Vulnerabilities
The critical flaw, tracked as CVE-2025-20188 (CVSS score of 10/10), allows attackers to execute arbitrary code remotely.
Hi, what are you looking for?
SecurityWeek
All posts tagged "exploit"
Vulnerabilities
Pwn2Own participants demonstrated exploits against VMs, AI, browsers, servers, containers, and operating systems.
Vulnerabilities
Pwn2Own participants have earned tens of thousands of dollars for Red Hat, Windows, Oracle VirtualBox, Docker Desktop, and AI exploits.
Vulnerabilities
The number of exploited zero-days seen by Google in 2024 dropped to 75, from 98 observed in the previous year.
Threat Intelligence
Desired Effect provides an ethical vulnerability exchange marketplace to help defenders get ahead of attackers.
Malware & Threats
CISA has published its analysis of Resurge, a SpawnChimera malware variant used in attacks targeting a recent Ivanti Connect Secure zero-day.
Vulnerabilities
A Russian exploit acquisition firm is offering up to $4 million for a full-chain exploit targeting messaging service Telegram.
IoT Security
Hackers earned more than $700,000 on the first two days of Pwn2Own Automotive 2025 for EV charger and infotainment exploits.
Vulnerabilities
Pwn2Own Ireland 2024 participants have earned half a million dollars on the first day for hacking NAS devices, cameras, speakers and printers.
Vulnerabilities
Microsoft's security response team pushed out documentation for almost 90 vulnerabilities across Windows and OS components and marked several flaws in the actively exploited...
Incident Response
CrowdStrike dismissed claims that the Falcon EDR sensor bug could be exploited for privilege escalation or remote code execution.
Vulnerabilities
Crowdfense has announced a $30 million exploit acquisition program covering Android, iOS, Chrome, and Safari zero-days.
IoT Security
Participants earned a total of $732,500 on the first day of Pwn2Own Vancouver 2024 for hacking a Tesla, operating systems, and other software.
Mobile & Wireless
iOS zero-click attack targeting Kaspersky iPhones bypassed hardware-based security protections to take over devices.
Malware & Threats
Kaspersky analyzes the stealth techniques that were used in the ‘Operation Triangulation’ iOS zero-click attacks.
Malware & Threats
A Mirai botnet variant tracked as IZ1H9 has updated its arsenal with 13 exploits targeting various routers, IP cameras, and other IoT devices.
Mobile & Wireless
Russian zero-day acquisition firm Operation Zero is now offering $20 million for full Android and iOS exploit chains.
Mobile & Wireless
Predator spyware delivered to iPhones and Android devices using iOS and Chrome zero-day vulnerabilities and MitM attacks.
Vulnerabilities
Over 20,000 appliances are vulnerable to a new exploit technique targeting a recent Citrix ADC zero-day vulnerability CVE-2023-3519.
ICS/OT
Two Rockwell Automation product vulnerabilities have been used for a new exploit by an APT group that could use it to target critical infrastructure.
Cyber Insurance
Cyberattack disrupted UNFI’s operations in June; company estimates $50–$60 million net income hit but anticipates insurance will cover most losses.
Nation-State
Data Breaches
Artificial Intelligence
Mobile & Wireless
Cloud Security
Virtual event brings together leading experts, practitioners, and innovators for a full day of insightful discussions and tactical guidance on evolving threats and real-world...
Cybersecurity Funding
Mobile & Wireless
Vulnerabilities
