⚡ THN Weekly Recap: From $1.5B Crypto Heist to AI Misuse & Apple’s Data DilemmaThe Hacker News·May 6, 07:05 UTC · May 6, 2025Data breachCVE-2018-0171CVE-2025-24989CVE-2025-23209+32 CVEs60
Critical Ivanti Flaw Actively Exploited to Deploy TRAILBLAZE and BRUSHFIRE MalwareThe Hacker News·Apr 7, 06:39 UTC · Apr 7, 2025Malware in the wildCVE-2025-22457CVE-2024-38657CVE-2025-22467+2 CVEs60
China-Linked Silk Typhoon Expands Cyber Attacks to IT Supply Chains for Initial AccessThe Hacker News·Mar 7, 04:04 UTC · Mar 7, 2025Data breach in the wildCVE-2025-0282CVE-2024-3400CVE-2023-3519+5 CVEs60
What 2024 taught us about security vulnerabiltiesHelp Net Security·Jan 14, 00:00 UTC · Jan 14, 2025Exploit / PoC in the wildCVE-2023-3519CVE-2023-20198CVE-2021-4422860
INC Ransom Claims CyberInfosecurity Magazine·Nov 29, 11:50 UTC · Nov 29, 2024RansomwareCVE-2023-496660
THN Recap: Top Cybersecurity Threats, Tools, and Practices (Nov 11The Hacker News·Nov 18, 11:36 UTC · Nov 18, 2024Ransomware in the wildCVE-2024-5910CVE-2024-9463CVE-2024-9465+29 CVEs60
Zero-days dominate top frequently exploited vulnerabilitiesHelp Net Security·Nov 14, 00:00 UTC · Nov 14, 2024Vulnerability in the wildCVE-2023-3519CVE-2023-20198CVE-2021-44228+1 CVEs60
Russia's SVR Targets Zimbra, TeamCity Servers for Cyber EspionageInfosecurity Magazine·Oct 11, 10:45 UTC · Oct 11, 2024Threat actor57
Ransomware attackers hop from on-premises systems to cloud to compromise Microsoft 365 accountsHelp Net Security·Sep 30, 00:00 UTC · Sep 30, 2024Ransomware157
Microsoft Identifies Storm-0501 as Major Threat in Hybrid Cloud Ransomware AttacksThe Hacker News·Sep 28, 05:55 UTC · Sep 28, 2024Ransomware57
How RansomHub went from zero to 210 victims in six monthsHelp Net Security·Aug 30, 00:00 UTC · Aug 30, 2024Ransomware57
Iranian-linked hackers collaborate with ransomware affiliates, feds sayCyberScoop·Aug 28, 16:48 UTC · Aug 28, 2024Ransomware in the wild60
Pioneer Kitten: Iranian hackers partnering with ransomware affiliatesHelp Net Security·Aug 28, 00:00 UTC · Aug 28, 2024Ransomware57
TAG-100: New Threat Actor Uses OpenThe Hacker News·Jul 18, 13:11 UTC · Jul 18, 2024Threat actorCVE-2024-340060
Report Reveals Record Exploitation Rate For Load BalancersInfosecurity Magazine·Jun 18, 11:00 UTC · Jun 18, 2024Ransomware in the wildCVE-2023-496660
Researchers Identify Multiple China Hacker Groups Exploiting Ivanti Security FlawsThe Hacker News·Apr 6, 09:12 UTC · Apr 6, 2024Exploit / PoCCVE-2023-46805CVE-2024-21887CVE-2024-2189360
Volt Typhoon and 4 other groups targeting US energy and defense sectors through Ivanti bugsThe Record·Apr 4, 16:40 UTC · Apr 4, 2024Threat actorCVE-2023-46805CVE-2024-21887CVE-2024-2189360
Sectigo enhances its Certificate Manager platform by adding ACME supportHelp Net Security·Dec 14, 13:36 UTC · Dec 14, 2023AI tools & infra30
LockBit on a Roll - ICBC Ransomware Attack Strikes at the Heart of the Global Financial OrderSecurity Affairs·Dec 4, 10:48 UTC · Dec 4, 2023Ransomware60
PC malware statistics, Q3 2023Kaspersky Securelist·Dec 1, 10:00 UTC · Dec 1, 2023Malware in the wildCVE-2023-3519CVE-2023-20269CVE-2023-27532+3 CVEs60
Industrial and Commercial Bank of China dealing with LockBit ransomware attackThe Record·Nov 9, 21:55 UTC · Nov 9, 2023RansomwareCVE-2023-496660
Week in review: Exploited Citrix Bleed vulnerability, Atlassian patches critical Confluence bugHelp Net Security·Nov 5, 00:00 UTC · Nov 5, 2023Vulnerability in the wildCVE-2023-4966CVE-2023-22518CVE-2023-46747+2 CVEs60
Alert: Juniper Firewalls, Openfire, and Apache RocketMQ Under Attack from New ExploitsThe Hacker News·Sep 6, 07:46 UTC · Sep 6, 2023Ransomware in the wildCVE-2023-36844CVE-2023-36845CVE-2023-36846+3 CVEs60
US, UK, Australia issue joint advisory on today's top exploited vulnerabilitiesThe Record·Dec 12, 00:00 UTC · Dec 12, 2022VulnerabilityCVE-2019-19781CVE-2019-11510CVE-2018-13379+26 CVEs147
List of IT assets an attacker is most likely to target for exploitationHelp Net Security·Oct 13, 00:00 UTC · Oct 13, 2021Ransomware in the wild60
DDoS attacks surge as cybercriminals take advantage of the pandemicHelp Net Security·Mar 18, 00:00 UTC · Mar 18, 2021Ransomware60
SonicWall Probes Attack Using ZeroInfosecurity Magazine·Jan 25, 09:50 UTC · Jan 25, 2021RansomwareCVE-2018-13379CVE-2020-15505CVE-2020-1631+3 CVEs60
Ransomware Tops 2020 Threat RankingsInfosecurity Magazine·Oct 12, 19:01 UTC · Oct 12, 2020RansomwareCVE-2019-19781CVE-2019-1151060
Attackers Chaining Zerologon with VPN ExploitsInfosecurity Magazine·Oct 12, 12:02 UTC · Oct 12, 2020VulnerabilityCVE-2018-13379CVE-2020-15505CVE-2020-1472+4 CVEs60
APT groups chain VPN and Windows Zerologon bugs to attack US government networksSecurity Affairs·Oct 12, 11:29 UTC · Oct 12, 2020Threat actorCVE-2020-1472CVE-2018-13379CVE-2020-1631+3 CVEs60
DigiCert Automation Gateway: Securely monitor, automate and process certificate lifecycle eventsHelp Net Security·Aug 5, 00:00 UTC · Aug 5, 2020AI tools & infra30
Dynatrace opens its AIOps solution to third parties for smart autonomous cloud managementHelp Net Security·Jan 30, 00:00 UTC · Jan 30, 2019Industry30
OverWatchID introduces Dynamic WebUI Engine for privileged access managementHelp Net Security·Jul 27, 00:00 UTC · Jul 27, 2018Industry55
ROBOT Attack: RSA TLS crypto attack worked against Facebook, PayPal, and tens of 100 top domainsSecurity Affairs·Dec 13, 16:19 UTC · Dec 13, 2017Exploit / PoCCVE-2017-6168CVE-2017-17382CVE-2017-17427+6 CVEs60
Hundreds of Citrix Endpoints Compromised With WebshellsInfosecurity Magazine·Aug 3, 10:00 UTC · Aug 3, 2023Exploit / PoCCVE-2023-3519CVE-2023-3466CVE-2023-346760
In alerting about two Citrix bugs, CISA recommends immediate attention for oneThe Record·Jan 18, 20:42 UTC · Jan 18, 2024Ransomware in the wildCVE-2023-6548CVE-2023-654960
First patches for the Citrix ADC, Gateway RCE flaw releasedHelp Net Security·Jan 23, 13:30 UTC · Jan 23, 2024Vulnerability in the wildCVE-2019-1978160
Citrix plugs critical Citrix SD-WAN flaws, patch ASAP!Help Net Security·Jul 12, 00:00 UTC · Jul 12, 2019Vulnerability55
Week in review: Kubernetes security challenges, NIST Privacy Framework, Mitsubishi Electric breachHelp Net Security·Jan 26, 00:00 UTC · Jan 26, 2020Ransomware in the wildCVE-2019-19781CVE-2020-067460