SecurityNewAcronis Backup Plugin Flaw Exploited
Acronis has disclosed CVE-2026-87886, a high-severity Linux privilege-escalation flaw in its cPanel and Plesk backup plugins, citing limited in-the-wild attacks.
> Search
30 results for “exploit”
SecurityNew
Cyber CrimeCisco Email Gateway Flaw Under Attack
Cisco warns CVE-2026-76461, a CVSS 9.8 flaw in Secure Email Gateway, is being exploited to run commands as root, with a federal patch deadline of September 17.
AI & MLMicrosoft Drafts AI Rules for Cyber Defense
A new draft code of conduct would block its MAI models from generating working exploit code while opening a review track for defensive security work.
SecurityMarimo RCE Hit by Human at Machine Speed
Sysdig says a hand-built toolkit let a human operator exploit a Marimo flaw in eight seconds, without any sign of LLM use.
SecurityDutch NCSC warns Check Point VPN flaws
Dutch NCSC warns two critical Check Point VPN flaws could be exploited soon, after fixes shipped on September 9.
SecurityGitLab's Patch Race Against Active Exploits
GitLab patches a maximum-severity path traversal flaw and a critical EE deserialization bug as researchers report in-the-wild probing within hours.
Cyber CrimeArtifactory Flaws Chained Into Admin Backdoors
Wiz reports attackers chained two Artifactory token flaws to seize admin control and plant backdoors, while a third flaw was exploited separately.
Cyber CrimePatch-Gap Zero-Days Fueled BlueMoon Kit
A new exploit kit chains four Chrome and Windows flaws, revealing how quickly attackers weaponize the delay between open-source fixes and stable browser patches.
SecurityDefender Bypass Chain Grows Again
Nightmare Eclipse drops ShieldCrash, a fresh Microsoft Defender zero-day that bypasses incomplete fixes for the ShieldBreak exploit.
Cyber CrimeCisco confirms exploited Secure FMC flaw
Cisco says attackers are exploiting a maximum-severity Secure FMC bug, but its own July advisory points to earlier activity.
Cyber CrimeOne Exploit Kit, Four Spy Groups, One Week
Proofpoint says China-aligned clusters rapidly adopted BlueMoon, a Chrome and Windows exploit chain that may have cost far less to build than expected.
SecurityBlueMoon Kit Ties Browser Bugs to AI
Proofpoint says an exploit kit chaining two Chromium flaws and a Windows bug hit four suspected China-linked espionage groups within days.
SecurityWeChat worm exploited before calls answered
Tencent patches zero-click flaw that allowed account takeover via VoIP calls.
SecurityChrome Fixes 230 Flaws; 7th Zero-Day Exploited
Google patches an in-the-wild V8 out-of-bounds write bug, marking the seventh exploited zero-day this year.
SecurityWindows Patch Tuesday Surges Past 964 Fixes With Zero-Days
Microsoft's September release tops 964 fixes, including two exploited zero-days and a wormable DNS flaw.
SecurityNew Record in Microsoft Patches
Microsoft fixes 974 flaws, including two exploited zero-days, but only a few matter to most orgs.
SecurityAdobe Commerce bug exploited before hotfix
Sansec reports active attacks on a max-severity Magento flaw, with backdoors and secondary access found.
SecurityN-able's Fourth N-central Hotfix Still Leaves Exploitation Question Open
N-able shipped a fourth N-central hotfix for a critical RCE flaw, but its own statements conflict on whether it's been exploited.
SecurityMikroTik routers under active attack via new SSH flaws
CERT Poland warns of active exploitation of two critical MikroTik RouterOS vulnerabilities, enabling full router hijacking.
Cyber CrimeMikroTik SSH Attacks Raise Router Security Stakes
Attackers exploit exposed SSH on MikroTik routers for full admin access; CERT Polska urges patching.
SecurityElementor Pro Flaw Exploited in the Wild
Attackers are actively exploiting a critical file upload bug in the popular Elementor Pro WordPress plugin.
SecurityPaperCut Attacks Target Education Sector
Attackers exploit two PaperCut flaws to steal credentials from schools and universities in the U.S. and Europe.
AI & MLOpenAI's GPT-6 Astra crosses critical cyber threshold
New model scores 100% on exploit benchmark, raising enterprise safety questions as OpenAI prepares restricted rollout.
SecurityChrome V8 Zero-Day Under Attack Gets Emergency Patch
Google patches a high-severity type confusion bug in V8 that has been exploited in the wild, the sixth zero-day fixed this year.
SecurityCrowdStrike Falcon Faces New Zero-Day PoC
The researcher known as Nightmare Eclipse has released FalconFlank, a privilege escalation exploit targeting CrowdStrike Falcon via a Windows Office macro feature.
Cyber CrimePegasus iMessage Attack Targets Serbian Student Activist
Citizen Lab finds NSO Group spyware on an activist's iPhone via a zero-click exploit, highlighting ongoing surveillance of Serbian civil society.
SecuritySangoma Switchvox flaw exploited in active attacks
CVE-2026-9586, an unauthenticated SQL injection in Switchvox, is under active exploitation, Horizon3 reports.
SecurityRockwell Patch Wave: DoS, RCE, and More
Rockwell Automation ships fixes for 13+ flaws, including critical RSLinx DoS and an exploited-tagged issue.
SecurityAI Exploits OT Equipment, But Not Cheaply
Forescout researchers used AI to port RCE exploits to PLCs, but high cost and effort still deter criminals.
SecuritySonicWall SMA 1000 Zero-Days Exploited in Chained Attacks
SonicWall patches two zero-days in SMA 1000 VPN appliances, warning of active exploitation that combines both flaws.