Google Threat Intelligence Group (GTIG) tracked 75 actively exploited zeroSecurity Affairs·Apr 29, 12:25 UTC · Apr 29, 2025Exploit / PoC in the wild60
Google: Clop Accessed “Significant Amount” of Data in Oracle EBS ExploInfosecurity Magazine·Oct 10, 11:15 UTC · Oct 10, 2025Ransomware in the wildCVE-2025-6188260
Apple urges iPhone users to update as Coruna and DarkSword exploit kits emergeSecurity Affairs·Mar 20, 11:22 UTC · Mar 20, 2026Exploit / PoCCVE-2021-30952CVE-2022-48503CVE-2023-43000+15 CVEs160
Google GTIG: 90 zero-day flaws exploited in 2025 as enterprise targets growSecurity Affairs·Mar 6, 07:58 UTC · Mar 6, 2026Exploit / PoC in the wild60
Google says 90 zero-days exploited in 2025 as commercial vendor activity growsThe Record·Mar 5, 15:01 UTC · Mar 5, 2026Ransomware in the wildCVE-2025-21590CVE-2025-0282CVE-2025-61882+2 CVEs60
Hackers Observed Using AI to Develop ZeroInfosecurity Magazine·May 11, 13:00 UTC · May 11, 2026Exploit / PoC60
Zero‑Day Attacks on Enterprise Software Reach Record HighInfosecurity Magazine·Mar 6, 12:29 UTC · Mar 6, 2026Ransomware in the wild60
Google uncovers Coruna iOS Exploit Kit targeting iOS 13Security Affairs·Mar 5, 09:03 UTC · Mar 5, 2026Exploit / PoCCVE-2021-30952CVE-2022-48503CVE-2023-43000+9 CVEs60
SonicWall SMA devices persistently infected with stealthy OVERSTEP backdoor and rootkitHelp Net Security·Aug 5, 15:29 UTC · Aug 5, 2025MalwareCVE-2021-20035CVE-2021-20039CVE-2024-38475+1 CVEs60
UNC6148 deploys Overstep malware on SonicWall devices, possibly for ransomware operationsSecurity Affairs·Jul 17, 07:47 UTC · Jul 17, 2025RansomwareCVE-2024-3847560
Zero-Day Exploitation Figure Surges 19% in Two YearsInfosecurity Magazine·Apr 29, 11:00 UTC · Apr 29, 2025Exploit / PoC in the wild60
Hackers Used AI to Develop First Known ZeroThe Hacker News·May 15, 00:00 UTC · May 15, 2026Exploit / PoC160
DarkSword iOS Exploit Kit Uses 6 Flaws, 3 ZeroThe Hacker News·Mar 23, 17:42 UTC · Mar 23, 2026Exploit / PoCCVE-2026-20700CVE-2025-43529CVE-2025-14174+3 CVEs60
Google, Mandiant expose malware and zeroSecurity Affairs·Oct 13, 08:35 UTC · Oct 13, 2025Malware in the wildCVE-2025-6188260
Chinese Hackers Use ‘BRICKSTORM’ Backdoor to Breach US FirmsInfosecurity Magazine·Sep 25, 12:30 UTC · Sep 25, 2025Malware55
New Scattered Spider Tactics Target VMware vSphere EnvironmentsInfosecurity Magazine·Jul 28, 15:10 UTC · Jul 28, 2025Ransomware in the wild60
SonicWall fixed critical flaw in SMA 100 devices exploited in Overstep malware attacksSecurity Affairs·Jul 24, 13:01 UTC · Jul 24, 2025MalwareCVE-2025-40599CVE-2024-3847560
Google: Governments are using zeroArs Technica · Security·Apr 29, 16:53 UTC · Apr 29, 2025Exploit / PoC60
North Korea's Fake IT Worker Scheme Sets Sights on EuropeInfosecurity Magazine·Apr 2, 12:00 UTC · Apr 2, 2025Ransomware60
ThreatsDay: AI-Powered Hacking, 370 Chrome Flaws, SonicWall Attacks, DNS Hijacking + 22 More StoriesThe Hacker News·Jul 30, 15:25 UTC · Jul 30, 2026RansomwareCVE-2026-33017CVE-2026-21858CVE-2025-68613+5 CVEs60
Google spotted an AI-developed zeroCyberScoop·May 11, 13:00 UTC · May 11, 2026Exploit / PoC in the wild60
Attackers use MS Teams, fake mailbox repair utility to breach organizationsHelp Net Security·Apr 27, 00:00 UTC · Apr 27, 2026Vulnerability55
Coruna iOS Exploit Kit Uses 23 Exploits Across Five Chains Targeting iOS 13The Hacker News·Mar 26, 10:55 UTC · Mar 26, 2026Exploit / PoC in the wildCVE-2024-23222CVE-2022-48503CVE-2023-43000+9 CVEs60
U.S. CISA adds Apple, Rockwell, and Hikvision flaws to its Known Exploited Vulnerabilities catalogSecurity Affairs·Mar 6, 08:42 UTC · Mar 6, 2026Exploit / PoC in the wildCVE-2023-43000CVE-2017-7921CVE-2021-22681+2 CVEs60
Coruna Exploit Kit Targets Older iPhones in MultiInfosecurity Magazine·Mar 5, 12:15 UTC · Mar 5, 2026Vulnerability in the wild60
China-linked hackers exploited Dell zero-day since 2024 (CVE-2026-22769)Help Net Security·Feb 18, 00:00 UTC · Feb 18, 2026Exploit / PoCCVE-2026-2276960
Google's disruption rips millions of devices out of malicious networkCyberScoop·Jan 30, 15:37 UTC · Jan 30, 2026Exploit / PoC in the wild60
Google Warns of Active Exploitation of WinRAR Vulnerability CVE-2025The Hacker News·Jan 29, 06:06 UTC · Jan 29, 2026Vulnerability in the wildCVE-2025-8088CVE-2025-621860
React2Shell fallout spreads to sensitive targets as public exploits hit allCyberScoop·Dec 18, 16:12 UTC · Dec 18, 2025Ransomware in the wildCVE-2025-55182CVE-2025-55183CVE-2025-67779+1 CVEs60
Predator Spyware Maker Intellexa Evades SanctionsInfosecurity Magazine·Dec 5, 09:15 UTC · Dec 5, 2025Malware55
Hackers Exploit Critical Flaw in Triofox File Sharing ProductInfosecurity Magazine·Nov 11, 12:30 UTC · Nov 11, 2025Exploit / PoC in the wildCVE-2025-12480CVE-2025-1137160
CL0P-Linked Hackers Breach Dozens of Organizations Through Oracle Software FlawThe Hacker News·Oct 10, 06:41 UTC · Oct 10, 2025Ransomware in the wildCVE-2025-61882160
Dozens of Oracle customers impacted by Clop data theft for extortion campaignCyberScoop·Oct 9, 16:02 UTC · Oct 9, 2025Ransomware in the wildCVE-2025-6188260
UNC5221 Uses BRICKSTORM Backdoor to Infiltrate U.S. Legal and Technology SectorsThe Hacker News·Sep 25, 15:04 UTC · Sep 25, 2025MalwareCVE-2023-46805CVE-2024-2188760
Salt Typhoon Exploits Flaws in Edge Network Devices to Breach 600 Organizations WorldwideThe Hacker News·Sep 5, 12:40 UTC · Sep 5, 2025Threat actorCVE-2018-0171CVE-2023-20198CVE-2023-20273+3 CVEs60
Hundreds of Salesforce customers impacted by attack spree linked to thirdCyberScoop·Aug 27, 01:22 UTC · Aug 27, 2025Exploit / PoC in the wild60
UNC6148 Backdoors Fully-Patched SonicWall SMA 100 Series Devices with OVERSTEP RootkitThe Hacker News·Jul 26, 11:34 UTC · Jul 26, 2025VulnerabilityCVE-2021-20035CVE-2021-20038CVE-2021-20039+2 CVEs60
Inside DragonForce, the Group Tied to M&S, CoInfosecurity Magazine·May 6, 13:25 UTC · May 6, 2025Ransomware60