Vulnerabilities
$1.2 million was paid out at Pwn2Own Ireland 2026 for exploits targeting phones, printers, smart speakers, smart home hubs, and AI infrastructure and coding...
Hi, what are you looking for?
SecurityWeek
All posts tagged "exploit"
Nation-State
The Chinese-language input method editor for Windows can allow attackers to execute arbitrary code remotely.
Endpoint Security
The exploit provides full System privileges on Windows machines running the September 2026 patches.
Vulnerabilities
The proof-of-concept (PoC) exploits lead to privilege escalation, spawning a shell with System privileges.
Artificial Intelligence
Forescout researchers used Claude AI to port a remote code execution exploit between WAGO PLC models.
Vulnerabilities
Dropped on Patch Tuesday, the exploit allows any user to spawn a shell with System privileges.
Vulnerabilities
CISA says threat actors are exploiting a recently patched SharePoint remote code execution vulnerability (CVE-2026-45659).
Mobile & Wireless
The vulnerability exploited by the Usbliter8 exploit cannot be patched and a PoC exploit has been released by researchers.
Vulnerabilities
Four decades of incident response experience suggest that exploits are often the symptom, not the root cause, of today’s cybersecurity failures.
Vulnerabilities
Exploiting a race condition in Microsoft Defender, the exploit leads to local privilege escalation to SYSTEM.
Artificial Intelligence
Public LLM models with safeguards turned off can also build working exploits, increasing patch gap risks.
Vulnerabilities
The one-click vulnerability allows attackers to execute arbitrary code on self-hosted Flowise servers by tricking users into importing a malicious chatflow.
Vulnerabilities
The researcher dropped the MiniPlasma exploit that uses the original proof-of-concept (PoC) code targeting the bug.
Artificial Intelligence
Participants demonstrated exploits for Windows, Linux, VMware, Nvidia, and AI products.
Vulnerabilities
Introduced in 2008, the critical-severity security defect was patched this week in NGINX Plus and NGINX open source.
Artificial Intelligence
The zero-day was designed to bypass 2FA and it was developed by a prominent cybercrime group.
Mobile & Wireless
Targeting six iOS vulnerabilities and leading to full device compromise, the exploit chain is meant for surveillance.
Malware & Threats
The botnet has increased its activity, peaking at 15,000 exploitation attempts per day, and taking a more targeted approach.
Mobile & Wireless
The company has released iOS and iPadOS versions 16.7.15 and 15.8.7 to patch the vulnerabilities.
Mobile & Wireless
Google and iVerify analysis reveals a powerful exploit kit originally used by Russian state actors that is now appearing in broader criminal campaigns.
Malware & Threats
The botnet was created and operated for financial gain by Android OEM/ODM Videostrong Technology.
Malware & Threats
Data Breaches
Hackers exploited a flaw in third-party software and stole the personal information of school district staff and students.
Mobile & Wireless
