SecurityAI Vulnerability Hunting Falls Short
New data from VulnCheck reveals that AI-assisted vulnerability discovery is not yet driving a surge in real-world exploitation.
> Search
16 results for “exploitation”
Security
SecurityAI Vulnerability Scares Prove Premature
New research shows AI-discovered flaws are exploited at the same rate as traditional ones, debunking 'vulnpocalypse' fears.
Cyber CrimeAI Agents Automate Post-Exploitation Task
A newly uncovered intrusion suggests threat actors are leveraging autonomous AI tools to streamline lateral movement and enumeration.
SecurityCISA Adds WordPress SQL Injection to KEV List
WordPress Core is currently under active exploitation via a SQL injection vulnerability that can be chained to achieve remote code execution.
ServiceNow Sandbox Breach Escalates
Enterprise AI systems face active exploitation of a high-complexity remote code execution flaw following a recent patch release.
SecurityCISA Adds Actively Exploited Fortinet FortiSandbox Flaw to KEV Catalog
CISA has confirmed active exploitation of an OS command injection vulnerability in Fortinet FortiSandbox, mandating urgent remediation for federal agencies.
SecurityCISA Adds Actively Exploited KNX Protocol Flaw to KEV Catalog
A critical account lockout vulnerability in KNX Association products is now under active exploitation, requiring immediate remediation by federal agencies.
SecurityOracle Flaw Forces Urgent Federal Patch
CISA mandates federal agencies secure Oracle E-Business Suite systems by Saturday to mitigate active exploitation risks.
SecurityCISA Mandates Patching for SharePoint
Federal agencies must secure SharePoint servers against active exploitation of three critical remote code execution vulnerabilities.
SecuritySecure Boot’s Decade-Long Blind Spot
A failure to revoke 11 vulnerable UEFI shims has left Windows and Linux systems open to persistent firmware-level exploitation.
SecurityPhishing Kits Adapt to Bypass MFA Flows
Researchers identify Jalisco and OmegaLord as new threats targeting Microsoft 365 through advanced credential and device exploitation.
SecurityCMS Exploitation Campaign Signals Escalating Global Threat Landscape
The Australian Cyber Security Centre reports that malicious actors are utilizing automated tools to compromise content management systems.
SecurityA Tidal Wave of Patches Signals a New Era of Software Risk
Microsoft's latest record-breaking security cycle highlights the mounting pressures of AI-driven vulnerability discovery and exploitation.
SecurityUnpatched Surveillance Networks Face Growing Global Exploitation Risk
Thousands of Hikvision devices remain vulnerable to a critical command injection flaw, drawing attention from global threat actors.
SecurityWhen Trusted Add-Ons Become Silent Gateways for Web Server Takeovers
The exploitation of critical Joomla extensions highlights a broader trend of automated campaigns targeting vulnerable CMS plugins globally.
SecurityThe Hidden Danger Lurking in Zimbra's Classic Web Client
A persistent cross-site scripting flaw in Zimbra's classic client underscores the relentless exploitation of enterprise email platforms.