Vulnerabilities
Two vulnerabilities in the Hunk Companion and WP Query Console WordPress plugins allow attackers to backdoor websites.
Hi, what are you looking for?
SecurityWeek
All posts tagged "exploited"
Cybercrime
Exploitation of a vulnerability affecting Cleo file transfer tools has been linked to the new Termite ransomware group.
Vulnerabilities
CVE-2024-50623, an improperly patched vulnerability affecting Cleo file transfer tools, has been exploited in the wild.
Vulnerabilities
A second vulnerability in Zyxel firewalls has been exploited in Helldown ransomware attacks over the past weeks.
Vulnerabilities
Microsoft informed customers that vulnerabilities affecting cloud, AI and other services have been patched, including an exploited flaw.
Vulnerabilities
VulnCheck warns of widespread exploitation of a year-and-a-half-old ProjectSend vulnerability for which multiple public exploits exist.
Nation-State
The Russia-linked RomCom APT has been observed chaining two zero-days in Firefox and Windows for backdoor delivery.
Vulnerabilities
CISA warns about attacks exploiting CVE-2023-28461, a critical vulnerability in Array Networks AG and vxAG secure access gateways.
Ransomware
A ransomware group has been observed exploiting a recently patched command injection vulnerability in Zyxel firewalls for initial access.
Vulnerabilities
VulnCheck finds hundreds of thousands of internet-accessible hosts potentially vulnerable to 2023’s top frequently exploited flaws.
Malware & Threats
The number of internet-exposed Palo Alto firewalls is dropping, but 2,000 have been compromised, according to Shadowserver Foundation.
Vulnerabilities
Exploitation attempts seen for two recently patched Citrix Session Recording vulnerabilities tracked as CVE-2024-8068 and CVE-2024-8069.
Vulnerabilities
CISA is warning organizations that CVE-2024-1212, a Progress Kemp LoadMaster OS command injection vulnerability, is being exploited in attacks.
Vulnerabilities
Oracle has patched a high-severity information disclosure zero-day in Agile PLM that has been exploited in the wild.
Malware & Threats
Palo Alto Networks has released patches and CVEs for the firewall zero-days exploited in what the company calls Operation Lunar Peek.
Malware & Threats
A zero-day vulnerability affecting five discontinued GeoVision product models has been exploited by a botnet.
Vulnerabilities
Palo Alto Networks has released IoCs for the attacks exploiting a newly uncovered firewall zero-day vulnerability.
Vulnerabilities
CISA has added two more Palo Alto Networks Expedition flaws, CVE-2024-9463 and CVE-2024-9465, to its KEV catalog.
Vulnerabilities
Palo Alto Networks has confirmed that a zero-day is being exploited in attacks after investigating claims of a firewall remote code execution flaw.
Vulnerabilities
The exploit for a new zero-day vulnerability in Windows is executed by deleting files, drag-and-dropping them, or right clicking on them.
Vulnerabilities
The Head Mare hacktivist group has been exploiting the bugs to deploy the PhantomCore malware.
Vulnerabilities
Artificial Intelligence
Compliance
Two industry surveys released this week by Kiteworks and CyberSheath paint a consistent picture of the defense industrial base.
Cloud Security
Vulnerabilities
