Tag: vulnerability exploitation
201 articles
Linux Flaw Exposes Host Memory to Guest VMs
A newly discovered Linux kernel flaw, nicknamed "PwnEscape," could allow hackers to siphon off sensitive host memory data, crash the host system, or even run malicious code on it - all by sending specially crafted network packets from a virtual machine. This alarming vulnerability, tracked as CVE-2026-99999, exposes a staggering 32 bytes of host memory with each packet sent.
Hackers exploit Collabora flaw to backdoor Nextcloud servers
Hackers are actively exploiting a critical flaw in Collabora Online's CODE Server app for Nextcloud, allowing them to backdoor servers and putting sensitive data at risk. This vulnerability, tracked as CVE-2026-110447, affects specific Nextcloud app versions and has been under attack since mid-September.
Langflow Exploit Attempts Surge Amid Authenticated RCE Flaw
Authenticated hackers are on the hunt, with 1,423 attempts recorded to exploit a critical remote-code-execution flaw in Langflow, a vulnerability that scores a near-perfect 9.9 on the CVSS scale. This alarming spike highlights how quickly attackers pounce on high-risk weaknesses.
Cisco Email Flaw Exploited in Zero-Day Attacks
Cisco is urging customers to upgrade to a fixed software release after a critical vulnerability in its Secure Email Gateway was exploited in active zero-day attacks, allowing hackers to gain root access with just a malicious email. The flaw, scored 9.8 out of 10 on the CVSS scale, enables remote attackers to write files and execute commands with root privileges on the appliance operating system.
Cisco Discloses Active Attacks on Secure Email Gateway Flaw
Cisco is warning users of its Secure Email Gateway of an actively exploited flaw that could allow hackers to run commands as root, giving them total control of the system. This critical vulnerability, scored 9.8, is being targeted by attackers who are sending crafted email attachments to take advantage of the weakness.
CISA Warns of Ivanti Flaw Exploited in Zero-Day Attacks
A high-severity security flaw in Ivanti Connect Secure, known as CVE-2026-104935, has been exploited in zero-day attacks since October 1st, allowing hackers to remotely execute malicious commands without authentication. CISA is urging security teams to patch immediately and hunt for signs of compromise to protect their networks.
CISA Warns of Flax Typhoon Exploiting Five Vulnerabilities
Chinese government-affiliated hackers, known as Flax Typhoon, are exploiting five newly identified vulnerabilities to gain a foothold in critical infrastructure networks, including operational technology systems, with the potential to disrupt essential functions at a later time. This has prompted CISA to add these flaws to its Known Exploited Vulnerabilities catalog, triggering a federal remediation requirement.
SonicWall SMA1000 flaw exploited in targeted attacks
A critical vulnerability, CVE-2026-102255, in SonicWall SMA1000 appliances is being exploited in targeted attacks, putting sensitive internal functionality at risk. This maximum-severity flaw allows remote attackers to manipulate the appliance and perform unauthorized operations.
Researchers Expose Flaws in Google Pixel 10 with Remote Hacks
Google just issued a warning that its Pixel 10 may be vulnerable to remote hacks, with researchers discovering flaws that could be exploited by attackers. Three teams of experts successfully broke into fully patched Pixel 10 devices at a recent hacking contest, raking in a total of $562,500 in prizes.
Atlassian Flaw Exploited in Wild After Public PoC Release
Hackers were quick to pounce on a newly disclosed Atlassian vulnerability, launching exploitation attempts within just two hours of a public proof-of-concept (PoC) release. This critical flaw, tracked as CVE-2026-21589, allows unauthenticated attackers to access sensitive files on vulnerable self-hosted instances.
Atlassian Flaw Sees Rapid Exploitation Attempts
A critical vulnerability, CVE-2026-21589, has been discovered in multiple Atlassian Data Center products, allowing unauthenticated attackers to access sensitive files, with rapid exploitation attempts already underway. Patching is urgently recommended for affected versions of Bitbucket, Confluence, Jira, Bamboo, Crowd, Crucible, and Fisheye Data Center products.
Cybersecurity Events Surge to 2,514 per Second
The astonishing truth is that a whopping 2,514 cybersecurity events occur every single second, according to the Comcast Business 2026 Cybersecurity Threat Report, which analyzed a massive 79.3 billion events over just 12 months.
Microsoft tracks hackers exploiting Zimbra bug before public disclosure
Microsoft detected hackers probing for a Zimbra bug, CVE-2026-73570, just days after it was patched, but before the vulnerability was publicly disclosed - a concerning gap that highlights the need for swift and secretive fixes. The bug, which allows attackers to run commands on exposed mail servers, was exploitable via a specially crafted email.
Apple CoreGraphics Flaw Exposes Possible WhatsApp Delivery Path
A newly discovered Apple CoreGraphics flaw, potentially exploited in a highly targeted attack, now has a publicly available proof-of-concept that can crash unpatched iPhones and Macs. Apple has released a security update to patch the vulnerability, tracked as CVE-2026-86950.
Citrix NetScaler Exploits Create Superuser, Deploy Web Shells
A critical vulnerability in Citrix NetScaler ADC and Gateway appliances, rated 9.5 in severity, is being actively exploited by attackers, who can use it to run malicious commands and gain superuser access. This urgent threat prompted the Dutch National Cyber Security Centre to advise organizations to shut down their appliances until they're patched.
Hackers Exploit Zimbra Flaw to Harvest Authentication Secrets
Hackers are actively exploiting a high-severity flaw in Zimbra Collaboration Suite to gain remote access and harvest sensitive authentication secrets. This vulnerability, patched in July 2026, can be triggered by a specially crafted email, making it a critical threat to unprotected servers.
AI-Discovered Vulnerabilities Skew Toward Remote Code Execution
Stay ahead of potential threats: with AI-discovered vulnerabilities, remote code execution is a growing concern, making it crucial to examine your systems for compromise before upgrading or patching. NetScaler customers, in particular, should prioritize checking their systems for signs of exploitation.
Citrix NetScaler Flaw Exploited for Root Access, Web Shell Deployment
Security experts have uncovered a critical Citrix NetScaler flaw, CVE-2026-88772, that's being exploited to gain root access and deploy web shells, with attackers targeting ADC and Gateway appliances worldwide. This severe vulnerability, scoring 9.5 on the CVSS scale, allows for a devastating memory overflow that bypasses authentication and hands over total control.
NetScaler Zero-Days Exploited in Wild, 50,277 Instances Exposed
A whopping 50,277 NetScaler instances are potentially vulnerable to two newly exploited zero-day flaws, CVE-2026-88771 and CVE-2026-88772, according to Palo Alto Networks' Cortex Xpanse telemetry. This alarming number was highlighted in Unit 42's threat brief, revealing a possible zero-day attack on NetScaler devices.
Bitget Reveals Third-Party Product Flaw Exploited in $388M Heist
The attacker cleverly exploited a flaw in a third-party security product used by Bitget, using legitimate credentials to disguise their activity as routine admin ops while covering their tracks. This allowed them to make off with a staggering $388 million from the exchange.
CISA Warns of Global Exploitation of Citrix NetScaler Flaws
Threat actors are actively exploiting critical vulnerabilities in Citrix NetScaler ADC and Gateway worldwide, warns the U.S. Cybersecurity and Infrastructure Security Agency (CISA). These flaws, with a near-perfect CVSS score of 9.5, could allow attackers to execute arbitrary commands and wreak havoc on your systems.
Citrix NetScaler Zero-Days Under Active Exploitation
Security firm watchTowr has sounded the alarm about two zero-day vulnerabilities in Citrix NetScaler appliances that are already being exploited in the wild, allowing for remote code execution. These unpatched flaws were discovered during forensic investigations and are expected to have a fix soon.
ShinyHunters Exploits Grav CMS Flaw to Breach Clop Leak Site
The Grav CMS flaw, tracked as CVE-2026-42608, was exploited by ShinyHunters to breach the Clop gang's leak site, and the vulnerability has since been patched in Grav's 2.0 and 1.7 branches. Grav confirmed the legitimacy of the flaw and the threat actor's description, and has implemented a fix to prevent further attacks.
CISA Warns of Widespread Exploitation of SharePoint, Adobe Commerce Flaws
Don't wait until it's too late - with nearly 1,000 customers across critical sectors like banking, government, and telecommunications at risk, organizations can't afford to delay action against widespread exploitation of SharePoint and Adobe Commerce flaws. A critical authentication-bypass vulnerability, CVE-2026-5430, is already being exploited, putting multiple WSO2 products at risk.