The Acrobat JavaScript Blocklist FrameworkCisco Talos·Jan 20, 17:56 UTC · Jan 20, 2010Exploit / PoC in the wildCVE-2008-2992CVE-2009-0927CVE-2009-1493+5 CVEs60
JavaScript attack aimed to reroute bitcoin transactionsCyberScoop·Nov 7, 20:17 UTC · Nov 7, 2018Exploit / PoC in the wild60
Here's why Google is forcing JavaScript use on its signCyberScoop·Nov 1, 14:45 UTC · Nov 1, 2018Exploit / PoC in the wild60
Attackers exploit critical Flowise flaw CVE-2025Security Affairs·Apr 7, 20:16 UTC · Apr 7, 2026Exploit / PoC in the wildCVE-2025-59528CVE-2025-8943CVE-2025-2631960
Google addressed the tenth actively exploited Chrome zeroSecurity Affairs·Aug 26, 22:59 UTC · Aug 26, 2024Exploit / PoC in the wildCVE-2024-7965CVE-2024-7971CVE-2024-5274+7 CVEs60
Google addressed the ninth actively exploited Chrome zeroSecurity Affairs·Aug 26, 22:50 UTC · Aug 26, 2024Exploit / PoC in the wildCVE-2024-7971CVE-2024-0519CVE-2024-2887+6 CVEs60
Google aims to improve security of browser engines, third-party Android devices and apps on Google PlayHelp Net Security·Oct 7, 11:57 UTC · Oct 7, 2020Exploit / PoC in the wild60
Over 800K WordPress sites are at risk due to a flaw in Ninja Forms pluginSecurity Affairs·May 1, 08:38 UTC · May 1, 2020Exploit / PoC in the wild60
Flaws in Popup Builder WordPress plugin expose 100K+ websites to hackSecurity Affairs·Mar 13, 11:42 UTC · Mar 13, 2020Exploit / PoC in the wildCVE-2020-10196CVE-2020-1019560
The msvidctl Internet Explorer 0dayKaspersky Securelist·Jul 7, 19:58 UTC · Jul 7, 2009Exploit / PoC in the wild60
US Agencies Warn of Laundry Bear Campaign Targeting Unpatched Zimbra ServersSecurity Affairs·Jul 24, 08:31 UTC · Jul 24, 2026Vulnerability in the wildCVE-2025-6637660
⚡ Weekly Recap: Browser Bugs, EDR Killers, TV Botnet, OpenBSD Flaw, Android Trojan, and MoreThe Hacker News·Jun 23, 03:40 UTC · Jun 23, 2026Malware in the wildCVE-2026-24858CVE-2025-59718CVE-2025-59719+1 CVEs60
ThreatsDay Bulletin: AI Agents Gone Wrong, Sketchy C2 Tools, ClickFix Tricks, JS Backdoors & 20+ New StoriesThe Hacker News·Jun 4, 14:00 UTC · Jun 4, 2026Malware in the wildCVE-2026-20230160
Coruna iOS Exploit Kit Uses 23 Exploits Across Five Chains Targeting iOS 13The Hacker News·Mar 26, 10:55 UTC · Mar 26, 2026Exploit / PoC in the wildCVE-2024-23222CVE-2022-48503CVE-2023-43000+9 CVEs60
Google fixes eighth actively exploited Chrome zeroSecurity Affairs·May 24, 13:13 UTC · May 24, 2024Exploit / PoC in the wildCVE-2024-5274CVE-2024-0519CVE-2024-2887+5 CVEs60
Large-scale Citrix NetScaler Gateway credential harvesting campaign exploits CVE-2023Security Affairs·Oct 9, 22:02 UTC · Oct 9, 2023Threat actor in the wildCVE-2023-351960
Microsoft Finds Account Takeover Bug in TikTokInfosecurity Magazine·Sep 1, 09:50 UTC · Sep 1, 2022Exploit / PoC in the wildCVE-2022-2879960
The code of a Firefox Zero-Day Exploit used to unmask Tor Users is onlineSecurity Affairs·Nov 30, 12:38 UTC · Nov 30, 2016Exploit / PoC in the wild60
CosmicSting attack & defense overviewSansec (Magento / e-commerce security)·Apr 14, 20:16 UTC · Apr 14, 2026Data breach in the wildCVE-2024-2961CVE-2024-3410260
Adobe fixes actively exploited Acrobat Reader flaw CVE-2026Security Affairs·Apr 12, 17:47 UTC · Apr 12, 2026Data breach in the wildCVE-2026-3462160
Mass PolyShell attack wave hits 471 stores in one hourSansec (Magento / e-commerce security)·Mar 31, 07:45 UTC · Mar 31, 2026Vulnerability in the wildCVE-2026-7565060
⚡ Weekly Recap: Chrome 0-Days, Router Botnets, AWS Breach, Rogue AI Agents & MoreThe Hacker News·Mar 15, 00:00 UTC · Mar 15, 2026Malware in the wildCVE-2026-3909CVE-2026-3910CVE-2026-3913+40 CVEs260
Google fixed a new actively exploited Chrome zeroSecurity Affairs·Dec 11, 18:19 UTC · Dec 11, 2025Exploit / PoC in the wildCVE-2025-14372CVE-2025-14373CVE-2025-6554+6 CVEs60
Google fixed the seventh Chrome zeroSecurity Affairs·Nov 18, 08:59 UTC · Nov 18, 2025Exploit / PoC in the wildCVE-2025-13223CVE-2025-13224CVE-2025-10585+5 CVEs60
AI Could Generate 10,000 Malware Variants, Evading Detection in 88% of CaseThe Hacker News·Dec 24, 05:50 UTC · Dec 24, 2024Malware in the wild160
U.S. CISA adds Cisco ASA and FTD, and RoundCube Webmail bugs to its Known Exploited Vulnerabilities catalogSecurity Affairs·Oct 25, 07:40 UTC · Oct 25, 2024Exploit / PoC in the wildCVE-2024-20481CVE-2024-3738360
Google fixes seventh actively exploited Chrome zeroSecurity Affairs·May 16, 13:13 UTC · May 16, 2024Exploit / PoC in the wildCVE-2024-4947CVE-2024-4671CVE-2024-4761+7 CVEs160
Operation Triangulation: The last (hardware) mysteryKaspersky Securelist·Dec 27, 14:00 UTC · Dec 27, 2023Vulnerability in the wildCVE-2023-41990CVE-2023-32434CVE-2023-38606+1 CVEs160
Google fixed the ninth actively exploited Chrome zeroday this yearSecurity Affairs·Dec 3, 15:24 UTC · Dec 3, 2022Exploit / PoC in the wildCVE-2022-4262CVE-2022-4135CVE-2022-3723+6 CVEs60
Tackling cross-site request forgery (CSRF) on company websitesHelp Net Security·Mar 23, 00:00 UTC · Mar 23, 2021Exploit / PoC in the wild60
100k+ WordPress sites exposed to hack due to a bug in RealSecurity Affairs·Apr 28, 09:03 UTC · Apr 28, 2020Exploit / PoC in the wild60
Crooks are attempting to take over tens of thousands of WordPress sitesSecurity Affairs·Feb 29, 16:15 UTC · Feb 29, 2020Exploit / PoC in the wild60
Magecart strikes again, this time at electronics retailer NeweggCyberScoop·Sep 19, 15:35 UTC · Sep 19, 2018Exploit / PoC in the wild60
Firefox 0-day exploited in the wild to unmask Tor usersHelp Net Security·Jun 26, 21:24 UTC · Jun 26, 2018Exploit / PoC in the wild60
Matt's Guide to Vendor ResponseCisco Talos·Dec 30, 17:56 UTC · Dec 30, 2009Exploit / PoC in the wild60
Max-severity Exchange server flaw under active exploitation by Kremlin hackersArs Technica · Security·Jul 30, 20:57 UTC · Jul 30, 2026Exploit / PoC in the wildCVE-2026-4289760
⚡ Weekly Recap: Rogue AI Agents, Check Point Exploit, Slopsquatting, ClickFix Lures and MoreThe Hacker News·Jul 28, 05:26 UTC · Jul 28, 2026Exploit / PoC in the wildCVE-2026-16232CVE-2025-66376CVE-2026-54121+52 CVEs60
Attackers Exploit Critical ServiceNow RCE Flaw CVE-2026Security Affairs·Jul 21, 06:08 UTC · Jul 21, 2026Vulnerability in the wildCVE-2026-687560
⚡ Weekly Recap: Linux Kernel Flaws, AI Malware Tricks, Turla Backdoor, Infostealers and MoreThe Hacker News·Jun 29, 14:42 UTC · Jun 29, 2026Malware in the wildCVE-2026-43503CVE-2026-12569CVE-2026-47729+19 CVEs60
⚡ Weekly Recap: Linux Rootkit, macOS Crypto Stealer, WebSocket Skimmers and MoreThe Hacker News·May 11, 12:36 UTC · May 11, 2026Malware in the wildCVE-2026-6973CVE-2026-030060