Active Exploitation Alert
356 posts | Page 6 of 15
Active Exploitation Alert
PoC Code Published for Critical NGINX and Ingress-NGINX Vulnerabilities (CVE-2026-42945 & CVE-2025-1974): Remote Code Execution Risk for Web Servers and Kubernetes Clusters
Active Exploitation Alert
CVE-2026-41940: Active Exploitation of cPanel/WHM Authentication Bypass to Deploy Filemanager Backdoor
Active Exploitation Alert
UAE Cyber Threat Landscape 2026: AI-Driven Attacks, Ransomware Surge, and Exploited Vulnerabilities in Ivanti, Microsoft, and Cisco Systems
Active Exploitation Alert
Critical DAEMON Tools Supply Chain Attack: Malware-Compromised Windows Installers Threaten Organizations and Home Users (Versions 12.5.0.2421–12.5.0.2434)
Active Exploitation Alert
ConsentFix v3: Automated OAuth Abuse Targets Microsoft Azure and Entra ID, Bypassing MFA and Conditional Access
Active Exploitation Alert
CVE-2026-42208: Critical Pre-Auth SQL Injection in LiteLLM Actively Exploited Within 36 Hours of Disclosure
Active Exploitation Alert
Critical Authenticated Remote Code Execution Vulnerability in JuzaWeb CMS 3.4.2 (CVE-2025-5425) – Exploit in the Wild and Mitigation Guidance
Active Exploitation Alert
BlueNoroff APT Targets Crypto and Web3 Firms with AI Deepfakes and Fake Zoom Malware on macOS
Active Exploitation Alert
Firestarter Backdoor Malware Targets Cisco ASA and FTD Firewalls, Survives Updates and Security Patches
Active Exploitation Alert
CVE-2026-33626: Critical SSRF Vulnerability in LMDeploy Rapidly Exploited in the Wild — Technical Analysis and Mitigation Guide
Active Exploitation Alert
China-Linked GopherWhisper APT Targets Mongolian Government: Abuse of Slack, Discord, and Microsoft 365 in Advanced Espionage Campaign
Active Exploitation Alert
Surge in Malware and Phishing Attacks via n8n Webhooks: Analysis of Cloud Workflow Automation Abuse (2025-2026)
Active Exploitation Alert
Over 100 Malicious Chrome Extensions in Chrome Web Store Steal Google and Telegram Data, Create Persistent Backdoors
Active Exploitation Alert
Dragon Boss Solutions Signed Software Abused to Disable Antivirus Protection in Global Malware Campaign
Active Exploitation Alert
Critical nginx-ui Vulnerability CVE-2026-33032: Actively Exploited Authentication Bypass Allowing Full Nginx Server Takeover
Active Exploitation Alert
Critical CVE-2024-3273 Authentication Bypass in Nginx UI Actively Exploited – Immediate Patch Required
Active Exploitation Alert
Adobe Acrobat and Reader CVE-2026-34621: Critical Prototype Pollution Vulnerability Actively Exploited, Urgent Patch Released
Active Exploitation Alert
Warlock Ransomware Exploits Unpatched Microsoft SharePoint and SmarterMail Servers: Tactics, Analysis, and Mitigation Guidance
Active Exploitation Alert
LeakNet Ransomware Exploits ClickFix via Compromised Websites to Attack Windows Environments with Deno In-Memory Loader
Active Exploitation Alert
Konni Targets KakaoTalk Desktop with EndRAT: Multi-Stage Phishing Attack Exploits Social Messaging for Malware Propagation
Active Exploitation Alert
Intuitive Surgical Administrative Network Breach: 2026 Phishing Attack Exposes Employee and Customer Data
Active Exploitation Alert
GlassWorm ForceMemo Campaign: Supply Chain Attack Targets GitHub Python Repositories with Stolen Tokens and Blockchain-Based Malware
Active Exploitation Alert
EU Sanctions on Chinese and Iranian Firms: Raptor Train Botnet, SMS Service, and Olympic Billboard Cyberattacks Targeting European Critical Infrastructure
Active Exploitation Alert