Vulnerabilities
CISA says two more vulnerabilities in the messaging application TeleMessage TM SGNL have been exploited in the wild.
Hi, what are you looking for?
SecurityWeek
All posts tagged "exploited"
Vulnerabilities
Many Citrix NetScaler systems are exposed to attacks exploiting the vulnerabilities tracked as CVE-2025-5777 and CVE-2025-6543.
Vulnerabilities
Google has released a Chrome 138 update that patches a high-severity vulnerability with an exploit in the wild.
Vulnerabilities
The Citrix NetScaler vulnerability tracked as CitrixBleed 2 and CVE-2025–5777 may be exploited in the wild for initial access.
Vulnerabilities
CISA is urging federal agencies to patch a recent AMI BMC vulnerability and a half-a-decade-old bug in FortiOS by July 17.
Vulnerabilities
Citrix has released patches for a critical vulnerability in NetScaler ADC and NetScaler Gateway exploited as a zero-day.
Vulnerabilities
Threat actors are exploiting a critical-severity vulnerability in Motors theme for WordPress to change arbitrary user passwords.
Vulnerabilities
WhatsApp told SecurityWeek that it linked the exploited FreeType vulnerability CVE-2025-27363 to a Paragon exploit.
Vulnerabilities
Qualys has disclosed two Linux vulnerabilities that can be chained for full root access, and CISA added a flaw to its KEV catalog.
Vulnerabilities
Google has released a Chrome 137 update to resolve two memory bugs in the browser’s V8 and Profiler components.
Vulnerabilities
GreyNoise warns of a spike in exploitation attempts targeting a two-year-old vulnerability in Zyxel firewalls.
Vulnerabilities
CISA warns that a vulnerability impacting multiple discontinued TP-Link router models is exploited in the wild.
Malware & Threats
A critical Langflow vulnerability tracked as CVE-2025-3248 has been exploited to ensnare devices in the Flodrix botnet.
Malware & Threats
CISA warns that vulnerable SimpleHelp RMM instances have been exploited against a utility billing software provider’s customers.
Email Security
Exploitation of a critical-severity RCE vulnerability in Roundcube started only days after a patch was released.
Malware & Threats
CVE-2025-24016, a critical remote code execution vulnerability affecting Wazuh servers, has been exploited by Mirai botnets.
Vulnerabilities
Exploitation of the vBulletin vulnerability tracked as CVE-2025-48827 and CVE-2025-48828 started shortly after disclosure.
Malware & Threats
CISA warns companies of a widespread campaign targeting a Commvault vulnerability to hack Azure environments.
Malware & Threats
A Chinese threat actor exploited a zero-day vulnerability in Trimble Cityworks to hack local government entities in the US.
Malware & Threats
A Chinese espionage group has been chaining two recent Ivanti EPMM vulnerabilities in attacks against organizations in multiple critical sectors.
IoT Security
PCA Cyber Security has discovered critical vulnerabilities in the BlueSDK Bluetooth stack that could have allowed remote code execution on car systems.
Artificial Intelligence
Network Security
Mobile & Wireless
Details have been disclosed for an eSIM hacking method that could impact many, but the industry is taking action.
Data Breaches
Cybersecurity Funding
Artificial Intelligence