The Hacker NewsMay 7, 2026PCPJack Credential Stealer Exploits 5 CVEs to Spread Worm4 min readcve-2025-29927cve-2025-487033
The Hacker NewsFeb 9, 2026highTeamPCP Worm Exploits Cloud Infrastructure to Build Criminal Infrastructure4 min readcve-2025-55182cve-2025-299273
The Hacker NewsDec 17, 2025criticalReact2Shell Vulnerability Actively Exploited to Deploy Linux BackdoorsExploited6 min readcve-2025-55182cve-2025-299271
The Hacker NewsMay 7, 2025critical⚡ THN Weekly Recap: GitHub Supply Chain Attack, AI Malware, BYOVD Tactics, and More15 min readcve-2025-29927cve-2025-231201
Help Net SecurityApr 2, 2025criticalCritical Next.js auth bypass vulnerability opens web apps to compromise (CVE-2025-29927)Exploited4 min readcve-2025-29927vulnerability2
Infosecurity MagazineMar 31, 2025criticalNCSC Urges Users to Patch Next.js Flaw Immediately2 min readcve-2025-29927vulnerability1
Help Net SecurityMar 30, 2025criticalWeek in review: Chrome sandbox escape 0-day fixed, Microsoft adds new AI agents to Security Copilot6 min readcve-2025-2783cve-2025-28572
The Hacker NewsMar 25, 2025criticalCritical Next.js Vulnerability Allows Attackers to Bypass Middleware Authorization Checks2 min readcve-2025-29927vulnerability1
CyberScoopMar 24, 2025criticalResearchers raise alarm about critical Next.js vulnerability3 min readcve-2025-29927vulnerability2
Security AffairsMar 24, 2025criticalAttackers can bypass middleware auth checks by exploiting critical Next.js flawcve-2025-29927vulnerability4