Search: “java”

1,511 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Vulnerability 597 Malware 291 Exploit / PoC 195 Ransomware 173 Data breach 57 Threat actor 55 Industry 38 Advisory 22 Policy & legal 20 Phishing & fraud 19 AI tools & infra 15 Research 11 Tools 10 AI research 8

SeverityAll critical 698 high 427 medium 297 low 62 info 34

APT Expands Attack on ManageEngine With Active Campaign Against ServiceDesk Plus

Palo Alto Unit 42Jun 6, 01:25 UTC · Jun 6, 2024Threat actor in the wildCVE-2021-44077 CVE-2021-33617

60

Social engineering aspect of the XZ incident

Kaspersky SecurelistApr 24, 10:10 UTC · Apr 24, 2024Phishing & fraud

42

MavenGate Attack Could Let Hackers Hijack Java and Android via Abandoned Libraries

The Hacker NewsJan 22, 16:48 UTC · Jan 22, 2024Threat actor1

57

CISA adds Ruckus bug and another six flaws to its Known Exploited Vulnerabilities catalog

Security AffairsMay 16, 19:39 UTC · May 16, 2023Exploit / PoC in the wildCVE-2023-25717 CVE-2021-3560 CVE-2014-0196+4 CVEs1

60

Most attackers lose interest in Log4Shell

The RecordJan 17, 00:00 UTC · Jan 17, 2023Exploit / PoC in the wildCVE-2021-44228

60

Spring confirms ‘Spring4Shell’ zero

The RecordJan 17, 00:00 UTC · Jan 17, 2023Exploit / PoC CVE-2022-22965 CVE-2022-22963

60

Researchers Disclose Critical RCE Vulnerability Affecting Quarkus Java Framework

The Hacker NewsDec 1, 11:45 UTC · Dec 1, 2022Vulnerability CVE-2022-4116

60

Contrast Security partners with GitHub to deliver pipeline-native security to developers

Help Net SecurityFeb 3, 00:00 UTC · Feb 3, 2022Vulnerability

30

Second Log4j Vulnerability (CVE-2021

The Hacker NewsDec 18, 13:56 UTC · Dec 18, 2021Vulnerability in the wildCVE-2021-45046 CVE-2021-44228

60

Multi-platform Tycoon Ransomware employed in targeted attacks

Security AffairsJun 5, 12:43 UTC · Jun 5, 2020Ransomware

57

Microsoft warns about ongoing PonyFinal ransomware attacks

Security AffairsMay 27, 21:58 UTC · May 27, 2020Ransomware

57

Friday Squid Blogging: Planctotuethis Squid

Schneier on SecurityJan 29, 08:03 UTC · Jan 29, 2020Vulnerability1

42

July Patch Tuesday forecast: Rules are changing for companies with custom applications

Help Net SecurityJul 11, 09:12 UTC · Jul 11, 2019Vulnerability

55

Criminals, ATMs and a cup of coffee

Kaspersky SecurelistJun 27, 12:09 UTC · Jun 27, 2019Malware

30

April Patch Tuesday Forecast: Be aware of end-of-service issues and browser exploits

Help Net SecurityApr 17, 08:45 UTC · Apr 17, 2019Vulnerability

55

JackPOS malware presented as a Java Update Scheduler

Security AffairsSep 14, 12:26 UTC · Sep 14, 2017Malware1

42

Learn How to Code: Get 10 Best Online Training Courses for Just $49

The Hacker NewsAug 3, 16:06 UTC · Aug 3, 2017Research

30

25% of web apps still vulnerable to eight of the OWASP Top Ten

Help Net SecurityFeb 14, 00:00 UTC · Feb 14, 2017Vulnerability

30

A Cross-platform Java

Kaspersky SecurelistJan 28, 20:18 UTC · Jan 28, 2014Vulnerability CVE-2013-24651

47

Central Tibetan Administration Website Compromised

Kaspersky SecurelistAug 12, 22:14 UTC · Aug 12, 2013Vulnerability CVE-2012-4681 CVE-2013-2423

47

IT Threat Evolution: Q1 2012

Kaspersky SecurelistMay 21, 14:00 UTC · May 21, 2012Exploit / PoC CVE-2011-3544

60

Oracle Critical Patch Update October 2011

Kaspersky SecurelistOct 20, 01:02 UTC · Oct 20, 2011Vulnerability CVE-2011-3389 CVE-2011-3538

60

Mobile Malware Evolution: An Overview, Part 3

Kaspersky SecurelistSep 29, 17:00 UTC · Sep 29, 2009Malware

42

Experts uncover critical flaws in Kigen eSIM affecting billions

Security AffairsJul 14, 11:09 UTC · Jul 14, 2025Exploit / PoC

60

Alert: Exposed JDWP Interfaces Lead to Crypto Mining, Hpingbot Targets SSH for DDoS

The Hacker NewsJul 6, 07:18 UTC · Jul 6, 2025Vulnerability

42

Microsoft Fixes 78 Flaws, 5 Zero-Days Exploited; CVSS 10 Bug Impacts Azure DevOps Server

The Hacker NewsMay 15, 00:00 UTC · May 15, 2025Vulnerability in the wildCVE-2025-30397 CVE-2025-30400 CVE-2025-32701+10 CVEs1

60

Apache Tomcat Vulnerability CVE-2024

The Hacker NewsDec 24, 06:06 UTC · Dec 24, 2024Vulnerability CVE-2024-56337 CVE-2024-50379 CVE-2024-12828

60

How to manage the intersection of Java, security and DevOps at a low complexity cost

Help Net SecurityJun 5, 12:36 UTC · Jun 5, 2023Vulnerability

30

CISA Issues Warning on Active Exploitation of ZK Java Web Framework Vulnerability

The Hacker NewsFeb 28, 13:28 UTC · Feb 28, 2023Vulnerability in the wildCVE-2022-36537

60

Google OAuth client library flaw allowed to deploy malicious payloads

Security AffairsMay 23, 19:04 UTC · May 23, 2022Vulnerability CVE-2021-22573

47

Amazon's Hotpatch for Log4j Flaw Found Vulnerable to Privilege Escalation Bug

The Hacker NewsApr 23, 05:41 UTC · Apr 23, 2022Vulnerability in the wildCVE-2021-3100 CVE-2021-3101 CVE-2022-0070+1 CVEs

60

Spring4Shell: No need to panic, but mitigations are advised

Help Net SecurityApr 6, 12:06 UTC · Apr 6, 2022Exploit / PoC in the wildCVE-2022-22963 CVE-2010-1622 CVE-2022-22965

60

'Spring4Shell' bug in framework for Java programming draws widespread warnings

CyberScoopApr 1, 18:45 UTC · Apr 1, 2022Exploit / PoC in the wild

60

NetWitness partners with Datashield to protect customers from Log4j Java security vulnerability

Help Net SecurityDec 16, 00:00 UTC · Dec 16, 2021Vulnerability

55

Critical RCE 0day in Apache Log4j library exploited in the wild (CVE-2021-44228)

Help Net SecurityDec 13, 12:51 UTC · Dec 13, 2021Exploit / PoC in the wildCVE-2021-44228

60

Threat Advisory: Critical Apache Log4j vulnerability being exploited in the wild

Cisco TalosDec 10, 19:37 UTC · Dec 10, 2021Exploit / PoC in the wildCVE-2021-44228 CVE-2021-45046 CVE-2021-45105+1 CVEs

60

SWEED: Exposing years of Agent Tesla campaigns

Cisco TalosJul 15, 15:04 UTC · Jul 15, 2019Threat actor CVE-2017-8759 CVE-2017-118821

60

Apache Software Foundation fixes important flaws in Apache Tomcat

Security AffairsJul 25, 06:35 UTC · Jul 25, 2018Exploit / PoC in the wildCVE-2018-8037 CVE-2018-1336 CVE-2018-80341

60

Hacking SAP CRM by chaining 2 flaws in SAP NetWeaver AS Java

Security AffairsMar 16, 05:31 UTC · Mar 16, 2018Vulnerability

55

Week in review: Email tracking, DNS exfiltration, and secure coding in Java

Help Net SecurityOct 8, 00:00 UTC · Oct 8, 2017Data breach1

57