Unpatchable 0-day in surveillance cam is being exploited to install MiraiArs Technica · Security·Aug 28, 21:25 UTC · Aug 28, 2024Exploit / PoC in the wildCVE-2024-7029CVE-2017-17215CVE-2014-8361160
Here’s how carefully concealed backdoor in fake AWS files escaped mainstream noticeArs Technica · Security·Jul 15, 00:00 UTC · Jul 15, 2024Malware55
High-risk Atlassian Confluence RCE fixed, PoC available (CVE-2024-21683)Help Net Security·Jun 3, 00:00 UTC · Jun 3, 2024Exploit / PoCCVE-2024-21683160
Researchers Uncover Flaws in Python Package for AI Models and PDF.js Used by FirefoxThe Hacker News·May 21, 10:22 UTC · May 21, 2024VulnerabilityCVE-2024-34359CVE-2024-4367160
Google fixes sixth actively exploited Chrome zeroSecurity Affairs·May 16, 13:02 UTC · May 16, 2024Exploit / PoC in the wildCVE-2024-4761CVE-2024-4671CVE-2024-0519+3 CVEs60
Researchers stop ‘credible takeover attempt’ similar to XZ Utils backdoor incidentThe Record·Apr 15, 19:44 UTC · Apr 15, 2024Malware55
Hacked WordPress Sites Abusing Visitors' Browsers for Distributed BruteThe Hacker News·Mar 7, 13:45 UTC · Mar 7, 2024RansomwareCVE-2021-443660
iOS Zero-Day Attacks: Experts Uncover Deeper Insights into Operation TriangulationThe Hacker News·Oct 30, 03:14 UTC · Oct 30, 2023Exploit / PoC in the wildCVE-2023-32434CVE-2023-3243560
Hackers can force iOS and macOS browsers to divulge passwords and much moreArs Technica · Security·Oct 25, 17:00 UTC · Oct 25, 2023Exploit / PoC in the wild60
Supermicro's BMC Firmware Found Vulnerable to Multiple Critical VulnerabilitiesThe Hacker News·Oct 6, 06:02 UTC · Oct 6, 2023VulnerabilityCVE-2023-40284CVE-2023-40290CVE-2023-40287+4 CVEs60
Critical flaw found in the WooCommerce Stripe Gateway PluginSecurity Affairs·Jun 14, 13:32 UTC · Jun 14, 2023VulnerabilityCVE-2023-3400060
Researchers Discover New Linux Malware Targeting WordPress SitesInfosecurity Magazine·Jan 3, 16:10 UTC · Jan 3, 2023Malware55
Zero-Day Flaw Discovered in Quarkus Java FrameworkInfosecurity Magazine·Nov 30, 16:00 UTC · Nov 30, 2022Exploit / PoCCVE-2022-4116160
Google addressed the eighth Chrome zeroSecurity Affairs·Nov 25, 13:52 UTC · Nov 25, 2022Exploit / PoC in the wildCVE-2022-4135CVE-2022-3723CVE-2022-3075+5 CVEs60
Google fixes a new actively exploited Chrome zeroSecurity Affairs·Oct 28, 13:01 UTC · Oct 28, 2022Exploit / PoC in the wildCVE-2022-3723CVE-2022-3075CVE-2022-2856+4 CVEs60
When transparency is also obscurity: The conundrum that is open-source securityHelp Net Security·Oct 4, 00:00 UTC · Oct 4, 2022Vulnerability55
Week in review: Spring4Shell vulnerability, attackers exploiting patched RCE in Sophos FirewallHelp Net Security·Apr 3, 00:00 UTC · Apr 3, 2022Vulnerability in the wildCVE-2022-104060
Chrome Zero-Day from North KoreaSchneier on Security·Mar 31, 11:13 UTC · Mar 31, 2022Exploit / PoCCVE-2022-060960
Zimbra zero-day actively exploited by an alleged Chinese threat actorSecurity Affairs·Feb 4, 09:54 UTC · Feb 4, 2022Exploit / PoC in the wild60
Friday Squid Blogging: The Far Side Squid ComicSchneier on Security·Dec 10, 22:05 UTC · Dec 10, 2021Exploit / PoCCVE-2021-44228160
Cyberthreats to financial organizations in 2022Kaspersky Securelist·Nov 23, 10:00 UTC · Nov 23, 2021RansomwareCVE-2019-5544CVE-2020-3992CVE-2018-13379+2 CVEs60
Retail industry security incidents soaring, worsened by the supply chain crisisHelp Net Security·Nov 9, 00:00 UTC · Nov 9, 2021Vulnerability55
Over 1 million WordPress sites affected by OptinMonster plugin flawsSecurity Affairs·Oct 28, 21:01 UTC · Oct 28, 2021VulnerabilityCVE-2021-3934160
Popular NPM package PacSecurity Affairs·Sep 14, 04:33 UTC · Sep 14, 2021VulnerabilityCVE-2021-2340660
India's Koo, a Twitter-like Service, Found Vulnerable to Critical Worm AttacksThe Hacker News·Aug 6, 11:37 UTC · Aug 6, 2021Vulnerability55
Several New Critical Flaws Affect CODESYS Industrial Automation SoftwareThe Hacker News·Jul 22, 03:38 UTC · Jul 22, 2021RansomwareCVE-2021-29238CVE-2021-29240CVE-2021-29241+6 CVEs60
Unpatched Flaw in Linux Pling Store Apps Could Lead to SupplyThe Hacker News·Jun 23, 04:01 UTC · Jun 23, 2021Vulnerability55
IT threat evolution Q1 2021Kaspersky Securelist·May 31, 07:32 UTC · May 31, 2021Ransomware in the wildCVE-2021-26855CVE-2021-26857CVE-2021-26858+1 CVEs60
Tala Detect platform ensures data privacy violation monitoringHelp Net Security·Mar 18, 00:00 UTC · Mar 18, 2021Vulnerability55
Critical flaws in Orbit Fox WordPress plugin allows site takeoverSecurity Affairs·Jan 17, 13:46 UTC · Jan 17, 2021Exploit / PoC60
Internet Explorer and Windows zeroKaspersky Securelist·Aug 12, 07:00 UTC · Aug 12, 2020Exploit / PoCCVE-2020-0986CVE-2020-1380CVE-2020-0674+3 CVEs60
OkCupid Dating App Flaws Could've Let Hackers Read Your Private MessagesThe Hacker News·Jul 29, 10:10 UTC · Jul 29, 2020Ransomware in the wild60
100K+ WordPress sites using the Contact Form 7 Datepicker plugin are exposed to hackSecurity Affairs·Apr 3, 08:50 UTC · Apr 3, 2020Exploit / PoC in the wild60
Is the enterprise on the brink of a global web supply chain attack?Help Net Security·Nov 18, 10:20 UTC · Nov 18, 2019Data breach60
Pwn2Own Tokyo 2019 Day One - hackers earn $195,000 for hacking smartphones, TVs, and routersSecurity Affairs·Nov 7, 09:25 UTC · Nov 7, 2019Exploit / PoC60
Fake Telegram app on more than 100,000 phones infected U.S., UAE AndroidsCyberScoop·Jul 16, 14:39 UTC · Jul 16, 2019Exploit / PoC in the wild60
How students learn to code, evaluate job opportunitiesHelp Net Security·Dec 14, 00:00 UTC · Dec 14, 2018Industry55
0-Days Found in iPhone X, Samsung Galaxy S9, Xiaomi Mi6 PhonesThe Hacker News·Nov 15, 00:00 UTC · Nov 15, 2018Exploit / PoC60
Tor Browser Zero-Day Exploit Revealed OnlineThe Hacker News·Sep 10, 19:07 UTC · Sep 10, 2018Exploit / PoC60
Rocke: The Champion of Monero MinersCisco Talos·Aug 30, 15:26 UTC · Aug 30, 2018VulnerabilityCVE-2017-10271CVE-2017-306660