Vulnerabilities
The zero-day, tracked as CVE-2026-20182, has been exploited in targeted attacks by a sophisticated threat actor identified as UAT-8616.
Hi, what are you looking for?
SecurityWeek
All posts tagged "exploited"
Artificial Intelligence
The first exploitation attempts were observed less than four hours after the authentication bypass was publicly disclosed.
Vulnerabilities
CVE-2026-6973 is a high-severity vulnerability that allows an attacker who has admin privileges to execute arbitrary code.
Nation-State
The cybersecurity firm has not explicitly accused China of being behind the attack, but the evidence suggests it was.
Vulnerabilities
CVE-2026-0300 affects the Captive Portal service of PAN-OS software on PA and VM series firewalls.
Vulnerabilities
The security defects allow unauthenticated, remote attackers to execute arbitrary code through crafted requests.
Endpoint Security
CISA has added the bug to its KEV list, and Microsoft has observed limited exploitation, mainly associated with PoC testing.
Vulnerabilities
The attacks likely target CVE-2026-41940, a recently patched zero-day leading to administrative access.
Vulnerabilities
The authentication bypass flaw allows attackers to gain administrative access to vulnerable servers.
Vulnerabilities
The initial vulnerability was exploited by Russia-linked APT28 in attacks against Ukraine and EU countries.
Vulnerabilities
The flaw allows attackers to access the SAM database, extract NTLM hashes, and gain System privileges.
Vulnerabilities
CISA expanded the KEV catalog with eight flaws, but five of them have been flagged as exploited before.
Vulnerabilities
In-the-wild exploitation has been ongoing for a year, but no successful payload execution has been observed.
Vulnerabilities
The remote code execution vulnerability tracked as CVE-2026-34197 came to light in early April.
Vulnerabilities
Hackers are exploiting CVE-2026-33032, a critical remote takeover vulnerability in the Nginx UI management tool.
Vulnerabilities
Experts say this is the second-largest Microsoft Patch Tuesday ever based on CVE count.
Vulnerabilities
The security defects allow attackers to escalate privileges and execute arbitrary code remotely.
Vulnerabilities
The vulnerability is tracked as CVE-2026-34621 and Adobe has confirmed that it can be exploited for arbitrary code execution.
Vulnerabilities
Within nine hours, a hacker built an exploit from the unauthenticated bug’s advisory and started using it in the wild.
Vulnerabilities
Reputable researcher Haifei Li has come across what appears to be a PDF designed to exploit an unpatched vulnerability.
Artificial Intelligence
Attack demonstrates how LLM agents can combine known exploitation techniques with real-time reasoning to automate complex, multi-stage intrusions.
Artificial Intelligence
Artificial Intelligence
Artificial Intelligence
Cybercrime
Noteworthy stories that might have slipped under the radar: Anonymous-linked Canadian hacker jailed, researcher drops zero-days in open source projects, Venezuelans sentenced in the...
Artificial Intelligence
