Active Exploitation Alert
272 posts | Page 3 of 12
Active Exploitation Alert
Over 100 Malicious Chrome Extensions in Chrome Web Store Steal Google and Telegram Data, Create Persistent Backdoors
Active Exploitation Alert
Critical nginx-ui Vulnerability CVE-2026-33032: Actively Exploited Authentication Bypass Allowing Full Nginx Server Takeover
Active Exploitation Alert
Dragon Boss Solutions Signed Software Abused to Disable Antivirus Protection in Global Malware Campaign
Active Exploitation Alert
Critical CVE-2024-3273 Authentication Bypass in Nginx UI Actively Exploited – Immediate Patch Required
Active Exploitation Alert
Adobe Acrobat and Reader CVE-2026-34621: Critical Prototype Pollution Vulnerability Actively Exploited, Urgent Patch Released
Active Exploitation Alert
Warlock Ransomware Exploits Unpatched Microsoft SharePoint and SmarterMail Servers: Tactics, Analysis, and Mitigation Guidance
Active Exploitation Alert
LeakNet Ransomware Exploits ClickFix via Compromised Websites to Attack Windows Environments with Deno In-Memory Loader
Active Exploitation Alert
Konni Targets KakaoTalk Desktop with EndRAT: Multi-Stage Phishing Attack Exploits Social Messaging for Malware Propagation
Active Exploitation Alert
Intuitive Surgical Administrative Network Breach: 2026 Phishing Attack Exposes Employee and Customer Data
Active Exploitation Alert
GlassWorm ForceMemo Campaign: Supply Chain Attack Targets GitHub Python Repositories with Stolen Tokens and Blockchain-Based Malware
Active Exploitation Alert
EU Sanctions on Chinese and Iranian Firms: Raptor Train Botnet, SMS Service, and Olympic Billboard Cyberattacks Targeting European Critical Infrastructure
Active Exploitation Alert
CVE-2026-32746: Critical Unpatched Vulnerability in GNU InetUtils telnetd Enables Unauthenticated Remote Root Code Execution via Port 23
Active Exploitation Alert
Critical AI Vulnerabilities in Amazon Bedrock, LangSmith, and SGLang Enable Data Exfiltration and Remote Code Execution
Active Exploitation Alert
Apple Urgent Security Update: CVE-2025-14174 WebKit Same-Origin Policy Bypass Vulnerability Impacts iOS, macOS, Chrome, and Edge
Active Exploitation Alert
VENON Rust Malware Targets Itaú and 32 Other Brazilian Banks with Advanced Credential-Stealing Attacks
Active Exploitation Alert
Veeam Backup & Replication Vulnerabilities: Critical RCE Flaws Patched in Latest Security Update
Active Exploitation Alert
Starbucks Partner Central Data Breach Exposes Sensitive Employee Information in Credential Phishing Attack
Active Exploitation Alert
Iranian CyberAv3ngers Target Unitronics Vision PLCs in US Critical Infrastructure Amid Rising Geopolitical Tensions
Active Exploitation Alert
GlassWorm Supply-Chain Attack Exploits Open VSX Extensions to Target Developer Environments
Active Exploitation Alert
Cyberattack on Poland’s National Centre for Nuclear Research (NCBJ): Attempted Breach of MARIA Reactor IT Systems Thwarted
Active Exploitation Alert
CVE-2026-23813: Critical Authentication Bypass in HPE Aruba AOS-CX Allows Remote Admin Password Reset
Active Exploitation Alert
Chinese Cyber Espionage Targets Southeast Asian Military C4I Systems Using AppleChris and MemFun Malware
Active Exploitation Alert
AppsFlyer Web SDK Supply Chain Attack: Global Crypto-Stealing JavaScript Injection and Mitigation Analysis
Active Exploitation Alert