Vulnerabilities
VMware warns customers that CVE-2023-34048, a vCenter Server vulnerability patched in October 2023, is being exploited in the wild.
Hi, what are you looking for?
SecurityWeek
All posts tagged "exploited"
Vulnerabilities
Citrix is aware of attacks exploiting two new NetScaler ADC and Gateway zero-day vulnerabilities tracked as CVE-2023-6548 and CVE-2023-6549.
Malware & Threats
The recently disclosed Ivanti VPN zero-days have been exploited to hack at least 1,700 devices, including government, telecoms, defense, and tech.
Malware & Threats
CISA has added a critical Microsoft SharePoint Server flaw (CVE-2023-29357) to its Known Exploited Vulnerabilities catalog.
Vulnerabilities
CISA has added a critical-severity Apache Superset flaw (CVE-2023-27524) to its Known Exploited Vulnerabilities catalog.
Vulnerabilities
Shadowserver sees possible in-the-wild exploitation of a critical Apache OFBiz vulnerability tracked as CVE-2023-49070.
Malware & Threats
CISA released ICS advisories for FXC router and QNAP NRV flaws and added them to its known exploited vulnerabilities catalog.
Vulnerabilities
Attackers are attempting to exploit a critical RCE flaw in Apache Struts 2 after researchers publish PoC code.
Vulnerabilities
Sophos has patched EOL Firewall versions against a critical flaw exploited in the wild, after identifying a new exploit.
Vulnerabilities
The Shadowserver Foundation warns of an increase in the number of devices hacked via recent Cisco IOS XE vulnerabilities.
Ransomware
Qlik Sense vulnerabilities CVE-2023-41266, CVE-2023-41265 and CVE-2023-48365 exploited for initial access in Cactus ransomware attacks.
Vulnerabilities
The latest Chrome security update addresses the seventh exploited zero-day vulnerability documented in the browser in 2023.
Malware & Threats
Threat actors have started exploiting a critical ownCloud vulnerability leading to sensitive information disclosure.
Malware & Threats
CISA adds Sophos, Oracle and Microsoft product security holes to its Known Exploited Vulnerabilities (KEV) catalog.
Email Security
Google says a Zimbra zero-day from earlier this year, CVE-2023-37580, was exploited in several campaigns to hack government emails.
Malware & Threats
CISA says an SLP vulnerability allowing for a DoS amplification factor of 2,000 is being exploited in attacks.
Ransomware
CVE-2023-47246 zero-day vulnerability in SysAid IT service management software has been exploited by Cl0p ransomware affiliates.
Cloud Security
Glibc vulnerability affecting major Linux distributions and tracked as Looney Tunables exploited in cloud attacks by Kinsing group.
Vulnerabilities
Threat actors have started exploiting a recent critical vulnerability in Confluence Data Center and Confluence Server.
Malware & Threats
The recently patched Apache ActiveMQ vulnerability tracked as CVE-2023-46604 has been exploited as a zero-day since at least October 10.
Mobile & Wireless
Mobile & Wireless
Artificial Intelligence
Malware & Threats
Noteworthy stories that might have slipped under the radar: Microsoft shows attack against AMD processors, SentinelOne details latest ZuRu macOS malware version, Indian APT...
Cybersecurity Funding
Artificial Intelligence
Vulnerabilities
Privacy & Compliance