Active Exploitation Alert
331 posts | Page 1 of 14
Active Exploitation Alert
Critical N-able N-central Zero-Day (CVE-2026-86218) Actively Exploited: Urgent Patch Required for Unauthenticated RCE and Authentication Bypass Vulnerabilities
Active Exploitation Alert
Active Exploitation Alert: North Korean APTs Deploy Ted Backdoor in Compromised HAProxy Builds to Hijack Web Traffic
Active Exploitation Alert
Cosmos EVM Vulnerability Exploited: Critical Flaw Leads to Multi-Chain Blockchain Attacks and $5.7M Losses
Active Exploitation Alert
Critical Active Exploitation Alert: Unitree G1 EDU Humanoid Robot Vulnerabilities (CVE-2026-76639, CVE-2026-76640) Enable Root RCE via Bluetooth and Chatbot Flaws
Active Exploitation Alert
APT28’s HOOKEDGE Backdoor Exploiting Microsoft Word Macros to Target European Government and Diplomatic Organizations
Active Exploitation Alert
Weedhack Malware Actively Exploiting Minecraft Modding Community via SEO Poisoning and Fake Client Downloads
Active Exploitation Alert
Active Exploitation Alert: WordlistLoader Bypasses Security Defenses to Deliver Amatera Stealer Malware on Windows Systems
Active Exploitation Alert
Active Exploitation Alert: Critical Supply Chain Attack via 14 Trojanized npm Packages Drops RedC2 4.0 AI-Assisted Linux Backdoor
Active Exploitation Alert
Active Exploitation Alert: Critical GitLab CVE-2026-19478 Code Injection Vulnerability Targets Unpatched Instances
Active Exploitation Alert
Active Exploitation of MLflow SSRF Vulnerability (CVE-2026-64849) Enables Cloud Credential Theft and Account Compromise
Active Exploitation Alert
Active Exploitation Alert: ToxicPanda 2.0 and GoldDigger Banking Malware Escalate On-Device Fraud Against Android Users Globally
Active Exploitation Alert
Active Exploitation Alert: Critical Microsoft SharePoint CVE-2026-50522 Vulnerability Targeted in Global Attacks
Active Exploitation Alert
Active Exploitation Alert: Coruna and DarkSword iOS Exploit Chains Target Apple Devices Globally
Active Exploitation Alert
Critical Metabase Zero-Day Exploited in the Wild: Unauthenticated Admin Access and Data Exposure Alert
Active Exploitation Alert
Active Exploitation Alert: Head Mare Hacktivists Exploit TrueConf Vulnerabilities to Trojanize Client Installers with PhantomCore and PhantomGraph Backdoors
Active Exploitation Alert
Active Exploitation Alert: QuickFox Windows Supply Chain Attack Delivers FDMTP Backdoor via Trojanized Installer
Active Exploitation Alert
Active Exploitation Alert: Critical Gitea CVE-2026-59774 Lets Unauthenticated Attackers Read Server Files and Gain RCE
Active Exploitation Alert
Active Exploitation of N-able N-central Vulnerabilities (CVE-2026-18556, CVE-2026-18577): Attackers Bypass Incomplete Patch to Compromise MSP Environments
Active Exploitation Alert
Lazarus Group Exploits AnySign4PC Zero-Day to Target South Korean Financial Sector via Drive-By Attacks
Active Exploitation Alert
Active Exploitation Alert: Critical FastJson CVE-2026-16723 Zero-Day RCE Targeting US Organizations in Spring Boot Applications
Active Exploitation Alert
Active Exploitation Alert: Arista VeloCloud Orchestrator CVE-2026-16812 Command Injection Vulnerability Enables Remote Compromise
Active Exploitation Alert
Cl0p Ransomware Actively Exploiting Critical Unauthenticated RCE in PTC Windchill and FlexPLM Systems
Active Exploitation Alert
Active Exploitation Alert: Unpatched Fastjson 1.x RCE Vulnerability Threatens Spring Boot Fat-JAR Applications
Active Exploitation Alert