Vulnerabilities
SonicWall patches three SMA 100 vulnerabilities, including a potential zero-day, that could be chained to execute arbitrary code remotely.
Hi, what are you looking for?
SecurityWeek
All posts tagged "exploited"
Vulnerabilities
The patches for an exploited Samsung MagicINFO vulnerability are ineffective and a Mirai botnet has started targeting it.
Ransomware
At least two ransomware groups exploited the Windows zero-day CVE-2025-29824 before it was patched by Microsoft.
Vulnerabilities
Threat actors are targeting a critical-severity vulnerability in the OttoKit WordPress plugin to gain administrative privileges.
Vulnerabilities
Threat actors are revisiting SAP NetWeaver instances to leverage webshells deployed via a recent zero-day vulnerability.
IoT Security
Threat actors started exploiting a vulnerability in Samsung MagicINFO only days after a PoC exploit was published.
Artificial Intelligence
CISA warns organizations that threat actors are exploiting a critical-severity vulnerability in low-code AI builder Langflow.
Cloud Security
Misconfigured Apache Pinot instances can and have enabled threat actors to gain access to sensitive information.
Mobile & Wireless
Android’s May 2025 security update includes patches for an exploited vulnerability in the FreeType open source rendering engine.
Vulnerabilities
CISA has flagged a critical-severity Commvault vulnerability as exploited one week after technical details were released.
Vulnerabilities
PoC code targeting two exploited SonicWall flaws was published just CISA added them to the KEV catalog.
Vulnerabilities
Commvault provides indicators of compromise and mitigation guidance after a zero-day exploit targeting its Azure environment lands in CISA’s KEV catalog.
Vulnerabilities
SonicWall has updated the advisories for two vulnerabilities to warn that they are being exploited in the wild.
Vulnerabilities
More than 400 SAP NetWeaver servers are impacted by CVE-2025-31324, an exploited remote code execution vulnerability.
Vulnerabilities
CISA urges immediate patching for recently disclosed Broadcom, Commvault, and Qualitia vulnerabilities exploited in the wild.
Vulnerabilities
Threat actors have exploited a zero-day vulnerability in Craft CMS to execute PHP code on hundreds of websites.
Vulnerabilities
A zero-day vulnerability in SAP NetWeaver potentially affects more than 10,000 internet-facing applications.
Vulnerabilities
A Windows NTLM vulnerability patched in March has been exploited in attacks targeting government and private institutions.
Vulnerabilities
A SonicWall SMA 100 series vulnerability patched in 2021, which went unnoticed at the time of patching, is being exploited in the wild.
Vulnerabilities
A vulnerability in the OttoKit WordPress plugin with over 100,000 active installations has been exploited in the wild.
Artificial Intelligence
Attack demonstrates how LLM agents can combine known exploitation techniques with real-time reasoning to automate complex, multi-stage intrusions.
Artificial Intelligence
Artificial Intelligence
Artificial Intelligence
Cybercrime
Noteworthy stories that might have slipped under the radar: Anonymous-linked Canadian hacker jailed, researcher drops zero-days in open source projects, Venezuelans sentenced in the...
Artificial Intelligence
