Critical Node.js Vulnerability Can Cause Server Crashes via async_hooks Stack OverflowThe Hacker News·Jan 15, 00:00 UTC · Jan 15, 2026VulnerabilityCVE-2025-59466CVE-2025-55131CVE-2025-55130+1 CVEs60
Researchers uncover remote code execution flaw in abandoned Rust code libraryCyberScoop·Oct 21, 20:25 UTC · Oct 21, 2025VulnerabilityCVE-2025-6251860
Crooks are attempting to take over tens of thousands of WordPress sitesSecurity Affairs·Feb 29, 16:15 UTC · Feb 29, 2020Exploit / PoC in the wild60
Critical Unpatched Flaw Leaves Hugging Face LeRobot Open to Unauthenticated RCEThe Hacker News·Apr 28, 11:19 UTC · Apr 28, 2026VulnerabilityCVE-2026-2587460
VMware Security Flaws Exploited in the Wild—Broadcom Releases Urgent PatchesThe Hacker News·Jan 9, 17:29 UTC · Jan 9, 2026Exploit / PoC in the wildCVE-2025-22224CVE-2025-22225CVE-2025-2222660
FreeBSD Releases Urgent Patch for HighThe Hacker News·Aug 15, 00:00 UTC · Aug 15, 2024VulnerabilityCVE-2024-7589CVE-2024-638760
A FreeBSD flaw could allow remote code execution, patch it now!Security Affairs·Aug 12, 17:38 UTC · Aug 12, 2024VulnerabilityCVE-2024-7589CVE-2024-638760
Handling Huge Traffic Spikes with Azure Functions and CloudflareTroy Hunt·Feb 25, 08:19 UTC · Feb 25, 2020Data breach160
Zero-day vulnerability in Oracle WebLogic yet to be patchedSecurity Affairs·Apr 24, 20:35 UTC · Apr 24, 2019Exploit / PoC60
China-Linked UAT-7810 Expands ORB Network With New LONGLEASH MalwareThe Hacker News·Jul 8, 09:04 UTC · Jul 8, 2026MalwareCVE-2020-22653CVE-2020-22658CVE-2023-25717+1 CVEs60
Critical vm2 Node.js Flaw Allows Sandbox Escape and Arbitrary Code ExecutionThe Hacker News·Jan 29, 06:05 UTC · Jan 29, 2026VulnerabilityCVE-2026-22709CVE-2022-36067CVE-2023-29017+5 CVEs160
ThreatsDay Bulletin: 0-Days, LinkedIn Spies, Crypto Crimes, IoT Flaws and New Malware WavesThe Hacker News·Nov 21, 06:45 UTC · Nov 21, 2025MalwareCVE-2025-61757CVE-2025-1124360
New OpenSSH Vulnerability Could Lead to RCE as Root on Linux SystemsThe Hacker News·Jul 9, 04:22 UTC · Jul 9, 2024VulnerabilityCVE-2024-6387CVE-2006-5051CVE-2008-410960
Researchers disclose sandbox escape bug in vm2 sandbox librarySecurity Affairs·Apr 9, 20:34 UTC · Apr 9, 2023Exploit / PoCCVE-2023-29017CVE-2022-3606760
Hacked Cellebrite and MSAB Software ReleasedSchneier on Security·Jan 15, 00:00 UTC · Jan 15, 2023Exploit / PoC160
10 Credential Stealing Python Libraries Found on PyPI RepositoryThe Hacker News·Aug 10, 05:22 UTC · Aug 10, 2022Malware55
New Malicious Python Libraries Found on PyPI RepositoryInfosecurity Magazine·Aug 9, 17:30 UTC · Aug 9, 2022Malware155
MysterySnail attacks with Windows zeroKaspersky Securelist·Oct 13, 14:49 UTC · Oct 13, 2021Exploit / PoCCVE-2016-3309CVE-2021-4044960
CVE-2019-2725 Oracle WebLogic flaw exploited in cryptojacking campaignSecurity Affairs·Jun 11, 05:53 UTC · Jun 11, 2019Vulnerability in the wildCVE-2019-272560
Researchers flag new Oracle WebLogic zero-day RCE flawHelp Net Security·Apr 25, 00:00 UTC · Apr 25, 2019Exploit / PoC in the wildCVE-2019-272560