Vulnerabilities
Threat actors have started exploiting critical-severity vulnerabilities in ServiceNow shortly after public disclosure.
Hi, what are you looking for?
SecurityWeek
All posts tagged "exploited"
Vulnerabilities
CISA warns of the in-the-wild exploitation of CVE-2024-39891, a Twilio Authy bug leading to the disclosure of phone number data.
Vulnerabilities
Adobe and CISA warn that a recent Adobe Commerce vulnerability has been exploited in the wild.
Vulnerabilities
A recently patched Apache HugeGraph-Server vulnerability tracked as CVE-2024-27348 is being targeted in attacks.
Vulnerabilities
CISA says it has evidence that a recent critical-severity vulnerability in GeoServer is exploited in the wild.
Malware & Threats
The Void Banshee APT exploited the CVE-2024-38112 Windows zero-day to infect systems with the Atlantida stealer.
Malware & Threats
Cisco has patched an NX-OS command injection zero-day exploited by China-linked cyberespionage group Velvet Ant.
Vulnerabilities
CISA on Wednesday warned that three older flaws in GeoServer, Linux kernel, and Roundcube webmail are exploited in the wild.
Vulnerabilities
Exploitation attempts targeting CVE-2024-5806, a critical MOVEit Transfer vulnerability patched recently, have started.
Malware & Threats
A Mirai-like botnet has started exploiting a critical-severity vulnerability in discontinued Zyxel NAS products.
Vulnerabilities
Threat actors are exploiting a recent path traversal vulnerability in SolarWinds Serv-U using public PoC code.
Malware & Threats
CISA urges federal agencies to apply mitigations for an exploited Progress Telerik vulnerability as soon as possible.
Ransomware
The TellYouThePass ransomware gang started exploiting a recent code execution flaw in PHP days after public disclosure.
Malware & Threats
Arm warns that CVE-2024-4610, a Mali GPU kernel driver vulnerability addressed two years ago, is exploited in attacks.
Vulnerabilities
GreyNoise has observed a rapid increase in the number of exploitation attempts targeting a recent Check Point VPN zero-day.
Malware & Threats
CISA has added an old Oracle WebLogic flaw tracked as CVE-2017-3506 to its known exploited vulnerabilities catalog.
Malware & Threats
PoC code targeting a recent Check Point VPN zero-day has been released as Censys identifies 14,000 internet-accessible appliances.
Vulnerabilities
CISA instructs federal agencies to mitigate CVE-2024-1086, a Linux kernel flaw leading to privilege escalation.
Malware & Threats
The recently disclosed Check Point VPN attacks involve the zero-day vulnerability CVE-2024-24919, which allows hackers to obtain passwords.
Government
CISA has added CVE-2023-43208, an unauthenticated remote code execution vulnerability, to its KEV catalog.
Data Breaches
The cybercrime gang has listed major companies such as Shell, Philips, Fiserv, Zebra, Mindray, and Largan Precision.
Artificial Intelligence
Vulnerabilities
Cybersecurity Funding
Vulnerabilities
