SecurityRabbitMQ Vulnerabilities Expose Infrastructure to Total Takeover
Critical flaws in RabbitMQ allow unauthenticated access to OAuth secrets and authorization bypasses, threatening enterprise messaging.
Security
From zero-day disclosures to routine patch Tuesdays, this is Xploitwire's feed on the vulnerabilities and advisories that security teams actually need to act on — what's exploitable, what's patched, and what to prioritize first.
Security
SecurityPamStealer Malware Signals a More Sophisticated Era for macOS
A newly identified infostealer employs unconventional local authentication checks and Rust-based binaries to bypass standard defenses.
SecurityGigaWiper: A Swiss Army Knife of Digital Destruction
Microsoft identifies a sophisticated new Windows backdoor that merges multiple ransomware and data-wiping tools into one modular threat.
SecurityProgress Software Demands Server Shutdown Amid Opaque Security Alert
Customers are forced to pull the plug on infrastructure as the vendor probes a mysterious and credible external threat to its file-sharing platform.
SecurityJoomla Add-on Exploits Threaten Web Infrastructure Integrity
Critical RCE flaws in popular Joomla extensions leave unauthenticated websites vulnerable to total compromise by malicious actors.
SecurityZimbra Security Breach Exposes Critical Zero-Click Email Risks
A severe vulnerability in the Classic Web Client requires immediate patching to prevent unauthorized code execution via email.
SecurityHalluSquatting Turns AI Assistants Into Silent Botnet Factories
Researchers discover a critical vulnerability where AI coding agents are tricked into executing malicious code via hallucinations.
SecurityLinux Virtualization Flaws Expose Cloud Infrastructure Vulnerability
Recent vulnerabilities reveal long-standing memory corruption risks in the Linux kernel that could compromise major cloud environments.
SecurityDefender Patch Flaw Risks Total Disk Saturation via Exploit
A fix for a critical zero-day vulnerability inadvertently introduces a secondary risk that could lead to complete hard drive exhaustion.
SecurityThe MFA Illusion: How One Open Server Exposed Next-Gen Phishing
A simple configuration blunder by an attacker unraveled three sophisticated, bypass-capable phishing campaigns targeting Microsoft 365.
SecurityWhen Trusted Add-Ons Become Silent Gateways for Web Server Takeovers
The exploitation of critical Joomla extensions highlights a broader trend of automated campaigns targeting vulnerable CMS plugins globally.
SecurityHow RedHook Turns Android's Developer Settings Into an Open Backdoor
A newly upgraded RedHook Android malware variant exploits wireless debugging settings to gain high-level shell privileges without root.
SecurityHow Vulnerable BitLocker Wrappers Threaten Global Cash Networks
Security weaknesses in Microsoft BitLocker wrappers could expose corporate networks and cash machines to deep physical compromise.
SecurityBeyond the Ward: Why Hackers Are Targeting Medical Supply Chains
As frontline clinical defenses strengthen, digital adversaries are pivoting toward vulnerable third-party service providers.
SecurityFrom Code to Cabinet: The Rise of the Cybersecurity Ambassador
As Jen Ellis becomes a Member of the Order of the British Empire (MBE), the vital link between researchers and policy comes into focus.
SecurityWhy the FBI Takedown of NetNut Threatens the Cybercrime Pipeline
Law enforcement and tech giants dismantle a massive residential proxy network operating right inside consumer living rooms.
SecurityThe Dark Risks of Trusting Shadowy Figures With Zero-Day Exploits
A look inside IRIS C2, a mysterious cyber firm offering multimillion-dollar bounties but secretly run by notorious political schemers.
SecurityThe Geopolitical Crosshairs Targeting Pakistani Police Data
Sustained cyber espionage campaigns weaponize local law enforcement systems to harvest sensitive citizen data and security records.
SecurityWhen Build Tools Turn Hostile: Inside the jscrambler Poisoning
A compromised jscrambler package release highlights how modern software pipelines are weaponized to harvest developer secrets.
SecurityStealthy Webshell Attacks Target Vulnerable CMS Platforms
As an automated, potentially AI-assisted campaign scans for flawed plugins, small businesses face a severe rise in stealthy webshell attacks.