Vulnerabilities
PoC code targeting two exploited SonicWall flaws was published just CISA added them to the KEV catalog.
Hi, what are you looking for?
SecurityWeek
All posts tagged "exploited"
Vulnerabilities
Commvault provides indicators of compromise and mitigation guidance after a zero-day exploit targeting its Azure environment lands in CISA’s KEV catalog.
Vulnerabilities
SonicWall has updated the advisories for two vulnerabilities to warn that they are being exploited in the wild.
Vulnerabilities
More than 400 SAP NetWeaver servers are impacted by CVE-2025-31324, an exploited remote code execution vulnerability.
Vulnerabilities
CISA urges immediate patching for recently disclosed Broadcom, Commvault, and Qualitia vulnerabilities exploited in the wild.
Vulnerabilities
Threat actors have exploited a zero-day vulnerability in Craft CMS to execute PHP code on hundreds of websites.
Vulnerabilities
A zero-day vulnerability in SAP NetWeaver potentially affects more than 10,000 internet-facing applications.
Vulnerabilities
A Windows NTLM vulnerability patched in March has been exploited in attacks targeting government and private institutions.
Vulnerabilities
A SonicWall SMA 100 series vulnerability patched in 2021, which went unnoticed at the time of patching, is being exploited in the wild.
Vulnerabilities
A vulnerability in the OttoKit WordPress plugin with over 100,000 active installations has been exploited in the wild.
Vulnerabilities
CISA has added fresh CentreStack and Windows CLFS vulnerabilities to the Known Exploited Vulnerabilities catalog.
Vulnerabilities
A sophisticated APT tracked as ToddyCat has exploited an ESET DLL search order hijacking vulnerability for malware delivery.
Vulnerabilities
More than 5,000 Ivanti Connect Secure appliances are vulnerable to attacks exploiting CVE-2025-22457, which has been used by Chinese hackers.
Mobile & Wireless
Android’s latest security update resolves two exploited Kernel vulnerabilities, as well as critical-severity bugs.
Malware & Threats
Huntress has shared details on the post-exploitation activities of threat actors targeting the recent CrushFTP vulnerability.
Vulnerabilities
Two CVEs now exist for an actively exploited CrushFTP vulnerability and much of the security industry is using the ‘wrong one’.
Network Security
DrayTek has shared some clarifications regarding the recent attacks causing router reboots, but some questions remain unanswered.
Vulnerabilities
Shadowserver has started seeing exploitation attempts aimed at a CrushFTP vulnerability tracked as CVE-2025-2825 and CVE-2025-31161.
Vulnerabilities
Apple has released a hefty round of security updates for its desktop and mobile products, patching two recent zero-days in older iPhone models.
Vulnerabilities
Firefox developers have determined that their browser is affected by a vulnerability similar to the recent Chrome sandbox escape zero-day.
Malware & Threats
The DanaBot botnet ensnared over 300,000 devices and caused more than $50 million in damages before being disrupted.
Incident Response
Vulnerabilities
Incident Response
Data Protection
Signal said the privacy feature is on by default for every Windows 11 user to block Microsoft from taking screenshots for Windows Recall.
Management & Strategy
Threat Intelligence
Cybercrime
Malware & Threats
