Public PoC Released for Critical libssh2 CVE-2026-55200 ClientThe Hacker News·Jun 29, 07:06 UTC · Jun 29, 2026Exploit / PoC in the wildCVE-2026-55200CVE-2019-3855CVE-2026-55199+1 CVEs160
Malicious JetBrains Plugins Steal AI API Keys as Chrome Extensions Capture Chatbot ChatsThe Hacker News·Jun 26, 07:08 UTC · Jun 26, 2026Malware in the wild160
North Korean Hackers Are Turning Developer Tools Into Malware Delivery ChannelsThe Hacker News·Jun 15, 00:00 UTC · Jun 15, 2026Malware42
Claude now reviews and fixes vulnerabilities as you write codeHelp Net Security·May 27, 00:00 UTC · May 27, 2026Vulnerability30
CISA Admin Leaked AWS GovCloud Keys on GithubKrebs on Security·May 20, 23:14 UTC · May 20, 2026Malware42
Sandyaa: Open-source autonomous security bug hunterHelp Net Security·May 13, 00:00 UTC · May 13, 2026Exploit / PoC45
ThreatsDay Bulletin: SMS Blaster Busts, OpenEMR Flaws, 600K Roblox Hacks and 25 More StoriesThe Hacker News·May 1, 07:21 UTC · May 1, 2026VulnerabilityCVE-2019-0708147
88% of self-hosted GitHub servers exposed to RCE, researchers warn (CVE-2026-3854)Help Net Security·Apr 29, 00:00 UTC · Apr 29, 2026VulnerabilityCVE-2026-385447
Google Patches Antigravity IDE Flaw Enabling Prompt Injection Code ExecutionThe Hacker News·Apr 21, 17:54 UTC · Apr 21, 2026AI safety & securityCVE-2026-2152035
A Magento breach analysis: part 1Sansec (Magento / e-commerce security)·Apr 14, 20:16 UTC · Apr 14, 2026Vulnerability42
How LiteLLM Turned Developer Machines Into Credential Vaults for AttackersThe Hacker News·Apr 8, 10:59 UTC · Apr 8, 2026Vulnerability155
Trivy Security Scanner GitHub Actions Breached, 75 Tags Hijacked to Steal CI/CD SecretsThe Hacker News·Mar 24, 06:31 UTC · Mar 24, 2026Data breach57
Betterleaks: Open-source secrets scannerHelp Net Security·Mar 19, 00:00 UTC · Mar 19, 2026Model release50
Keenadu the tablet conqueror and the links between major Android botnetsKaspersky Securelist·Feb 17, 09:00 UTC · Feb 17, 2026Malware55
Malicious VS Code AI Extensions with 1.5 Million Installs Steal Developer Source CodeThe Hacker News·Jan 26, 16:53 UTC · Jan 26, 2026Exploit / PoCCVE-2025-69264CVE-2025-6926360
New Advanced Linux VoidLink Malware Targets Cloud and container EnvironmentsThe Hacker News·Jan 19, 08:54 UTC · Jan 19, 2026Malware55
CISA Warns of Active Exploitation of Gogs Vulnerability Enabling Code ExecutionThe Hacker News·Jan 15, 00:00 UTC · Jan 15, 2026Vulnerability in the wildCVE-2025-8110CVE-2024-5594760
Coolify Discloses 11 Critical Flaws Enabling Full Server Compromise on SelfThe Hacker News·Jan 10, 14:26 UTC · Jan 10, 2026Exploit / PoC in the wildCVE-2025-66209CVE-2025-66210CVE-2025-66211+8 CVEs60
New Onapsis platform updates enhance visibility and protection across SAP landscapesHelp Net Security·Nov 21, 00:00 UTC · Nov 21, 2025Ransomware60
ShinyHunters Wage Broad Corporate Extortion SpreeKrebs on Security·Oct 8, 00:36 UTC · Oct 8, 2025RansomwareCVE-2025-6188260
TruffleHog: Open-source solution for scanning secretsHelp Net Security·Sep 16, 19:20 UTC · Sep 16, 2025AI safety & security30
The Open-Source Software Saving the Internet From AI Bot Scrapers404 Media·Jul 7, 13:16 UTC · Jul 7, 2025Industry30
Cryptojacking Campaign Exploits DevOps APIs Using Off-theThe Hacker News·Jun 3, 07:04 UTC · Jun 3, 2025Threat actorCVE-2020-14144160
⚡ Weekly Recap: Nation-State Hacks, Spyware Alerts, Deepfake Malware, Supply Chain BackdoorsThe Hacker News·May 6, 05:03 UTC · May 6, 2025MalwareCVE-2025-3928CVE-2025-1976CVE-2025-46271+33 CVEs60
How Breaches Start: Breaking Down 5 Real VulnsThe Hacker News·Apr 28, 11:00 UTC · Apr 28, 2025VulnerabilityCVE-2021-2220460
Eclipse and STMicroelectronics vulnerabilitiesCisco Talos·Apr 16, 12:00 UTC · Apr 16, 2025VulnerabilityCVE-2025-0726CVE-2025-2260CVE-2025-0727+10 CVEs35
Microsoft Uncovers New XCSSET macOS Malware Variant with Advanced Obfuscation TacticsThe Hacker News·Mar 12, 06:55 UTC · Mar 12, 2025MalwareCVE-2021-3071360
Small praise for modern compilers - A case of Ubuntu printing vulnerability that wasn’tCisco Talos·Feb 11, 15:12 UTC · Feb 11, 2025Vulnerability142
Bitwarden centralizes cryptographic key managementHelp Net Security·Jan 29, 00:00 UTC · Jan 29, 2025Vulnerability55
Infisical: Open-source secret management platformHelp Net Security·Jul 24, 00:00 UTC · Jul 24, 2024AI tools & infra30
Critical Exim vulnerability facilitates malware delivery (CVE-2024-39929)Help Net Security·Jul 15, 00:00 UTC · Jul 15, 2024Vulnerability in the wildCVE-2024-3992960
Week in review: MOVEit auth bypass flaws quitely fixed, open-source Rafel RAT targets AndroidsHelp Net Security·Jun 30, 00:00 UTC · Jun 30, 2024MalwareCVE-2024-5805CVE-2024-5806CVE-2024-527660
How to Use Python to Build Secure Blockchain ApplicationsThe Hacker News·Jun 27, 10:03 UTC · Jun 27, 2024Industry130
Gitleaks: Open-source solution for detecting secrets in your codeHelp Net Security·Jun 27, 00:00 UTC · Jun 27, 2024AI tools & infra130
Week in review: New Black Basta's social engineering campaign, passing the CISSP exam in 6 weeksHelp Net Security·May 19, 00:00 UTC · May 19, 2024Threat actor in the wildCVE-2024-32002CVE-2024-4947CVE-2024-30051+3 CVEs160
Social engineering aspect of the XZ incidentKaspersky Securelist·Apr 24, 10:10 UTC · Apr 24, 2024Phishing & fraud42
Zarf: Open-source continuous software delivery on disconnected networksHelp Net Security·Apr 15, 00:00 UTC · Apr 15, 2024Policy & legal30
Beware! Backdoor found in XZ utilities used by many Linux distros (CVE-2024-3094)Help Net Security·Apr 8, 13:25 UTC · Apr 8, 2024VulnerabilityCVE-2024-309460