Search: “patch tuesday”

255 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Vulnerability 1569 Exploit / PoC 1183 Ransomware 526 Data breach 178 Policy & legal 171 Threat actor 136 Malware 133 Phishing & fraud 62 Advisory 39 Industry 17 AI safety & security 8 Research 3 Tools 1 Model release 1

SeverityAll critical 3340 high 378 medium 256 low 32 info 22

Microsoft Out-of-Band patch fixes Windows privilege escalation bugs

Security AffairsAug 21, 06:51 UTC · Aug 21, 2020Vulnerability CVE-2020-1530

35

Cortana Software Could Help Anyone Unlock Your Windows 10 Computer

The Hacker NewsJun 15, 00:00 UTC · Jun 15, 2018Exploit / PoC CVE-2018-8140

50

SWAPGS Attack — New Speculative Execution Flaw Affects All Modern Intel CPUs

The Hacker NewsAug 7, 07:54 UTC · Aug 7, 2019Vulnerability CVE-2019-1125

35

No one knows how many old shims can still bypass UEFI Secure Boot

Help Net SecurityJul 14, 00:00 UTC · Jul 14, 2026Vulnerability CVE-2026-8863 CVE-2026-10797 CVE-2015-5281

35

Two attacks disclosed against AMD's SEV virtual machine protection system

The RecordDec 14, 00:00 UTC · Dec 14, 2022Vulnerability CVE-2020-12967 CVE-2021-26311

35

CVE-2018-0950 flaw in Microsoft Outlook could be exploited to steal Windows Passwords

Security AffairsApr 12, 16:31 UTC · Apr 12, 2018Vulnerability CVE-2018-0950

35

Week in review: 40 open-source tools securing the stack, invisible IT to be the next workplace priority

Help Net SecurityDec 14, 00:00 UTC · Dec 14, 2025Vulnerability1

30

xkcd on Voting Computers

Schneier on SecurityJan 27, 14:35 UTC · Jan 27, 2020Vulnerability

30

New HTTP/2 Bomb Vulnerability Allows Remote DoS on NGINX, Apache, IIS, Envoy & Cloudflare

The Hacker NewsJun 10, 14:36 UTC · Jun 10, 2026Vulnerability CVE-2016-6581 CVE-2025-53020 CVE-2016-8740+3 CVEs

35

Microsoft issues YellowKey mitigation, no patch yet

Security AffairsMay 20, 15:07 UTC · May 20, 2026Vulnerability CVE-2026-45585

35

Researchers Detail Windows EPM Poisoning Exploit Chain Leading to Domain Privilege Escalation

The Hacker NewsAug 10, 15:02 UTC · Aug 10, 2025Vulnerability CVE-2025-49760

35

New UEFI Secure Boot bypass vulnerability discovered (CVE-2024-7344)

Help Net SecurityJan 16, 00:00 UTC · Jan 16, 2025Vulnerability CVE-2024-7344

35

Hackers exploit Microsoft Defender SmartScreen bug CVE-2024-21412 to deliver ACR, Lumma, and Meduza Stealers

Security AffairsJul 25, 10:20 UTC · Jul 25, 2024Vulnerability CVE-2024-214121

35

Researchers Uncover How Outlook Vulnerability Could Leak Your NTLM Passwords

The Hacker NewsJan 30, 04:31 UTC · Jan 30, 2024Vulnerability CVE-2023-35636

35

Windows SmartScreen bug exploited to deliver powerful info-stealer (CVE-2023-36025)

Help Net SecurityJan 15, 00:00 UTC · Jan 15, 2024Vulnerability CVE-2023-360251

35

(IN)SECURE Magazine issue 52 released

Help Net SecurityDec 14, 13:25 UTC · Dec 14, 2023Vulnerability

30

(IN)SECURE Magazine issue 51 released

Help Net SecurityDec 14, 13:19 UTC · Dec 14, 2023Vulnerability

30

Researchers Detail 8 Vulnerabilities in Azure HDInsight Analytics Service

The Hacker NewsSep 15, 00:00 UTC · Sep 15, 2023Vulnerability CVE-2023-35393 CVE-2023-35394 CVE-2023-36877+2 CVEs

35

White House, DARPA and CISA Ask for Help in Securing Open Source Software

Infosecurity MagazineAug 11, 01:20 UTC · Aug 11, 2023Vulnerability

30

NSA Releases Guide to Combat Powerful BlackLotus Bootkit Targeting Windows Systems

The Hacker NewsJun 24, 15:03 UTC · Jun 24, 2023Vulnerability CVE-2022-21894 CVE-2023-24932

35

Researchers Uncover Publisher Spoofing Bug in Microsoft Visual Studio Installer

The Hacker NewsJun 15, 00:00 UTC · Jun 15, 2023Vulnerability CVE-2023-28299

35

Microsoft Fixes Security Flaw in Windows Screenshot Tools

Infosecurity MagazineMar 27, 17:30 UTC · Mar 27, 2023Vulnerability CVE-2023-28303

35

Microsoft to require admin rights before using Windows Point and Print feature

The RecordJan 18, 00:00 UTC · Jan 18, 2023Vulnerability CVE-2021-34481 CVE-2020-1337

35

Microsoft provides guidance after bug found affecting Azure inspection tool

The RecordJan 9, 00:00 UTC · Jan 9, 2023Vulnerability CVE-2022-35829

35

Windows Hello bypassed using infrared image

The RecordDec 12, 00:00 UTC · Dec 12, 2022Vulnerability CVE-2021-34466

35

Researchers Detail Windows Event Log Vulnerabilities: LogCrusher and OverLog

The Hacker NewsOct 25, 12:46 UTC · Oct 25, 2022Vulnerability CVE-2022-37981

35

Researchers Detail Azure SFX Flaw That Could've Allowed Attackers to Gain Admin Access

The Hacker NewsOct 19, 13:18 UTC · Oct 19, 2022Vulnerability CVE-2022-35829

35

Researcher Spotlight: You should have been listening to Lurene Grenier years ago

Cisco TalosAug 1, 12:00 UTC · Aug 1, 2022Exploit / PoC

45

New RIG Exploit Kit Campaign Infecting Victims' PCs with RedLine Stealer

The Hacker NewsApr 28, 08:20 UTC · Apr 28, 2022Malware CVE-2021-26411

35

Microsoft Temporarily Disables MSIX App Installers to Prevent Malware Abuse

The Hacker NewsFeb 8, 04:14 UTC · Feb 8, 2022Malware CVE-2021-43890

35

Researchers Break Intel SGX With New 'SmashEx' CPU Attack Technique

The Hacker NewsOct 20, 13:27 UTC · Oct 20, 2021Vulnerability CVE-2021-0186 CVE-2021-33767

35

New Windows and Linux Flaws Give Attackers Highest System Privileges

The Hacker NewsJul 22, 03:36 UTC · Jul 22, 2021Vulnerability CVE-2021-36934 CVE-2021-33909 CVE-2021-33910

35

Experts show how to bypass Windows Hello feature to login on Windows 10 PCs

Security AffairsJul 19, 08:20 UTC · Jul 19, 2021Exploit / PoC CVE-2021-34466

50

These 2 attacks allow to alter certified PDF Documents

Security AffairsMay 30, 14:33 UTC · May 30, 2021Vulnerability CVE-2020-35931 CVE-2021-28545 CVE-2021-28546+1 CVEs

35

Researchers Demonstrate 2 New Hacks to Modify Certified PDF Documents

The Hacker NewsMay 29, 08:34 UTC · May 29, 2021Vulnerability CVE-2021-28545 CVE-2021-28546 CVE-2020-35931+1 CVEs

35

Nearly All Wi-Fi Devices Are Vulnerable to New FragAttacks

The Hacker NewsMay 15, 00:00 UTC · May 15, 2021Vulnerability CVE-2020-24588 CVE-2020-24587 CVE-2020-24586+9 CVEs

35

Chinese Hackers Stole an NSA Windows Exploit in 2014

Schneier on SecurityMar 4, 12:25 UTC · Mar 4, 2021Vulnerability CVE-2017-0005

35

Cyber Public Health

Schneier on SecurityNov 25, 12:25 UTC · Nov 25, 2020Vulnerability

30

Microsoft fixes Kerberos Authentication issues with an out-of

Security AffairsNov 24, 12:27 UTC · Nov 24, 2020Vulnerability CVE-2020-17049

35

Vulnerability reporting is returning to normal

Help Net SecurityAug 28, 00:00 UTC · Aug 28, 2020Vulnerability

30