Delivering vulnerable signed kernel drivers remains popular among attackersHelp Net Security·Jan 13, 00:00 UTC · Jan 13, 2022Ransomware60
CISA adds Arm Mali GPU Kernel Driver, PHP bugs to its Known Exploited Vulnerabilities catalogSecurity Affairs·Jun 13, 20:45 UTC · Jun 13, 2024Exploit / PoC in the wildCVE-2024-4610CVE-2024-4577CVE-2012-1823160
Zero-day in Arm GPU drivers exploited in targeted attacks (CVE-2023-4211)Help Net Security·Oct 3, 00:00 UTC · Oct 3, 2023Exploit / PoCCVE-2023-4211CVE-2022-22706CVE-2023-26083+2 CVEs60
Vulnerability Spotlight: Local Code Execution via the Intel HD Graphics Windows Kernel DriverCisco Talos·Jul 11, 16:19 UTC · Jul 11, 2016VulnerabilityCVE-2016-5647160
Arm zero-day in Mali GPU Drivers actively exploited in the wildSecurity Affairs·Jun 11, 12:52 UTC · Jun 11, 2024Exploit / PoC in the wildCVE-2024-461060
Arm Warns of Actively Exploited ZeroThe Hacker News·Jun 17, 11:36 UTC · Jun 17, 2024Exploit / PoC in the wildCVE-2024-4610CVE-2022-22706CVE-2022-38181+1 CVEs60
Old certificate, new signature: Open-source tools forge signature timestamps on Windows driversCisco Talos·Jul 11, 17:04 UTC · Jul 11, 2023Malware55
Vulnerable Arm GPU drivers under active exploitation. Patches may not be availableArs Technica · Security·Oct 2, 19:37 UTC · Oct 2, 2023Vulnerability in the wildCVE-2023-4211CVE-2023-33200CVE-2023-3497060
Why a decade-old EnCase driver still works as an EDR killerHelp Net Security·Feb 5, 00:00 UTC · Feb 5, 2026Ransomware60
Semiconductor giants Nvidia and Arm warn of new flaws in their graphics processorsThe Record·Jun 11, 15:51 UTC · Jun 11, 2024Exploit / PoC in the wildCVE-2024-4610CVE-2023-421160
Only one critical issue disclosed as part of Microsoft Patch TuesdayCisco Talos·Jun 11, 17:46 UTC · Jun 11, 2024VulnerabilityCVE-2024-30080CVE-2024-30103CVE-2024-35254+14 CVEs60
HITB Security Conference in Amsterdam to feature innovative research on attack and defense topicsHelp Net Security·Jan 18, 00:00 UTC · Jan 18, 2018Exploit / PoC60
BlackLotus Becomes First UEFI Bootkit Malware to Bypass Secure Boot on Windows 11The Hacker News·Jun 23, 08:42 UTC · Jun 23, 2023Malware in the wildCVE-2022-21894160
Arm and Qualcomm Hit by Multiple ZeroInfosecurity Magazine·Oct 4, 10:30 UTC · Oct 4, 2023Exploit / PoC in the wildCVE-2023-33106CVE-2023-33107CVE-2023-33063+6 CVEs60
Hackers Behind Cuba Ransomware Attacks Using New RAT MalwareThe Hacker News·Aug 12, 02:23 UTC · Aug 12, 2022RansomwareCVE-2022-24521CVE-2020-147260
Talos discovers Microsoft kernel mode driver vulnerabilities that could lead to SYSTEM privileges; Seven other critical issues disclosedCisco Talos·Aug 13, 19:12 UTC · Aug 13, 2024Vulnerability in the wildCVE-2024-21302CVE-2024-38184CVE-2024-38185+10 CVEs160
Researchers Uncover OS Downgrade Vulnerability Targeting Microsoft Windows KernelThe Hacker News·Oct 30, 06:43 UTC · Oct 30, 2024VulnerabilityCVE-2024-21302CVE-2024-3820260
Microsoft Patch TuesdayCisco Talos·Nov 8, 22:09 UTC · Nov 8, 2016VulnerabilityCVE-2016-7212CVE-2016-7248CVE-2016-7205+8 CVEs60
China-Linked Hackers Exploit VMware ESXi ZeroThe Hacker News·Jan 12, 16:25 UTC · Jan 12, 2026Ransomware in the wildCVE-2025-22224CVE-2025-22225CVE-2025-2222660
Researchers Identify Fast16 Sabotage Malware That PreInfosecurity Magazine·Apr 27, 09:10 UTC · Apr 27, 2026Malware55
Lazarus APT exploited 0-day in Win driver to gain kernel privilegesSecurity Affairs·Feb 29, 08:11 UTC · Feb 29, 2024Threat actorCVE-2024-2133860
Serbian student activist’s phone hacked using Cellebrite zero-day exploitSecurity Affairs·Mar 3, 09:08 UTC · Mar 3, 2025Exploit / PoCCVE-2024-53104CVE-2024-53197CVE-2024-5030260
FamousSparrow targets Azerbaijani energy sector in multiSecurity Affairs·May 14, 08:17 UTC · May 14, 2026Vulnerability55
CISA adds bugs exploited by commercial surveillance spyware to Known Exploited Vulnerabilities catalogSecurity Affairs·Apr 1, 18:06 UTC · Apr 1, 2023Exploit / PoC in the wildCVE-2021-30900CVE-2022-38181CVE-2023-0266+6 CVEs60
Google Warns of New Android 0-Day Vulnerability Under Active Targeted AttacksThe Hacker News·Nov 3, 05:20 UTC · Nov 3, 2021Vulnerability in the wildCVE-2021-1048CVE-2021-0918CVE-2021-0930+8 CVEs60
New Flaws in Qualcomm Chips Expose Millions of Android Devices to HackingThe Hacker News·Aug 6, 08:16 UTC · Aug 6, 2019Exploit / PoCCVE-2019-10539CVE-2019-10540CVE-2019-1053860
Candiru Spyware Caught Exploiting Google Chrome ZeroThe Hacker News·Aug 3, 08:33 UTC · Aug 3, 2022Malware in the wildCVE-2022-229460
Microsoft Patch TuesdayCisco Talos·Jul 14, 11:40 UTC · Jul 14, 2015VulnerabilityCVE-2015-2372CVE-2015-2373CVE-2015-2361+17 CVEs160
Google discloses Windows zero-day actively exploited in targeted attacksSecurity Affairs·Mar 8, 11:11 UTC · Mar 8, 2019Exploit / PoC in the wildCVE-2019-578660
Arm and Qualcomm zero-days quietly patched in this month's Android security updatesThe Record·Dec 21, 00:00 UTC · Dec 21, 2022Vulnerability in the wildCVE-2021-1905CVE-2021-1906CVE-2021-28663+3 CVEs60
Vulnerability Spotlight: Microsoft Windows CDD Font Parsing KernelMemory CorruptionCisco Talos·Sep 8, 11:23 UTC · Sep 8, 2015Vulnerability55
Microsoft discloses 5 critical vulnerabilities in June's Patch Tuesday, no zeroCisco Talos·Jun 13, 18:43 UTC · Jun 13, 2023Vulnerability in the wildCVE-2023-29363CVE-2023-32014CVE-2023-32015+7 CVEs60
Chinese APT IronHusky use Win zeroSecurity Affairs·Oct 13, 07:26 UTC · Oct 13, 2021Exploit / PoCCVE-2016-3309CVE-2021-4044960
⚡ Weekly Recap: Browser Bugs, EDR Killers, TV Botnet, OpenBSD Flaw, Android Trojan, and MoreThe Hacker News·Jun 23, 03:40 UTC · Jun 23, 2026Malware in the wildCVE-2026-24858CVE-2025-59718CVE-2025-59719+1 CVEs60
Amnesty Finds Cellebrite’s Zero-Day Used to Unlock Serbian Activist’s Android PhoneThe Hacker News·Mar 4, 08:43 UTC · Mar 4, 2025Exploit / PoCCVE-2024-53104CVE-2024-53197CVE-2024-5030260