Cyber CrimeNewAutonomous AI Weaponization at Scale
Researchers have identified a threat actor using the DeepSeek AI model to automate the lifecycle of cyberattacks on exposed servers.
> Search
30 results for “exploit”
Cyber CrimeNew
SecurityCisco Investigates Zero-Day FMC Flaw
A static credential vulnerability in Cisco Secure FMC Software is undergoing active exploitation in the wild, according to the company.
SecurityAI Vulnerability Hunting Falls Short
New data from VulnCheck reveals that AI-assisted vulnerability discovery is not yet driving a surge in real-world exploitation.
SecurityAI Vulnerability Scares Prove Premature
New research shows AI-discovered flaws are exploited at the same rate as traditional ones, debunking 'vulnpocalypse' fears.
SecurityCISA Adds Arista VeloCloud to KEV List
A critical OS command injection vulnerability in Arista VeloCloud Orchestrator is now confirmed to be exploited in the wild.
Cyber CrimeSteam Forums Hit by ClickFix Malware
Threat actors are exploiting technical support discussions on Steam to trick gamers into executing malicious PowerShell cryptominers.
SecurityAuth.js Email Normalizer Bypass Flaw
A critical vulnerability in Auth.js and NextAuth allows attackers to intercept magic-link sign-in flows by exploiting improper Unicode normalization.
SecurityGitLab RCE Chain Lacks CVE Classification
A newly public exploit targeting GitLab reveals how silent patches for library bugs can leave critical vulnerabilities exposed.
Clop Gang Targets Critical PLM Software
Threat actors are exploiting a severe vulnerability in PTC Windchill and FlexPLM to exfiltrate sensitive enterprise product data.
SecurityBudibase OIDC SSO Flaw Allows Account Takeover
A critical vulnerability in Budibase allows attackers to hijack existing user accounts by exploiting improper email validation in the OIDC login process.
Cyber CrimeAI Agents Automate Post-Exploitation Task
A newly uncovered intrusion suggests threat actors are leveraging autonomous AI tools to streamline lateral movement and enumeration.
SecurityZero-Click Exploits Hit Zimbra Users
A sophisticated campaign by the threat group Laundry Bear has bypassed user interaction to harvest sensitive government data.
Cyber CrimeSocial Engineering in Hospital Records
A red teamer exploited human behavior to gain unauthorized access to a hospital records room, highlighting significant security gaps.
SecuritySolarWinds Serv-U Faces Critical RCE
A critical remote code execution vulnerability identified in SolarWinds Serv-U requires domain administrator access to exploit.
SecurityCISA Warns of Actively Exploited WordPress Flaw
WordPress Core is under active attack via an interpretation conflict vulnerability that allows for SQL injection and remote code execution.
SecurityCISA Adds WordPress SQL Injection to KEV List
WordPress Core is currently under active exploitation via a SQL injection vulnerability that can be chained to achieve remote code execution.
ServiceNow Sandbox Breach Escalates
Enterprise AI systems face active exploitation of a high-complexity remote code execution flaw following a recent patch release.
SecurityWP2Shell Flaws Force Rapid WordPress Patch
A pair of newly identified vulnerabilities dubbed WP2Shell are being actively exploited in the wild, triggering forced site updates.
SecuritySonicWall SMA Breach: Root-Level Risk
A sophisticated threat actor utilized zero-day exploits to gain deep access to SonicWall VPN appliances before official patches existed.
SecurityThe Paste-and-Run Malware Trap
ACR Stealer exploits user-executed commands to siphon session tokens and files, bypassing traditional software vulnerabilities.
SecurityCISA Warns of Active FortiSandbox Flaw
Federal agencies must address an actively exploited OS command injection vulnerability in Fortinet products by July 19, 2026.
SecurityCISA Adds Microsoft SharePoint Deserialization Flaw to KEV Catalog
A critical deserialization vulnerability in Microsoft SharePoint is currently being exploited in the wild, requiring immediate action from federal agencies.
SecurityCISA Adds Actively Exploited Fortinet FortiSandbox Flaw to KEV Catalog
CISA has confirmed active exploitation of an OS command injection vulnerability in Fortinet FortiSandbox, mandating urgent remediation for federal agencies.
SecurityCISA Adds Actively Exploited Microsoft SharePoint Flaw to KEV Catalog
A deserialization vulnerability in Microsoft SharePoint is currently being exploited in the wild, prompting an urgent remediation deadline for federal agencies.
SecurityCISA Adds Actively Exploited KNX Protocol Flaw to KEV Catalog
A critical account lockout vulnerability in KNX Association products is now under active exploitation, requiring immediate remediation by federal agencies.
SecurityCISA Flags Actively Exploited Oracle E-Business Suite Vulnerability
An improper privilege management flaw in Oracle E-Business Suite is being actively exploited, potentially allowing unauthorized access to Oracle Payments.
SecurityCISA Adds KNX Protocol Connection Authorization Flaw to KEV Catalog
A critical account lockout vulnerability in the KNX Protocol Connection Authorization Option 1 is currently being exploited in the wild.
SecurityCISA Adds Actively Exploited Oracle E-Business Suite Flaw to KEV
An improper privilege management vulnerability in Oracle E-Business Suite is currently being exploited in the wild, risking full takeover of Oracle Payments.
Cyber CrimeTELEPUZ Malware Exploits User Trust
A modular, C-based threat is weaponizing social engineering tactics to gain administrative control over compromised Windows systems.
Cyber CrimeAI Autonomy Accelerates Cyber Exploits
Researchers demonstrated that a frontier language model can navigate a full attack chain to reach admin-level access in under 40 minutes.