Vulnerabilities
A recently patched Apache ActiveMQ vulnerability tracked as CVE-2023-46604 is being exploited to deliver ransomware.
Hi, what are you looking for?
SecurityWeek
All posts tagged "exploited"
Malware & Threats
Multiple threat actors are exploiting CVE-2023-4966, aka Citrix Bleed, a critical vulnerability in NetScaler ADC and Gateway.
Malware & Threats
Russian APT Winter Vivern exploits a zero-day in the Roundcube webmail server in attacks targeting European governments.
Malware & Threats
The number of Cisco devices hacked via the CVE-2023-20198 zero-day has reached 40,000, including many in the US.
Vulnerabilities
Mandiant says the recently patched Citrix NetScaler vulnerability CVE-2023-4966 had been exploited as zero-day since August.
Vulnerabilities
CISA, FBI, and MS-ISAC warn of potential widespread exploitation of CVE-2023-22515, a critical vulnerability in Atlassian Confluence.
Vulnerabilities
Cisco is warning customers that a new IOS XE zero-day vulnerability tracked as CVE-2023-20198 is being exploited to hack devices.
Mobile & Wireless
Apple has released iOS 16.7.1 and iPadOS 16.7.1 to patch CVE-2023-42824, a kernel vulnerability that has been exploited in attacks.
Vulnerabilities
CISA has added five bugs to its Known Exploited Vulnerabilities catalog, including the recent WordPad, Skype, and HTTP/2 zero-days.
Mobile & Wireless
The October 2023 security update for Android patches two vulnerabilities exploited in attacks, both likely linked to spyware vendors.
Vulnerabilities
Companies have addressed the impact of the exploited Libwebp vulnerability CVE-2023-4863 on their products.
Vulnerabilities
In-the-wild exploitation of a critical vulnerability in the TeamCity CI/CD server started shortly after a patch was released by developers.
Vulnerabilities
Cisco has released patches for vulnerability in the GET VPN feature of IOS and IOS XE software that has been exploited in attacks.
Vulnerabilities
Google has rushed to patch a new Chrome zero-day vulnerability, tracked as CVE-2023-5217 and exploited by a spyware vendor.
Mobile & Wireless
Apple has patched 3 zero-day vulnerabilities that have likely been exploited by a spyware vendor to hack iPhones.
Vulnerabilities
VulnCheck details a new fileless exploit targeting a recent Junos OS vulnerability that thousands of devices have not been patched against.
Endpoint Security
Trend Micro has patched CVE-2023-41179, an Apex One zero-day code execution vulnerability that has been exploited in attacks.
Malware & Threats
After Apple and Google, Mozilla has also patched an image processing-related zero-day vulnerability exploited by spyware.
Vulnerabilities
Google has released a Chrome 116 security update to patch CVE-2023-4863, the fourth Chrome zero-day vulnerability documented in 2023.
Vulnerabilities
Four recent vulnerabilities in the J-Web component of Junos OS have started being chained in malicious attacks after PoC exploit code was published.
Mobile & Wireless
Mobile & Wireless
Artificial Intelligence
Malware & Threats
Noteworthy stories that might have slipped under the radar: Microsoft shows attack against AMD processors, SentinelOne details latest ZuRu macOS malware version, Indian APT...
Cybersecurity Funding
Artificial Intelligence
Vulnerabilities
Privacy & Compliance