Ransomware
The authentication bypass vulnerability allows attackers to establish VPN connections without a valid password.
Hi, what are you looking for?
SecurityWeek
All posts tagged "exploited"
Vulnerabilities
The vulnerability is tracked as CVE-2026-11645 and it was reported in late April by an anonymous researcher.
Vulnerabilities
The flaw allows attackers to execute arbitrary code remotely and has been exploited in the wild for two months.
Vulnerabilities
Unauthenticated attackers can exploit the flaw via specially crafted POST requests that crash the Serv-U service.
Data Breaches
The social media giant has informed authorities about the impact of the recent attack involving an account recovery support tool.
Vulnerabilities
The vulnerability is tracked as CVE-2026-20245 and it can allow arbitrary command execution as root, but no patch yet.
Vulnerabilities
A flaw in the Full Page Cache Warmer extension can be exploited without authentication via serialized PHP object payloads.
Vulnerabilities
Threat actors are exploiting vulnerable Kirki and Burst Statistics deployments to elevate privileges and take over websites.
Vulnerabilities
An improper authentication bug allows attackers to escalate their privileges and escape containers.
Mobile & Wireless
Google says the Android vulnerability CVE-2025-48595 has been exploited in limited, targeted attacks.
Vulnerabilities
The vulnerability is CVE-2024-21182 and it can be exploited without authentication to hack affected WebLogic servers.
Artificial Intelligence
Exploiting a confused deputy weakness, the hackers simply asked the chatbot to link the account to a new email address.
Vulnerabilities
Resolved last week, the vulnerability was exploited in the wild as a zero-day to execute scripts with root privileges.
Vulnerabilities
Hardcoded machineKey values in a configuration file enabled ViewState deserialization attacks leading to remote code execution.
Vulnerabilities
Sites belonging to major universities such as Harvard and Oxford, as well as DuckDuckGo, have been compromised in the attack.
Vulnerabilities
Drupal is warning users that it has already seen attempts to exploit CVE-2026-9082 and security firms are seeing attacks against thousands of websites.
Vulnerabilities
CVE-2026-34926 is a directory traversal flaw that can be exploited against the on-premise version of Apex One.
Vulnerabilities
The bugs could be exploited to elevate privileges to System or create a denial-of-service (DoS) condition.
Vulnerabilities
The flaw leads to denial-of-service on default configurations and to remote code execution if ASLR is disabled.
Email Security
Microsoft has shared mitigations for CVE-2026-42897 until a permanent patch can be released for affected Exchange Server versions.
Artificial Intelligence
Attack demonstrates how LLM agents can combine known exploitation techniques with real-time reasoning to automate complex, multi-stage intrusions.
Artificial Intelligence
Artificial Intelligence
Artificial Intelligence
Cybercrime
Noteworthy stories that might have slipped under the radar: Anonymous-linked Canadian hacker jailed, researcher drops zero-days in open source projects, Venezuelans sentenced in the...
Artificial Intelligence
