ThreatsDay Bulletin: OAuth Trap, EDR Killer, Signal Phishing, Zombie ZIP, AI Platform Hack & MoreThe Hacker News·Mar 12, 15:00 UTC · Mar 12, 2026Phishing & fraud in the wild60
Week in review: Veeam Backup & Replication RCE could soon be exploited, Microsoft fixes 4 0-daysHelp Net Security·Sep 15, 00:00 UTC · Sep 15, 2024Vulnerability in the wildCVE-2024-40711CVE-2024-38217CVE-2024-38226+8 CVEs160
Cisco finds new ZeroThe Hacker News·Sep 20, 07:55 UTC · Sep 20, 2016Exploit / PoCCVE-2016-6366CVE-2016-641560
Private sector warms to U.S. Cyber Command carrying out 'hack backs'CyberScoop·Jun 19, 13:49 UTC · Jun 19, 2018Exploit / PoC in the wild60
GitLab fixed a critical flaw in GitLab CE and GitLab EESecurity Affairs·Sep 14, 05:04 UTC · Sep 14, 2024VulnerabilityCVE-2024-6678CVE-2024-8640160
Symantec API Flaws reportedly let attackers steal Private SSL Keys and CertificatesThe Hacker News·Mar 28, 16:54 UTC · Mar 28, 2017Exploit / PoC60
Microsoft Details macOS Bug That Could Let Attackers Gain Access to User DataThe Hacker News·Jan 11, 10:41 UTC · Jan 11, 2022Exploit / PoCCVE-2021-30970CVE-2020-9934CVE-2020-27937+1 CVEs60
OpenText Cloud Editions 24.4 blends AI with secure data connectivityHelp Net Security·Nov 20, 00:00 UTC · Nov 20, 2024Policy & legal55
Experts believe US Cyber Command it the only entity that can carry out 'hack backs'Security Affairs·Jul 23, 07:22 UTC · Jul 23, 2018Threat actor60
Druva introduces multiple agents to automate critical tasksHelp Net Security·Aug 21, 07:27 UTC · Aug 21, 2025Policy & legal55
Dru Investigate simplifies cyber investigations and helps users uncover data threatsHelp Net Security·Sep 12, 00:00 UTC · Sep 12, 2024Ransomware60
SIM cards used in 29 countries are vulnerable to Simjacker attackSecurity Affairs·Oct 12, 10:44 UTC · Oct 12, 2019Exploit / PoC60
Experts found an unpatched flaw in Humax WiFi Router model HGSecurity Affairs·Jul 9, 18:13 UTC · Jul 9, 2017Vulnerability55
Facebook files suit against Ukrainian man who allegedly scraped data about 178 million usersCyberScoop·Oct 22, 20:06 UTC · Oct 22, 2021Exploit / PoC in the wild60
Most AI privacy research looks the wrong wayHelp Net Security·Oct 20, 00:00 UTC · Oct 20, 2025Data breach60
New Zero-Click Hack Targets iOS Users with Stealthy RootThe Hacker News·Jun 3, 05:04 UTC · Jun 3, 2023Exploit / PoC60
Wide-ranging Apple security update addresses over 30 vulnerabilitiesCyberScoop·May 13, 15:15 UTC · May 13, 2025Vulnerability in the wildCVE-2025-3121460
THN Recap: Top Cybersecurity Threats, Tools, and Practices (Nov 04The Hacker News·Nov 18, 03:51 UTC · Nov 18, 2024Data breachCVE-2020-12271CVE-2020-15069CVE-2020-29574+19 CVEs160
Critical Bug in Siemens SIMATIC PLCs Could Let Attackers Steal Cryptographic KeysThe Hacker News·Oct 12, 13:16 UTC · Oct 12, 2022VulnerabilityCVE-2022-38465CVE-2020-15782CVE-2021-22681+2 CVEs60
Chinese APT Group Targets Telecom Firms Linked to BRIInfosecurity Magazine·Nov 20, 12:45 UTC · Nov 20, 2024Threat actor60
Bug in Apple's Find My Feature Could've Exposed Users' Location HistoriesThe Hacker News·Apr 26, 10:12 UTC · Apr 26, 2021VulnerabilityCVE-2020-998660
Mercedes-Benz accidentally exposed sensitive data, including source codeSecurity Affairs·Jan 29, 20:16 UTC · Jan 29, 2024Data breach60
Paperclip AI Flaws Let Attackers Run Host Commands via Malicious Agent ImportsThe Hacker News·Aug 5, 15:14 UTC · Aug 5, 2026Exploit / PoC in the wildCVE-2026-41679160
IntelOwl: Open-source threat intelligence managementHelp Net Security·Aug 14, 00:00 UTC · Aug 14, 2024Ransomware60
Experts found a macOS version of the sophisticated LightSpy spywareSecurity Affairs·May 30, 18:36 UTC · May 30, 2024MalwareCVE-2018-4233CVE-2018-440460
CISA adds ZK Java Web Framework bug to Known Exploited Vulnerabilities CatalogSecurity Affairs·Feb 28, 10:38 UTC · Feb 28, 2023Exploit / PoC in the wildCVE-2022-36537260
Coruna iOS Exploit Kit Uses 23 Exploits Across Five Chains Targeting iOS 13The Hacker News·Mar 26, 10:55 UTC · Mar 26, 2026Exploit / PoC in the wildCVE-2024-23222CVE-2022-48503CVE-2023-43000+9 CVEs60
SimJacker attack allows hacking any phone with just an SMSSecurity Affairs·Sep 12, 22:03 UTC · Sep 12, 2019Exploit / PoC in the wild60
Israeli Firm Helped Governments Target Journalists, Activists with 0The Hacker News·Jul 19, 16:01 UTC · Jul 19, 2021Exploit / PoCCVE-2021-31979CVE-2021-33771CVE-2021-21166+1 CVEs60
iOS Zero-Day Attacks: Experts Uncover Deeper Insights into Operation TriangulationThe Hacker News·Oct 30, 03:14 UTC · Oct 30, 2023Exploit / PoC in the wildCVE-2023-32434CVE-2023-3243560
Indiana hospital shuts down systems after ransomware attackCyberScoop·Jan 16, 18:12 UTC · Jan 16, 2018Ransomware in the wild60
⚡ Weekly Recap: Exchange 0-Day, npm Worm, Fake AI Repo, Cisco Exploit and MoreThe Hacker News·May 19, 04:33 UTC · May 19, 2026Ransomware in the wildCVE-2026-42897CVE-2026-20182CVE-2026-2012760
ShinyHunters Wage Broad Corporate Extortion SpreeKrebs on Security·Oct 8, 00:36 UTC · Oct 8, 2025RansomwareCVE-2025-6188260
Report: Malware campaign linked to Chinese ad firm infects 250 million computersCyberScoop·Jun 2, 19:34 UTC · Jun 2, 2017Malware in the wild60
Digimarc and DataTrails join forces to provide proof of digital content authenticityHelp Net Security·Apr 11, 00:00 UTC · Apr 11, 2024Industry55
U.S. CISA adds AMI MegaRAC SPx, D-Link DIR-859 routers, and Fortinet FortiOS flaws to its Known Exploited Vulnerabilities catalogSecurity Affairs·Jun 26, 08:15 UTC · Jun 26, 2025Exploit / PoC in the wildCVE-2024-54085CVE-2024-0769CVE-2019-669360
Critical Unpatched Ray AI Platform Vulnerability Exploited for Cryptocurrency MiningThe Hacker News·Mar 28, 04:46 UTC · Mar 28, 2024Vulnerability in the wildCVE-2023-4802260