Vulnerabilities
CVE-2025-61757 is an unauthenticated remote code execution vulnerability affecting Oracle Identity Manager.
Hi, what are you looking for?
SecurityWeek
All posts tagged "exploited"
Vulnerabilities
A proof-of-concept (PoC) exploit targeting the high-severity remote code execution (RCE) bug exists.
Artificial Intelligence
Threat actors are abusing Ray’s lack of authentication to compromise exposed clusters and deploy LLM-generated payloads and cryptocurrency miners.
Vulnerabilities
An OS command injection flaw, the exploited zero-day allows attackers to execute arbitrary code on the underlying system.
Vulnerabilities
The flaw was reported by Google's Threat Analysis Group and was likely exploited by a commercial spyware vendor.
Vulnerabilities
The exploitation of the recent XWiki vulnerability has expanded to botnets, cryptocurrency miners, scanners, and custom tools.
Government
Federal agencies have reported as ‘patched’ ASA or FTD devices running software versions vulnerable to attacks.
Vulnerabilities
Tracked as CVE-2025-9242 (CVSS score of 9.3), the flaw leads to unauthenticated, remote code execution on vulnerable firewalls.
Vulnerabilities
Amazon has seen a threat actor exploiting CVE-2025-20337 and CVE-2025-5777, two critical Cisco and Citrix vulnerabilities, as zero-days.
Vulnerabilities
Microsoft’s latest Patch Tuesday updates address more than 60 vulnerabilities in Windows and other products.
Vulnerabilities
A threat actor has exploited the issue to create a new administrator account and then used the account to execute remote access tools.
Malware & Threats
Threat actors exploited CVE-2025-21042 to deliver malware via specially crafted images to users in the Middle East.
Vulnerabilities
The critical vulnerability allows attackers to read arbitrary emails, including password reset messages.
Vulnerabilities
A critical vulnerability in Control Web Panel (CWP), tracked as CVE-2025-48703, allows remote, unauthenticated command execution.
Vulnerabilities
Broadcom has updated its advisory on CVE-2025-41244 to mention the vulnerability’s in-the-wild exploitation.
Malware & Threats
The Windows shortcut vulnerability has been seen in attacks conducted by Mustang Panda to drop the PlugX malware.
Malware & Threats
Exploits have been available publicly for over half a year, but the bug was previously targeted only for reconnaissance.
ICS/OT
Two DELMIA Apriso flaws can be chained together to gain privileged access to the application and execute arbitrary code remotely.
Vulnerabilities
Roughly 9 million exploit attempts were observed this month as mass exploitation of the critical vulnerabilities recommenced.
Vulnerabilities
The threat actor behind Operation ForumTroll used the same toolset typically employed in Dante spyware attacks.
Artificial Intelligence
Attack demonstrates how LLM agents can combine known exploitation techniques with real-time reasoning to automate complex, multi-stage intrusions.
Artificial Intelligence
Artificial Intelligence
Artificial Intelligence
Cybercrime
Noteworthy stories that might have slipped under the radar: Anonymous-linked Canadian hacker jailed, researcher drops zero-days in open source projects, Venezuelans sentenced in the...
Artificial Intelligence
