APTs have been using zero-day Windows shortcut exploit for eight years (ZDI-CAN-25373)Help Net Security·Apr 2, 08:48 UTC · Apr 2, 2025Exploit / PoC60
Windows Shortcut Flaw Exploited by 11 StateInfosecurity Magazine·Mar 19, 16:30 UTC · Mar 19, 2025Vulnerability in the wild60
Poisoned Windows shortcuts found to be a favorite of Chinese, Russian, N. Korean state hackersThe Record·Mar 18, 20:27 UTC · Mar 18, 2025Exploit / PoC in the wild60
Nation-state actors and cybercrime gangs abuse malicious .lnk files for espionage and data theftSecurity Affairs·Mar 18, 19:21 UTC · Mar 18, 2025Threat actor in the wild60
Unpatched Windows Zero-Day Flaw Exploited by 11 StateThe Hacker News·Mar 19, 03:46 UTC · Mar 19, 2025Exploit / PoC60
Expert found a zero-day RCE in Microsoft Windows JScript componentSecurity Affairs·May 31, 04:52 UTC · May 31, 2018Exploit / PoC160
Bug Bounty Giant Slams Quality of Vendor PatchingInfosecurity Magazine·Aug 17, 10:00 UTC · Aug 17, 2022Vulnerability55
ZDI offers hefty bounties for zero-days in popular web servers, CMSesHelp Net Security·Jul 25, 00:00 UTC · Jul 25, 2018Exploit / PoC60
Experts at ZDI reported two critical ZeroSecurity Affairs·Aug 22, 07:57 UTC · Aug 22, 2017Exploit / PoCCVE-2017-10951CVE-2017-1095260
Trend Micro announces Pwn2Own Miami, a new vulnerability research competitionHelp Net Security·Oct 29, 00:00 UTC · Oct 29, 2019Vulnerability55
Zero-day vulnerability in Android OS yet to be patchedSecurity Affairs·Sep 5, 22:03 UTC · Sep 5, 2019Exploit / PoC60
Microsoft ships largest Patch Tuesday on record, with one bug under active attackThe Record·Jun 10, 13:03 UTC · Jun 10, 2026Vulnerability in the wildCVE-2026-45657CVE-2026-41091CVE-2026-50507160
Critical zero-days in Exim revealed, only 3 have been fixedHelp Net Security·Oct 16, 09:08 UTC · Oct 16, 2023VulnerabilityCVE-2023-42115CVE-2023-42116CVE-2023-4211460
Samba bug may allow code execution as root on Linux machines, NAS devices (CVE-2021-44142)Help Net Security·Feb 2, 00:00 UTC · Feb 2, 2022VulnerabilityCVE-2021-44142CVE-2017-749460
oPatch community released micro patches for Microsoft JET Database ZeroSecurity Affairs·Sep 26, 05:49 UTC · Sep 26, 2018Vulnerability55
Unpatched zero-day flaw affects all supported versions of Windows.Security Affairs·Sep 21, 21:51 UTC · Sep 21, 2018Exploit / PoC60
Adobe issued security patches for 9 Flash Player flaws reported via ZDISecurity Affairs·Nov 9, 06:58 UTC · Nov 9, 2016Vulnerability in the wildCVE-2016-7857CVE-2016-7858CVE-2016-7859+7 CVEs60
New 7-Zip Vulnerability Could Let Crafted XZ Archives Run Code During ExtractionThe Hacker News·Jul 20, 09:10 UTC · Jul 20, 2026VulnerabilityCVE-2026-14266CVE-2026-4809560
Microsoft Patches Record 622 Flaws, Including Two ZeroThe Hacker News·Jul 15, 00:00 UTC · Jul 15, 2026Vulnerability in the wildCVE-2026-56164CVE-2026-56155CVE-2026-50661+6 CVEs60
Patch Tuesday security updates for July 2026, the largest update ever. 621 CVEs in one monthSecurity Affairs·Jul 14, 21:33 UTC · Jul 14, 2026Vulnerability in the wildCVE-2026-56155CVE-2026-56164CVE-2026-57092+5 CVEs60
Unpatched Windows vulnerability continues to be exploited by APTs (CVE-2025-9491)Help Net Security·Dec 5, 09:00 UTC · Dec 5, 2025VulnerabilityCVE-2025-949160
China-linked UNC6384 exploits Windows zeroSecurity Affairs·Nov 1, 14:11 UTC · Nov 1, 2025Exploit / PoC60
Nation-state groups hit hundreds of organizations with Microsoft Windows zeroCyberScoop·Mar 20, 14:07 UTC · Mar 20, 2025Threat actor in the wild60
A still unpatched 0-day RCE impacts more than 3.5M Exim serversSecurity Affairs·Sep 29, 23:17 UTC · Sep 29, 2023VulnerabilityCVE-2023-4211560
Netgear is releasing fixes for ten issues affecting 79 productsSecurity Affairs·Jul 2, 06:38 UTC · Jul 2, 2020Vulnerability55
Apple, Oracle, VMware products successfully hacked at Pwn2OwnCyberScoop·Mar 21, 18:12 UTC · Mar 21, 2019Exploit / PoC in the wild60
Trend Micro's new program helps IoT device makers tackle risk at sourceHelp Net Security·Aug 23, 00:00 UTC · Aug 23, 2018Ransomware60
Microsoft fixed two zeroSecurity Affairs·Apr 11, 08:54 UTC · Apr 11, 2024Exploit / PoC in the wildCVE-2024-29988CVE-2024-2623460
Recent DarkGate campaign exploited Microsoft Windows zeroSecurity Affairs·Mar 14, 20:57 UTC · Mar 14, 2024Threat actor in the wildCVE-2024-2141260
LockBit affiliates compromise Microsoft Exchange servers to deploy ransomwareSecurity Affairs·Oct 12, 05:54 UTC · Oct 12, 2022RansomwareCVE-2022-21969CVE-2022-41040CVE-2022-4108260
Microsoft Patch Tuesday updates fix CVE-2019Security Affairs·Nov 13, 08:26 UTC · Nov 13, 2019Vulnerability in the wildCVE-2019-1429CVE-2019-137360
Tesla Model 3's onboard browser attacked successfully at Pwn2OwnCyberScoop·Mar 26, 15:44 UTC · Mar 26, 2019Exploit / PoC in the wild60
0-Days Found in iPhone X, Samsung Galaxy S9, Xiaomi Mi6 PhonesThe Hacker News·Nov 15, 00:00 UTC · Nov 15, 2018Exploit / PoC60
VMware fixed Code Execution Flaw in ESXi,Workstation & Fusion productsSecurity Affairs·Oct 17, 09:23 UTC · Oct 17, 2018VulnerabilityCVE-2018-6974CVE-2018-697360
Microsoft issues the patch for the debated IE critical vulnerabilitiesSecurity Affairs·Jun 6, 13:52 UTC · Jun 6, 2014VulnerabilityCVE-2014-177060
Security Researchers Find 47 ZeroInfosecurity Magazine·May 18, 09:45 UTC · May 18, 2026Exploit / PoC60
Chinese-Linked Hackers Exploit Windows Flaw to Spy on EU DiplomatsInfosecurity Magazine·Oct 31, 12:10 UTC · Oct 31, 2025Vulnerability55
Trend Micro Apex One flaws exploted in the wild (CVE-2025-54948, CVE-2025-54987)Help Net Security·Aug 19, 07:17 UTC · Aug 19, 2025Vulnerability in the wildCVE-2025-54948CVE-2025-5498760