Active Exploitation Alert
272 posts | Page 1 of 12

Active Exploitation Alert
Active Exploitation of Critical CVE-2026-20253 in Splunk Enterprise: Unauthenticated RCE via PostgreSQL Sidecar Service

Active Exploitation Alert
DragonForce Hackers Exploit Microsoft Teams TURN Relays to Conceal Backdoor.Turn C2 in Targeted Ransomware Attacks

Active Exploitation Alert
Active Exploitation Alert: Critical CVE-2026-42945 NGINX Rift Vulnerability in NGINX and F5 Products—Patch Immediately

Active Exploitation Alert
Active Exploitation Alert: North Korean APT37 Uses Fake Microsoft Account Alerts and LNK Files to Deploy NarwhalRAT Malware on Windows Systems

Active Exploitation Alert
Critical LiteLLM Vulnerability Chain Enables Remote Code Execution and Full AI Gateway Server Takeover (CVE-2026-42271, CVE-2026-47101, CVE-2026-47102, CVE-2026-40217)

Active Exploitation Alert
ShinyHunters Exploits Oracle PeopleSoft Zero-Day CVE-2026-35273 in Widespread Higher Education Cyberattack

Active Exploitation Alert
Active Exploitation Alert: Google Chrome 149 Critical Vulnerabilities Patched Amid Ongoing CVE-2026-11645 Attacks

Active Exploitation Alert
Gentlemen Ransomware Actively Exploiting Fortinet FortiGate Vulnerabilities: 478 Victims Hit by Rapid Worm-Like Attacks

Active Exploitation Alert
Oracle PeopleSoft PeopleTools Zero-Day (CVE-2026-35273) Actively Exploited: Urgent Patch Required to Prevent Ransomware and Data Breaches

Active Exploitation Alert
Active Exploitation Alert: CVE-2026-42271 and CVE-2026-48710—Unauthenticated RCE in LiteLLM AI Gateway via Starlette Host Header Bypass

Active Exploitation Alert
Active Exploitation Alert: Hades PyPI Supply Chain Attack Poisons 19 Python Packages with Bun-Based Credential Stealer

Active Exploitation Alert
Active Exploitation Alert: Shai-Hulud Supply Chain Attack Compromises 100+ NPM and PyPI Packages with Self-Spreading Malware

Active Exploitation Alert
Active Exploitation of WinRAR CVE-2025-8088 by Russia-Aligned APTs Targets Ukrainian Government with Advanced Stealer Malware

Active Exploitation Alert
CISA Issues 3-Day Emergency Directive to Patch Check Point VPN Zero-Day (CVE-2024-24919) Amid Active Qilin Ransomware Exploitation

Active Exploitation Alert
Active Exploitation Alert: Google Chrome Zero-Day CVE-2026-5281 Actively Exploited via Dawn WebGPU – Urgent Patch Required

Active Exploitation Alert
Active Exploitation Alert: Cisco Catalyst SD-WAN Manager CVE-2026-20245 Zero-Day Under Attack With No Patch Available

Active Exploitation Alert
Active Exploitation of Dover Fueling Solutions and OPW Automatic Tank Gauge Systems Exposes US Fuel Infrastructure to Iranian APT Attacks

Active Exploitation Alert
Active Exploitation Alert: FIFA World Cup 2026 Targeted by Fake Ticket Sites, Banking Malware, and Credential Theft

Active Exploitation Alert
Active Exploitation of Critical CVE-2026-3300 Vulnerability in Everest Forms Pro Plugin Threatens WordPress Sites Globally

Active Exploitation Alert
Active Exploitation Alert: Fake Open-Source Software Sites Dominate Google Search to Distribute Malware via Advanced TDS

Active Exploitation Alert
Active Exploitation Alert: Critical VS Code Zero-Day Enables One-Click GitHub Token Theft and Massive Internal Repository Breach

Active Exploitation Alert
Active Exploitation Alert: Palo Alto Networks PAN-OS GlobalProtect Authentication Bypass Vulnerability (CVE-2026-0257)

Active Exploitation Alert
Active Exploitation Alert: Microsoft Windows and Defender Zero-Day Vulnerabilities Trigger Global Backlash Amid Legal Threats to Security Researchers

Active Exploitation Alert