Vulnerabilities
CISA is urging federal agencies to patch a recent critical vulnerability in BeyondTrust remote access products in one week.
Hi, what are you looking for?
SecurityWeek
All posts tagged "exploited"
Vulnerabilities
A critical vulnerability in BeyondTrust Privileged Remote Access and Remote Support could lead to arbitrary command execution.
Vulnerabilities
Researchers warn of malicious attacks exploiting a recently patched critical vulnerability in Apache Struts 2 leading to remote code execution (RCE).
Vulnerabilities
CISA has warned organizations that two vulnerabilities affecting Adobe ColdFusion and Windows have been exploited in the wild.
Ransomware
The Cl0p ransomware group has taken credit for exploitation of the Cleo product vulnerability tracked as CVE-2024-55956.
Malware & Threats
Cleo has released patches for the exploited vulnerability and security firms have detailed the malware delivered in attacks.
Vulnerabilities
Two vulnerabilities in the Hunk Companion and WP Query Console WordPress plugins allow attackers to backdoor websites.
Cybercrime
Exploitation of a vulnerability affecting Cleo file transfer tools has been linked to the new Termite ransomware group.
Vulnerabilities
CVE-2024-50623, an improperly patched vulnerability affecting Cleo file transfer tools, has been exploited in the wild.
Vulnerabilities
A second vulnerability in Zyxel firewalls has been exploited in Helldown ransomware attacks over the past weeks.
Vulnerabilities
Microsoft informed customers that vulnerabilities affecting cloud, AI and other services have been patched, including an exploited flaw.
Vulnerabilities
VulnCheck warns of widespread exploitation of a year-and-a-half-old ProjectSend vulnerability for which multiple public exploits exist.
Nation-State
The Russia-linked RomCom APT has been observed chaining two zero-days in Firefox and Windows for backdoor delivery.
Vulnerabilities
CISA warns about attacks exploiting CVE-2023-28461, a critical vulnerability in Array Networks AG and vxAG secure access gateways.
Ransomware
A ransomware group has been observed exploiting a recently patched command injection vulnerability in Zyxel firewalls for initial access.
Vulnerabilities
VulnCheck finds hundreds of thousands of internet-accessible hosts potentially vulnerable to 2023’s top frequently exploited flaws.
Malware & Threats
The number of internet-exposed Palo Alto firewalls is dropping, but 2,000 have been compromised, according to Shadowserver Foundation.
Vulnerabilities
Exploitation attempts seen for two recently patched Citrix Session Recording vulnerabilities tracked as CVE-2024-8068 and CVE-2024-8069.
Vulnerabilities
CISA is warning organizations that CVE-2024-1212, a Progress Kemp LoadMaster OS command injection vulnerability, is being exploited in attacks.
Vulnerabilities
Oracle has patched a high-severity information disclosure zero-day in Agile PLM that has been exploited in the wild.
Artificial Intelligence
Attack demonstrates how LLM agents can combine known exploitation techniques with real-time reasoning to automate complex, multi-stage intrusions.
Artificial Intelligence
Artificial Intelligence
Artificial Intelligence
Cybercrime
Noteworthy stories that might have slipped under the radar: Anonymous-linked Canadian hacker jailed, researcher drops zero-days in open source projects, Venezuelans sentenced in the...
Artificial Intelligence
