OpenClaw Bug Enables One-Click Remote Code Execution via Malicious LinkThe Hacker News·Feb 3, 05:27 UTC · Feb 3, 2026VulnerabilityCVE-2026-2525347
Fake Python Spellchecker Packages on PyPI Delivered Hidden Remote Access TrojanThe Hacker News·Jan 28, 12:14 UTC · Jan 28, 2026Malware42
GitLab Duo Agent Platform solves the AI paradox in software deliveryHelp Net Security·Jan 16, 00:00 UTC · Jan 16, 2026Vulnerability130
Malicious Chrome Extension Steals MEXC API Keys by Masquerading as Trading ToolThe Hacker News·Jan 15, 00:00 UTC · Jan 15, 2026Threat actor45
Microsoft Silently Patches Windows LNK Flaw After Years of Active ExploitationThe Hacker News·Dec 4, 04:31 UTC · Dec 4, 2025Vulnerability in the wildCVE-2025-949160
Emerging Android threat ‘Albiriox’ enables full On‑Device FraudSecurity Affairs·Dec 1, 10:38 UTC · Dec 1, 2025Phishing & fraud55
Sturnus: New Android banking trojan targets WhatsApp, Telegram, and SignalSecurity Affairs·Nov 20, 20:44 UTC · Nov 20, 2025Malware30
Researchers Uncover BankBot-YNRK and DeliveryRAT Android Trojans Stealing Financial DataThe Hacker News·Nov 3, 11:14 UTC · Nov 3, 2025Malware30
BadCandy Webshell threatens unpatched Cisco IOS XE devices, warns Australian governmentSecurity Affairs·Nov 1, 17:41 UTC · Nov 1, 2025VulnerabilityCVE-2023-2019835
Herodotus Android malware mimics human typing to evade detectionSecurity Affairs·Oct 29, 08:09 UTC · Oct 29, 2025Malware30
BlueNoroff's latest campaigns: GhostCall and GhostHireKaspersky Securelist·Oct 28, 03:00 UTC · Oct 28, 2025Threat actor45
Major Vulnerabilities Found in TPInfosecurity Magazine·Oct 23, 12:30 UTC · Oct 23, 2025VulnerabilityCVE-2025-7850CVE-2025-7851CVE-2024-2182760
Anthropic MCP Inspector: CVE-2025Recorded Future·Oct 14, 00:00 UTC · Oct 14, 2025Vulnerability in the wildCVE-2025-4959660
U.S. CISA adds Synacor Zimbra Collaboration Suite (ZCS) flaw to its Known Exploited Vulnerabilities catalogSecurity Affairs·Oct 7, 21:39 UTC · Oct 7, 2025Exploit / PoC in the wildCVE-2025-2791560
Zimbra users targeted in zeroSecurity Affairs·Oct 7, 21:32 UTC · Oct 7, 2025Exploit / PoCCVE-2025-2791560
ShadowV2 Botnet Exposes Rise of DDoS-as-aInfosecurity Magazine·Sep 24, 16:00 UTC · Sep 24, 2025Malware30
DOM-Based Extension Clickjacking Exposes Popular Password Managers to Credential and Data TheftThe Hacker News·Aug 21, 06:39 UTC · Aug 21, 2025Vulnerability42
Shell No! (Part 2) Introducing Cknife, China Chopper’s SiblingRecorded Future·Jun 27, 00:00 UTC · Jun 27, 2025Vulnerability42
China-linked group Salt Typhoon breached satellite firm ViasatSecurity Affairs·Jun 23, 20:52 UTC · Jun 23, 2025Data breach in the wildCVE-2023-20198CVE-2023-20273160
⚡ THN Weekly Recap: Google Secrets Stolen, Windows Hack, New Crypto Scams and MoreThe Hacker News·Jun 10, 09:34 UTC · Jun 10, 2025Phishing & fraudCVE-2025-1094CVE-2025-0108CVE-2025-23359+31 CVEs60
Android malware campaigns use .NET MAUI to evade detectionSecurity Affairs·Mar 25, 18:56 UTC · Mar 25, 2025Malware30
Windows Shortcut Flaw Exploited by 11 StateInfosecurity Magazine·Mar 19, 16:30 UTC · Mar 19, 2025Vulnerability in the wild60
CISA Identifies Five New Vulnerabilities Currently Being ExploitedSchneier on Security·Mar 5, 12:00 UTC · Mar 5, 2025Vulnerability30
Lazarus stole $1.5B from Bybit, it is the largest cryptocurrency heist everSecurity Affairs·Feb 23, 00:19 UTC · Feb 23, 2025Threat actor57
China-linked APT Salt Typhoon breached telecoms by exploiting Cisco router flawsSecurity Affairs·Feb 14, 19:23 UTC · Feb 14, 2025Data breach in the wildCVE-2023-20198CVE-2023-2027360
Apple chips can be hacked to leak secrets from Gmail, iCloud, and moreArs Technica · Security·Jan 28, 20:56 UTC · Jan 28, 2025Vulnerability55
Bitwarden unveils native mobile applications for iOS and AndroidHelp Net Security·Jan 17, 00:00 UTC · Jan 17, 2025Industry30
DoubleClickjacking allows clickjacking on major websitesSecurity Affairs·Jan 2, 17:34 UTC · Jan 2, 2025Exploit / PoC60
New DoubleClickjacking Attack Bypasses ProtectionsInfosecurity Magazine·Jan 2, 16:30 UTC · Jan 2, 2025Vulnerability55
New FakeCall Malware Variant Hijacks Android Devices for Fraudulent Banking CallsThe Hacker News·Nov 4, 06:13 UTC · Nov 4, 2024Malware30
TrickMo Banking Trojan Can Now Capture Android PINs and Unlock PatternsThe Hacker News·Oct 15, 00:00 UTC · Oct 15, 2024Malware55
A new variant of Cicada ransomware targets VMware ESXi systemsSecurity Affairs·Sep 2, 07:06 UTC · Sep 2, 2024Ransomware57
x64dbg: Open-source binary debugger for WindowsHelp Net Security·Aug 19, 00:00 UTC · Aug 19, 2024Malware30
Progress fixes critical RCE flaw in Telerik Report Server, upgrade ASAP! (CVE-2024-6327)Help Net Security·Jul 26, 00:00 UTC · Jul 26, 2024Vulnerability in the wildCVE-2024-6327CVE-2024-6096CVE-2024-4358+1 CVEs60
Permit Share-If enables developers to implement secure collaboration features into their appsHelp Net Security·Jul 24, 00:00 UTC · Jul 24, 2024AI tools & infra30
Portainer: Open-source Docker and Kubernetes managementHelp Net Security·Jul 1, 00:00 UTC · Jul 1, 2024AI tools & infra130
Operation Celestial Force employs mobile and desktop malware to target Indian entitiesCisco Talos·Jun 13, 10:00 UTC · Jun 13, 2024Malware42
NethSecurity: Open-source Linux firewallHelp Net Security·Jun 5, 07:41 UTC · Jun 5, 2024Policy & legal30