Dashboard News CVEs Exploits Incidents AI Brief Analytics Entities Watchlist IOCs Ask the feed Sources Feeds & API Kiosk mode

Sep 16, 23:50 UTC· 11m ago

Search: “github”

1,460 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Malware 1083 Vulnerability 1066 Exploit / PoC 545 Ransomware 426 Data breach 335 Threat actor 310 Industry 192 Policy & legal 156 AI safety & security 141 Phishing & fraud 127 AI tools & infra 121 Tools 104 Research 57 Model release 43

SeverityAll critical 1460 high 1467 medium 1126 low 460 info 298

Unpatched Gogs Zero-Day Exploited Across 700+ Instances Amid Active Attacks

The Hacker NewsJan 13, 07:05 UTC · Jan 13, 2026Exploit / PoC in the wildCVE-2025-8110 CVE-2024-55947

60

North Korea-linked Actors Exploit React2Shell to Deploy New EtherRAT Malware

The Hacker NewsDec 10, 07:33 UTC · Dec 10, 2025Malware CVE-2025-55182

60

The Bug That Won't Die: 10 Years of the Same Mistake

Recorded FutureDec 9, 00:00 UTC · Dec 9, 2025Exploit / PoC CVE-2025-55182 CVE-2025-66478 CVE-2015-4852

60

Chinese Threat Actor TEMP.Periscope Targets UK-Based Engineering Company Using Russian APT Techniques

Recorded FutureNov 21, 00:00 UTC · Nov 21, 2025Threat actor

60

North Korea’s Fraudulent IT Employment Scheme: A Cybersecurity Threat

Recorded FutureNov 21, 00:00 UTC · Nov 21, 2025Phishing & fraud

55

Iranian Hackers’ Rising Interest in Targeting Android Systems With DroidJack, AndroRAT

Recorded FutureAug 12, 00:00 UTC · Aug 12, 2025Malware

55

Log4Shell: How It’s Exploited and Mitigating Damage

Recorded FutureJun 27, 00:00 UTC · Jun 27, 2025Exploit / PoC in the wildCVE-2021-44228

60

Explosive Growth of Non-Human Identities Creating Massive Security Blind Spots

The Hacker NewsApr 9, 10:30 UTC · Apr 9, 2025Threat actor

60

70% Of Leaked Secrets Remain Active Two Years Later

Help Net SecurityMar 20, 00:00 UTC · Mar 20, 2025Exploit / PoC

60

Lazarus Group deceives developers with 6 new malicious npm packages

CyberScoopMar 12, 22:31 UTC · Mar 12, 2025Threat actor in the wild1

60

This Windows PowerShell Phish Has Scary Potential

Krebs on SecuritySep 19, 20:18 UTC · Sep 19, 2024Vulnerability

55

Week in review: CrowdStrike-triggered outage insights, recovery, and measuring cybersecurity ROI

Help Net SecurityJul 28, 00:00 UTC · Jul 28, 2024Exploit / PoC CVE-2024-6327 CVE-2024-41110

60

Polyfill, Cloudflare trade barbs after reports of supply chain attack threatening 100,000 websites

The RecordJun 27, 00:00 UTC · Jun 27, 2024Vulnerability

55

What we know about the xz Utils backdoor that almost infected the world

Ars Technica · SecurityApr 1, 06:55 UTC · Apr 1, 2024Malware

55

Week in review: Public MS Word RCE PoC, API exploitation, Patch Tuesday forecast

Help Net SecurityMar 12, 00:00 UTC · Mar 12, 2023Exploit / PoC CVE-2023-27532 CVE-2023-25610 CVE-2023-217161

60

The Secret Vulnerability Finance Execs are Missing

The Hacker NewsFeb 23, 14:40 UTC · Feb 23, 2023Vulnerability

55

Infosec products of the month: October 2022

Help Net SecurityNov 1, 00:00 UTC · Nov 1, 2022Policy & legal

55

FTC holds alcohol delivery app Drizly and its CEO liable for lax data security before 2020 hack

CyberScoopOct 25, 00:35 UTC · Oct 25, 2022Policy & legal in the wild1

60

New infosec products of the week: October 7, 2022

Help Net SecurityOct 7, 00:00 UTC · Oct 7, 2022Policy & legal

55

Critical RCE bug in GitLab patched, update ASAP! (CVE-2022-2884)

Help Net SecurityAug 24, 00:00 UTC · Aug 24, 2022Vulnerability in the wildCVE-2022-28841

60

Manjusaka: A Chinese sibling of Sliver and Cobalt Strike

Cisco TalosAug 2, 12:00 UTC · Aug 2, 2022Malware

55

Critical RCE Bug Found in Homebrew Package Manager for macOS and Linux

The Hacker NewsApr 26, 07:33 UTC · Apr 26, 2021Vulnerability

55

Hackers breached a the PHP 's Git Server and inserted a backdoor in the code

Security AffairsMar 29, 14:22 UTC · Mar 29, 2021Data breach1

60

Hackers Are Targeting Microsoft Exchange Servers With Ransomware

The Hacker NewsMar 15, 00:00 UTC · Mar 15, 2021Ransomware in the wild

60

Expert publishes PoC exploit code for Microsoft Exchange flaws

Security AffairsMar 11, 21:33 UTC · Mar 11, 2021Exploit / PoC in the wildCVE-2021-26855 CVE-2021-26857 CVE-2021-26858+1 CVEs1

60

Wormable Gitpaste-12 Botnet Returns to Target Linux Servers, IoT Devices

The Hacker NewsDec 15, 00:00 UTC · Dec 15, 2020Malware CVE-2020-5902 CVE-2020-8816 CVE-2020-10987+2 CVEs

60

New Open Source Security Foundation wants to improve open source software security

Help Net SecurityAug 3, 00:00 UTC · Aug 3, 2020Advisory

55

Git Project addresses a critical arbitrary code execution vulnerability in Git

Security AffairsOct 8, 06:32 UTC · Oct 8, 2018Vulnerability CVE-2018-174561

60

Arbor Networks reports record

CyberScoopMar 6, 14:23 UTC · Mar 6, 2018Exploit / PoC in the wild1

60

Critical code execution flaw in Electron framework impacts popular Desktop apps such as Skype and Signal

Security AffairsJan 24, 21:15 UTC · Jan 24, 2018Vulnerability CVE-2018-1000006

60

Massive botnet responsible for wave of DDoS attacks

CyberScoopOct 21, 13:35 UTC · Oct 21, 2016Malware in the wild

60

Russian Hackers Exploit Microsoft OWA Flaw to Keep Mailbox Access After Credential Rotation

The Hacker NewsJul 30, 07:40 UTC · Jul 30, 2026Data breach CVE-2026-42897 CVE-2025-66376

60

Week in review: ServiceNow pre-auth RCE exploited in the wild, Hugging Face breached

Help Net SecurityJul 26, 00:00 UTC · Jul 26, 2026Data breach in the wildCVE-2026-6875 CVE-2026-15409 CVE-2026-15410+4 CVEs

60

⚡ Weekly Recap: WordPress RCE, SonicWall 0-Days, AI Service Attacks, SharePoint 0

The Hacker NewsJul 21, 04:34 UTC · Jul 21, 2026Vulnerability in the wildCVE-2026-63030 CVE-2026-60137 CVE-2026-15409+26 CVEs1

60

Week in review: Accenture data breach, great open-source cybersecurity tools

Help Net SecurityJul 12, 00:00 UTC · Jul 12, 2026Data breach in the wildCVE-2026-48282 CVE-2026-55255 CVE-2026-506561

60

Week in review: 74k Fortinet firewall credentials stolen, Splunk Enterprise RCE under active attack

Help Net SecurityJun 21, 00:00 UTC · Jun 21, 2026Vulnerability in the wildCVE-2026-20262 CVE-2026-48558 CVE-2026-39813+3 CVEs1

60

Microsoft Defender RoguePlanet Zero-Day Grants SYSTEM Access on Updated Windows

The Hacker NewsJun 10, 17:30 UTC · Jun 10, 2026Exploit / PoC in the wildCVE-2026-33825 CVE-2026-45498 CVE-2026-410911

60

The Hidden Cost of AI Security Debt

Recorded FutureJun 4, 00:00 UTC · Jun 4, 2026Data breach

60

Microsoft Calls the Zero-Day Dumps Irresponsible. The Researcher Says Microsoft Started It.

Security AffairsMay 29, 10:51 UTC · May 29, 2026Exploit / PoC in the wildCVE-2026-455851

60

⚡ Weekly Recap: Linux Flaws, Defender 0-Days, Router Botnets, and Supply Chain Chaos

The Hacker NewsMay 26, 04:39 UTC · May 26, 2026Malware in the wildCVE-2026-46333 CVE-2026-41091 CVE-2026-45498+31 CVEs

60