Malware & Threats
CISA warns that vulnerable SimpleHelp RMM instances have been exploited against a utility billing software provider’s customers.
Hi, what are you looking for?
SecurityWeek
All posts tagged "exploited"
Email Security
Exploitation of a critical-severity RCE vulnerability in Roundcube started only days after a patch was released.
Malware & Threats
CVE-2025-24016, a critical remote code execution vulnerability affecting Wazuh servers, has been exploited by Mirai botnets.
Vulnerabilities
Exploitation of the vBulletin vulnerability tracked as CVE-2025-48827 and CVE-2025-48828 started shortly after disclosure.
Malware & Threats
CISA warns companies of a widespread campaign targeting a Commvault vulnerability to hack Azure environments.
Malware & Threats
A Chinese threat actor exploited a zero-day vulnerability in Trimble Cityworks to hack local government entities in the US.
Malware & Threats
A Chinese espionage group has been chaining two recent Ivanti EPMM vulnerabilities in attacks against organizations in multiple critical sectors.
Vulnerabilities
Wiz warns that threat actors are chaining two recent Ivanti vulnerabilities to achieve unauthenticated remote code execution.
Malware & Threats
Two ransomware groups and several Chinese APTs have been exploiting two recent SAP NetWeaver vulnerabilities.
Vulnerabilities
Google has rolled out a Chrome 136 update that resolves a high-severity vulnerability for which a public exploit exists.
Vulnerabilities
Fortinet has patched a dozen vulnerabilities, including a critical flaw exploited in the wild against FortiVoice instances.
Vulnerabilities
Ivanti has released patches for two EPMM vulnerabilities that have been chained in the wild for remote code execution.
Nation-State
A Turkey-affiliated espionage group has exploited a zero-day vulnerability in Output Messenger since April 2024.
Vulnerabilities
Hundreds of SAP NetWeaver instances hacked via a zero-day that allows remote code execution, not only arbitrary file uploads, as initially believed.
Vulnerabilities
SonicWall patches three SMA 100 vulnerabilities, including a potential zero-day, that could be chained to execute arbitrary code remotely.
Vulnerabilities
The patches for an exploited Samsung MagicINFO vulnerability are ineffective and a Mirai botnet has started targeting it.
Ransomware
At least two ransomware groups exploited the Windows zero-day CVE-2025-29824 before it was patched by Microsoft.
Vulnerabilities
Threat actors are targeting a critical-severity vulnerability in the OttoKit WordPress plugin to gain administrative privileges.
Vulnerabilities
Threat actors are revisiting SAP NetWeaver instances to leverage webshells deployed via a recent zero-day vulnerability.
IoT Security
Threat actors started exploiting a vulnerability in Samsung MagicINFO only days after a PoC exploit was published.
Vulnerabilities
The Head Mare hacktivist group has been exploiting the bugs to deploy the PhantomCore malware.
Vulnerabilities
Artificial Intelligence
Malware & Threats
Hackers pushed a poisoned arrayref version that added a dependency to fetch a malicious payload from a remote server.
Cloud Security
