Iran-Linked Hackers Use New Cavern C2 Framework to Target Israeli OrganizationsThe Hacker News·Jul 6, 18:34 UTC · Jul 6, 2026VulnerabilityCVE-2025-52691CVE-2025-68613CVE-2025-9316+2 CVEs147
Citrix Patches Six NetScaler Flaws Allowing File Read and Denial-ofThe Hacker News·Jul 2, 15:49 UTC · Jul 2, 2026Vulnerability in the wildCVE-2026-8451CVE-2026-8452CVE-2026-8655+4 CVEs60
Hijacked npm and Go Packages Use VS Code Tasks to Deploy Python InfostealerThe Hacker News·Jul 1, 10:25 UTC · Jul 1, 2026Malware142
AirDrop and Quick Share vulnerabilities affect protocols on five billion devices as fixes beginHelp Net Security·Jun 30, 00:00 UTC · Jun 30, 2026Vulnerability55
FortiBleed Targeted FortiGate Firewalls in 110 MillionThe Hacker News·Jun 25, 05:28 UTC · Jun 25, 2026Exploit / PoC60
⚡ Weekly Recap: Browser Bugs, EDR Killers, TV Botnet, OpenBSD Flaw, Android Trojan, and MoreThe Hacker News·Jun 23, 03:40 UTC · Jun 23, 2026Malware in the wildCVE-2026-24858CVE-2025-59718CVE-2025-59719+1 CVEs60
Anthropic's Mythos AI broke into almost all NSA classified systems in hoursSecurity Affairs·Jun 22, 13:50 UTC · Jun 22, 2026Ransomware60
Massive breach spills credentials for thousands of sensitive networksArs Technica · Security·Jun 17, 19:54 UTC · Jun 17, 2026Threat actor60
Six Proto6 Vulnerabilities in protobuf.js Expose Node.js Apps to RCE and DoSThe Hacker News·Jun 10, 05:08 UTC · Jun 10, 2026VulnerabilityCVE-2026-44289CVE-2026-44290CVE-2026-44291+3 CVEs47
GoDaddy found malware on 1,980 WordPress sites using Steam as C2 infrastructureSecurity Affairs·Jun 2, 05:44 UTC · Jun 2, 2026Malware42
AI-Generated npm Malware Leaks Its Own GitHub TokenInfosecurity Magazine·May 29, 08:10 UTC · May 29, 2026Malware130
Malicious npm Package Stole Files From Claude AI User Directory via GitHubThe Hacker News·May 27, 15:44 UTC · May 27, 2026Malware42
Hackers Used AI to Develop First Known ZeroThe Hacker News·May 15, 00:00 UTC · May 15, 2026Exploit / PoC160
PolyShell: unrestricted file upload in Magento and Adobe CommerceSansec (Magento / e-commerce security)·May 12, 10:55 UTC · May 12, 2026Vulnerability in the wild60
Brush shell 0.4.0 tightens script safety, widens platform supportHelp Net Security·May 4, 00:00 UTC · May 4, 2026AI tools & infra30
New Wave of DPRK Attacks Uses AI-Inserted npm Malware, Fake Firms, and RATsThe Hacker News·Apr 30, 06:31 UTC · Apr 30, 2026Malware142
Lotus Wiper Malware Targets Venezuelan Energy Systems in Destructive AttackThe Hacker News·Apr 22, 10:55 UTC · Apr 22, 2026Malware55
TeamPCP Pushes Malicious Telnyx Versions to PyPI, Hides Stealer in WAV FilesThe Hacker News·Mar 28, 06:25 UTC · Mar 28, 2026Malware42
An AI gateway designed to steal your dataKaspersky Securelist·Mar 27, 13:36 UTC · Mar 27, 2026Malware42
DRILLAPP Backdoor Targets Ukraine, Abuses Microsoft Edge Debugging for Stealth EspionageThe Hacker News·Mar 17, 04:50 UTC · Mar 17, 2026Malware42
Russia-linked APT uses DRILLAPP backdoor to spy on Ukrainian targetsSecurity Affairs·Mar 16, 20:32 UTC · Mar 16, 2026Malware42
APT37 combines cloud storage and USB implants to infiltrate airSecurity Affairs·Mar 2, 12:38 UTC · Mar 2, 2026Threat actor60
Fake IPTV Apps Spread Massiv Android Malware Targeting Mobile Banking UsersThe Hacker News·Feb 19, 17:00 UTC · Feb 19, 2026Malware30
OpenVPN releases version 2.7.0 with expanded protocol and platform updatesHelp Net Security·Feb 12, 00:00 UTC · Feb 12, 2026Policy & legal30
CERT Polska Details Coordinated Cyber Attacks on 30+ Wind and Solar FarmsThe Hacker News·Feb 6, 05:14 UTC · Feb 6, 2026Malware55
China-Linked Amaranth-Dragon Exploits WinRAR Flaw in Espionage CampaignsThe Hacker News·Feb 4, 16:46 UTC · Feb 4, 2026Threat actorCVE-2025-808860
Pompelmi: Open-source secure file upload scanning for Node.jsHelp Net Security·Feb 2, 00:00 UTC · Feb 2, 2026Malware30
Bandit: Open-source tool designed to find security issues in Python codeHelp Net Security·Jan 21, 00:00 UTC · Jan 21, 2026Tools130
WhatsApp Malware 'Maverick' Hijacks Browser Sessions to Target Brazil's Biggest BanksThe Hacker News·Nov 15, 00:00 UTC · Nov 15, 2025Malware42
ThreatsDay Bulletin: DNS Poisoning Flaw, Supply-Chain Heist, Rust Malware Trick and New RATs RisingThe Hacker News·Nov 5, 10:38 UTC · Nov 5, 2025Malware in the wildCVE-2017-1188260
New HttpTroy Backdoor Poses as VPN Invoice in Targeted Cyberattack on South KoreaThe Hacker News·Nov 3, 10:42 UTC · Nov 3, 2025Malware42
APT36 Targets Indian Government with GolangThe Hacker News·Oct 27, 08:18 UTC · Oct 27, 2025Threat actorCVE-2025-8088160
Uncovering Qilin attack methods exposed through multiple casesCisco Talos·Oct 27, 02:00 UTC · Oct 27, 2025Ransomware57