Vulnerabilities
CISA is warning organizations that a second Apache OFBiz flaw is being exploited in the wild shortly after the release of PoC exploits.
Hi, what are you looking for?
SecurityWeek
All posts tagged "exploited"
Vulnerabilities
Google flags another high-severity vulnerability patched with the latest Chrome 128 release as exploited in the wild.
Vulnerabilities
SolarWinds has issued a second Web Help Desk hotfix to remove hardcoded credentials after patching a critical-severity vulnerability last week.
Vulnerabilities
CISA warns that attackers are exploiting two critical-severity authentication bypass vulnerabilities impacting multiple Dahua products.
Vulnerabilities
Chrome 128 was released in the stable channel with patches for 38 vulnerabilities, including a V8 JavaScript engine flaw exploited in the wild.
Vulnerabilities
CISA is warning organizations about abuse of Cisco Smart Install feature, as Cisco is notifying customers about critical phone vulnerabilities it’s not patching.
Vulnerabilities
Google has patched CVE-2024-36971, a high-severity kernel zero-day vulnerability in Android that has been exploited in targeted attacks.
Vulnerabilities
An Avtech camera vulnerability that likely remains unfixed has been exploited in the wild, according to CISA.
Vulnerabilities
Shadowserver has observed over 20,000 internet-accessible VMware ESXi instances impacted by an exploited vulnerability.
Vulnerabilities
Acronis warns of a critical-severity Acronis Cyber Infrastructure (ACI) vulnerability being exploited in attacks.
Vulnerabilities
Threat actors have started exploiting critical-severity vulnerabilities in ServiceNow shortly after public disclosure.
Vulnerabilities
CISA warns of the in-the-wild exploitation of CVE-2024-39891, a Twilio Authy bug leading to the disclosure of phone number data.
Vulnerabilities
Adobe and CISA warn that a recent Adobe Commerce vulnerability has been exploited in the wild.
Vulnerabilities
A recently patched Apache HugeGraph-Server vulnerability tracked as CVE-2024-27348 is being targeted in attacks.
Vulnerabilities
CISA says it has evidence that a recent critical-severity vulnerability in GeoServer is exploited in the wild.
Malware & Threats
The Void Banshee APT exploited the CVE-2024-38112 Windows zero-day to infect systems with the Atlantida stealer.
Malware & Threats
Cisco has patched an NX-OS command injection zero-day exploited by China-linked cyberespionage group Velvet Ant.
Vulnerabilities
CISA on Wednesday warned that three older flaws in GeoServer, Linux kernel, and Roundcube webmail are exploited in the wild.
Vulnerabilities
Exploitation attempts targeting CVE-2024-5806, a critical MOVEit Transfer vulnerability patched recently, have started.
Malware & Threats
A Mirai-like botnet has started exploiting a critical-severity vulnerability in discontinued Zyxel NAS products.
Artificial Intelligence
Attack demonstrates how LLM agents can combine known exploitation techniques with real-time reasoning to automate complex, multi-stage intrusions.
Artificial Intelligence
Artificial Intelligence
Artificial Intelligence
Cybercrime
Noteworthy stories that might have slipped under the radar: Anonymous-linked Canadian hacker jailed, researcher drops zero-days in open source projects, Venezuelans sentenced in the...
Artificial Intelligence
