CVE-2025-15026

creationtimestamp| type| source ---|---|--- 2026-01-05 16:00:45+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mbosoph6zz2m 2026-01-05 16:01:07+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mbospettl72a 2026-01-05 16:05:40+00:00| seen|...

CVE-2025-67160

creationtimestamp| type| source ---|---|--- 2026-01-01 15:00:08+00:00| published-proof-of-concept| Telegram/fo9HSyervRu8zmZqDISxrEVJ89qXzcJOGMtymBsqB2XNIxc 2026-01-02 18:55:13+00:00| published-proof-of-concept| Telegram/0JnnPb1FXPACs6svVySu41rA7pedi-lhGwy4Q4xBeRTLA 2026-01-06 18:40:45+00:00| seen...

CVE-2025-66203

creationtimestamp| type| source ---|---|--- 2025-12-27 00:05:26+00:00| seen| https://infosec.exchange/users/offseq/statuses/115788606687747874 2025-12-27 00:05:28+00:00| seen| https://bsky.app/profile/offseq.bsky.social/post/3mawj4af7kz2f 2025-12-27 00:44:21+00:00| seen|...

CVE-2025-15090

creationtimestamp| type| source ---|---|--- 2025-12-25 23:26:40+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3matwhvvvt72b 2025-12-25 23:28:06+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3matwkiusb42u 2025-12-26 01:02:07+00:00| seen|...

CVE-2025-8769

creationtimestamp| type| source ---|---|--- 2025-12-24 21:46:55+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3maragn7soj2z 2025-12-24 22:42:20+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mardjqwdvt2q 2025-12-25 00:06:44+00:00| seen|...

CVE-2025-66444

creationtimestamp| type| source ---|---|--- 2025-12-24 05:45:18+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mapkp5z6hz2p 2025-12-24 07:07:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mappcdfirb2y...

CVE-2025-68664

creationtimestamp| type| source ---|---|--- 2025-12-23 23:44:27+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3maowjvnaam2p 2025-12-24 01:35:00+00:00| seen| https://infosec.exchange/users/offseq/statuses/115771971926680769 2025-12-24 01:35:01+00:00| seen|...

CVE-2023-53951

creationtimestamp| type| source ---|---|--- 2025-12-21 22:18:51+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3majqsyupih2p...

CVE-2025-61675

creationtimestamp| type| source ---|---|--- 2025-12-14 15:00:08+00:00| published-proof-of-concept| Telegram/OHr82OtRsE7SrX-5JX0BTKOCwGseELWPcAGkyhObfyZN6dU 2025-12-15 13:32:00+00:00| seen| https://thehackernews.com/2025/12/freepbx-authentication-bypass-exposed.html 2025-12-15 15:57:55+00:00| seen...

CVE-2025-11371

creationtimestamp| type| source ---|---|--- 2025-10-10 07:34:00+00:00| seen| https://thehackernews.com/2025/10/from-lfi-to-rce-active-exploitation.html 2025-10-10 08:10:45+00:00| seen| https://www.acn.gov.it/portale/w/gladinet-rilevato-sfruttamento-in-rete-della-cve-2025-11371 2025-10-10...

CVE-2025-53693

creationtimestamp| type| source ---|---|--- 2025-08-29 14:35:14+00:00| seen| https://vulnerability.circl.lu/bundle/b0453b3f-aa70-494d-8cbf-b4217e22de4a 2025-08-29 15:22:00+00:00| seen| https://thehackernews.com/2025/08/researchers-warn-of-sitecore-exploit.html 2025-08-29 21:26:35+00:00| seen|...

CVE-2023-42770

creationtimestamp| type| source ---|---|--- 2025-06-11 14:31:29+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/18078 2025-10-15 04:50:00+00:00| seen| https://thehackernews.com/2025/10/two-cvss-100-bugs-in-red-lion-rtus.html 2025-10-16 04:34:04+00:00| seen|...

CVE-2014-2120

creationtimestamp| type| source ---|---|--- 2024-11-12 18:40:00+00:00| seen| https://infosec.exchange/users/screaminggoat/statuses/113471442114730989 2024-11-12 19:24:16+00:00| seen| https://feedsin.space/feed/CISAKevBot/items/2659503 2024-11-12 21:10:02+00:00| seen|...

Microsoft, OpenAI Warn of Nation-State Hackers Weaponizing AI for Cyber Attacks

Nation-state actors associated with Russia, North Korea, Iran, and China are experimenting with artificial intelligence AI and large language models LLMs to complement their ongoing cyber attack operations. The findings come from a report published by Microsoft in collaboration with OpenAI, both ...

Malware Using Google MultiLogin Exploit to Maintain Access Despite Password Reset

Information stealing malware are actively taking advantage of an undocumented Google OAuth endpoint named MultiLogin to hijack user sessions and allow continuous access to Google services even after a password reset. According to CloudSEK, the critical exploit facilitates session persistence and...

DarkGate and PikaBot Malware Resurrect QakBot's Tactics in New Phishing Attacks

Phishing campaigns delivering malware families such as DarkGate and PikaBot are following the same tactics previously used in attacks leveraging the now-defunct QakBot trojan. "These include hijacked email threads as the initial infection, URLs with unique patterns that limit user access, and an...

Microsoft Patch Tuesday July 2023: Vulristics improvements, Office RCE, SFB SmartScreen and Outlook, EoP MSHTML and ERS, other RCEs

Microsoft Patch Tuesday July 2023: Vulristics improvements, Office RCE, SFB SmartScreen and Outlook, EoP MSHTML and ERS, other RCEs. Hello everyone! This episode will be about Microsoft Patch Tuesday for July 2023, including vulnerabilities that were added between June and July Patch Tuesdays...

Join Our Webinar: Learn How to Defeat Ransomware with Identity-Focused Protection

Are you concerned about ransomware attacks? You're not alone. In recent years, these attacks have become increasingly common and can cause significant damage to organizations of all sizes. But there's good news - with the right security measures in place, such as real-time MFA and service account...

OpenSSH Releases Patch for New Pre-Auth Double Free Vulnerability

The maintainers of OpenSSH have released OpenSSH 9.2 to address a number of security bugs, including a memory safety vulnerability in the OpenSSH server sshd. Tracked as CVE-2023-25136, the shortcoming has been classified as a pre-authentication double free vulnerability that was introduced in...

New Ursnif Variant Likely Shifting Focus to Ransomware and Data Theft

The Ursnif malware has become the latest malware to shed its roots as a banking trojan to revamp itself into a generic backdoor capable of delivering next-stage payloads, joining the likes of Emotet, Qakbot, and TrickBot. "This is a significant shift from the malware's original purpose to enable...