Vulnerabilities
Threat actors are exploiting a recent path traversal vulnerability in SolarWinds Serv-U using public PoC code.
Hi, what are you looking for?
SecurityWeek
All posts tagged "exploited"
Malware & Threats
CISA urges federal agencies to apply mitigations for an exploited Progress Telerik vulnerability as soon as possible.
Ransomware
The TellYouThePass ransomware gang started exploiting a recent code execution flaw in PHP days after public disclosure.
Malware & Threats
Arm warns that CVE-2024-4610, a Mali GPU kernel driver vulnerability addressed two years ago, is exploited in attacks.
Vulnerabilities
GreyNoise has observed a rapid increase in the number of exploitation attempts targeting a recent Check Point VPN zero-day.
Malware & Threats
CISA has added an old Oracle WebLogic flaw tracked as CVE-2017-3506 to its known exploited vulnerabilities catalog.
Malware & Threats
PoC code targeting a recent Check Point VPN zero-day has been released as Censys identifies 14,000 internet-accessible appliances.
Vulnerabilities
CISA instructs federal agencies to mitigate CVE-2024-1086, a Linux kernel flaw leading to privilege escalation.
Malware & Threats
The recently disclosed Check Point VPN attacks involve the zero-day vulnerability CVE-2024-24919, which allows hackers to obtain passwords.
Government
CISA has added CVE-2023-43208, an unauthenticated remote code execution vulnerability, to its KEV catalog.
Vulnerabilities
Google releases Chrome 125 to the stable channel with patches for nine vulnerabilities, including a zero-day.
Vulnerabilities
Google has patched CVE-2024-4761, the second exploited vulnerability addressed by the company within one week.
Vulnerabilities
A Chrome 124 update patches the second Chrome zero-day that has been found to be exploited in malicious attacks in 2024.
Vulnerabilities
CISA says a critical GitLab password reset flaw is being exploited in attacks and roughly 1,400 servers have not been patched.
Incident Response
Palo Alto Networks has shared remediation instructions for organizations whose firewalls have been hacked via CVE-2024-3400.
Vulnerabilities
CISA warns organizations of a two-year-old Windows Print Spooler vulnerability being exploited in the wild.
Vulnerabilities
CrushFTP patches a zero-day vulnerability allowing unauthenticated attackers to escape the VFS and retrieve system files.
Malware & Threats
Shadowserver has identified roughly 6,000 internet-accessible Palo Alto Networks firewalls potentially vulnerable to CVE-2024-3400.
Malware & Threats
Microsoft warns that several OpenMetadata vulnerabilities are being exploited to deploy cryptomining malware to Kubernetes environments.
Malware & Threats
Palo Alto Networks firewall vulnerability CVE-2024-3400 increasingly exploited after PoC code has been released.
Artificial Intelligence
Attack demonstrates how LLM agents can combine known exploitation techniques with real-time reasoning to automate complex, multi-stage intrusions.
Artificial Intelligence
Artificial Intelligence
Artificial Intelligence
Cybercrime
Noteworthy stories that might have slipped under the radar: Anonymous-linked Canadian hacker jailed, researcher drops zero-days in open source projects, Venezuelans sentenced in the...
Artificial Intelligence
