SecuritySharePoint Flaw Exploited After PoC Release
Threat actors are exploiting a critical SharePoint authentication bypass after Rapid7 released a PoC exploit.
Security
From zero-day disclosures to routine patch Tuesdays, this is Xploitwire's feed on the vulnerabilities and advisories that security teams actually need to act on — what's exploitable, what's patched, and what to prioritize first.
Security
SecurityPatch Bypass Threatens Defender
A researcher's PoC bypasses Microsoft's Defender patch, granting system-level access to attackers with initial foothold.
SecuritySignal's new key verification: trust but verify
Signal launches Automatic Key Verification to detect man-in-the-middle attacks, but users must still verify contacts manually.
SecurityAndroid NFC malware combo takes out loans and relays victims' credit cards
New WindRelay malware works with SpyNote RAT to steal card data and approve loans during a 13-minute call.
SecurityPlug and Pwn attacks exploit Windows PnP for SYSTEM
Researchers show fake USB devices can trigger Windows to install vulnerable vendor software, granting SYSTEM privileges.
SecurityLazarus zero-day fools Google in Dream Job wave
New Lazarus campaign abuses Windows zero-day and fake job lures to breach defense firms, fooling Google's filters.
SecurityFake Hires: The Identity Gap in Onboarding
State and FBI warnings highlight how fake remote workers bypass hiring controls to gain network access.
SecurityStealthy Guest-Access Attacks Hit Salesforce, ServiceNow
Researchers uncover 'City-Forum' campaign using a custom toolset to exploit unauthenticated guest access in Salesforce and ServiceNow.
SecurityUK records office reprimanded for CMS patch failures
ACRO's unpatched Kentico CMS exposed sensitive data of up to 10,920 people, with alerts unread for months.
SecurityFake CCleaner sites push Chrome spyware
Malwarebytes finds fake CCleaner downloads installing GhostDesk Chrome extension for credential theft and surveillance.
SecurityLiteLLM Attack's True Reach Exposed
CloudSEK details how a Trivy compromise cascaded into LiteLLM, affecting 2,500+ orgs and 434,000 pipelines.
SecurityVMware vCenter Flaw Exploited for Persistent Access
Attacks exploiting CVE-2026-59310 target hundreds of victims, deploying reverse_ssh for persistent access.
SecurityChipmakers Patch Over 80 Bugs, Including Severe Flaws
Intel and AMD release combined patches for more than 80 vulnerabilities, including high-severity issues in processors and software.
SecurityIvanti Endpoint Manager Patches Critical Flaws
Ivanti releases updates for Endpoint Manager and Neurons for MDM addressing remotely exploitable vulnerabilities.
SecurityIndustrial Patch Tuesday: Critical Gaps Closed in Siemens, Schneider, Phoenix
August 2026 ICS Patch Tuesday advisories from Siemens, Schneider Electric, Phoenix Contact address critical vulnerabilities, including a maximum-severity flaw in Siemens IoT devices.
SecurityChrome's anti-abuse layers curb 7B notification spam
Google says Chrome's layered defenses cut unwanted Android notifications by over 7 billion daily in Q1 2026.
SecurityDeadLock ransomware fortifies itself with blockchain infrastructure
DeadLock ransomware stores config data on Polygon blockchain, complicating infrastructure takedowns by law enforcement.
SecurityFake Wi-Fi on Delta Flight Draws FBI Scrutiny
Passengers on Delta 591 reportedly spoofed onboard Wi-Fi after DEF CON, prompting an FBI inquiry.
SecurityCisco VPN flaw weaponized in active DoS attacks
A high-severity ASA and FTD vulnerability is being exploited to crash devices remotely; hot fixes are available.
SecurityMicrosoft Patches 398 Flaws, One Exploited
August's Patch Tuesday addresses 398 vulnerabilities, including an actively exploited zero-day, as AI-driven discovery swells update volumes.