SecurityAdobe Commerce bug exploited before hotfix
Sansec reports active attacks on a max-severity Magento flaw, with backdoors and secondary access found.
> Search
30 results for “exploitation”
Security
SecurityN-able's Fourth N-central Hotfix Still Leaves Exploitation Question Open
N-able shipped a fourth N-central hotfix for a critical RCE flaw, but its own statements conflict on whether it's been exploited.
SecurityMikroTik routers under active attack via new SSH flaws
CERT Poland warns of active exploitation of two critical MikroTik RouterOS vulnerabilities, enabling full router hijacking.
SecuritySangoma Switchvox flaw exploited in active attacks
CVE-2026-9586, an unauthenticated SQL injection in Switchvox, is under active exploitation, Horizon3 reports.
SecuritySonicWall SMA 1000 Zero-Days Exploited in Chained Attacks
SonicWall patches two zero-days in SMA 1000 VPN appliances, warning of active exploitation that combines both flaws.
SecurityArtifactory Flaw Exploited Within Days of Patch
Attackers are exploiting CVE-2026-82329, a critical Artifactory authentication bypass, to mint admin tokens.
SecurityJFrog Flaw Exploited Days After Patch
CVE-2026-82329, a critical Artifactory auth bypass, is reportedly under active attack post-disclosure.
Cyber CrimeNigerian sextortion suspects face US charges after teen deaths
Two Nigerian men extradited to the US over sextortion schemes linked to deaths of two minors face life sentences.
Cyber CrimeAI Coding Assistant Now a Ransomware Weapon
Aurora ransomware actors use Cursor Agent AI to automate post-exploitation tasks, per Gambit Security research.
SecurityAI tools shrink attack timelines for UAT-10147
Chinese-speaking group automates post-breach ops, slashing response windows for defenders.
SecurityOracle WebLogic Flaw Under Active Attack
CISA adds CVE-2026-21962 to KEV catalog, citing active exploitation and urging federal agencies to patch by August 27.
SecurityDefender's Boot Driver Becomes a Kernel Weapon
Researchers show how Windows' own BTR.sys can delete security software at boot, evading blocks.
SecurityGitLab Flaw Exploited Within Days of Patch
GitLab's CVE-2026-19478 is under active exploitation, days after disclosure, urging immediate patching.
Cyber CrimeFeds: AI-Assisted Attacks on Critical PLCs Are Here
Government agencies warn of active exploitation of Siemens S7 controllers using AI-generated attack code.
Cyber CrimeFour Exploited Flaws Enter CISA KEV Catalog
CISA adds four actively exploited vulnerabilities affecting macOS, SharePoint, vCenter, and Windows IKE to its KEV catalog.
SecurityMLflow SSRF Flaw Exploited for Cloud Credential Theft
Attackers are exploiting critical MLflow and FUXA vulnerabilities to steal cloud credentials and execute code.
Tech NewsAI-Speed Attacks Force Rethink of Cyber Defense
Experts discuss if detection-first security can keep pace as AI accelerates exploitation and shrinks patch-to-exploit timelines.
Cyber CrimeFormer Medusa Affiliate Debuts New Ransomware
Microsoft tracks Storm-1175's shift to StormEncryptor, following exploitation of an N-central flaw.
Cyber CrimeThe Com member gets prison for sextortion
UK court sentences 20-year-old to two years for blackmail and sextortion targeting 117 teen victims.
SecurityFlaw in Progress LoadMaster exploited in attacks
CISA warns of active exploitation of critical command injection flaw in Progress Kemp LoadMaster; urges patching.
SecurityCISA Warns of Exploited Progress LoadMaster Flaw
A critical command injection vulnerability in Progress LoadMaster is under active exploitation, prompting urgent CISA remediation requirements.
SecurityOracle Database Hijacked for Tool Storage
Researchers identified a post-exploitation toolkit concealed within Oracle database schema objects to bypass endpoint security tools.
SecurityCISA Warns of Active JetBrains TeamCity Flaw
A deserialization vulnerability in JetBrains TeamCity is under active exploitation, forcing federal agencies to patch systems by August 8, 2026.
SecurityCisco Investigates Zero-Day FMC Flaw
A static credential vulnerability in Cisco Secure FMC Software is undergoing active exploitation in the wild, according to the company.
SecurityAI Vulnerability Hunting Falls Short
New data from VulnCheck reveals that AI-assisted vulnerability discovery is not yet driving a surge in real-world exploitation.
SecurityAI Vulnerability Scares Prove Premature
New research shows AI-discovered flaws are exploited at the same rate as traditional ones, debunking 'vulnpocalypse' fears.
Cyber CrimeAI Agents Automate Post-Exploitation Task
A newly uncovered intrusion suggests threat actors are leveraging autonomous AI tools to streamline lateral movement and enumeration.
SecurityCISA Adds WordPress SQL Injection to KEV List
WordPress Core is currently under active exploitation via a SQL injection vulnerability that can be chained to achieve remote code execution.
ServiceNow Sandbox Breach Escalates
Enterprise AI systems face active exploitation of a high-complexity remote code execution flaw following a recent patch release.
SecurityCISA Adds Actively Exploited Fortinet FortiSandbox Flaw to KEV Catalog
CISA has confirmed active exploitation of an OS command injection vulnerability in Fortinet FortiSandbox, mandating urgent remediation for federal agencies.