Vulnerabilities
Threat actors are exploiting a recent GFI KerioControl firewall vulnerability that leads to remote code execution.
Hi, what are you looking for?
SecurityWeek
All posts tagged "exploited"
Malware & Threats
Google Cloud’s Mandiant has linked the exploitation of CVE-2025-0282, a new Ivanti VPN zero-day, to Chinese cyberspies.
Vulnerabilities
CISA says two recently disclosed path traversal vulnerabilities in the Mitel MiCollab collaboration platform have been exploited in attacks.
Vulnerabilities
Palo Alto Networks has patched CVE-2024-3393, a vulnerability that has been exploited for DoS attacks against the company’s firewalls.
ICS/OT
Threat actors are exploiting a command injection vulnerability in Four-Faith industrial routers to deploy a reverse shell.
Vulnerabilities
CISA is urging federal agencies to patch a recent critical vulnerability in BeyondTrust remote access products in one week.
Vulnerabilities
A critical vulnerability in BeyondTrust Privileged Remote Access and Remote Support could lead to arbitrary command execution.
Vulnerabilities
Researchers warn of malicious attacks exploiting a recently patched critical vulnerability in Apache Struts 2 leading to remote code execution (RCE).
Vulnerabilities
CISA has warned organizations that two vulnerabilities affecting Adobe ColdFusion and Windows have been exploited in the wild.
Ransomware
The Cl0p ransomware group has taken credit for exploitation of the Cleo product vulnerability tracked as CVE-2024-55956.
Malware & Threats
Cleo has released patches for the exploited vulnerability and security firms have detailed the malware delivered in attacks.
Vulnerabilities
Two vulnerabilities in the Hunk Companion and WP Query Console WordPress plugins allow attackers to backdoor websites.
Data Protection
A research project into vulnerabilities affecting Microsoft’s PlayReady DRM raises some questions on responsible disclosure.
Malware & Threats
Malware & Threats
Tracking & Law Enforcement
