Trivy Supply Chain Attack Triggers Self-Spreading CanisterWorm Across 47 npm PackagesThe Hacker News·Mar 23, 07:53 UTC · Mar 23, 2026Malware42
⚡ Weekly Recap: Chrome 0-Days, Router Botnets, AWS Breach, Rogue AI Agents & MoreThe Hacker News·Mar 15, 00:00 UTC · Mar 15, 2026Malware in the wildCVE-2026-3909CVE-2026-3910CVE-2026-3913+40 CVEs260
Researchers Uncover ‘LeakyLooker’ Vulnerabilities in Google LookerInfosecurity Magazine·Mar 11, 16:00 UTC · Mar 11, 2026Vulnerability30
SolarWinds Fixes Four Critical Web Help Desk Flaws With Unauthenticated RCE and Auth BypassThe Hacker News·Mar 2, 06:04 UTC · Mar 2, 2026Vulnerability in the wildCVE-2025-40536CVE-2025-40537CVE-2025-40551+7 CVEs60
Malicious NuGet Package Targets Stripe DevelopersInfosecurity Magazine·Feb 25, 13:00 UTC · Feb 25, 2026Malware155
Roundcube RCE: Dark web activity signals imminent attacks (CVE-2025-49113)Help Net Security·Feb 23, 10:54 UTC · Feb 23, 2026Vulnerability in the wildCVE-2025-49113CVE-2024-42009CVE-2025-6846160
BeyondTrust fixes easy-to-exploit pre-auth RCE vulnerability in remote access tools (CVE-2026-1731)Help Net Security·Feb 20, 15:05 UTC · Feb 20, 2026Vulnerability in the wildCVE-2026-1731CVE-2024-1235660
Vibe-Coded Moltbook Exposes User Data, API Keys and MoreInfosecurity Magazine·Feb 3, 10:00 UTC · Feb 3, 2026AI safety & security130
Snowflake makes enterprise data AI-ready with native Postgres in its AI Data CloudHelp Net Security·Feb 3, 00:00 UTC · Feb 3, 2026Ransomware60
Cybercriminals Deploy CORNFLAKE.V3 Backdoor via ClickFix Tactic and Fake CAPTCHA PagesThe Hacker News·Jan 27, 14:14 UTC · Jan 27, 2026Malware42
Bytebase: Open-source database DevOps toolHelp Net Security·Jan 19, 00:00 UTC · Jan 19, 2026AI safety & security30
GoBruteforcer Botnet Targets Crypto Project Databases by Exploiting Weak CredentialsThe Hacker News·Jan 12, 10:48 UTC · Jan 12, 2026Malware30
Coolify Discloses 11 Critical Flaws Enabling Full Server Compromise on SelfThe Hacker News·Jan 10, 14:26 UTC · Jan 10, 2026Exploit / PoC in the wildCVE-2025-66209CVE-2025-66210CVE-2025-66211+8 CVEs60
ThreatsDay Bulletin: Stealth Loaders, AI Chatbot Flaws AI Exploits, Docker Hack, and 15 More StoriesThe Hacker News·Jan 10, 14:25 UTC · Jan 10, 2026MalwareCVE-2025-59295CVE-2025-10294CVE-2025-5923060
GoBruteforcer Botnet Targets Linux ServersInfosecurity Magazine·Jan 8, 17:30 UTC · Jan 8, 2026Malware55
Metis: Open-source, AI-driven tool for deep security code reviewHelp Net Security·Nov 19, 00:00 UTC · Nov 19, 2025AI safety & security30
Hidden Logic Bombs in Malware-Laced NuGet Packages Set to Detonate Years After InstallationThe Hacker News·Nov 7, 11:55 UTC · Nov 7, 2025Malware55
Over 100 VS Code Extensions Exposed Developers to Hidden Supply Chain RisksThe Hacker News·Oct 31, 07:59 UTC · Oct 31, 2025Ransomware60
OpenFGA: The open-source engine redefining access controlHelp Net Security·Oct 22, 00:00 UTC · Oct 22, 2025AI safety & security30
September 2025 CVE LandscapeRecorded Future·Oct 17, 00:00 UTC · Oct 17, 2025Exploit / PoC in the wildCVE-2025-53690CVE-2021-21311CVE-2025-20333+6 CVEs60
Akira Ransomware bypasses MFA on SonicWall VPNsSecurity Affairs·Sep 29, 10:52 UTC · Sep 29, 2025RansomwareCVE-2024-4076660
Malicious Nx Packages in ‘s1ngularity’ Attack Leaked 2,349 GitHub, Cloud, and AI CredentialsThe Hacker News·Sep 6, 11:31 UTC · Sep 6, 2025Malware55
⚡ Weekly Recap: Password Manager Flaws, Apple 0-Day, Hidden AI Prompts, In-theThe Hacker News·Aug 27, 05:11 UTC · Aug 27, 2025Ransomware in the wildCVE-2018-0171CVE-2025-43300CVE-2025-7353+5 CVEs60
Malicious Code in XZ Utils for Linux Systems Enables Remote Code ExecutionThe Hacker News·Aug 13, 10:32 UTC · Aug 13, 2025VulnerabilityCVE-2024-309447
Active Campaign Exploits Cloud Flaws for CryptominingInfosecurity Magazine·Jul 24, 09:00 UTC · Jul 24, 2025Threat actor57
Secretless Broker: Open-source tool connects apps securely without passwords or keysHelp Net Security·Jul 2, 00:00 UTC · Jul 2, 2025Tools30
⚡ THN Weekly Recap: Google Secrets Stolen, Windows Hack, New Crypto Scams and MoreThe Hacker News·Jun 10, 09:34 UTC · Jun 10, 2025Phishing & fraudCVE-2025-1094CVE-2025-0108CVE-2025-23359+31 CVEs60
Hawk Eye: Open-source scanner uncovers secrets and PII across platformsHelp Net Security·Apr 21, 00:00 UTC · Apr 21, 2025Data breach45
IntelMQ: Open-source tool for collecting and processing security feedsHelp Net Security·Apr 2, 08:46 UTC · Apr 2, 2025Tools30
Albabat Ransomware Evolves to Target Linux and macOSInfosecurity Magazine·Mar 21, 14:30 UTC · Mar 21, 2025Ransomware57
UAT-5918 targets critical infrastructure entities in TaiwanCisco Talos·Mar 20, 10:00 UTC · Mar 20, 2025Exploit / PoC60
Making sense of database complexityHelp Net Security·Feb 13, 00:00 UTC · Feb 13, 2025Policy & legal30
Veza Access Requests reduces the risk of identity-based threatsHelp Net Security·Dec 4, 00:00 UTC · Dec 4, 2024Industry30
Red Hat Enterprise Linux 9.5 helps organizations simplify operationsHelp Net Security·Nov 14, 00:00 UTC · Nov 14, 2024Vulnerability30
Neon Authorize: Granular access controls at the database layerHelp Net Security·Oct 30, 00:00 UTC · Oct 30, 2024Industry30
Vulnerability in popular browsers could be used to track, profile users onlineHelp Net Security·Sep 16, 08:04 UTC · Sep 16, 2024Vulnerability30
Evolution of Mallox: from private ransomware to RaaSKaspersky Securelist·Sep 4, 10:01 UTC · Sep 4, 2024Ransomware57