Vulnerabilities
Microsoft's security response team pushed out documentation for almost 90 vulnerabilities across Windows and OS components and marked several flaws in the actively exploited...
Hi, what are you looking for?
SecurityWeek
All posts tagged "exploit"
Incident Response
CrowdStrike dismissed claims that the Falcon EDR sensor bug could be exploited for privilege escalation or remote code execution.
Vulnerabilities
Crowdfense has announced a $30 million exploit acquisition program covering Android, iOS, Chrome, and Safari zero-days.
IoT Security
Participants earned a total of $732,500 on the first day of Pwn2Own Vancouver 2024 for hacking a Tesla, operating systems, and other software.
Mobile & Wireless
iOS zero-click attack targeting Kaspersky iPhones bypassed hardware-based security protections to take over devices.
Malware & Threats
Kaspersky analyzes the stealth techniques that were used in the ‘Operation Triangulation’ iOS zero-click attacks.
Malware & Threats
A Mirai botnet variant tracked as IZ1H9 has updated its arsenal with 13 exploits targeting various routers, IP cameras, and other IoT devices.
Mobile & Wireless
Russian zero-day acquisition firm Operation Zero is now offering $20 million for full Android and iOS exploit chains.
Mobile & Wireless
Predator spyware delivered to iPhones and Android devices using iOS and Chrome zero-day vulnerabilities and MitM attacks.
Vulnerabilities
Over 20,000 appliances are vulnerable to a new exploit technique targeting a recent Citrix ADC zero-day vulnerability CVE-2023-3519.
ICS/OT
Two Rockwell Automation product vulnerabilities have been used for a new exploit by an APT group that could use it to target critical infrastructure.
Vulnerabilities
A security researcher has published proof-of-concept (PoC) exploit code targeting a recent high-severity vulnerability (CVE-2023-20178) in Cisco AnyConnect Secure.
Cyberwarfare
Kaspersky said its corporate network has been targeted with a zero-click iOS exploit, just as Russia's FSB said iPhones have been targeted by US...
Vulnerabilities
The newest iOS 16.4.1 and iPadOS 16.4.1 patches a pair of code execution flaws that have already been exploited in the wild.
Threat Intelligence
A new research report discusses the five most exploited vulnerabilities of 2022, and the five key risks that security teams should consider.
Nation-State
Microsoft says it has evidence that Russian APT actors were exploiting a nasty Outlook zero-day as far back as April 2022, upping the stakes...
Vulnerabilities
Security researchers have observed an uptick in attacks targeting CVE-2021-35394, an RCE vulnerability in Realtek Jungle SDK.
Vulnerabilities
Organizations are being compromised in attacks exploiting a recently patched Zoho ManageEngine vulnerability.
Nation-State
A China-linked hackers are exploiting a vulnerability (CVE-2022-42475 ) in Fortinet FortiOS SSL-VPN, Mandiant claims.
Artificial Intelligence
Microsoft fixed vulnerabilities across Azure and AI-branded products, with privilege escalation flaws accounting for the majority.
Malware & Threats
Artificial Intelligence
Artificial Intelligence
Artificial Intelligence
Noteworthy stories that might have slipped under the radar: Mandiant's 2026 AI risk report, PhantomRaven malware used by bug bounty hunter, WordPress plugin bug...
Artificial Intelligence
Data Breaches
Malware & Threats
Vulnerabilities
