Search: “session hijacking”

333 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Malware 223 Vulnerability 220 Ransomware 111 Exploit / PoC 91 Phishing & fraud 77 Data breach 65 Threat actor 65 AI safety & security 16 Policy & legal 16 Industry 12 Research 5 Advisory 4 Tools 2 Model release 2

SeverityAll critical 333 high 268 medium 258 low 34 info 16

Flaw in WordPress Live Chat Plugin allows to steal and hijack sessions

Security AffairsJun 11, 19:53 UTC · Jun 11, 2019Vulnerability CVE-2019-12498

60

AWS Patches Critical 'FlowFixation' Bug in Airflow Service to Prevent Session Hijacking

The Hacker NewsMar 22, 13:45 UTC · Mar 22, 2024Vulnerability

55

New Flaw in WordPress Live Chat Plugin Lets Hackers Steal and Hijack Sessions

The Hacker NewsJun 11, 10:41 UTC · Jun 11, 2019Exploit / PoC in the wildCVE-2019-12498

60

Citrix warns admins to patch NetScaler CVE-2023

Security AffairsOct 25, 09:56 UTC · Oct 25, 2023Vulnerability in the wildCVE-2023-4966

60

Citrix NetScaler bug exploited in the wild since August (CVE-2023-4966)

Help Net SecurityOct 30, 09:56 UTC · Oct 30, 2023Exploit / PoC in the wildCVE-2023-4966 CVE-2023-3519

60

The latest high-severity Citrix vulnerability under attack isn’t easy to fix

Ars Technica · SecurityOct 19, 21:56 UTC · Oct 19, 2023Vulnerability in the wildCVE-2023-4966

60

Critical Citrix NetScaler Flaw Exploited to Target from Government, Tech Firms

The Hacker NewsOct 18, 12:27 UTC · Oct 18, 2023Exploit / PoC in the wildCVE-2023-4966

60

New NatJack Attacks Hijack TCP Sessions and Spoof DNS by Manipulating NAT Tables

The Hacker NewsAug 7, 10:58 UTC · Aug 7, 2026Exploit / PoC in the wildCVE-2026-56181 CVE-2026-63913

60

From Infection to Access: A 24-Hour Timeline of a Modern Stealer Campaign

The Hacker NewsMay 28, 11:25 UTC · May 28, 2025Malware

55

Citrix provides additional measures to address Citrix Bleed

Security AffairsNov 22, 08:15 UTC · Nov 22, 2023Ransomware CVE-2023-4966

60

Threat actors have been exploiting CVE-2023-4966 in Citrix NetScaler ADC/Gateway devices since August

Security AffairsOct 18, 13:56 UTC · Oct 18, 2023Vulnerability in the wildCVE-2023-4966 CVE-2023-3519

60

Don't Overlook These 6 Critical Okta Security Configurations

The Hacker NewsFeb 10, 11:00 UTC · Feb 10, 2025Phishing & fraud

55

Critical flaw found in deprecated VMware EAP. Uninstall it now

Security AffairsFeb 21, 11:37 UTC · Feb 21, 2024Ransomware CVE-2024-22245 CVE-2024-22250

60

Fortinet warns about Critical flaw in Wireless LAN Manager FortiWLM

Security AffairsDec 19, 13:53 UTC · Dec 19, 2024Vulnerability CVE-2023-34990 CVE-2023-48782

60

U.S. CISA adds SonicWall SMA100 and Apache HTTP Server flaws to its Known Exploited Vulnerabilities catalog

Security AffairsMay 2, 07:50 UTC · May 2, 2025Exploit / PoC in the wildCVE-2024-38475 CVE-2023-44221

60

Two SonicWall SMA100 flaws actively exploited in the wild

Security AffairsMay 1, 08:31 UTC · May 1, 2025Exploit / PoC in the wildCVE-2023-44221 CVE-2024-38475

60

MFA bypass becomes a critical security issue as ransomware tactics advance

Help Net SecuritySep 24, 00:00 UTC · Sep 24, 2024Ransomware

60

VMware fixes several flaws in its ESXi, Workstation, Fusion and NSX-T

Security AffairsOct 22, 07:26 UTC · Oct 22, 2020Vulnerability CVE-2020-3992 CVE-2020-3993 CVE-2020-3994

60

56,000+ Cloud-Based Apps At Risk Of Malware Exfiltration

Help Net SecurityMay 10, 00:00 UTC · May 10, 2023Malware

55

Identity Threat Protection with Okta AI combats identity-based attacks

Help Net SecurityOct 4, 00:00 UTC · Oct 4, 2023Phishing & fraud

55

Critical n8n Flaw CVE-2026-25049 Enables System Command Execution via Malicious Workflows

The Hacker NewsFeb 6, 09:39 UTC · Feb 6, 2026Vulnerability CVE-2026-25049 CVE-2025-68613 CVE-2026-21893+10 CVEs1

60

ZDResearch Advanced Web Hacking Training 2018

The Hacker NewsSep 25, 13:16 UTC · Sep 25, 2018Exploit / PoC

60

CitrixBleed 2 Vulnerability Exploited

Infosecurity MagazineJun 27, 10:15 UTC · Jun 27, 2025Vulnerability in the wildCVE-2025-5777 CVE-2025-5349 CVE-2023-4966+1 CVEs

60

Okta reveals additional attackers' activities in October 2023 Breach

Security AffairsNov 29, 11:29 UTC · Nov 29, 2023Data breach in the wild

60

A Browser Extension Risk Guide After the ShadyPanda Campaign

The Hacker NewsJul 9, 15:37 UTC · Jul 9, 2026Threat actor

60

Researchers Share CitrixBleed 2 Detection Analysis After Initial Hold

Infosecurity MagazineJul 7, 14:00 UTC · Jul 7, 2025Exploit / PoC CVE-2025-5777 CVE-2025-5349

60

⚡ Weekly Recap: APT Campaigns, Browser Hijacks, AI Malware, Cloud Breaches and Critical CVEs

The Hacker NewsMay 26, 13:00 UTC · May 26, 2025Malware CVE-2025-4427 CVE-2025-4428 CVE-2025-34025+7 CVEs

60

Exfiltration malware takes center stage in cybersecurity concerns

Help Net SecurityJan 9, 11:55 UTC · Jan 9, 2024Malware

55

LockBit ransomware gang leaked data stolen from Boeing

Security AffairsNov 13, 14:02 UTC · Nov 13, 2023Ransomware in the wildCVE-2023-4966

60

Industrial and Commercial Bank of China (ICBC) suffered a ransomware attack

Security AffairsNov 10, 11:11 UTC · Nov 10, 2023Ransomware in the wildCVE-2023-4966

60

Comcast’s Xfinity customer data exposed after CitrixBleed attack

Security AffairsDec 19, 23:56 UTC · Dec 19, 2023Data breach CVE-2023-4966

60

⚡ Weekly Recap: Chrome 0-Day, AI Hacking Tools, DDR5 Bit

The Hacker NewsSep 22, 15:16 UTC · Sep 22, 2025Ransomware in the wildCVE-2025-10585 CVE-2025-55241 CVE-2025-10035+14 CVEs1

60

⚡ Weekly Recap: Fortinet Exploit, Chrome 0-Day, BadIIS Malware, Record DDoS, SaaS Breach & More

The Hacker NewsNov 24, 12:32 UTC · Nov 24, 2025Malware in the wildCVE-2025-58034 CVE-2025-64446 CVE-2025-13223+12 CVEs

60

LockBit Ransomware Exploiting Critical Citrix Bleed Vulnerability to Break In

The Hacker NewsNov 22, 11:59 UTC · Nov 22, 2023Ransomware CVE-2023-4966

60

Unpatched ScreenConnect servers open to attack (CVE-2026-3564)

Help Net SecurityMar 20, 00:00 UTC · Mar 20, 2026Vulnerability in the wildCVE-2026-3564

60

CitrixBleed 2 might be actively exploited (CVE-2025-5777)

Help Net SecurityJun 30, 00:00 UTC · Jun 30, 2025Vulnerability in the wildCVE-2025-5777 CVE-2025-6543 CVE-2025-5349+1 CVEs

60

Threat Intelligence for Financial Services

Recorded FutureJul 16, 00:00 UTC · Jul 16, 2026Ransomware

60

Citrix Releases Emergency Patches for Actively Exploited CVE-2025

The Hacker NewsJul 1, 13:29 UTC · Jul 1, 2025Vulnerability in the wildCVE-2025-6543 CVE-2025-5777 CVE-2023-4966

60

New Browser Security Report Reveals Emerging Threats for Enterprises

The Hacker NewsNov 10, 13:30 UTC · Nov 10, 2025Ransomware

60

Enterprise Identity Threat Report 2024: Unveiling Hidden Threats to Corporate Identities

The Hacker NewsOct 31, 10:30 UTC · Oct 31, 2024Data breach

60