Vulnerabilities
CISA has added three critical-severity flaws in Ivanti EPM to its Known Exploited Vulnerabilities catalog.
Hi, what are you looking for?
SecurityWeek
All posts tagged "exploited"
Malware & Threats
GreyNoise warns of mass exploitation of a critical vulnerability in PHP leading to remote code execution on vulnerable servers.
IoT Security
Multiple Mirai-based botnets are exploiting CVE-2025-1316, an Edimax IP camera vulnerability that allows remote command execution.
Vulnerabilities
Scans show that tens of thousands of VMware ESXi instances are affected by CVE-2025-22224 and other vulnerabilities disclosed recently as zero-days.
Vulnerabilities
Broadcom patched VMware zero-days CVE-2025-22224, CVE-2025-22225 and CVE-2025-22226 after Microsoft warned it of exploitation.
Mobile & Wireless
Android’s March 2025 security update addresses over 40 vulnerabilities, including two actively exploited in the wild.
Vulnerabilities
Exploitation has been known for months or years for most of the latest vulnerabilities added by CISA to its KEV catalog.
Vulnerabilities
XSS vulnerability allowed a threat actor to redirect users to arbitrary domains.
Vulnerabilities
CISA has added CVE-2024-20953, an Oracle Agile PLM vulnerability patched in January 2024, to its KEV catalog.
Vulnerabilities
CISA has added a Craft CMS flaw tracked as CVE-2025-23209 to its Known Exploited Vulnerabilities (KEV) catalog.
Vulnerabilities
Palo Alto Networks is warning customers that a second vulnerability patched in February is being exploited in attacks.
Vulnerabilities
Microsoft has patched CVE-2025-24989, a Power Pages privilege escalation vulnerability that has been exploited in attacks.
Vulnerabilities
Palo Alto Networks has confirmed that a recently patched firewall vulnerability tracked as CVE-2025-0108 is being actively exploited.
Vulnerabilities
The exploitation of a recent SonicWall vulnerability has started shortly after proof-of-concept (PoC) code was published.
Vulnerabilities
ClearSky Cyber Security says it has seen a new Windows zero-day being exploited by a Chinese APT named Mustang Panda.
Vulnerabilities
Attempts to exploit CVE-2024-0108, an authentication bypass vulnerability in Palo Alto firewalls, started one day after disclosure.
Vulnerabilities
Threat actors are increasingly exploiting two old vulnerabilities in ThinkPHP and OwnCloud in their attacks.
ICS/OT
Trimble Cityworks is affected by a zero-day vulnerability that has been exploited in attacks involving the delivery of malware.
Malware & Threats
Russian threat groups have been observed exploiting a zero-day vulnerability in 7-Zip against Ukrainian entities.
Vulnerabilities
CISA has added CVE-2024-29059, a flaw affecting Microsoft .NET, to its Known Exploited Vulnerabilities catalog.
Artificial Intelligence
Attack demonstrates how LLM agents can combine known exploitation techniques with real-time reasoning to automate complex, multi-stage intrusions.
Artificial Intelligence
Artificial Intelligence
Artificial Intelligence
Cybercrime
Noteworthy stories that might have slipped under the radar: Anonymous-linked Canadian hacker jailed, researcher drops zero-days in open source projects, Venezuelans sentenced in the...
Artificial Intelligence
