Search: “tomcat”

181 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Vulnerability 66 Exploit / PoC 46 Malware 28 Ransomware 17 Threat actor 17 Data breach 5 Phishing & fraud 1 AI tools & infra 1 Industry 1 Model release 1 Policy & legal 1 Research 1

SeverityAll critical 117 high 45 medium 19 low 1 info 3

China-Linked Hackers Use TernDoor, PeerTime, BruteEntry in South American Telecom Attacks

The Hacker NewsMar 6, 08:22 UTC · Mar 6, 2026Malware

55

U.S. CISA adds Dell RecoverPoint and GitLab flaws to its Known Exploited Vulnerabilities catalog

Security AffairsFeb 19, 15:16 UTC · Feb 19, 2026Exploit / PoC in the wildCVE-2021-22175 CVE-2026-22769 CVE-2020-7796

60

China-linked APT weaponized Dell RecoverPoint zero

Security AffairsFeb 18, 12:15 UTC · Feb 18, 2026Exploit / PoC in the wildCVE-2026-22769

60

Chinese hackers exploited a Dell zero

CyberScoopFeb 18, 00:32 UTC · Feb 18, 2026Exploit / PoC in the wildCVE-2026-22769

60

Hewlett Packard Enterprise (HPE) fixed maximum severity OneView flaw

Security AffairsDec 18, 21:11 UTC · Dec 18, 2025Exploit / PoC CVE-2025-37164 CVE-2025-37093

60

HPE OneView Flaw Rated CVSS 10.0 Allows Unauthenticated Remote Code Execution

The Hacker NewsDec 18, 14:39 UTC · Dec 18, 2025Vulnerability in the wildCVE-2025-371641

60

Fortinet, Ivanti, and SAP Issue Urgent Patches for Authentication and Code Execution Flaws

The Hacker NewsDec 10, 09:13 UTC · Dec 10, 2025Vulnerability CVE-2025-59718 CVE-2025-59719 CVE-2025-10573+6 CVEs

60

New BYOVD loader behind DeadLock ransomware attack

Cisco TalosDec 9, 11:00 UTC · Dec 9, 2025Ransomware CVE-2024-51324

60

Amazon pins Cisco, Citrix zero

CyberScoopNov 12, 18:27 UTC · Nov 12, 2025Exploit / PoC in the wildCVE-2025-5777 CVE-2025-20337

60

⚡ Weekly Recap: Lazarus Hits Web3, Intel/AMD TEEs Cracked, Dark Web Leak Tool & More

The Hacker NewsNov 3, 17:59 UTC · Nov 3, 2025Threat actor CVE-2025-61932 CVE-2025-55315 CVE-2025-10680+18 CVEs1

60

UNC5221 Uses BRICKSTORM Backdoor to Infiltrate U.S. Legal and Technology Sectors

The Hacker NewsSep 25, 15:04 UTC · Sep 25, 2025Malware CVE-2023-46805 CVE-2024-21887

60

How threat actors breached U.S. federal civilian agency by exploiting a GeoServer flaw

Security AffairsSep 24, 10:16 UTC · Sep 24, 2025Data breach in the wildCVE-2024-36401

60

CISA warns of malware deployed through Ivanti EPMM flaws

Security AffairsSep 20, 14:07 UTC · Sep 20, 2025Malware in the wildCVE-2025-4427 CVE-2025-44281

60

CISA Warns of Two Malware Strains Exploiting Ivanti EPMM CVE-2025-4427 and CVE-2025

The Hacker NewsSep 19, 06:35 UTC · Sep 19, 2025Vulnerability CVE-2025-4427 CVE-2025-4428

60

New HTTP/2 'MadeYouReset' Vulnerability Enables Large

The Hacker NewsAug 22, 16:45 UTC · Aug 22, 2025Vulnerability CVE-2025-8671 CVE-2025-48989 CVE-2025-54500+4 CVEs

60

Active Campaign Exploits Cloud Flaws for Cryptomining

Infosecurity MagazineJul 24, 09:00 UTC · Jul 24, 2025Threat actor

57

⚡ Weekly Recap: Scattered Spider Arrests, Car Exploits, macOS Malware, Fortinet RCE and More

The Hacker NewsJul 15, 00:00 UTC · Jul 15, 2025Ransomware CVE-2025-25257 CVE-2025-25251 CVE-2025-31365+36 CVEs1

60

Alert: Exposed JDWP Interfaces Lead to Crypto Mining, Hpingbot Targets SSH for DDoS

The Hacker NewsJul 6, 07:18 UTC · Jul 6, 2025Vulnerability

42

HPE Issues Security Patch for StoreOnce Bug Allowing Remote Authentication Bypass

The Hacker NewsJun 4, 05:23 UTC · Jun 4, 2025Vulnerability in the wildCVE-2025-37093 CVE-2025-37089 CVE-2025-37090+8 CVEs

60

⚡ Weekly Recap: APT Intrusions, AI Malware, Zero

The Hacker NewsJun 3, 04:04 UTC · Jun 3, 2025Malware in the wildCVE-2025-3935 CVE-2025-47577 CVE-2025-2760+14 CVEs

60

251 Amazon-Hosted IPs Used in Exploit Scan Targeting ColdFusion, Struts, and Elasticsearch

The Hacker NewsMay 28, 09:23 UTC · May 28, 2025Vulnerability in the wildCVE-2018-15961 CVE-2017-5638 CVE-2022-26134+2 CVEs

60

China-Linked APTs Exploit SAP CVE-2025-31324 to Breach 581 Critical Systems Worldwide

The Hacker NewsMay 15, 00:00 UTC · May 15, 2025Vulnerability in the wildCVE-2025-31324 CVE-2025-42999

60

Confusion Reigns as Threat Actors Exploit Samsung MagicInfo Flaw

Infosecurity MagazineMay 8, 10:29 UTC · May 8, 2025Threat actor in the wildCVE-2024-7399

60

⚡ THN Weekly Recap: Router Hacks, PyPI Attacks, New Ransomware Decryptor, and More

The Hacker NewsMay 6, 07:05 UTC · May 6, 2025Ransomware CVE-2025-21590 CVE-2025-24983 CVE-2025-24984+27 CVEs1

60

⚡ Weekly Recap: Nation-State Hacks, Spyware Alerts, Deepfake Malware, Supply Chain Backdoors

The Hacker NewsMay 6, 05:03 UTC · May 6, 2025Malware CVE-2025-3928 CVE-2025-1976 CVE-2025-46271+33 CVEs

60

Critical Apache Roller Vulnerability (CVSS 10.0) Enables Unauthorized Session Persistence

The Hacker NewsApr 15, 00:00 UTC · Apr 15, 2025Vulnerability in the wildCVE-2025-24859 CVE-2025-30065 CVE-2025-24813

60

U.S. CISA adds Ivanti Connect Secure, Policy Secure and ZTA Gateways flaw to its Known Exploited Vulnerabilities catalog

Security AffairsApr 7, 19:39 UTC · Apr 7, 2025Exploit / PoC in the wildCVE-2025-224571

60

Oracle Releases January 2025 Patch to Address 318 Flaws Across Major Products

The Hacker NewsJan 22, 13:39 UTC · Jan 22, 2025Vulnerability in the wildCVE-2025-21556 CVE-2024-21287 CVE-2025-21524+10 CVEs

60

CISA adds Spring4Shell to list of exploited vulnerabilities

Help Net SecurityJan 10, 14:38 UTC · Jan 10, 2025Vulnerability in the wildCVE-2022-22965 CVE-2021-44228

60

⚡ THN Weekly Recap: Top Cybersecurity Threats, Tools and Tips [30 Dec]

The Hacker NewsJan 8, 11:22 UTC · Jan 8, 2025Exploit / PoC CVE-2024-3393 CVE-2019-3568 CVE-2024-56337+7 CVEs1

60

Apache MINA CVE-2024-52046: CVSS 10.0 Flaw Enables RCE via Unsafe Serialization

The Hacker NewsDec 27, 06:46 UTC · Dec 27, 2024Vulnerability in the wildCVE-2024-52046 CVE-2024-56337 CVE-2024-45387+2 CVEs1

60

Critical SQL Injection Vulnerability in Apache Traffic Control Rated 9.9 CVSS — Patch Now

The Hacker NewsDec 25, 13:30 UTC · Dec 25, 2024Vulnerability CVE-2024-45387 CVE-2024-43441 CVE-2024-563371

60

⚡ THN Recap: Top Cybersecurity Threats, Tools and Tips (Dec 2

The Hacker NewsDec 15, 00:00 UTC · Dec 15, 2024Vulnerability CVE-2024-41713 CVE-2024-51378 CVE-2023-45727+15 CVEs2

47

Critical SQLi Vulnerability Found in Fortra FileCatalyst Workflow Application

The Hacker NewsJun 27, 06:45 UTC · Jun 27, 2024Vulnerability CVE-2024-5276

60

Siloscape: First Known Malware Targeting Windows Containers to Compromise Cloud Environments

Palo Alto Unit 42Jun 6, 12:35 UTC · Jun 6, 2024Malware1

55

Network Security Trends: Recent Exploits Observed in the Wild Include Remote Code Execution, Cross

Palo Alto Unit 42Jun 5, 20:05 UTC · Jun 5, 2024Vulnerability in the wildCVE-2022-22954 CVE-2022-22963 CVE-2022-22965+20 CVEs

60

Hackers Created Rogue VMs to Evade Detection in Recent MITRE Cyber Attack

The Hacker NewsMay 27, 05:55 UTC · May 27, 2024Data breach CVE-2023-46805 CVE-2024-21887

60

MITRE December 2023 attack: threat actors created rogue VMs to evade detection

Security AffairsMay 25, 09:51 UTC · May 25, 2024Threat actor

60

Kinsing Hacker Group Exploits More Flaws to Expand Botnet for Cryptojacking

The Hacker NewsMay 22, 03:20 UTC · May 22, 2024Malware

30

New HTTP/2 Vulnerability Exposes Web Servers to DoS Attacks

The Hacker NewsApr 5, 03:55 UTC · Apr 5, 2024Vulnerability CVE-2024-2653 CVE-2024-27316 CVE-2024-24549+7 CVEs

35