New Osiris Ransomware Emerges as New Strain Using POORTRY Driver in BYOVD AttackThe Hacker News·Jan 24, 08:57 UTC · Jan 24, 2026RansomwareCVE-2019-1158060
Microsoft Fixes 114 Windows Flaws in January 2026 Patch, One Actively ExploitedThe Hacker News·Jan 15, 00:00 UTC · Jan 15, 2026Vulnerability in the wildCVE-2025-65046CVE-2026-0628CVE-2026-20805+5 CVEs160
Hackers Use Fake PayPal Notices to Steal Credentials, Deploy RMMsInfosecurity Magazine·Jan 14, 16:00 UTC · Jan 14, 2026Ransomware57
⚡ Weekly Recap: AI Automation Exploits, Telecom Espionage, Prompt Poaching & MoreThe Hacker News·Jan 12, 16:26 UTC · Jan 12, 2026Threat actorCVE-2026-21858CVE-2025-22224CVE-2025-22225+1 CVEs60
China-Linked Hackers Exploit VMware ESXi ZeroThe Hacker News·Jan 12, 16:25 UTC · Jan 12, 2026Ransomware in the wildCVE-2025-22224CVE-2025-22225CVE-2025-2222660
NANOREMOTE Malware Uses Google Drive API for Hidden Control on Windows SystemsThe Hacker News·Dec 12, 13:12 UTC · Dec 12, 2025Malware142
Microsoft Issues Security Fixes for 56 Flaws, Including Active Exploit and Two ZeroThe Hacker News·Dec 10, 15:09 UTC · Dec 10, 2025Exploit / PoC in the wildCVE-2025-62223CVE-2025-62221CVE-2025-54100+6 CVEs60
Barts Health Seeks High Court Ban After Oracle EBS BreachInfosecurity Magazine·Dec 8, 09:30 UTC · Dec 8, 2025Policy & legal42
Microsoft Fixes 63 Security Flaws, Including a Windows Kernel ZeroThe Hacker News·Nov 12, 11:14 UTC · Nov 12, 2025Exploit / PoC in the wildCVE-2025-62215CVE-2025-60724CVE-2025-62220+1 CVEs60
China-linked hackers target U.S. non-profit in longSecurity Affairs·Nov 8, 18:51 UTC · Nov 8, 2025Data breach157
⚡ Weekly Recap: Lazarus Hits Web3, Intel/AMD TEEs Cracked, Dark Web Leak Tool & MoreThe Hacker News·Nov 3, 17:59 UTC · Nov 3, 2025Threat actorCVE-2025-61932CVE-2025-55315CVE-2025-10680+18 CVEs160
Russian Hackers Target Ukrainian Organizations Using Stealthy Living-Off-theThe Hacker News·Oct 30, 09:41 UTC · Oct 30, 2025RansomwareCVE-2025-808860
Chinese Threat Actors Exploit ToolShell SharePoint Flaw Weeks After Microsoft's July PatchThe Hacker News·Oct 22, 12:56 UTC · Oct 22, 2025VulnerabilityCVE-2025-53770CVE-2025-49704CVE-2025-49706+1 CVEs60
Two New Windows Zero-Days Exploited in the Wild — One Affects Every Version Ever ShippedThe Hacker News·Oct 15, 00:00 UTC · Oct 15, 2025Exploit / PoC in the wildCVE-2025-24990CVE-2025-59230CVE-2025-47827+5 CVEs160
Chinese Threat Group 'Jewelbug' Quietly Infiltrated Russian IT Network for MonthsThe Hacker News·Oct 15, 00:00 UTC · Oct 15, 2025Vulnerability242
⚡ Weekly Recap: Oracle 0-Day, BitLocker Bypass, VMScape, WhatsApp Worm & MoreThe Hacker News·Oct 6, 11:38 UTC · Oct 6, 2025RansomwareCVE-2025-61882CVE-2025-27915CVE-2025-4008+16 CVEs60
Security Affairs newsletter Round 544 by Pierluigi Paganini – INTERNATIONAL EDITIONSecurity Affairs·Oct 5, 11:35 UTC · Oct 5, 2025Ransomware in the wildCVE-2025-4124460
Microsoft Fixes 80 Flaws — Including SMB PrivEsc and Azure CVSS 10.0 BugsThe Hacker News·Sep 11, 08:56 UTC · Sep 11, 2025Vulnerability in the wildCVE-2025-53791CVE-2025-55234CVE-2025-54914+9 CVEs60
Microsoft August 2025 Patch Tuesday Fixes Kerberos ZeroThe Hacker News·Aug 17, 08:42 UTC · Aug 17, 2025VulnerabilityCVE-2025-53786CVE-2025-53779CVE-2025-53767+9 CVEs60
What happened in Vegas (that you actually want to know about)Cisco Talos·Aug 14, 18:00 UTC · Aug 14, 2025RansomwareCVE-2025-654360
Researchers Reveal ReVault Attack Targeting Dell ControlVault3 Firmware in 100+ Laptop ModelsThe Hacker News·Aug 10, 08:12 UTC · Aug 10, 2025Exploit / PoC in the wildCVE-2025-25050CVE-2025-25215CVE-2025-24922+2 CVEs60
ThrottleStop driver abused to terminate AV processesKaspersky Securelist·Aug 6, 10:00 UTC · Aug 6, 2025RansomwareCVE-2025-777160
ReVault! When your SoC turns against you…Cisco Talos·Aug 5, 13:00 UTC · Aug 5, 2025VulnerabilityCVE-2025-24311CVE-2025-25050CVE-2025-25215+2 CVEs60
Fire Ant Exploits VMware Flaws to Compromise ESXi Hosts and vCenter EnvironmentsThe Hacker News·Jul 29, 04:24 UTC · Jul 29, 2025Exploit / PoCCVE-2023-34048CVE-2023-20867CVE-2022-138860
⚡ Weekly Recap — SharePoint Breach, Spyware, IoT Hijacks, DPRK Fraud, Crypto Drains and MoreThe Hacker News·Jul 28, 15:57 UTC · Jul 28, 2025Malware in the wildCVE-2025-49706CVE-2025-49704CVE-2025-20281+27 CVEs60
CISA Orders Urgent Patching After Chinese Hackers Exploit SharePoint Flaws in Live AttacksThe Hacker News·Jul 23, 13:04 UTC · Jul 23, 2025Exploit / PoC in the wildCVE-2025-49704CVE-2025-49706CVE-2025-53770+1 CVEs60
⚡ Weekly Recap: Chrome 0-Day, Ivanti Exploits, MacOS Stealers, Crypto Heists and MoreThe Hacker News·Jul 15, 00:00 UTC · Jul 15, 2025Malware in the wildCVE-2025-32462CVE-2025-32463CVE-2025-20309+23 CVEs60
Microsoft Patches 130 Vulnerabilities, Including Critical Flaws in SPNEGO and SQL ServerThe Hacker News·Jul 10, 07:02 UTC · Jul 10, 2025Vulnerability in the wildCVE-2025-49719CVE-2025-47981CVE-2025-49735+9 CVEs60
Cyber Criminals Exploit Open-Source Tools to Compromise Financial Institutions Across AfricaThe Hacker News·Jun 26, 08:08 UTC · Jun 26, 2025Ransomware57
Kernel-level container insights: Utilizing eBPF with Cilium, Tetragon, and SBOMs for securityHelp Net Security·Jun 18, 00:00 UTC · Jun 18, 2025VulnerabilityCVE-2021-4422835
Ransomware Gangs Exploit Unpatched SimpleHelp Flaws to Target Victims with Double ExtortionThe Hacker News·Jun 15, 00:00 UTC · Jun 15, 2025RansomwareCVE-2024-57727CVE-2024-57728CVE-2024-5772660
Microsoft Patches 67 Vulnerabilities Including WEBDAV ZeroThe Hacker News·Jun 12, 15:47 UTC · Jun 12, 2025Vulnerability in the wildCVE-2025-33053CVE-2025-47966CVE-2025-32713+3 CVEs160
OtterCookie v4 Adds VM Detection and Chrome, MetaMask Credential Theft CapabilitiesThe Hacker News·May 15, 00:00 UTC · May 15, 2025Data breach57
U.S. CISA adds GoVision device flaws to its Known Exploited Vulnerabilities catalogSecurity Affairs·May 8, 08:04 UTC · May 8, 2025Exploit / PoC in the wildCVE-2024-6047CVE-2024-1112060
Play Ransomware Exploited Windows CVE-2025-29824 as ZeroThe Hacker News·May 8, 05:38 UTC · May 8, 2025RansomwareCVE-2025-29824CVE-2024-2616960
⚡ Weekly Recap: Nation-State Hacks, Spyware Alerts, Deepfake Malware, Supply Chain BackdoorsThe Hacker News·May 6, 05:03 UTC · May 6, 2025MalwareCVE-2025-3928CVE-2025-1976CVE-2025-46271+33 CVEs60
U.S. CISA adds Yii Framework and Commvault Command Center flaws to its Known Exploited Vulnerabilities catalogSecurity Affairs·May 3, 10:11 UTC · May 3, 2025Exploit / PoC in the wildCVE-2025-34028CVE-2024-58136CVE-2025-32432260
U.S. CISA adds SonicWall SMA100 and Apache HTTP Server flaws to its Known Exploited Vulnerabilities catalogSecurity Affairs·May 2, 07:50 UTC · May 2, 2025Exploit / PoC in the wildCVE-2024-38475CVE-2023-4422160
159 CVEs Exploited in Q1 2025 — 28.3% Within 24 Hours of DisclosureThe Hacker News·Apr 24, 15:51 UTC · Apr 24, 2025Data breach in the wild60