Nation-State
The Chinese-language input method editor for Windows can allow attackers to execute arbitrary code remotely.
Hi, what are you looking for?
SecurityWeek
All posts tagged "exploit"
Endpoint Security
The exploit provides full System privileges on Windows machines running the September 2026 patches.
Vulnerabilities
The proof-of-concept (PoC) exploits lead to privilege escalation, spawning a shell with System privileges.
Artificial Intelligence
Forescout researchers used Claude AI to port a remote code execution exploit between WAGO PLC models.
Vulnerabilities
Dropped on Patch Tuesday, the exploit allows any user to spawn a shell with System privileges.
Vulnerabilities
CISA says threat actors are exploiting a recently patched SharePoint remote code execution vulnerability (CVE-2026-45659).
Mobile & Wireless
The vulnerability exploited by the Usbliter8 exploit cannot be patched and a PoC exploit has been released by researchers.
Vulnerabilities
Four decades of incident response experience suggest that exploits are often the symptom, not the root cause, of today’s cybersecurity failures.
Vulnerabilities
Exploiting a race condition in Microsoft Defender, the exploit leads to local privilege escalation to SYSTEM.
Artificial Intelligence
Public LLM models with safeguards turned off can also build working exploits, increasing patch gap risks.
Vulnerabilities
The one-click vulnerability allows attackers to execute arbitrary code on self-hosted Flowise servers by tricking users into importing a malicious chatflow.
Vulnerabilities
The researcher dropped the MiniPlasma exploit that uses the original proof-of-concept (PoC) code targeting the bug.
Artificial Intelligence
Participants demonstrated exploits for Windows, Linux, VMware, Nvidia, and AI products.
Vulnerabilities
Introduced in 2008, the critical-severity security defect was patched this week in NGINX Plus and NGINX open source.
Artificial Intelligence
The zero-day was designed to bypass 2FA and it was developed by a prominent cybercrime group.
Mobile & Wireless
Targeting six iOS vulnerabilities and leading to full device compromise, the exploit chain is meant for surveillance.
Malware & Threats
The botnet has increased its activity, peaking at 15,000 exploitation attempts per day, and taking a more targeted approach.
Mobile & Wireless
The company has released iOS and iPadOS versions 16.7.15 and 15.8.7 to patch the vulnerabilities.
Mobile & Wireless
Google and iVerify analysis reveals a powerful exploit kit originally used by Russian state actors that is now appearing in broader criminal campaigns.
Cybercrime
Peter Williams was sentenced to 87 months in prison for selling cyber exploits to a Russian broker.
Artificial Intelligence
Microsoft fixed vulnerabilities across Azure and AI-branded products, with privilege escalation flaws accounting for the majority.
Malware & Threats
Artificial Intelligence
Artificial Intelligence
Artificial Intelligence
Noteworthy stories that might have slipped under the radar: Mandiant's 2026 AI risk report, PhantomRaven malware used by bug bounty hunter, WordPress plugin bug...
Artificial Intelligence
Data Breaches
Malware & Threats
Vulnerabilities
