Hackers exploit unsecured MongoDB instances to wipe data and demand ransomSecurity Affairs·Feb 2, 15:13 UTC · Feb 2, 2026Exploit / PoC60
⚡ Weekly Recap: Zero-Day Exploits, Developer Malware, IoT Botnets, and AIThe Hacker News·Jan 20, 09:20 UTC · Jan 20, 2026Exploit / PoCCVE-2025-29824CVE-2025-2775CVE-2025-2776+19 CVEs60
WatchGuard Firebox firewalls under attack (CVE-2025-14733)Help Net Security·Dec 22, 00:00 UTC · Dec 22, 2025Vulnerability in the wildCVE-2025-14733CVE-2025-924260
U.S. CISA adds a flaw in WatchGuard Fireware OS to its Known Exploited Vulnerabilities catalogSecurity Affairs·Dec 20, 10:26 UTC · Dec 20, 2025Exploit / PoC in the wildCVE-2025-14733CVE-2025-59718CVE-2025-59719+1 CVEs60
U.S. CISA adds WatchGuard Firebox, Microsoft Windows, and Gladinet Triofox flaws to its Known Exploited Vulnerabilities catalogSecurity Affairs·Nov 13, 11:29 UTC · Nov 13, 2025Exploit / PoC in the wildCVE-2025-9242CVE-2025-12480CVE-2025-62215+2 CVEs60
Amazon alerts: advanced threat actor exploits Cisco ISE & Citrix NetScaler zeroSecurity Affairs·Nov 13, 08:43 UTC · Nov 13, 2025Threat actor in the wildCVE-2025-5777CVE-2025-2033760
"Patched" but still exposed: US federal agencies must remediate Cisco flaws (again)Help Net Security·Nov 13, 00:00 UTC · Nov 13, 2025Vulnerability in the wildCVE-2025-20333CVE-2025-20362CVE-2025-12480+2 CVEs60
Newly Patched Critical Microsoft WSUS Flaw Comes Under Active ExploitationThe Hacker News·Oct 31, 08:31 UTC · Oct 31, 2025Vulnerability in the wildCVE-2025-5928760
Over 250 attacks hit Adobe Commerce and Magento via critical CVE-2025Security Affairs·Oct 23, 09:22 UTC · Oct 23, 2025Vulnerability in the wildCVE-2025-5423660
A critical WatchGuard Fireware flaw could allow unauthenticated code executionSecurity Affairs·Oct 17, 14:09 UTC · Oct 17, 2025RansomwareCVE-2025-924260
FreePBX Servers Targeted by ZeroThe Hacker News·Sep 12, 12:01 UTC · Sep 12, 2025Ransomware in the wildCVE-2025-5781960
Researchers Warn of Sitecore Exploit Chain Linking Cache Poisoning and Remote Code ExecutionThe Hacker News·Aug 29, 17:22 UTC · Aug 29, 2025VulnerabilityCVE-2025-53693CVE-2025-53691CVE-2025-53694+3 CVEs47
NetScaler ADC/Gateway zero-day exploited by attackers (CVE-2025-7775) - updated!Help Net Security·Aug 26, 00:00 UTC · Aug 26, 2025Exploit / PoC in the wildCVE-2025-7775CVE-2025-7776CVE-2025-842460
Commvault plugs holes in backup suite that allow remote code executionHelp Net Security·Aug 20, 00:00 UTC · Aug 20, 2025VulnerabilityCVE-2025-57788CVE-2025-57789CVE-2025-57791+2 CVEs47
⚡ Weekly Recap: VPN 0-Day, Encryption Backdoor, AI Malware, macOS Flaw, ATM Hack & MoreThe Hacker News·Aug 5, 04:38 UTC · Aug 5, 2025Malware in the wildCVE-2025-40596CVE-2025-40597CVE-2025-40598+8 CVEs60
Cisco Confirms Active Exploits Targeting ISE Flaws Enabling Unauthenticated Root AccessThe Hacker News·Jul 29, 04:27 UTC · Jul 29, 2025Exploit / PoC in the wildCVE-2025-20281CVE-2025-20337CVE-2025-2028260
Microsoft Patches 130 Vulnerabilities, Including Critical Flaws in SPNEGO and SQL ServerThe Hacker News·Jul 10, 07:02 UTC · Jul 10, 2025Vulnerability in the wildCVE-2025-49719CVE-2025-47981CVE-2025-49735+9 CVEs60
Chained Flaws in Enterprise CMS Provider Sitecore Could Allow RCEInfosecurity Magazine·Jun 17, 12:30 UTC · Jun 17, 2025VulnerabilityCVE-2025-34509CVE-2025-34510CVE-2025-3451147
Week in review: The impact of a CVE-free future on cyber defense, Patch Tuesday forecastHelp Net Security·May 11, 00:00 UTC · May 11, 2025Vulnerability in the wildCVE-2025-32819CVE-2025-27363CVE-2025-3248+1 CVEs60
U.S. CISA adds GoVision device flaws to its Known Exploited Vulnerabilities catalogSecurity Affairs·May 8, 08:04 UTC · May 8, 2025Exploit / PoC in the wildCVE-2024-6047CVE-2024-1112060
Sophos fixed critical vulnerabilities in its Firewall productSecurity Affairs·Dec 20, 21:23 UTC · Dec 20, 2024Vulnerability in the wildCVE-2024-12727CVE-2024-12728CVE-2024-12729+1 CVEs60
Sophos Issues Hotfixes for Critical Firewall Flaws: Update to Prevent ExploitationThe Hacker News·Dec 20, 08:16 UTC · Dec 20, 2024Exploit / PoC in the wildCVE-2024-12727CVE-2024-12728CVE-2024-12729+1 CVEs60
THN Recap: Top Cybersecurity Threats, Tools, and Practices (Nov 11The Hacker News·Nov 18, 11:36 UTC · Nov 18, 2024Ransomware in the wildCVE-2024-5910CVE-2024-9463CVE-2024-9465+29 CVEs60
A botnet exploits e GeoVision zeroSecurity Affairs·Nov 17, 04:53 UTC · Nov 17, 2024MalwareCVE-2024-1112060
Week in review: Tips for starting your cybersecurity career, Patch Tuesday forecastHelp Net Security·Aug 11, 00:00 UTC · Aug 11, 2024VulnerabilityCVE-2024-42219CVE-2024-42218CVE-2024-38856+2 CVEs160
Juniper Networks fixed a critical authentication bypass flaw in some of its routersSecurity Affairs·Jul 1, 07:53 UTC · Jul 1, 2024VulnerabilityCVE-2024-2973CVE-2024-21591CVE-2024-21619+1 CVEs60
Chinese hackers breached Dutch Ministry of DefenseHelp Net Security·Feb 15, 11:48 UTC · Feb 15, 2024Data breachCVE-2022-4247560
Experts created a PoC for Apache OFBiz flaw CVE-2023Security Affairs·Jan 12, 12:07 UTC · Jan 12, 2024Exploit / PoCCVE-2023-51467CVE-2023-49070CVE-2020-9496+1 CVEs60
Experts warn of critical ZeroSecurity Affairs·Dec 28, 08:52 UTC · Dec 28, 2023Exploit / PoCCVE-2023-51467CVE-2023-4907060
CISA adds Sophos Web Appliance bug to its Known Exploited Vulnerabilities catalogSecurity Affairs·Nov 22, 09:48 UTC · Nov 22, 2023Exploit / PoC in the wildCVE-2023-36584CVE-2023-1671CVE-2023-255160
Sophos Web Appliance vulnerability exploited in the wild (CVE-2023-1671)Help Net Security·Nov 22, 09:12 UTC · Nov 22, 2023Exploit / PoC in the wildCVE-2023-1671CVE-2020-255160
CISA Adds Three Security Flaws with Active Exploitation to KEV CatalogThe Hacker News·Nov 18, 04:36 UTC · Nov 18, 2023Exploit / PoC in the wildCVE-2023-36584CVE-2023-1671CVE-2020-2551+4 CVEs60
Threat actors started exploiting Juniper flaws shortly after PoC releaseSecurity Affairs·Aug 30, 15:14 UTC · Aug 30, 2023Exploit / PoC in the wildCVE-2023-36844CVE-2023-36845CVE-2023-36846+1 CVEs160
Multiple DDoS botnets were observed targeting Zyxel devicesSecurity Affairs·Jul 22, 17:02 UTC · Jul 22, 2023Malware in the wildCVE-2023-2877160
Widespread exploitation by botnet operators of Zyxel firewall flawSecurity Affairs·Jun 1, 07:24 UTC · Jun 1, 2023Malware in the wildCVE-2023-2877160
Sophos patches three issues in Sophos Web Security applianceSecurity Affairs·Apr 10, 15:35 UTC · Apr 10, 2023VulnerabilityCVE-2023-1671CVE-2022-4934CVE-2020-3669260
OpenSSH addressed a new preSecurity Affairs·Feb 7, 10:49 UTC · Feb 7, 2023VulnerabilityCVE-2023-2513635
OpenSSH Releases Patch for New PreThe Hacker News·Feb 7, 06:06 UTC · Feb 7, 2023VulnerabilityCVE-2023-2513635
Patch your Zoho ManageEngine instance immediately! PoC Exploit for CVE-2022Security Affairs·Jan 19, 19:29 UTC · Jan 19, 2023Exploit / PoCCVE-2022-4796660