Critical Erlang/OTP SSH Vulnerability (CVSS 10.0) Allows Unauthenticated Code ExecutionThe Hacker News·Apr 24, 12:41 UTC · Apr 24, 2025VulnerabilityCVE-2025-3243360
Lotus Panda Hacks SE Asian Governments With Browser Stealers and Sideloaded MalwareThe Hacker News·Apr 23, 17:00 UTC · Apr 23, 2025MalwareCVE-2012-0158CVE-2014-633247
Chinese APT Lotus Panda Targets Governments With New Sagerunex Backdoor VariantsThe Hacker News·Apr 22, 03:57 UTC · Apr 22, 2025Malware42
APT29 Deploys GRAPELOADER Malware Targeting European Diplomats Through WineThe Hacker News·Apr 20, 04:58 UTC · Apr 20, 2025Malware55
Lovable AI Found Most Vulnerable to VibeScamming — Enabling Anyone to Build Live Scam PagesThe Hacker News·Apr 15, 00:00 UTC · Apr 15, 2025Phishing & fraud42
Gamaredon Uses Infected Removable Drives to Breach Western Military Mission in UkraineThe Hacker News·Apr 10, 10:53 UTC · Apr 10, 2025Malware30
Europol Arrests Five SmokeLoader Clients Linked by Seized Database EvidenceThe Hacker News·Apr 10, 09:55 UTC · Apr 10, 2025Malware42
Microsoft Patches 125 Flaws Including Actively Exploited Windows CLFS VulnerabilityThe Hacker News·Apr 10, 06:48 UTC · Apr 10, 2025Vulnerability in the wildCVE-2025-29824CVE-2022-24521CVE-2022-37969+15 CVEs60
RansomHub affiliate leverages multi-function Betruger backdoorHelp Net Security·Apr 2, 08:48 UTC · Apr 2, 2025RansomwareCVE-2022-24521CVE-2023-2753260
Medusa Ransomware Uses Malicious Driver to Disable AntiThe Hacker News·Mar 22, 04:07 UTC · Mar 22, 2025Ransomware57
URGENT: Microsoft Patches 57 Security Flaws, Including 6 Actively Exploited ZeroThe Hacker News·Mar 15, 00:00 UTC · Mar 15, 2025Vulnerability in the wildCVE-2025-26643CVE-2025-24983CVE-2025-24984+5 CVEs160
FIN7, FIN8, and Others Use Ragnar Loader for Persistent Access and Ransomware OperationsThe Hacker News·Mar 8, 11:50 UTC · Mar 8, 2025Ransomware60
RA World Ransomware Attack in South Asia Links to Chinese Espionage ToolsetThe Hacker News·Feb 15, 00:00 UTC · Feb 15, 2025RansomwareCVE-2024-0012CVE-2023-20198CVE-2023-2027360
3 Actively Exploited Zero-Day Flaws Patched in Microsoft's Latest Security UpdateThe Hacker News·Jan 21, 15:30 UTC · Jan 21, 2025Exploit / PoC in the wildCVE-2024-7344CVE-2025-21333CVE-2025-21334+13 CVEs60
Cleo File Transfer Vulnerability Under ExploitationThe Hacker News·Dec 18, 04:09 UTC · Dec 18, 2024Vulnerability in the wildCVE-2024-50623CVE-2024-5595660
Researchers Uncover Espionage Tactics of ChinaThe Hacker News·Dec 11, 17:50 UTC · Dec 11, 2024Threat actor57
Microsoft Fixes 72 Flaws, Including Patch for Actively Exploited CLFS VulnerabilityThe Hacker News·Dec 11, 15:01 UTC · Dec 11, 2024Vulnerability in the wildCVE-2024-49138CVE-2022-24521CVE-2022-37969+6 CVEs60
New ‘Termite’ ransomware group claims responsibility for Blue Yonder cyberattackCyberScoop·Dec 9, 19:21 UTC · Dec 9, 2024Ransomware in the wild60
Unmasking Termite, the Ransomware Gang Claiming the Blue Yonder AttackInfosecurity Magazine·Dec 9, 12:35 UTC · Dec 9, 2024Ransomware57
Researchers Uncover 4-Month Cyberattack on U.S. Firm Linked to Chinese HackersThe Hacker News·Dec 5, 11:00 UTC · Dec 5, 2024Threat actor145
70% Of Open-Source Components Are Poorly Or No Longer MaintainedHelp Net Security·Dec 4, 00:00 UTC · Dec 4, 2024Vulnerability55
Warning: VMware vCenter and Kemp LoadMaster Flaws Under Active ExploitationThe Hacker News·Nov 21, 03:53 UTC · Nov 21, 2024Ransomware in the wildCVE-2024-1212CVE-2024-38812CVE-2024-38813+1 CVEs60
Microsoft Fixes 90 New Flaws, Including Actively Exploited NTLM and Task Scheduler BugsThe Hacker News·Nov 15, 00:00 UTC · Nov 15, 2024Exploit / PoC in the wildCVE-2024-43451CVE-2024-49039CVE-2024-21410+6 CVEs260
North Korean Group Collaborates with Play Ransomware in Significant Cyber AttackThe Hacker News·Nov 4, 05:55 UTC · Nov 4, 2024Ransomware57
Week in review: Fortinet patches critical FortiManager 0-day, VMware fixes vCenter Server RCEHelp Net Security·Oct 27, 00:00 UTC · Oct 27, 2024VulnerabilityCVE-2024-38812CVE-2024-38813CVE-2024-37383+3 CVEs60
AWS Cloud Development Kit Vulnerability Exposes Users to Potential Account Takeover RisksThe Hacker News·Oct 25, 05:18 UTC · Oct 25, 2024Vulnerability42
Hackers Abuse EDRSilencer Tool to Bypass Security and Hide Malicious ActivityThe Hacker News·Oct 15, 00:00 UTC · Oct 15, 2024Ransomware57
TrickMo Banking Trojan Can Now Capture Android PINs and Unlock PatternsThe Hacker News·Oct 15, 00:00 UTC · Oct 15, 2024Malware55
Microsoft Issues Security Update Fixing 118 Flaws, Two Actively Exploited in the WildThe Hacker News·Oct 9, 12:48 UTC · Oct 9, 2024Exploit / PoC in the wildCVE-2024-43572CVE-2024-43573CVE-2024-43583+7 CVEs60
Week in review: Critical Zimbra RCE vulnerability exploited, Patch Tuesday forecastHelp Net Security·Oct 6, 00:00 UTC · Oct 6, 2024Vulnerability in the wildCVE-2024-45519CVE-2024-2982460
North Korean Hackers Using New VeilShell Backdoor in Stealthy Cyber AttacksThe Hacker News·Oct 3, 13:24 UTC · Oct 3, 2024Malware42
Andariel Hacking Group Shifts Focus to Financial Attacks on U.S. OrganizationsThe Hacker News·Oct 2, 10:30 UTC · Oct 2, 2024Ransomware57
Experts Uncover Details on Maui Ransomware Attack by North Korean HackersThe Hacker News·Oct 2, 05:18 UTC · Oct 2, 2024Ransomware57
Businesses turn to private AI for enhanced security and data managementHelp Net Security·Sep 30, 00:00 UTC · Sep 30, 2024Policy & legal30
Week in review: Critical VMware vCenter Server bugs fixed, Apple releases iOS 18Help Net Security·Sep 22, 00:00 UTC · Sep 22, 2024Data breach in the wildCVE-2024-38812CVE-2024-38813CVE-2024-45488+3 CVEs260
Microsoft Issues Patches for 79 Flaws, Including 3 Actively Exploited Windows FlawsThe Hacker News·Sep 15, 00:00 UTC · Sep 15, 2024Vulnerability in the wildCVE-2024-38014CVE-2024-38217CVE-2024-38226+3 CVEs60
Rocinante Trojan Poses as Banking Apps to Steal Sensitive Data from Brazilian Android UsersThe Hacker News·Sep 10, 03:36 UTC · Sep 10, 2024Malware30
VMWare releases Fusion vulnerability with 8.8 ratingCyberScoop·Sep 3, 15:58 UTC · Sep 3, 2024VulnerabilityCVE-2024-3881160
Critical RCE flaws in vCenter Server fixed (CVE-2024-37079, CVE-2024-37080)Help Net Security·Aug 28, 15:26 UTC · Aug 28, 2024VulnerabilityCVE-2024-37079CVE-2024-37080CVE-2024-3708160
Czech Mobile Users Targeted in New Banking Credential Theft SchemeThe Hacker News·Aug 23, 11:31 UTC · Aug 23, 2024Malware30