Malware & Threats
Already added to CISA’s KEV catalog, the flaw allows attackers to bypass authentication and gain administrative privileges.
Hi, what are you looking for?
SecurityWeek
All posts tagged "exploited"
Nation-State
The vulnerability in TeamT5 ThreatSonar Anti-Ransomware was recently added to CISA’s KEV catalog.
Email Security
Patched in December 2025, the exploited flaw leads to XSS attacks via the animate tags in SVG documents.
Ransomware
CISA has updated its KEV entry for CVE-2026-1731 to alert organizations of exploitation in ransomware attacks.
Malware & Threats
Security researchers have seen the vulnerabilities being exploited to deliver shells, conduct reconnaissance, and download malware.
Vulnerabilities
The vulnerability added to CISA’s KEV catalog affects ThreatSonar Anti-Ransomware and it was patched in 2024.
Malware & Threats
GTIG and Mandiant said the zero-day tracked as CVE-2026-22769 has been exploited by UNC6201 since at least 2024.
Vulnerabilities
A Chrome 145 update fixes CVE-2026-2441, a vulnerability that can likely be exploited for arbitrary code execution.
Vulnerabilities
Exploitation attempts target CVE-2026-1731, a critical unauthenticated remote code execution flaw in BeyondTrust Remote Support.
Vulnerabilities
Disclosed at the end of January, the SolarWinds vulnerability was likely exploited as a zero-day since December 2025.
Vulnerabilities
Impacting the ‘dyld’ system component, the memory corruption issue can be exploited for arbitrary code execution.
Vulnerabilities
Microsoft’s Patch Tuesday updates fix roughly 60 vulnerabilities found in the company’s products.
Vulnerabilities
Vulnerable SolarWinds Web Help Desk instances were exploited in December 2025 for initial access.
Ransomware
SmarterTools says customers were impacted after hackers compromised a data center used for quality control testing.
Vulnerabilities
The security defect allows unauthenticated attackers to execute arbitrary code remotely via malicious HTTP requests.
Vulnerabilities
Two IP addresses accounted for the majority of the 1.4 million exploitation attempts observed over the past week.
Vulnerabilities
The critical-severity SolarWinds Web Help Desk flaw could lead to unauthenticated remote code execution.
Malware & Threats
Albeit mainly considered a theoretical risk, the flaw has been exploited to disable protections and deliver malware.
Malware & Threats
The attacks targeting Europe were analyzed by Ukraine’s CERT-UA and the cybersecurity company Zscaler.
Vulnerabilities
The critical-severity vulnerabilities could allow unauthenticated attackers to execute arbitrary code remotely.
Vulnerabilities
The Head Mare hacktivist group has been exploiting the bugs to deploy the PhantomCore malware.
Vulnerabilities
Artificial Intelligence
Malware & Threats
Hackers pushed a poisoned arrayref version that added a dependency to fetch a malicious payload from a remote server.
Cloud Security
