phishing & fraud

30

Hackers deploy DripDropper via Apache ActiveMQ flaw, patch systems to evade detection

Security AffairsAug 21, 16:30 UTC · Aug 21, 2025Vulnerability in the wildCVE-2023-46604

60

The AI security crisis no one is preparing for

Help Net SecurityAug 20, 00:00 UTC · Aug 20, 2025Vulnerability

55

Gold Melody IAB Exploits Exposed ASP.NET Machine Keys for Unauthorized Access to Targets

The Hacker NewsJul 11, 04:04 UTC · Jul 11, 2025Vulnerability

55

Why data provenance must anchor every CISO’s AI governance strategy

Help Net SecurityMay 28, 00:00 UTC · May 28, 2025AI policy

30

Why app modernization can leave you less secure

Help Net SecurityMay 27, 00:00 UTC · May 27, 2025Vulnerability

55

AI hallucinations and their risk to cybersecurity operations

Help Net SecurityMay 19, 00:00 UTC · May 19, 2025Vulnerability

55

SAP cyberattack widens, drawing Salt Typhoon and Volt Typhoon comparisons

CyberScoopMay 15, 17:45 UTC · May 15, 2025Threat actor in the wild

60

⚡ Weekly Recap: VPN Exploits, Oracle's Silent Breach, ClickFix Surge and More

The Hacker NewsMay 6, 07:05 UTC · May 6, 2025Data breach CVE-2025-22457 CVE-2025-24061 CVE-2025-2407+15 CVEs

60

Researchers Identify Rack::Static Vulnerability Enabling Data Breaches in Ruby Servers

The Hacker NewsApr 25, 10:29 UTC · Apr 25, 2025Data breach CVE-2025-27610 CVE-2025-27111 CVE-2025-25184+1 CVEs1

60

Oracle confirms the hack of two obsolete servers hacked. No Oracle Cloud systems or customer data were affected

Security AffairsApr 10, 09:40 UTC · Apr 10, 2025Data breach

60

Oracle privately notifies Cloud data breach to customers

Security AffairsApr 6, 20:33 UTC · Apr 6, 2025Data breach

60

Oracle To Address 320 Vulnerabilities in January Patch Update

Infosecurity MagazineJan 21, 12:45 UTC · Jan 21, 2025Vulnerability in the wildCVE-2020-2883

60

Google Is Allowing Device Fingerprinting

Schneier on SecurityJan 12, 15:08 UTC · Jan 12, 2025Policy & legal

30

Smash-and

The Hacker NewsJul 10, 11:30 UTC · Jul 10, 2024Ransomware

60

Combatting the Evolving SaaS Kill Chain: How to Stay Ahead of Threat Actors

The Hacker NewsJun 28, 15:42 UTC · Jun 28, 2024Threat actor

57

Critical RCE Vulnerability Discovered in Ollama AI Infrastructure Tool

The Hacker NewsJun 25, 03:22 UTC · Jun 25, 2024Vulnerability CVE-2024-37032 CVE-2024-22476

60

Oracle WebLogic Server OS Command Injection Flaw Under Active Attack

The Hacker NewsJun 4, 08:27 UTC · Jun 4, 2024Exploit / PoC in the wildCVE-2017-3506 CVE-2023-21839

60

CISA adds Oracle WebLogic Server flaw to its Known Exploited Vulnerabilities catalog

Security AffairsJun 3, 18:29 UTC · Jun 3, 2024Exploit / PoC in the wildCVE-2017-3506

60

4 Instructive Postmortems on Data Downtime and Loss

The Hacker NewsMar 1, 13:45 UTC · Mar 1, 2024Industry

30

Why we need to secure IoT connections sooner rather than later

Help Net SecurityJan 23, 13:28 UTC · Jan 23, 2024Vulnerability

55

Threat actors exploit Apache ActiveMQ flaw to deliver the Godzilla Web Shell

Security AffairsJan 22, 11:19 UTC · Jan 22, 2024Threat actor in the wildCVE-2023-46604

60

Review: Engineering-grade OT security: A manager's guide

Help Net SecurityJan 8, 00:00 UTC · Jan 8, 2024Ransomware

60

8220 gang exploits old Oracle WebLogic vulnerability to deliver infostealers, cryptominers

Help Net SecurityDec 20, 00:00 UTC · Dec 20, 2023Vulnerability CVE-2020-14883 CVE-2017-3506 CVE-2020-14882

60

Transcend enhances its privacy platform to address current and future compliance challenges

Help Net SecurityDec 15, 00:00 UTC · Dec 15, 2023Tools

30

Galaxy Note 10 enhanced with DEVGURU's Connectivity Stack

Help Net SecurityDec 14, 11:49 UTC · Dec 14, 2023AI tools & infra

30

Flaw in Apache ActiveMQ Exposes Linux Systems to Kinsing Malware

Infosecurity MagazineNov 22, 17:00 UTC · Nov 22, 2023Malware in the wildCVE-2023-46604 CVE-2023-4911

60