Active Exploitation Alert
356 posts | Page 1 of 15
Active Exploitation Alert
Active Exploitation Alert: Discover-Tech Ad Tech Surveillance Campaign Targeting SpaceX Starlink Users via RTB Exploit
Active Exploitation Alert
Active Exploitation Alert: SaaS Supply Chain Attack Targets Microsoft 365 via ConnectWise and Atera Credential Compromise
Active Exploitation Alert
Active Exploitation Alert: Plex Media Server Plex2Shell Vulnerabilities Enable Unauthenticated RCE, Crypto Mining, and Proxy Backdoor Deployment
Active Exploitation Alert
Active Exploitation Alert: Unpatched Broadcom Wi-Fi WPSplinter Vulnerability Enables Remote Root Code Execution on Millions of Routers
Active Exploitation Alert
Ivanti Connect Secure Zero-Day Exploit Chain Enables Root-Level RCE and Credential Theft on Fully Patched VPN Appliances
Active Exploitation Alert
Zimbra Collaboration CVE-2026-73570 — Unauthenticated OS Command Injection via Crafted SMTP (KEV)
Active Exploitation Alert
Active Exploitation Alert: Storm-3168 (JADEPUFFER) Agentic Attack Targets Azure via Compromised Service Principals
Active Exploitation Alert
Active Exploitation Alert: Critical Fortinet FortiMail Zero-Day (CVE-2026-104286) Enables Unauthenticated Arbitrary File Writes
Active Exploitation Alert
Active Exploitation Alert: China-Nexus UAT-11587 Deploys Antino Backdoor Leveraging Microsoft 365 Outlook and OneDrive for Stealthy Cyber-Espionage in Asia and Middle East
Active Exploitation Alert
Microsoft SharePoint Server CVE-2026-65660 Actively Exploited: Critical RCE Vulnerability Threatens Unpatched Systems
Active Exploitation Alert
Active Exploitation of Citrix NetScaler ADC and Gateway Zero-Day Vulnerabilities (CVE-2026-88771, CVE-2026-88772) – Urgent Patch Required
Active Exploitation Alert
Active Exploitation Alert: Compromised GitHub Actions Reactivated, Resuming Mini Shai-Hulud Malware Supply Chain Attacks in CI/CD Workflows
Active Exploitation Alert
Chinese APTs Exploit Chrome and Windows Zero-Day Chain to Deploy CLEANGULP Malware Targeting Governments and NGOs
Active Exploitation Alert
Active Exploitation Alert: Critical WordPress Core and Bricks Builder Vulnerabilities Enable Unauthenticated Remote Code Execution (RCE)
Active Exploitation Alert
Active Exploitation of WooCommerce Wholesale Lead Capture Vulnerability Enables Unauthenticated PHP Web Shell Uploads on WordPress Sites
Active Exploitation Alert
Active Exploitation Alert: Issabel PBX CVE-2026-89026 Allows Unauthenticated Remote OS Command Execution via Hard-Coded JWT Key
Active Exploitation Alert
Active Exploitation Alert: Iranian APT42 Deploys CHOSEN BRICK Malware to Target Windows Users via WhatsApp and Telegram
Active Exploitation Alert
Active Exploitation Alert: CVE-2026-87886 Privilege Escalation in Acronis Backup Plugin for cPanel & WHM and Plesk on Linux
Active Exploitation Alert
Tencent Sogou Input Method Vulnerability (CVE-2026-51990) Exploited to Deploy GrayRabbit Malware in Targeted Attacks
Active Exploitation Alert
Active Exploitation of JFrog Artifactory Vulnerabilities Enables Backdoor Deployment and Supply Chain Risk
Active Exploitation Alert
Active Exploitation Alert: Threat Actors Weaponize Claude AI for Automated Data Theft and Supply Chain Attacks
Active Exploitation Alert
Active Exploitation Alert: Threat Actors Abuse Anthropic Claude AI to Extract Secrets from 1.8M Android Apps in Major Credential Theft Campaign
Active Exploitation Alert
Active Exploitation Alert: Critical GitLab Vulnerability (CVE-2026-19478) Targeted Within 24 Hours of Disclosure
Active Exploitation Alert