⚡ Weekly Recap: iOS Zero-Days, 4Chan Breach, NTLM Exploits, WhatsApp Spyware & MoreThe Hacker News·May 6, 07:05 UTC · May 6, 2025Malware in the wildCVE-2025-24054CVE-2024-43451CVE-2025-31200+7 CVEs160
Ivanti VPN customers targeted via unrecognized RCE vulnerability (CVE-2025-22457)Help Net Security·Apr 11, 10:14 UTC · Apr 11, 2025Vulnerability in the wildCVE-2025-22457CVE-2025-0282CVE-2023-46805+2 CVEs60
Microsoft Patches 125 Flaws Including Actively Exploited Windows CLFS VulnerabilityThe Hacker News·Apr 10, 06:48 UTC · Apr 10, 2025Vulnerability in the wildCVE-2025-29824CVE-2022-24521CVE-2022-37969+15 CVEs60
Critical Ivanti Flaw Actively Exploited to Deploy TRAILBLAZE and BRUSHFIRE MalwareThe Hacker News·Apr 7, 06:39 UTC · Apr 7, 2025Malware in the wildCVE-2025-22457CVE-2024-38657CVE-2025-22467+2 CVEs60
CISA warns of latest Ivanti firewall bug being exploited by suspected Chinese hackersThe Record·Apr 4, 21:26 UTC · Apr 4, 2025Advisory in the wildCVE-2025-22457CVE-2025-0282CVE-2023-46805+1 CVEs60
CoffeeLoader Uses GPU-Based Armoury Packer to Evade EDR and Antivirus DetectionThe Hacker News·Mar 28, 11:57 UTC · Mar 28, 2025Malware30
CoffeeLoader Malware Loader Linked to SmokeLoader OperationsInfosecurity Magazine·Mar 27, 16:45 UTC · Mar 27, 2025Malware42
New Critical AMI BMC Vulnerability Enables Remote Server Takeover and BrickingThe Hacker News·Mar 19, 03:45 UTC · Mar 19, 2025Vulnerability in the wildCVE-2024-54085CVE-2022-40259CVE-2022-40242+5 CVEs60
Microsoft’s Patch Tuesday Fixes 63 Flaws, Including Two Under Active ExploitationThe Hacker News·Feb 12, 10:28 UTC · Feb 12, 2025Vulnerability in the wildCVE-2025-21391CVE-2025-21418CVE-2024-38193+4 CVEs60
3 Actively Exploited Zero-Day Flaws Patched in Microsoft's Latest Security UpdateThe Hacker News·Jan 21, 15:30 UTC · Jan 21, 2025Exploit / PoC in the wildCVE-2024-7344CVE-2025-21333CVE-2025-21334+13 CVEs60
⚡ THN Weekly Recap: Top Cybersecurity Threats, Tools and Tips [6 Jan]The Hacker News·Jan 6, 12:05 UTC · Jan 6, 2025Exploit / PoCCVE-2024-49113CVE-2024-49112160
Microsoft Fixes 72 Flaws, Including Patch for Actively Exploited CLFS VulnerabilityThe Hacker News·Dec 11, 15:01 UTC · Dec 11, 2024Vulnerability in the wildCVE-2024-49138CVE-2022-24521CVE-2022-37969+6 CVEs60
Microsoft Fixes 90 New Flaws, Including Actively Exploited NTLM and Task Scheduler BugsThe Hacker News·Nov 15, 00:00 UTC · Nov 15, 2024Exploit / PoC in the wildCVE-2024-43451CVE-2024-49039CVE-2024-21410+6 CVEs260
Microsoft Warns of Chinese Botnet Exploiting Router Flaws for Credential TheftThe Hacker News·Nov 5, 03:07 UTC · Nov 5, 2024Malware42
Massive China-state IoT botnet went undetected for four years—until nowArs Technica · Security·Sep 18, 19:58 UTC · Sep 18, 2024Malware in the wildCVE-2024-2188760
An overview of the BlindEagle APT’s activity in Latin AmericaKaspersky Securelist·Aug 19, 10:00 UTC · Aug 19, 2024Malware42
Microsoft Issues Patches for 51 Flaws, Including Critical MSMQ VulnerabilityThe Hacker News·Jun 12, 04:26 UTC · Jun 12, 2024Vulnerability in the wildCVE-2023-50868CVE-2023-50387CVE-2024-30080+5 CVEs60
LightSpy Spyware's macOS Variant Found with Advanced Surveillance CapabilitiesThe Hacker News·Jun 10, 04:34 UTC · Jun 10, 2024MalwareCVE-2018-4233CVE-2018-440435
Realtek SDK Vulnerability Attacks Highlight IoT Supply Chain ThreatsPalo Alto Unit 42·Jun 5, 17:03 UTC · Jun 5, 2024VulnerabilityCVE-2021-3539447
Microsoft Patches 61 Flaws, Including Two Actively Exploited ZeroThe Hacker News·May 15, 00:00 UTC · May 15, 2024Vulnerability in the wildCVE-2024-4671CVE-2024-4761CVE-2024-30040+9 CVEs60
Social engineering aspect of the XZ incidentKaspersky Securelist·Apr 24, 10:10 UTC · Apr 24, 2024Phishing & fraud42
Palo Alto Networks warns of zeroThe Record·Apr 12, 14:52 UTC · Apr 12, 2024Exploit / PoC in the wildCVE-2024-340060
RedCurl Cybercrime Group Abuses Windows PCA Tool for Corporate EspionageThe Hacker News·Mar 15, 00:00 UTC · Mar 15, 2024Threat actor57
Microsoft Rolls Out Patches for 73 Flaws, Including 2 Windows ZeroThe Hacker News·Feb 15, 00:00 UTC · Feb 15, 2024Vulnerability in the wildCVE-2024-21351CVE-2024-21412CVE-2023-36025+9 CVEs160
Microsoft's January 2024 Windows Update Patches 48 New VulnerabilitiesThe Hacker News·Jan 10, 10:14 UTC · Jan 10, 2024Vulnerability in the wildCVE-2023-7024CVE-2024-20674CVE-2024-20700+3 CVEs60
Android devices delivered to employees with pre-installed malwareHelp Net Security·Dec 14, 13:36 UTC · Dec 14, 2023Malware42
New 5G Modem Flaws Affect iOS Devices and Android Models from Major BrandsThe Hacker News·Dec 11, 05:03 UTC · Dec 11, 2023VulnerabilityCVE-2023-3304247
Exploit revealed for remote root access vulnerability affecting many router modelsHelp Net Security·Nov 21, 11:32 UTC · Nov 21, 2023Vulnerability42
Alert: Microsoft Releases Patch Updates for 5 New ZeroThe Hacker News·Nov 15, 00:00 UTC · Nov 15, 2023Vulnerability in the wildCVE-2023-36025CVE-2023-36033CVE-2023-36036+9 CVEs60
Vulnerable Arm GPU drivers under active exploitation. Patches may not be availableArs Technica · Security·Oct 2, 19:37 UTC · Oct 2, 2023Vulnerability in the wildCVE-2023-4211CVE-2023-33200CVE-2023-3497060
Microsoft Releases Patch for Two New Actively Exploited ZeroThe Hacker News·Sep 15, 00:00 UTC · Sep 15, 2023Vulnerability in the wildCVE-2023-4863CVE-2023-36761CVE-2023-36802+1 CVEs60
SecuX Shield BIO enhances crypto securityHelp Net Security·Sep 11, 00:00 UTC · Sep 11, 2023Industry30
Norwegian Entities Targeted in Ongoing Attacks Exploiting Ivanti EPMM VulnerabilityThe Hacker News·Aug 2, 03:41 UTC · Aug 2, 2023VulnerabilityCVE-2023-35078CVE-2023-3508160
CISA: Ivanti hacks targeting Norway began in AprilThe Record·Aug 1, 19:55 UTC · Aug 1, 2023Data breach in the wildCVE-2023-3507860
Security Affairs newsletter Round 425 by Pierluigi PaganiniSecurity Affairs·Jun 25, 15:26 UTC · Jun 25, 2023Ransomware in the wildCVE-2023-20178CVE-2023-20887CVE-2023-27992+4 CVEs60
Chinese-speaking hackers compromised Tencent app to spy on nonprofit, report saysThe Record·Apr 26, 20:06 UTC · Apr 26, 2023Malware42
Don't let manual processes hold you back, automate your AppSecHelp Net Security·Apr 24, 00:00 UTC · Apr 24, 2023Policy & legal55