Latest Cyber Security News & Threat Headlines

Recent Vulnerability Related Headlines

Prev Next

Iran War Cyber Threat Outlook: Conflict Phases and What Comes Next (socradar.io)

17 Apr 2026

BlueHammer, RedSun, and UnDefend: Three Windows Defender Zero-Days Exploited in the Wild (socradar.io)

17 Apr 2026

Attackers Weaponize CVE-2026-39987 to Spread Blockchain-Based Backdoor Via Hugging Face (cybersecuritynews.com)

17 Apr 2026

CVE-2026-34197: Apache ActiveMQ Jolokia RCE Vulnerability (securityboulevard.com)

17 Apr 2026

Another Microsoft Defender privilege escalation bug emerges days after patch (www.csoonline.com)

17 Apr 2026

CISA Warns of Apache ActiveMQ Input Validation Vulnerability Exploited in Attacks (cybersecuritynews.com)

17 Apr 2026

Leaked Windows Defender 0-Day Vulnerability Actively Exploited in Attacks (cybersecuritynews.com)

17 Apr 2026

Recent Apache ActiveMQ Vulnerability Exploited in the Wild (www.securityweek.com)

17 Apr 2026

Microsoft Confirms Windows Servers Enter Reboot Loops Following April Patches (cybersecuritynews.com)

17 Apr 2026

Windows Snipping Tool Vulnerability Allows Attacker to Perform Spoofing Over a Network (cybersecuritynews.com)

17 Apr 2026

One-Click RCE in Azure Windows Admin Center Allow Attacker to Execute Arbitrary Commands (cybersecuritynews.com)

17 Apr 2026

U.S. CISA adds a flaw in Apache ActiveMQ to its Known Exploited Vulnerabilities catalog (securityaffairs.com)

17 Apr 2026

CVE-2025-14821 Libssh: libssh: insecure default configuration leads to local man-in-the-middle attacks on windows (msrc.microsoft.com)

17 Apr 2026

CVE-2026-35199 SymCrypt SymCryptXmssSign function - Heap overflow via 64->32-bit leaf-count truncation (msrc.microsoft.com)

17 Apr 2026

CVE-2026-39956 jq: Missing runtime type checks for _strindices lead to crash and limited memory disclosure (msrc.microsoft.com)

17 Apr 2026

CVE-2026-40179 Prometheus: Stored XSS via metric names and label values in web UI tooltips and metrics explorer (msrc.microsoft.com)

17 Apr 2026

CVE-2026-41035 (msrc.microsoft.com)

17 Apr 2026

CVE-2026-40164 jq: Algorithmic complexity DoS via hardcoded MurmurHash3 seed (msrc.microsoft.com)

17 Apr 2026

CVE-2026-39979 jq: Out-of-Bounds Read in jv_parse_sized() Error Formatting for Non-NUL-Terminated Counted Buffers (msrc.microsoft.com)

17 Apr 2026

CVE-2026-33948 jq: Embedded-NUL Truncation in CLI JSON Input Path Causes Prefix-Only Validation of Malformed Input (msrc.microsoft.com)

17 Apr 2026

CVE-2026-33947 jq: Unbounded Recursion in jv_setpath(), jv_getpath() and delpaths_sorted() (msrc.microsoft.com)

17 Apr 2026

CVE-2026-32316 jq: Integer overflow in jvp_string_append() allows Heap-based Buffer Overflow (msrc.microsoft.com)

17 Apr 2026

CVE-2026-35469 SpdyStream: DOS on CRI (msrc.microsoft.com)

17 Apr 2026

Microsoft Defender 0-Day Vulnerability “RedSun” Enables Full SYSTEM Access (cybersecuritynews.com)

17 Apr 2026

Apache ActiveMQ CVE-2026-34197 Added to CISA KEV Amid Active Exploitation (thehackernews.com)

16 Apr 2026

Cisco Systems issues three advisories for critical vulnerabilities in Webex, ISE (www.csoonline.com)

16 Apr 2026

NIST cuts down CVE analysis amid vulnerability overload (www.csoonline.com)

16 Apr 2026

Foxit, LibRaw vulnerabilities (blog.talosintelligence.com)

16 Apr 2026

Cisco fixed four critical flaws in Identity Services and Webex (securityaffairs.com)

16 Apr 2026

PHP Composer vulnerabilities allow arbitrary command execution (www.scworld.com)

16 Apr 2026

NIST admits defeat on NVD backlog, will enrich only highest-risk CVEs going forward (www.helpnetsecurity.com)

16 Apr 2026

CVE-2025-64669 Windows Admin Center Elevation of Privilege Vulnerability (msrc.microsoft.com)

16 Apr 2026

April 2026 Patch Tuesday: 165 Vulnerabilities, Two Zero-Days Including One Actively Exploited (socradar.io)

16 Apr 2026

Fortinet fixes critical FortiSandbox vulnerabilities (CVE-2026-39813, CVE-2026-39808) (www.helpnetsecurity.com)

16 Apr 2026

Behind the Mythos hype, Glasswing has just one confirmed CVE (www.csoonline.com)

16 Apr 2026

Cisco Patches Four Critical Identity Services, Webex Flaws Enabling Code Execution (thehackernews.com)

16 Apr 2026

Critical Cisco ISE Vulnerabilities Let Remote Attackers Execute Malicious Code (cybersecuritynews.com)

16 Apr 2026

Cisco Webex Services Vulnerability Let Remote Attacker Impersonate Any User (cybersecuritynews.com)

16 Apr 2026

Nginx-ui Vulnerability Actively Exploited in Attack – Enables Full Server Takeover (cybersecuritynews.com)

16 Apr 2026

31 High-Impact Vulnerabilities Exploited in March as Interlock Hits Cisco FMC Zero-Day (cybersecuritynews.com)

16 Apr 2026

New Chrome Privacy Analysis Shows How Fingerprinting and Header Leaks Can Expose Users (cybersecuritynews.com)

16 Apr 2026

Splunk Enterprise and Cloud Platform Vulnerability Enables Remote Code Execution Attacks (cybersecuritynews.com)

16 Apr 2026

Critical Chrome Vulnerabilities Let Attackers Execute Arbitrary Code – Update Now! (cybersecuritynews.com)

16 Apr 2026

1,250+ C2 Servers Mapped Across Russian Hosting Across 165 Providers (cybersecuritynews.com)

16 Apr 2026

CVE-2026-33100 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability (msrc.microsoft.com)

15 Apr 2026

CVE-2026-26171 .NET Denial of Service Vulnerability (msrc.microsoft.com)

15 Apr 2026

Critical nginx UI tool vulnerability opens web servers to full compromise (www.csoonline.com)

15 Apr 2026

CVE-2026-33032: severe nginx-ui bug grants unauthenticated server access (securityaffairs.com)

15 Apr 2026

U.S. CISA adds Microsoft SharePoint Server, and Microsoft Office Excel flaws to its Known Exploited Vulnerabilities catalog (securityaffairs.com)

15 Apr 2026

Exploited Vulnerability Exposes Nginx Servers to Hacking (www.securityweek.com)

15 Apr 2026

Windows Active Directory Vulnerability Allow Attackers to Execute Malicious Code (cybersecuritynews.com)

15 Apr 2026

New PHP Composer Vulnerability Let Attackers Execute Arbitrary Commands (cybersecuritynews.com)

15 Apr 2026

Adobe Acrobat Reader Vulnerabilities Let Attackers Execute Arbitrary Code (cybersecuritynews.com)

15 Apr 2026

April Patch Tuesday Fixes Critical Flaws Across SAP, Adobe, Microsoft, Fortinet, and More (thehackernews.com)

15 Apr 2026

Actively Exploited nginx-ui Flaw (CVE-2026-33032) Enables Full Nginx Server Takeover (thehackernews.com)

15 Apr 2026

MuddyWater-Style Hackers Scan 12,000+ Systems Before Hitting Middle East Critical Sectors (cybersecuritynews.com)

15 Apr 2026

Copilot and Agentforce fall to form-based prompt injection tricks (www.csoonline.com)

15 Apr 2026

SideCopy Exploits CVE-2023–38831 (h3xecute.medium.com)

15 Apr 2026

April Patch Tuesday fixes two zero-days, including one under active attack (www.malwarebytes.com)

15 Apr 2026

Windows BitLocker Vulnerability Allows Attacker to Bypass Security Feature (cybersecuritynews.com)

15 Apr 2026

CVE-2025-30258 In GnuPG before 2.5.5, if a user chooses to import a certificate with certain crafted subkey data that lacks…

15 Apr 2026

PHP Composer flaws enable remote command execution via Perforce VCS (securityaffairs.com)

15 Apr 2026

CVE-2026-32084 Windows Print Spooler Information Disclosure Vulnerability (msrc.microsoft.com)

15 Apr 2026

CVE-2026-32077 Windows UPnP Device Host Elevation of Privilege Vulnerability (msrc.microsoft.com)

15 Apr 2026

CVE-2026-32070 Windows Common Log File System Driver Elevation of Privilege Vulnerability (msrc.microsoft.com)

15 Apr 2026

CVE-2026-33114 Microsoft Word Remote Code Execution Vulnerability (msrc.microsoft.com)

15 Apr 2026

CVE-2026-32171 Azure Logic Apps Elevation of Privilege Vulnerability (msrc.microsoft.com)

15 Apr 2026

CVE-2026-33829 Windows Snipping Tool Spoofing Vulnerability (msrc.microsoft.com)

15 Apr 2026

CVE-2026-32149 Windows Hyper-V Remote Code Execution Vulnerability (msrc.microsoft.com)

15 Apr 2026

CVE-2026-32155 Desktop Window Manager Elevation of Privilege Vulnerability (msrc.microsoft.com)

15 Apr 2026

CVE-2026-32197 Microsoft Excel Remote Code Execution Vulnerability (msrc.microsoft.com)

15 Apr 2026

CVE-2025-14523 Libsoup: libsoup: duplicate host header handling causes host-parsing discrepancy (first- vs last-value wins) (msrc.microsoft.com)

15 Apr 2026

CVE-2026-32079 Web Account Manager Information Disclosure Vulnerability (msrc.microsoft.com)

15 Apr 2026

CVE-2026-32068 Windows Simple Search and Discovery Protocol (SSDP) Service Elevation of Privilege Vulnerability (msrc.microsoft.com)

15 Apr 2026

CVE-2026-32074 Windows Projected File System Elevation of Privilege Vulnerability (msrc.microsoft.com)

15 Apr 2026

CVE-2026-27923 Desktop Window Manager Elevation of Privilege Vulnerability (msrc.microsoft.com)

15 Apr 2026

CVE-2026-32088 Windows Biometric Service Security Feature Bypass Vulnerability (msrc.microsoft.com)

15 Apr 2026

CVE-2026-32151 Windows Shell Information Disclosure Vulnerability (msrc.microsoft.com)

15 Apr 2026

CVE-2025-1220 Null byte termination in hostnames (msrc.microsoft.com)

15 Apr 2026

CVE-2026-27920 Windows UPnP Device Host Elevation of Privilege Vulnerability (msrc.microsoft.com)

15 Apr 2026

CVE-2026-27928 Windows Hello Security Feature Bypass Vulnerability (msrc.microsoft.com)

15 Apr 2026

Microsoft Defender 0-Day Vulnerability Enables Privilege Escalation Attack (cybersecuritynews.com)

15 Apr 2026

CVE-2026-5295 Stack Buffer Overflow in wolfSSL PKCS7 wc_PKCS7_DecryptOri() via Oversized OID (msrc.microsoft.com)

15 Apr 2026

CVE-2026-1502 HTTP client proxy tunnel headers not validated for CR/LF (msrc.microsoft.com)

15 Apr 2026

CVE-2026-5446 wolfSSL ARIA-GCM TLS 1.2/DTLS 1.2 GCM nonce reuse (msrc.microsoft.com)

15 Apr 2026

CVE-2026-5392 wolfSSL heap OOB read in PKCS7 SignedData streaming (msrc.microsoft.com)

15 Apr 2026

CVE-2026-5263 URI nameConstraints not enforced in ConfirmNameConstraints() (msrc.microsoft.com)

15 Apr 2026

CVE-2026-5460 Heap Use-After-Free in PQC Hybrid KeyShare Error Cleanup in wolfSSL TLS 1.3 (msrc.microsoft.com)

15 Apr 2026

CVE-2026-5772 MatchDomainName 1-Byte Stack Buffer Over-Read in Hostname Validation (msrc.microsoft.com)

15 Apr 2026

CVE-2025-62718 Axios has a NO_PROXY Hostname Normalization Bypass Leads to SSRF (msrc.microsoft.com)

15 Apr 2026

CVE-2026-34480 Apache Log4j Core: Silent log event loss in XmlLayout due to unescaped XML 1.0 forbidden characters (msrc.microsoft.com)

15 Apr 2026

CVE-2026-34481 Apache Log4j JSON Template Layout: Improper serialization of non-finite floating-point values in JsonTemplateLayout (msrc.microsoft.com)

15 Apr 2026

CVE-2026-5264 DTLS 1.3 ACK heap buffer overflow (msrc.microsoft.com)

15 Apr 2026

CVE-2026-5503 out-of-bounds write in TLSX_EchChangeSNI via attacker-controlled publicName (msrc.microsoft.com)

15 Apr 2026

CVE-2026-34479 Apache Log4j 1 to Log4j 2 bridge: Silent log event loss in Log4j1XmlLayout due to unescaped XML 1.0 forbidden…

15 Apr 2026

CVE-2026-5188 Integer underflow in X.509 SAN parsing in wolfSSL (msrc.microsoft.com)

15 Apr 2026

CVE-2026-40175 Axios has Unrestricted Cloud Metadata Exfiltration via Header Injection Chain (msrc.microsoft.com)

15 Apr 2026

CVE-2026-5778 Integer underflow leads to out-of-bounds access in sniffer ChaCha decrypt path. (msrc.microsoft.com)

15 Apr 2026

CVE-2026-34601 xmldom: XML injection via unsafe CDATA serialization allows attacker-controlled markup insertion (msrc.microsoft.com)

15 Apr 2026

CVE-2026-5447 Heap buffer overflow in CertFromX509() via AuthorityKeyIdentifier (msrc.microsoft.com)

15 Apr 2026

CVE-2026-35201 Discount has an Out-of-bounds Read in rdiscount (msrc.microsoft.com)

15 Apr 2026

Microsoft Patch Tuesday for April 2026 fixed actively exploited SharePoint zero-day (securityaffairs.com)

15 Apr 2026

Coordinated vulnerability disclosure is now an EU obligation, but cultural change takes time (www.helpnetsecurity.com)

15 Apr 2026

Microsoft SharePoint Server 0-Day Vulnerability Actively Exploited in Attacks (cybersecuritynews.com)

14 Apr 2026

April Patch Tuesday roundup: Zero day vulnerabilities and critical bugs (www.csoonline.com)

14 Apr 2026

Claude Mythos: Prepare for your board’s cybersecurity questions about the latest AI model from Anthropic (securityboulevard.com)

14 Apr 2026

Patch Tuesday, April 2026 Edition (krebsonsecurity.com)

14 Apr 2026

Microsoft’s April 2026 Patch Tuesday Addresses 163 CVEs (CVE-2026-32201) (securityboulevard.com)

14 Apr 2026

CVE-2026-20930 Windows Management Services Elevation of Privilege Vulnerability (msrc.microsoft.com)

14 Apr 2026

CVE-2026-27922 Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability (msrc.microsoft.com)

14 Apr 2026

CVE-2026-27925 Windows UPnP Device Host Information Disclosure Vulnerability (msrc.microsoft.com)

14 Apr 2026

CVE-2026-27913 Windows BitLocker Security Feature Bypass Vulnerability (msrc.microsoft.com)

14 Apr 2026

CVE-2026-27916 Windows UPnP Device Host Elevation of Privilege Vulnerability (msrc.microsoft.com)

14 Apr 2026

CVE-2026-32078 Windows Projected File System Elevation of Privilege Vulnerability (msrc.microsoft.com)

14 Apr 2026

CVE-2026-32086 Windows Function Discovery Service (fdwsd.dll) Elevation of Privilege Vulnerability (msrc.microsoft.com)

14 Apr 2026

CVE-2026-32072 Active Directory Spoofing Vulnerability (msrc.microsoft.com)

14 Apr 2026

Microsoft’s April 2026 Patch Tuesday Addresses 163 CVEs (CVE-2026-32201) (www.tenable.com)

14 Apr 2026

Fortinet Patches 11 Vulnerabilities Across FortiSandbox, FortiOS, FortiAnalyzer, and FortiManager (cybersecuritynews.com)

14 Apr 2026

Microsoft Patch Tuesday April 2026., (Tue, Apr 14th) (isc.sans.edu)

14 Apr 2026

CVE-2026-5747 - Out-of-bounds Write in Firecracker virtio-pci Transport (aws.amazon.com)

14 Apr 2026

Issues with AWS Research and Engineering Studio (RES) (aws.amazon.com)

14 Apr 2026

Issues with Amazon Athena ODBC Driver (aws.amazon.com)

14 Apr 2026

CVE-2026-5429 - Kiro IDE Webview Cross-Site Scripting via Workspace Color Theme (aws.amazon.com)

14 Apr 2026

The April 2026 Security Update Review (www.thezdi.com)

14 Apr 2026

CVE-2026-26169 Windows Kernel Memory Information Disclosure Vulnerability (msrc.microsoft.com)

14 Apr 2026

Microsoft Patch Tuesday April 2026 – 168 Vulnerabilities Fixed, Including Actively Exploited 0-day (cybersecuritynews.com)

14 Apr 2026

CyberDanube Security Research 20260408-1 | Multiple Vulnerabilities in Siemens SICAM A8000 (seclists.org)

14 Apr 2026

CyberDanube Security Research 20260408-0 | Remote Operation Denial of Service in Siemens SICAM A8000 (seclists.org)

14 Apr 2026

SEC Consult SA-20260414-0 :: Improper Enforcement of Locked Accounts in WebUI (SSO) in Kiuwan SAST on-premise (KOP) & cloud/SaaS (seclists.org)

14 Apr 2026

Critical etcd Auth Bypass Flaw Allows Unauthorized Access to Sensitive Cluster APIs (cybersecuritynews.com)

14 Apr 2026

CVE-2026-26149 Microsoft Power Apps Security Feature Bypass (msrc.microsoft.com)

14 Apr 2026

CVE-2026-32183 Windows Snipping Tool Remote Code Execution Vulnerability (msrc.microsoft.com)

14 Apr 2026

CVE-2026-32167 SQL Server Elevation of Privilege Vulnerability (msrc.microsoft.com)

14 Apr 2026

CVE-2026-32159 Windows Push Notifications Elevation of Privilege Vulnerability (msrc.microsoft.com)

14 Apr 2026

CVE-2026-26143 Microsoft PowerShell Security Feature Bypass Vulnerability (msrc.microsoft.com)

14 Apr 2026

CVE-2026-26151 Remote Desktop Spoofing Vulnerability (msrc.microsoft.com)

14 Apr 2026

CVE-2026-33096 HTTP.sys Denial of Service Vulnerability (msrc.microsoft.com)

14 Apr 2026

CVE-2026-32219 Microsoft Brokering File System Elevation of Privilege Vulnerability (msrc.microsoft.com)

14 Apr 2026

CVE-2026-23670 Windows Virtualization-Based Security (VBS) Security Feature Bypass Vulnerability (msrc.microsoft.com)

14 Apr 2026

CVE-2026-23653 GitHub Copilot and Visual Studio Code Information Disclosure Vulnerability (msrc.microsoft.com)

14 Apr 2026

CVE-2026-20945 Microsoft SharePoint Server Spoofing Vulnerability (msrc.microsoft.com)

14 Apr 2026

CVE-2026-25184 Applocker Filter Driver (applockerfltr.sys) Elevation of Privilege Vulnerability (msrc.microsoft.com)

14 Apr 2026

CVE-2026-32192 Azure Monitor Agent Elevation of Privilege Vulnerability (msrc.microsoft.com)

14 Apr 2026

New PHP Composer Flaws Enable Arbitrary Command Execution — Patches Released (thehackernews.com)

14 Apr 2026

CVE-2026-5190 - AWS C Event Stream Streaming Decoder Stack Buffer Overflow (aws.amazon.com)

14 Apr 2026

Ivanti Neurons for ITSM Vulnerabilities Allow Remote Attacker to Obtain User Sessions (cybersecuritynews.com)

14 Apr 2026

CISA Warns of Microsoft Exchange and Windows CLFS Vulnerabilities Exploited in Attacks (cybersecuritynews.com)

14 Apr 2026

Synology SSL VPN Client Vulnerabilities Let Remote Attackers Access Sensitive Files (cybersecuritynews.com)

14 Apr 2026

ShowDoc vulnerability actively exploited (www.scworld.com)

14 Apr 2026

Critical FortiSandbox Vulnerabilities Allow Attackers to Execute Unauthorized Commands (cybersecuritynews.com)

14 Apr 2026

Top 10 Free Threat Intelligence Tools for MSSPs (socradar.io)

14 Apr 2026

CISA Warns of Fortinet SQL Injection Vulnerability Actively Exploited in Attacks (cybersecuritynews.com)

14 Apr 2026

Attackers target unpatched ShowDoc servers via CVE-2025-0520 (securityaffairs.com)

14 Apr 2026

CVE-2026-34486: Apache Tomcat Tribes Regression Creates Unauthenticated RCE Path (socradar.io)

14 Apr 2026

U.S. CISA adds Adobe, Fortinet, Microsoft Exchange Server, and Microsoft Windows flaws to its Known Exploited Vulnerabilities catalog (securityaffairs.com)

14 Apr 2026

CVE-2025-1148 GNU Binutils ld ldelfgen.c link_order_scan memory leak (msrc.microsoft.com)

14 Apr 2026

CVE-2025-1147 GNU Binutils nm nm.c internal_strlen buffer overflow (msrc.microsoft.com)

14 Apr 2026

CVE-2025-11839 GNU Binutils prdbg.c tg_tag_type return value (msrc.microsoft.com)

14 Apr 2026

CVE-2026-31417 net/x25: Fix overflow when accumulating packets (msrc.microsoft.com)

14 Apr 2026

CVE-2026-31424 netfilter: x_tables: restrict xt_check_match/xt_check_target extensions for NFPROTO_ARP (msrc.microsoft.com)

14 Apr 2026

CVE-2026-31423 net/sched: sch_hfsc: fix divide-by-zero in rtsc_min() (msrc.microsoft.com)

14 Apr 2026

CVE-2026-31416 netfilter: nfnetlink_log: account for netlink header size (msrc.microsoft.com)

14 Apr 2026

CVE-2026-31419 net: bonding: fix use-after-free in bond_xmit_broadcast() (msrc.microsoft.com)

14 Apr 2026

CVE-2026-31427 netfilter: nf_conntrack_sip: fix use of uninitialized rtp_addr in process_sdp (msrc.microsoft.com)

14 Apr 2026

CVE-2026-31422 net/sched: cls_flow: fix NULL pointer dereference on shared blocks (msrc.microsoft.com)

14 Apr 2026

CVE-2026-31414 netfilter: nf_conntrack_expect: use expect->helper (msrc.microsoft.com)

14 Apr 2026

CVE-2026-40386 (msrc.microsoft.com)

14 Apr 2026

CVE-2026-31426 ACPI: EC: clean up handlers on probe failure in acpi_ec_setup() (msrc.microsoft.com)

14 Apr 2026

CVE-2026-31421 net/sched: cls_fw: fix NULL pointer dereference on shared blocks (msrc.microsoft.com)

14 Apr 2026

CVE-2026-40385 (msrc.microsoft.com)

14 Apr 2026

CVE-2026-40393 (msrc.microsoft.com)

14 Apr 2026

CVE-2026-31420 bridge: mrp: reject zero test interval to avoid OOM panic (msrc.microsoft.com)

14 Apr 2026

CVE-2026-31428 netfilter: nfnetlink_log: fix uninitialized padding leak in NFULA_PAYLOAD (msrc.microsoft.com)

14 Apr 2026

CVE-2026-31418 netfilter: ipset: drop logically empty buckets in mtype_del (msrc.microsoft.com)

14 Apr 2026

ShowDoc RCE Flaw CVE-2025-0520 Actively Exploited on Unpatched Servers (thehackernews.com)

14 Apr 2026

CISA Adds 6 Known Exploited Flaws in Fortinet, Microsoft, and Adobe Software (thehackernews.com)

14 Apr 2026

Adobe rolls out emergency fix for Acrobat, Reader zero-day flaw (www.bleepingcomputer.com)

13 Apr 2026

Marimo RCE Vulnerability Exploited in the Within 10 Hours of Disclosure (cybersecuritynews.com)

13 Apr 2026

Alleged Police Tipline Data Sale, iOS and Adobe Exploits, RDWeb Access Listings, and Gunra Recruitment (socradar.io)

13 Apr 2026

Critical Axios Vulnerability Allows Remote Code Execution – PoC Released (cybersecuritynews.com)

13 Apr 2026

State Sponsored Activity

This chart provides an indication of state sponsored activity suspected or known to be actively targetting vulnerabilities recently.

Government Alerts & Advisories

Prev Next

JetBrains security advisory (AV26-364) (cyber.gc.ca)

17 Apr 2026

HashiCorp security advisory (AV26-363) (cyber.gc.ca)

17 Apr 2026

Microsoft Edge security advisory (AV26-362) (cyber.gc.ca)

17 Apr 2026

CISA Adds One Known Exploited Vulnerability to Catalog (www.cisa.gov)

16 Apr 2026

Anviz Multiple Products (www.cisa.gov)

16 Apr 2026

Horner Automation Cscape and XL4, XL7 PLC (www.cisa.gov)

16 Apr 2026

HPE security advisory (AV26-361) (cyber.gc.ca)

16 Apr 2026

Nginx UI security advisory (AV26-360) (cyber.gc.ca)

16 Apr 2026

Drupal security advisory (AV26-359) (cyber.gc.ca)

16 Apr 2026

Google Chrome security advisory (AV26-358) (cyber.gc.ca)

15 Apr 2026

Cisco security advisory (AV26-357) (cyber.gc.ca)

15 Apr 2026

Splunk security advisory (AV26-356) (cyber.gc.ca)

15 Apr 2026

AMD security advisory (AV26-355) (cyber.gc.ca)

15 Apr 2026

Security Alert: Microsoft Releases April 2026 Security Updates (www.jpcert.or.jp)

14 Apr 2026

Security Alert: Alert Regarding Vulnerabilities in Adobe Acrobat and Reader (APSB26-44) (www.jpcert.or.jp)

14 Apr 2026

Tenable security advisory (AV26-354) (cyber.gc.ca)

14 Apr 2026

Adobe security advisory (AV26-353) (cyber.gc.ca)

14 Apr 2026

Microsoft security advisory – April 2026 monthly rollup (AV26-352) (cyber.gc.ca)

14 Apr 2026

CISA Adds Two Known Exploited Vulnerabilities to Catalog (www.cisa.gov)

14 Apr 2026

Fortinet security advisory (AV26-351) (cyber.gc.ca)

14 Apr 2026

[Control systems] Schneider Electric security advisory (AV26-350) (cyber.gc.ca)

14 Apr 2026

SAP security advisory – April 2026 monthly rollup (AV26-349) (cyber.gc.ca)

14 Apr 2026

Samsung mobile security advisory (AV26-348) (cyber.gc.ca)

14 Apr 2026

[Control systems] Siemens security advisory (AV26-347) (cyber.gc.ca)

14 Apr 2026

[Control systems] ABB security advisory (AV26-346) (cyber.gc.ca)

13 Apr 2026

Microsoft Edge security advisory (AV26-345) (cyber.gc.ca)

13 Apr 2026

wolfSSL security advisory (AV26-344) (cyber.gc.ca)

13 Apr 2026

CISA Adds Seven Known Exploited Vulnerabilities to Catalog (www.cisa.gov)

13 Apr 2026

Dell security advisory (AV26-343) (cyber.gc.ca)

13 Apr 2026

Red Hat security advisory (AV26-341) (cyber.gc.ca)

13 Apr 2026

IBM security advisory (AV26-342) (cyber.gc.ca)

13 Apr 2026

Adobe Acrobat security advisory (AV26-340) (cyber.gc.ca)

13 Apr 2026

[Control systems] CISA ICS security advisories (AV26–339) (cyber.gc.ca)

13 Apr 2026

Ubuntu security advisory (AV26-338) (cyber.gc.ca)

13 Apr 2026

Google Chrome security advisory (AV26-337) (cyber.gc.ca)

10 Apr 2026

Tenable security advisory (AV26-336) (cyber.gc.ca)

09 Apr 2026

Qualcomm security advisory – April 2026 monthly rollup (AV26-335) (cyber.gc.ca)

09 Apr 2026

Juniper Networks security advisory (AV26-334) (cyber.gc.ca)

09 Apr 2026

HPE security advisory (AV26-333) (cyber.gc.ca)

09 Apr 2026

GPL Odorizers GPL750 (www.cisa.gov)

09 Apr 2026

Contemporary Controls BASC 20T (www.cisa.gov)

09 Apr 2026

SonicWall security advisory (AV26-332) (cyber.gc.ca)

08 Apr 2026

Palo Alto Networks security advisory (AV26-331) (cyber.gc.ca)

08 Apr 2026

Apache ActiveMQ security advisory (AV26-330) (cyber.gc.ca)

08 Apr 2026

OpenSSL security advisory (AV26-329) (cyber.gc.ca)

08 Apr 2026

Mitel security advisory (AV26-328) (cyber.gc.ca)

08 Apr 2026

CISA Adds One Known Exploited Vulnerability to Catalog (www.cisa.gov)

08 Apr 2026

GitLab security advisory (AV26-327) (cyber.gc.ca)

08 Apr 2026

CUPS security advisory (AV26-326) (cyber.gc.ca)

08 Apr 2026

HPE security advisory (AV26-325) (cyber.gc.ca)

08 Apr 2026

Dell security advisory (AV26-322) (cyber.gc.ca)

07 Apr 2026

[Control systems] CISA ICS security advisories (AV26–324) (cyber.gc.ca)

07 Apr 2026

Mozilla security advisory (AV26-323) (cyber.gc.ca)

07 Apr 2026

Hitachi security advisory (AV26-321) (cyber.gc.ca)

07 Apr 2026

Erlang security advisory (AV26-320) (cyber.gc.ca)

07 Apr 2026

VMware security advisory (AV26-319) (cyber.gc.ca)

07 Apr 2026

Red Hat security advisory (AV26-318) (cyber.gc.ca)

07 Apr 2026

Ubuntu security advisory (AV26-317) (cyber.gc.ca)

07 Apr 2026

IBM security advisory (AV26-316) (cyber.gc.ca)

07 Apr 2026

AL26-007 - Vulnerability impacting Fortinet FortiClientEMS - CVE-2026-35616 (cyber.gc.ca)

07 Apr 2026

Iranian-Affiliated Cyber Actors Exploit Programmable Logic Controllers Across US Critical Infrastructure (www.cisa.gov)

07 Apr 2026

Microsoft Edge security advisory (AV26-315) (cyber.gc.ca)

07 Apr 2026

Android security advisory – April 2026 monthly rollup (AV26-314) (cyber.gc.ca)

07 Apr 2026

UK exposes Russian military intelligence hijacking vulnerable routers for cyber attacks (www.ncsc.gov.uk)

07 Apr 2026

APT28 exploit routers to enable DNS hijacking operations (www.ncsc.gov.uk)

07 Apr 2026

Fortinet security advisory (AV26-313) (cyber.gc.ca)

07 Apr 2026

CISA Adds One Known Exploited Vulnerability to Catalog (www.cisa.gov)

06 Apr 2026

OpenSSH security advisory (AV26-312) (cyber.gc.ca)

02 Apr 2026

Cesanta security advisory (AV26-311) (cyber.gc.ca)

02 Apr 2026

Progress security advisory (AV26-310) (cyber.gc.ca)

02 Apr 2026

CISA Adds One Known Exploited Vulnerability to Catalog (www.cisa.gov)

02 Apr 2026

Yokogawa CENTUM VP (www.cisa.gov)

02 Apr 2026

WatchGuard security advisory (AV26-309) (cyber.gc.ca)

02 Apr 2026

Drupal security advisory (AV26-308) (cyber.gc.ca)

01 Apr 2026

Cisco security advisory (AV26-307) (cyber.gc.ca)

01 Apr 2026

CISA Adds One Known Exploited Vulnerability to Catalog (www.cisa.gov)

01 Apr 2026

Google Chrome security advisory (AV26-306) (cyber.gc.ca)

01 Apr 2026

HPE security advisory (AV26-305) (cyber.gc.ca)

31 Mar 2026

Symantec security advisory (AV26-304) (cyber.gc.ca)

31 Mar 2026

[Control systems] ABB security advisory (AV26-303) (cyber.gc.ca)

31 Mar 2026

PX4 Autopilot (www.cisa.gov)

31 Mar 2026

Anritsu Remote Spectrum Monitor (www.cisa.gov)

31 Mar 2026

Nokia security advisory (AV26-302) (cyber.gc.ca)

31 Mar 2026

CISA Adds One Known Exploited Vulnerability to Catalog (www.cisa.gov)

30 Mar 2026

Docker security advisory (AV26–301) (cyber.gc.ca)

30 Mar 2026

Roundcube security advisory (AV26-300) (cyber.gc.ca)

30 Mar 2026

Hitachi security advisory (AV26-299) (cyber.gc.ca)

30 Mar 2026

Red Hat security advisory (AV26-298) (cyber.gc.ca)

30 Mar 2026

[Control systems] CISA ICS security advisories (AV26-297) (cyber.gc.ca)

30 Mar 2026

Dell security advisory (AV26-295) (cyber.gc.ca)

30 Mar 2026

CISA Alerts & KEV Catalog Updates

CISA KEVs (known exploited vulnerabilities) identified as a priroty to mitigate over the past three months.

View Catalog & Updates

Actively Exploited Vulnerabilities

Prev Next

BlueHammer, RedSun, and UnDefend: Three Windows Defender Zero-Days Exploited in the Wild (socradar.io)

17 Apr 2026

Three Microsoft Defender Zero-Days Actively Exploited; Two Still Unpatched (thehackernews.com)

17 Apr 2026

CISA Warns of Apache ActiveMQ Input Validation Vulnerability Exploited in Attacks (cybersecuritynews.com)

17 Apr 2026

Leaked Windows Defender 0-Day Vulnerability Actively Exploited in Attacks (cybersecuritynews.com)

17 Apr 2026

Researcher drops two more Microsoft Defender zero-days, all three now exploited in the wild (www.helpnetsecurity.com)

17 Apr 2026

Recent Apache ActiveMQ Vulnerability Exploited in the Wild (www.securityweek.com)

17 Apr 2026

CISA flags Apache ActiveMQ flaw as actively exploited in attacks (www.bleepingcomputer.com)

17 Apr 2026

U.S. CISA adds a flaw in Apache ActiveMQ to its Known Exploited Vulnerabilities catalog (securityaffairs.com)

17 Apr 2026

Recently leaked Windows zero-days now exploited in attacks (www.bleepingcomputer.com)

17 Apr 2026

Apache ActiveMQ CVE-2026-34197 Added to CISA KEV Amid Active Exploitation (thehackernews.com)

16 Apr 2026

Nginx-ui MCP missing authentication flaw actively exploited (www.scworld.com)

16 Apr 2026

April 2026 Patch Tuesday: 165 Vulnerabilities, Two Zero-Days Including One Actively Exploited (socradar.io)

16 Apr 2026

Nginx-ui Vulnerability Actively Exploited in Attack – Enables Full Server Takeover (cybersecuritynews.com)

16 Apr 2026

31 High-Impact Vulnerabilities Exploited in March as Interlock Hits Cisco FMC Zero-Day (cybersecuritynews.com)

16 Apr 2026

Unveiling the Exploitative Tactics: Windows SyncAppvPublishingServer Exploited in the Wild to… (surajmundalik.medium.com)

16 Apr 2026

[Guest Diary] Compromised DVRs and Finding Them in the Wild, (Thu, Apr 16th) (isc.sans.edu)

15 Apr 2026

Critical Nginx UI auth bypass flaw now actively exploited in the wild (www.bleepingcomputer.com)

15 Apr 2026

Flashpoint Surpasses Cataloging 7,000 Known Exploited Vulnerabilities as Disclosure Volume Accelerates (securityboulevard.com)

15 Apr 2026

U.S. CISA adds Microsoft SharePoint Server, and Microsoft Office Excel flaws to its Known Exploited Vulnerabilities catalog (securityaffairs.com)

15 Apr 2026

CISA flags Windows Task Host vulnerability as exploited in attacks (www.bleepingcomputer.com)

15 Apr 2026

Exploited Vulnerability Exposes Nginx Servers to Hacking (www.securityweek.com)

15 Apr 2026

Actively Exploited nginx-ui Flaw (CVE-2026-33032) Enables Full Nginx Server Takeover (thehackernews.com)

15 Apr 2026

Microsoft Patch Tuesday for April 2026 fixed actively exploited SharePoint zero-day (securityaffairs.com)

15 Apr 2026

Microsoft SharePoint Server 0-Day Vulnerability Actively Exploited in Attacks (cybersecuritynews.com)

14 Apr 2026

Active exploitation of old Microsoft bugs prompt CISA catalog inclusion (www.scworld.com)

14 Apr 2026

Microsoft Patches Exploited SharePoint Zero-Day and 160 Other Vulnerabilities (www.securityweek.com)

14 Apr 2026

Microsoft Patch Tuesday April 2026 – 168 Vulnerabilities Fixed, Including Actively Exploited 0-day (cybersecuritynews.com)

14 Apr 2026

CISA Warns of Microsoft Exchange and Windows CLFS Vulnerabilities Exploited in Attacks (cybersecuritynews.com)

14 Apr 2026

Critical ShowDoc RCE Vulnerability Active Exploited in the Wild (cybersecuritynews.com)

14 Apr 2026

ShowDoc vulnerability actively exploited (www.scworld.com)

14 Apr 2026

Obsidian Plugin Exploited for Cross Platform Malware Delivery (medium.com)

14 Apr 2026

CISA Warns of Fortinet SQL Injection Vulnerability Actively Exploited in Attacks (cybersecuritynews.com)

14 Apr 2026

Organizations Warned of Exploited Windows, Adobe Acrobat Vulnerabilities (www.securityweek.com)

14 Apr 2026

U.S. CISA adds Adobe, Fortinet, Microsoft Exchange Server, and Microsoft Windows flaws to its Known Exploited Vulnerabilities catalog (securityaffairs.com)

14 Apr 2026

ShowDoc RCE Flaw CVE-2025-0520 Actively Exploited on Unpatched Servers (thehackernews.com)

14 Apr 2026

CISA Adds 6 Known Exploited Flaws in Fortinet, Microsoft, and Adobe Software (thehackernews.com)

14 Apr 2026

Adobe Patches Actively Exploited Zero-Day That Lingered for Months (www.darkreading.com)

13 Apr 2026

Marimo RCE Vulnerability Exploited in the Within 10 Hours of Disclosure (cybersecuritynews.com)

13 Apr 2026

Critical flaw in Marimo Python notebook exploited within 10 hours of disclosure (www.csoonline.com)

13 Apr 2026

Adobe issues emergency fix for Acrobat Reader flaw exploited in the wild (CVE-2026-34621) (www.helpnetsecurity.com)

13 Apr 2026

Adobe Patches Acrobat Reader 0-Day Vulnerability Exploited in the Wild (cybersecuritynews.com)

13 Apr 2026

Adobe fixes actively exploited Acrobat Reader flaw CVE-2026-34621 (securityaffairs.com)

12 Apr 2026

Critical Marimo pre-auth RCE flaw now under active exploitation (www.bleepingcomputer.com)

12 Apr 2026

Adobe Patches Reader Zero-Day Exploited for Months (www.securityweek.com)

12 Apr 2026

Adobe Patches Actively Exploited Acrobat Reader Flaw CVE-2026-34621 (thehackernews.com)

12 Apr 2026

CVE-2026-39987: Marimo RCE exploited in hours after disclosure (securityaffairs.com)

11 Apr 2026

Unpatched Adobe Reader Zero-Day Exploited for Months via Weaponized PDFs Targeting Energy and… (medium.com)

11 Apr 2026

Adobe Reader zero-day vulnerability in active exploitation (www.sophos.com)

10 Apr 2026

Marimo RCE Flaw CVE-2026-39987 Exploited Within 10 Hours of Disclosure (thehackernews.com)

10 Apr 2026

Critical Marimo Flaw Exploited Hours After Public Disclosure (www.securityweek.com)

10 Apr 2026

Malicious PDF reveals active Adobe Reader zero-day in the wild (securityaffairs.com)

09 Apr 2026

Acrobat Reader zero-day exploited in the wild for many months (www.helpnetsecurity.com)

09 Apr 2026

Adobe Reader Zero-Day Exploited via Malicious PDFs Since December 2025 (thehackernews.com)

09 Apr 2026

CISA Warns of Critical Ivanti EPMM Code Injection Vulnerability Exploited in Attacks (cybersecuritynews.com)

09 Apr 2026

Adobe Reader Zero-Day Exploited for Months: Researcher (www.securityweek.com)

09 Apr 2026

U.S. CISA adds a flaw in Ivanti EPMM to its Known Exploited Vulnerabilities catalog (securityaffairs.com)

08 Apr 2026

CISA orders feds to patch exploited Ivanti EPMM flaw by Sunday (www.bleepingcomputer.com)

08 Apr 2026

Active exploitation of max severity Flowise bug threatens broad compromise (www.scworld.com)

07 Apr 2026

Max severity Flowise RCE vulnerability now exploited in attacks (www.bleepingcomputer.com)

07 Apr 2026

BlueHammer PoC for Windows Defender Exploited by Researchers to Escalate Privileges (cybersecuritynews.com)

07 Apr 2026

Flowise AI Agent Builder Injection Vulnerability Exploited in Attacks, 15,000+ Instances Exposed (cybersecuritynews.com)

07 Apr 2026

ClickFix Meets AI: A Multi-Platform Attack Targeting macOS in the Wild (medium.com)

07 Apr 2026

U.S. CISA adds a flaw in Fortinet FortiClient EMS to its Known Exploited Vulnerabilities catalog (securityaffairs.com)

07 Apr 2026

AppsFlyer SDK Exploited in New Supply Chain Crypto Attack (securityboulevard.com)

07 Apr 2026

Attackers exploited this critical FortiClient EMS bug as a 0-day (go.theregister.com)

06 Apr 2026

CVE-2026-35616: Fortinet FortiClientEMS improper access control vulnerability exploited in the wild (securityboulevard.com)

06 Apr 2026

CISA Warns of Fortinet 0-Day Vulnerability Actively Exploited in Attacks (cybersecuritynews.com)

06 Apr 2026

Fortinet patches actively exploited flaw in FortiClient EMS. (thecyberwire.com)

06 Apr 2026

CISA orders feds to patch Fortinet flaw exploited in attacks by Friday (www.bleepingcomputer.com)

06 Apr 2026

CVE-2026-35616: Fortinet FortiClientEMS improper access control vulnerability exploited in the wild (www.tenable.com)

06 Apr 2026

CVE-2026-35616: FortiClient EMS Flaw Under Active Exploitation (www.esecurityplanet.com)

06 Apr 2026

Fortinet Rushes Emergency Fixes for Exploited Zero-Day (www.securityweek.com)

06 Apr 2026

CVE-2026-35616: Fortinet fixes actively exploited high-severity flaw (securityaffairs.com)

06 Apr 2026

CISA Adds TrueConf Vulnerability to KEV Catalog Following Active Exploitation (cybersecuritynews.com)

05 Apr 2026

2,000+ FortiClient EMS Instances Exposed Online Amid Active RCE Vulnerability Exploits in the Wild (cybersecuritynews.com)

05 Apr 2026

New FortiClient EMS flaw exploited in attacks, emergency patch released (www.bleepingcomputer.com)

05 Apr 2026

Week in review: Axios npm supply chain compromise, critical FortiClient EMS bugs exploited (www.helpnetsecurity.com)

05 Apr 2026

36 Malicious npm Packages Exploited Redis, PostgreSQL to Deploy Persistent Implants (thehackernews.com)

05 Apr 2026

Fortinet Patches Actively Exploited CVE-2026-35616 in FortiClient EMS (thehackernews.com)

05 Apr 2026

U.S. CISA adds a flaw in TrueConf Client to its Known Exploited Vulnerabilities catalog (securityaffairs.com)

04 Apr 2026

FortiClient EMS zero-day exploited, emergency hotfixes available (CVE-2026-35616) (www.helpnetsecurity.com)

04 Apr 2026

Critical Fortinet FortiClient EMS 0-Day Vulnerability Actively Exploited in the Wild (cybersecuritynews.com)

04 Apr 2026

TrueConf Zero-Day Exploited in Asian Government Attacks (www.securityweek.com)

03 Apr 2026

Claude Code source leak exploited to spread malware (www.helpnetsecurity.com)

03 Apr 2026

React2Shell Exploited in Large-Scale Credential Harvesting Campaign (www.securityweek.com)

03 Apr 2026

Actively exploited Chrome zero-day patched (www.scworld.com)

02 Apr 2026

CVE-2026-5281: Chrome WebGPU Zero-Day Exploited In The Wild (socradar.io)

02 Apr 2026

CISA Warns of Chrome 0-Day Vulnerability Actively Exploited in Attacks (cybersecuritynews.com)

02 Apr 2026

TrueConf zero-day vulnerability exploited to target government networks (www.helpnetsecurity.com)

02 Apr 2026

U.S. CISA adds a flaw in Google Dawn to its Known Exploited Vulnerabilities catalog (securityaffairs.com)

01 Apr 2026

Chrome Vulnerability CVE-2026-5281 Exploited in the Wild (www.esecurityplanet.com)

01 Apr 2026

Google fixes fourth actively exploited Chrome zero-day of 2026 (securityaffairs.com)

01 Apr 2026

Exploited Zero-Day Among 21 Vulnerabilities Patched in Chrome (www.securityweek.com)

01 Apr 2026

New Chrome Zero-Day CVE-2026-5281 Under Active Exploitation — Patch Released (thehackernews.com)

01 Apr 2026

New Chrome Zero-Day Vulnerability Actively Exploited in Attacks — Patch Now (cybersecuritynews.com)

01 Apr 2026

Google fixes Chrome zero-day with in-the-wild exploit (CVE-2026-5281) (www.helpnetsecurity.com)

01 Apr 2026

Google fixes fourth Chrome zero-day exploited in attacks in 2026 (www.bleepingcomputer.com)

01 Apr 2026

Critical Fortinet FortiClient EMS vulnerability under attack (www.scworld.com)

31 Mar 2026

5-month-old F5 BIG-IP DoS bug becomes critical RCE exploited in the wild (www.csoonline.com)

31 Mar 2026

TrueConf Zero-Day Exploited in Attacks on Southeast Asian Government Networks (thehackernews.com)

31 Mar 2026

U.S. CISA adds a flaw in Citrix NetScaler to its Known Exploited Vulnerabilities catalog (securityaffairs.com)

31 Mar 2026

CISA Warns of Citrix NetScaler Vulnerability Actively Exploited in Attacks (cybersecuritynews.com)

31 Mar 2026

CISA orders feds to patch actively exploited Citrix flaw by Thursday (www.bleepingcomputer.com)

31 Mar 2026

Fortinet hit by another exploited cybersecurity flaw (www.csoonline.com)

30 Mar 2026

F5 BIG-IP APM DoS bug exploited as an RCE, added to CISA list (www.scworld.com)

30 Mar 2026

Critical Citrix NetScaler memory flaw actively exploited in attacks (www.bleepingcomputer.com)

30 Mar 2026

Citrix NetScaler bug exploited in days, may be multiple flaws in a trench coat (go.theregister.com)

30 Mar 2026

Critical Fortinet FortiClient EMS flaw exploited for Remote Code Execution (securityaffairs.com)

30 Mar 2026

Critical Fortinet Forticlient EMS Vulnerability Exploited in Attacks (cybersecuritynews.com)

30 Mar 2026

Critical Fortinet Forticlient EMS flaw now exploited in attacks (www.bleepingcomputer.com)

30 Mar 2026

F5 BIG-IP DoS Flaw Upgraded to Critical RCE, Now Exploited in the Wild (www.securityweek.com)

30 Mar 2026

CISA Warns of F5 BIG-IP Vulnerability Actively Exploited in Attacks (cybersecuritynews.com)

28 Mar 2026

U.S. CISA adds a flaw in F5 BIG-IP AMP to its Known Exploited Vulnerabilities catalog (securityaffairs.com)

28 Mar 2026

Critical Langflow AI bug exploited within 20 hours added to CISA list (www.scworld.com)

27 Mar 2026

U.S. CISA adds an Aquasecurity Trivy flaw to its Known Exploited Vulnerabilities catalog (securityaffairs.com)

27 Mar 2026

U.S. CISA adds a Langflow flaw to its Known Exploited Vulnerabilities catalog (securityaffairs.com)

26 Mar 2026

CISA: New Langflow flaw actively exploited to hijack AI workflows (www.bleepingcomputer.com)

26 Mar 2026

Critical Flaw in Langflow AI Platform Under Attack (www.darkreading.com)

26 Mar 2026

CISA Warns of Langflow Code Injection Vulnerability Exploited in Attacks (cybersecuritynews.com)

26 Mar 2026

Critical NetScaler ADC, Gateway flaw may soon be exploited (CVE-2026-3055) (www.helpnetsecurity.com)

24 Mar 2026

Trending Adversarial Group(s)

Top 10 Adverserial groups suspected or known to be actively targetting vulnerabilities.

Zero Day ( 0-day)

Prev Next

BlueHammer, RedSun, and UnDefend: Three Windows Defender Zero-Days Exploited in the Wild (socradar.io)

17 Apr 2026

Three Microsoft Defender Zero-Days Actively Exploited; Two Still Unpatched (thehackernews.com)

17 Apr 2026

Leaked Windows Defender 0-Day Vulnerability Actively Exploited in Attacks (cybersecuritynews.com)

17 Apr 2026

Researcher drops two more Microsoft Defender zero-days, all three now exploited in the wild (www.helpnetsecurity.com)

17 Apr 2026

Recently leaked Windows zero-days now exploited in attacks (www.bleepingcomputer.com)

17 Apr 2026

Microsoft Defender 0-Day Vulnerability “RedSun” Enables Full SYSTEM Access (cybersecuritynews.com)

17 Apr 2026

Microsoft awards $2.3 million in Zero Day Quest hacking contest (www.scworld.com)

16 Apr 2026

New Microsoft Defender “RedSun” zero-day PoC grants SYSTEM privileges (www.bleepingcomputer.com)

16 Apr 2026

ThreatsDay Bulletin: Defender 0-Day, SonicWall Brute-Force, 17-Year-Old Excel RCE and 15 More Stories (thehackernews.com)

16 Apr 2026

April 2026 Patch Tuesday: 165 Vulnerabilities, Two Zero-Days Including One Actively Exploited (socradar.io)

16 Apr 2026

Microsoft Paid Out $2.3 Million at Zero Day Quest 2026 Hacking Contest (www.securityweek.com)

16 Apr 2026

31 High-Impact Vulnerabilities Exploited in March as Interlock Hits Cisco FMC Zero-Day (cybersecuritynews.com)

16 Apr 2026

Patch Tuesday notes: Microsoft addresses two zero-days. (thecyberwire.com)

15 Apr 2026

Microsoft pays $2.3M for cloud and AI flaws at Zero Day Quest (www.bleepingcomputer.com)

15 Apr 2026

ZDI-26-258: (0Day) Docker Desktop extension-manager Exposed Dangerous Function Local Privilege Escalation Vulnerability (www.zerodayinitiative.com)

15 Apr 2026

ZDI-26-259: (0Day) Docker Desktop cli-plugins Incorrect Permission Assignment Local Privilege Escalation Vulnerability (www.zerodayinitiative.com)

15 Apr 2026

ZDI-26-260: (0Day) Docker Desktop System Editor Uncontrolled Search Path Element Privilege Escalation Vulnerability (www.zerodayinitiative.com)

15 Apr 2026

ZDI-26-261: (0Day) Docker Desktop credentialHelper Directory Traversal Privilege Escalation Vulnerability (www.zerodayinitiative.com)

15 Apr 2026

April Patch Tuesday fixes two zero-days, including one under active attack (securityboulevard.com)

15 Apr 2026

April Patch Tuesday fixes two zero-days, including one under active attack (www.malwarebytes.com)

15 Apr 2026

Microsoft Issues Patches for SharePoint Zero-Day and 168 Other New Vulnerabilities (thehackernews.com)

15 Apr 2026

Microsoft Defender 0-Day Vulnerability Enables Privilege Escalation Attack (cybersecuritynews.com)

15 Apr 2026

Microsoft Patch Tuesday for April 2026 fixed actively exploited SharePoint zero-day (securityaffairs.com)

15 Apr 2026

Microsoft SharePoint Server 0-Day Vulnerability Actively Exploited in Attacks (cybersecuritynews.com)

14 Apr 2026

April Patch Tuesday roundup: Zero day vulnerabilities and critical bugs (www.csoonline.com)

14 Apr 2026

Microsoft Patches Exploited SharePoint Zero-Day and 160 Other Vulnerabilities (www.securityweek.com)

14 Apr 2026

Microsoft April 2026 Patch Tuesday fixes 167 flaws, 2 zero-days (www.bleepingcomputer.com)

14 Apr 2026

Microsoft Patch Tuesday April 2026 – 168 Vulnerabilities Fixed, Including Actively Exploited 0-day (cybersecuritynews.com)

14 Apr 2026

Researcher Reverse Engineered 0-Day Used to Disable CrowdStrike EDR (cybersecuritynews.com)

14 Apr 2026

Adobe Patches Actively Exploited Zero-Day That Lingered for Months (www.darkreading.com)

13 Apr 2026

Adobe rolls out emergency fix for Acrobat, Reader zero-day flaw (www.bleepingcomputer.com)

13 Apr 2026

Simply opening a PDF could trigger this Adobe Reader zero-day (securityboulevard.com)

13 Apr 2026

Simply opening a PDF could trigger this Adobe Reader zero-day (www.malwarebytes.com)

13 Apr 2026

CVE-2026-34621: Adobe Acrobat Reader Zero-Day Enables Arbitrary Code Execution via Crafted PDF (socradar.io)

13 Apr 2026

Adobe Patches Acrobat Reader 0-Day Vulnerability Exploited in the Wild (cybersecuritynews.com)

13 Apr 2026

Week in review: Windows zero-day exploit leaked, Patch Tuesday forecast (www.helpnetsecurity.com)

12 Apr 2026

Adobe Patches Reader Zero-Day Exploited for Months (www.securityweek.com)

12 Apr 2026

Saturday Security: AI Could Trigger a Zero-Day Exploit Tsunami (securityboulevard.com)

11 Apr 2026

Unpatched Adobe Reader Zero-Day Exploited for Months via Weaponized PDFs Targeting Energy and… (medium.com)

11 Apr 2026

Adobe Reader zero-day vulnerability in active exploitation (www.sophos.com)

10 Apr 2026

The PDF You Just Opened Could Be Watching You: Inside the Adobe Reader Zero-Day (socfortress.medium.com)

10 Apr 2026

Adobe Reader zero-day exploit used in months-long cyber campaign (www.scworld.com)

10 Apr 2026

In Other News: Cyberattack Stings Stryker, Windows Zero-Day, China Supercomputer Hack (www.securityweek.com)

10 Apr 2026

Storm-1175: China’s Zero-Day Ransomware Machine Hits Critical Infrastructure at Record Speed (medium.com)

10 Apr 2026

'BlueHammer' Windows Zero-Day Exploit Signals Microsoft Bug Disclosure Issues (www.darkreading.com)

09 Apr 2026

Malicious PDF reveals active Adobe Reader zero-day in the wild (securityaffairs.com)

09 Apr 2026

Claude Mythos Preview identifies 27-year-old bug, finds 'thousands' of zero-days in weeks (www.scworld.com)

09 Apr 2026

Months-old Adobe Reader zero-day uses PDFs to size up targets (go.theregister.com)

09 Apr 2026

We Confirmed the BlueHammer Zero-Day Before Microsoft Said a Word (medium.com)

09 Apr 2026

Acrobat Reader zero-day exploited in the wild for many months (www.helpnetsecurity.com)

09 Apr 2026

Adobe Reader Zero-Day Exploited via Malicious PDFs Since December 2025 (thehackernews.com)

09 Apr 2026

Hackers exploiting Acrobat Reader zero-day flaw since December (www.bleepingcomputer.com)

09 Apr 2026

Adobe Reader Zero-Day Exploited for Months: Researcher (www.securityweek.com)

09 Apr 2026

BlueHammer: Windows zero-day exploit leaked (www.helpnetsecurity.com)

08 Apr 2026

[un]prompted 2026 – FENRIR: Al Hunting For Al Zero-Days At Scale (securityboulevard.com)

08 Apr 2026

Hackers Actively Attacking Adobe Reader Users Using Sophisticated 0-Day Exploit (cybersecuritynews.com)

08 Apr 2026

Anthropic Unveils Claude Mythos Preview With Powerful Zero-Day Detection Capabilities (cybersecuritynews.com)

08 Apr 2026

The zero-day timeline just collapsed. Here’s what security leaders do next (www.csoonline.com)

08 Apr 2026

Anthropic's Claude Mythos Finds Thousands of Zero-Day Flaws Across Major Systems (thehackernews.com)

08 Apr 2026

Anthropic’s new AI model finds and exploits zero-days across every major OS and browser (www.helpnetsecurity.com)

07 Apr 2026

Anthropic: All your zero-days are belong to Mythos (go.theregister.com)

07 Apr 2026

Fortinet releases emergency hotfix for FortiClient EMS zero-day flaw (www.csoonline.com)

07 Apr 2026

Windows zero-day vulnerability 'BlueHammer' exploit code released (www.scworld.com)

07 Apr 2026

The Edge of the Abyss: How APTs Reverse Engineer Corporate Firewalls for 0-Days (medium.com)

07 Apr 2026

BlueHammer Windows Zero-Day: Privilege Escalation Risk (socradar.io)

07 Apr 2026

Experts published unpatched Windows zero-day BlueHammer (securityaffairs.com)

07 Apr 2026

Microsoft Warns Storm-1175 Exploits Web-Facing Assets 0-Day Flaws in Medusa Ransomware Attacks (cybersecuritynews.com)

07 Apr 2026

China-Linked Storm-1175 Exploits Zero-Days to Rapidly Deploy Medusa Ransomware (thehackernews.com)

07 Apr 2026

Researcher Released Windows Defender 0-Day Exploit Code, Allowing Attackers to Gain Full Access (cybersecuritynews.com)

06 Apr 2026

Fortinet Issues Emergency Patch for FortiClient Zero-Day (www.darkreading.com)

06 Apr 2026

Disgruntled researcher leaks “BlueHammer” Windows zero-day exploit (www.bleepingcomputer.com)

06 Apr 2026

Attackers exploited this critical FortiClient EMS bug as a 0-day (go.theregister.com)

06 Apr 2026

Microsoft links Medusa ransomware affiliate to zero-day attacks (www.bleepingcomputer.com)

06 Apr 2026

CISA Warns of Fortinet 0-Day Vulnerability Actively Exploited in Attacks (cybersecuritynews.com)

06 Apr 2026

ZDI-26-257: (0Day) Labcenter Electronics Proteus PDSPRJ File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability (www.zerodayinitiative.com)

06 Apr 2026

⚡ Weekly Recap: Axios Hack, Chrome 0-Day, Fortinet Exploits, Paragon Spyware and More (thehackernews.com)

06 Apr 2026

ZDI-26-256: (0Day) Labcenter Electronics Proteus PDSPRJ File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability (www.zerodayinitiative.com)

06 Apr 2026

ZDI-26-254: (0Day) Labcenter Electronics Proteus PDSPRJ File Parsing Type Confusion Remote Code Execution Vulnerability (www.zerodayinitiative.com)

06 Apr 2026

ZDI-26-255: (0Day) Labcenter Electronics Proteus PDSPRJ File Parsing Out-Of-Bounds Write Remote Code Execution Vulnerability (www.zerodayinitiative.com)

06 Apr 2026

Fortinet Rushes Emergency Fixes for Exploited Zero-Day (www.securityweek.com)

06 Apr 2026

The Zero-Day Misinformation Campaign (medium.com)

06 Apr 2026

FortiClient EMS zero-day exploited, emergency hotfixes available (CVE-2026-35616) (www.helpnetsecurity.com)

04 Apr 2026

Critical Fortinet FortiClient EMS 0-Day Vulnerability Actively Exploited in the Wild (cybersecuritynews.com)

04 Apr 2026

Google patches fourth Chrome zero-day so far this year (www.csoonline.com)

03 Apr 2026

TrueConf Zero-Day Exploited in Asian Government Attacks (www.securityweek.com)

03 Apr 2026

Actively exploited Chrome zero-day patched (www.scworld.com)

02 Apr 2026

CVE-2026-5281: Chrome WebGPU Zero-Day Exploited In The Wild (socradar.io)

02 Apr 2026

CISA Warns of Chrome 0-Day Vulnerability Actively Exploited in Attacks (cybersecuritynews.com)

02 Apr 2026

TrueConf zero-day vulnerability exploited to target government networks (www.helpnetsecurity.com)

02 Apr 2026

Hackers exploit TrueConf zero-day to push malicious software updates (www.bleepingcomputer.com)

01 Apr 2026

Google fixes fourth actively exploited Chrome zero-day of 2026 (securityaffairs.com)

01 Apr 2026

Vim and GNU Emacs: Claude Code helpfully found zero-day exploits for both (www.csoonline.com)

01 Apr 2026

Attacks with TrueConf zero-day hit Southeast Asian governments (www.scworld.com)

01 Apr 2026

How Sonatype’s Container Scanning Protects You From Zero-Days (securityboulevard.com)

01 Apr 2026

Exploited Zero-Day Among 21 Vulnerabilities Patched in Chrome (www.securityweek.com)

01 Apr 2026

New Chrome Zero-Day CVE-2026-5281 Under Active Exploitation — Patch Released (thehackernews.com)

01 Apr 2026

New Chrome Zero-Day Vulnerability Actively Exploited in Attacks — Patch Now (cybersecuritynews.com)

01 Apr 2026

Google fixes Chrome zero-day with in-the-wild exploit (CVE-2026-5281) (www.helpnetsecurity.com)

01 Apr 2026

Google fixes fourth Chrome zero-day exploited in attacks in 2026 (www.bleepingcomputer.com)

01 Apr 2026

TrueConf Zero-Day Exploited in Attacks on Southeast Asian Government Networks (thehackernews.com)

31 Mar 2026

Claude AI Discovers Zero-Day RCE Vulnerabilities in Vim and Emacs (cybersecuritynews.com)

30 Mar 2026

ZDI-26-245: (0Day) aws-mcp-server AWS CLI Command Injection Remote Code Execution Vulnerability (www.zerodayinitiative.com)

30 Mar 2026

ZDI-26-246: (0Day) aws-mcp-server Command Injection Remote Code Execution Vulnerability (www.zerodayinitiative.com)

30 Mar 2026

It’s a mystery … alleged unpatched Telegram zero-day allows device takeover, but Telegram denies (securityaffairs.com)

30 Mar 2026

To What Extent Can Zero-Day Attacks Be Predicted? (securityboulevard.com)

27 Mar 2026

ZDI-26-226: (0Day) Microsoft Azure MCP AzureCliService Command Injection Remote Code Execution Vulnerability (www.zerodayinitiative.com)

24 Mar 2026

[FORECAST] Will RedNovember be publicly reported to exploit at least one zero-day vulnerability in… (medium.com)

24 Mar 2026

CISA Warns of Cisco Secure Firewall Management Center 0-Day Exploited in Ransomware Attacks (cybersecuritynews.com)

20 Mar 2026

Interlock ransomware targeting of max severity Cisco FMC zero-day precedes disclosure (www.scworld.com)

19 Mar 2026

Ransomware group exploited Cisco firewall vulnerability as a zero day, weeks before a patch appeared (www.csoonline.com)

19 Mar 2026

DarkSword iOS Exploit Kit Uses 6 Flaws, 3 Zero-Days for Full Device Takeover (thehackernews.com)

19 Mar 2026

Cisco Firewall Vulnerability Exploited as Zero-Day in Interlock Ransomware Attacks (www.securityweek.com)

19 Mar 2026

CISA Warns of Zimbra, SharePoint Flaw Exploits; Cisco Zero-Day Hit in Ransomware Attacks (thehackernews.com)

19 Mar 2026

Cisco Firewall 0-day Vulnerability Exploited in the Wild to Deploy Interlock Ransomware (cybersecuritynews.com)

18 Mar 2026

Ransomware gang exploits Cisco flaw in zero-day attacks since January (www.bleepingcomputer.com)

18 Mar 2026

Interlock Ransomware Exploits Cisco FMC Zero-Day CVE-2026-20131 for Root Access (thehackernews.com)

18 Mar 2026

CISA Warns of Chrome 0-Day Vulnerabilities Exploited in Attacks (cybersecuritynews.com)

17 Mar 2026

Actively exploited Google Chrome zero-days receive emergency fixes (www.scworld.com)

16 Mar 2026

⚡ Weekly Recap: Chrome 0-Days, Router Botnets, AWS Breach, Rogue AI Agents & More (thehackernews.com)

16 Mar 2026

90-Day Challenge: SOC Analyst L1 (medium.com)

14 Mar 2026

CVE News and Media Insights

Track CVE news reports and advisories in our news insights page. Quick filters by threat status, government advisory, top threat groups, top CVEs being talked about, and more. 90 days of CVE specific news with keyword search as well as a handy quick link to disaply in article CVE mentions taking you directly to our detailed CVE report.

View News Insights
By using this site, you agree to our Terms & Conditions.

COOKIE / PRIVACY POLICY: This website uses essential cookies required for basic site functionality. We also use analytics cookies to understand how the website is used. We do not use cookies for marketing or personalization, and we do not sell or share any personal data with third parties.

Terms & Privacy Policy