ICS/OT
The vulnerability was disclosed and mitigated in 2021 but its in-the-wild exploitation has only now come to light.
Hi, what are you looking for?
SecurityWeek
All posts tagged "exploited"
Vulnerabilities
Less than half of the total zero-days have been attributed to a threat actor, but spyware vendors and China are in the lead.
Vulnerabilities
The networking giant has added the recently patched CVE-2026-20128 and CVE-2026-20122 to the list of exploited vulnerabilities.
Vulnerabilities
The recently patched CVE-2026-22719 can be exploited by an unauthenticated attacker for remote code execution.
Mobile & Wireless
An integer overflow or wraparound in the Qualcomm graphics component, the bug leads to memory corruption.
Vulnerabilities
The attacks exploited a post-authentication command injection vulnerability in the endpoint manager’s interface.
Malware & Threats
Already added to CISA’s KEV catalog, the flaw allows attackers to bypass authentication and gain administrative privileges.
Nation-State
The vulnerability in TeamT5 ThreatSonar Anti-Ransomware was recently added to CISA’s KEV catalog.
Email Security
Patched in December 2025, the exploited flaw leads to XSS attacks via the animate tags in SVG documents.
Ransomware
CISA has updated its KEV entry for CVE-2026-1731 to alert organizations of exploitation in ransomware attacks.
Malware & Threats
Security researchers have seen the vulnerabilities being exploited to deliver shells, conduct reconnaissance, and download malware.
Vulnerabilities
The vulnerability added to CISA’s KEV catalog affects ThreatSonar Anti-Ransomware and it was patched in 2024.
Malware & Threats
GTIG and Mandiant said the zero-day tracked as CVE-2026-22769 has been exploited by UNC6201 since at least 2024.
Vulnerabilities
A Chrome 145 update fixes CVE-2026-2441, a vulnerability that can likely be exploited for arbitrary code execution.
Vulnerabilities
Exploitation attempts target CVE-2026-1731, a critical unauthenticated remote code execution flaw in BeyondTrust Remote Support.
Vulnerabilities
Disclosed at the end of January, the SolarWinds vulnerability was likely exploited as a zero-day since December 2025.
Vulnerabilities
Impacting the ‘dyld’ system component, the memory corruption issue can be exploited for arbitrary code execution.
Vulnerabilities
Microsoft’s Patch Tuesday updates fix roughly 60 vulnerabilities found in the company’s products.
Vulnerabilities
Vulnerable SolarWinds Web Help Desk instances were exploited in December 2025 for initial access.
Ransomware
SmarterTools says customers were impacted after hackers compromised a data center used for quality control testing.
Artificial Intelligence
Attack demonstrates how LLM agents can combine known exploitation techniques with real-time reasoning to automate complex, multi-stage intrusions.
Artificial Intelligence
Artificial Intelligence
Artificial Intelligence
Cybercrime
Noteworthy stories that might have slipped under the radar: Anonymous-linked Canadian hacker jailed, researcher drops zero-days in open source projects, Venezuelans sentenced in the...
Artificial Intelligence
