Tag: vulnerability exploitation
201 articles
Ransomware gangs exploit TeamCity flaw in targeted attacks
A critical TeamCity vulnerability, now patched, could let attackers run malicious commands and bypass security checks, putting sensitive data and configurations at risk. This flaw highlights the importance of updating to versions 2025.11.7 and 2026.1.3 to safeguard against potential threats.
WordPress Exploits CVE-2026-87902 Flaw Within Hours of Disclosure
Within hours of being disclosed, WordPress was exploited through a critical vulnerability, CVE-2026-87902, that could allow hackers to remotely execute code on vulnerable sites. This flaw, with a near-perfect CVSS score of 9.2, lets unauthenticated attackers inject malicious code by tricking WordPress into including a rogue PHP file.
Ubuntu Linux Flaw Exposed, Enabling Host-Root Container Escape
A newly discovered Linux kernel flaw, CVE-2026-80521, can allow code running inside a container to gain root access on the host, posing a significant security risk. This alarming vulnerability is just one of nearly 5,700 Linux kernel CVEs published in 2026, a record high.
Check Point Discloses Zero-Day Exploited in Management Server Attacks
A critical zero-day vulnerability in Check Point's Security Management Server has been exploited in the wild, allowing attackers to upload and run malicious scripts with ease. This flaw, tracked as CVE-2026-93616, has already been used to target a handful of customers, prompting Check Point to release emergency hotfixes.
CISA Warns of Active Exploits in Zyxel Switch Vulnerability
A high-severity vulnerability in Zyxel GS1900 series switches is under active attack, prompting the US Cybersecurity and Infrastructure Security Agency (CISA) to issue a directive for federal agencies to patch the flaw and prevent data theft. This urgent warning highlights the vulnerability's potential impact on enterprise and agency environments.
CISA Warns of Active Exploitation of Linux Kernel Flaws
Hackers are actively exploiting three Linux kernel vulnerabilities, prompting the US Cybersecurity and Infrastructure Security Agency (CISA) to escalate them to the highest federal priority, requiring immediate security updates and forensic analysis. The alarming part? One of these flaws, CVE-2025-39964, had been lurking in the Linux kernel for a staggering 14 years.
Cisco Zero-Day Exploited in Active Attacks
Cisco is warning of a critical zero-day flaw in its Identity Services Engine (ISE) that's being actively exploited, allowing attackers to bypass authentication and gain unauthorized access with just a crafted request. This severe vulnerability, tracked as CVE-2026-76460, has been assigned a maximum CVSS score of 10.0.
Orkes Conductor Flaw Exploited in Wild, Fortinet Warns
A critical flaw in Orkes Conductor is being exploited in the wild, allowing attackers to execute malicious code remotely without authentication. Fortinet has reported blocking 1,290 attack attempts in just 24 hours, a 132% surge in malicious activity.
Researchers Expose OpenAI Vulnerability Using Rival AI Model
Meet the Hacktron researchers who uncovered a major OpenAI vulnerability, exposing a potential account takeover risk for ChatGPT and Codex users who logged into the company's help forum. They cleverly used a rival AI model to develop an exploit, chaining flaws to gain access to multiple OpenAI accounts.
Gyazo Breach Exposes 23.6 Million User Records After Server Flaw Exploited
A massive data breach at Gyazo has exposed a staggering 23.6 million user records, thanks to a server vulnerability that was exploited by attackers on September 11, 2026. The incident has prompted the company to temporarily suspend its service for maintenance, and users are advised to wait patiently for its recovery.
Cisco Discloses Zero-Day ISE Auth Bypass Under Active Exploitation
Cisco has uncovered a critical zero-day vulnerability, CVE-2026-76460, that lets hackers bypass authentication on its Identity Services Engine and Passive Identity Connector, and it's already being exploited by attackers. This flaw allows unauthorized access to affected devices with just a crafted request.
Gyazo Breach Exposes 23.6 Million User Records
A massive data breach at Gyazo, a popular image-sharing service, has exposed a staggering 23.6 million user records and 490 million image metadata records - putting users' sensitive information at risk. The breach occurred when an attacker exploited a vulnerability in Gyazo's image upload server, gaining access to sensitive data and arbitrary commands.
Unbound DNSSEC Validator Flaw Enables Remote Code Execution
A critical flaw in the Unbound DNSSEC Validator, known as CVE-2026-81642, allows attackers to trigger a heap overflow, potentially enabling remote code execution on vulnerable systems. This vulnerability affects all Unbound DNS resolver releases before 1.26.1, putting countless systems at risk.
Google Patches Zero-Day Flaw Exploited in Pixel Phone Attacks
Google just patched a high-severity zero-day flaw that allowed hackers to exploit Pixel phones with zero clicks - and federal authorities are urging you to update your phone ASAP. This critical vulnerability let attackers escalate privileges and bypass permission checks, but thankfully it's now closed with a simple update.
Google Discloses Pixel Modem Flaw Under Limited Targeted Exploitation
Google just sounded the alarm on a high-severity bug in Pixel devices that's being exploited in targeted attacks, and they're urging users to take action. The vulnerability, tracked as CVE-2026-58704, affects the Pixel Cellular Modem and could allow attackers to escalate privileges.
CISA Warns of Active ScreenConnect Exploit in Ongoing Attacks
Beware: hackers are actively exploiting a critical flaw in ConnectWise ScreenConnect, allowing them to transfer files and execute code on vulnerable systems without permission. The US Cybersecurity and Infrastructure Security Agency (CISA) has issued an urgent warning, ordering federal agencies to secure affected systems within three days.
Cisco Discloses Zero-Day Exploited in Secure Email Gateway Attacks
Cisco has warned of a zero-day flaw in its Secure Email Gateway that allows attackers to run commands as root, prompting federal agencies to patch the vulnerability within just three days. This critical defect, tracked as CVE-2026-76461, lets hackers execute arbitrary commands with root privileges, putting systems at risk.
Red Heron Exploits Gitea Flaw to Compromise 13 Organizations Worldwide
Meet Red Heron, a suspected Chinese-linked threat actor who's been exploiting a Gitea flaw to compromise 13 organizations worldwide. Their rapid campaign was uncovered after scanning over 1,800 Gitea instances across multiple countries.
GitLab Flaw Exploited in Wild, Prompting Urgent Patch Push
A critical GitLab bug, CVE-2026-85706, is under active exploitation, putting sensitive files at risk of exposure due to a path traversal vulnerability that allows unauthenticated users to access arbitrary files. GitLab has urgently pushed a patch to fix the flaw, affecting versions CE/EE 18.7 to 19.3.2.
Hackers Exploit GitLab Flaw in Active Attacks
Hackers are actively exploiting a critical GitLab flaw, CVE-2026-85706, that allows them to read sensitive information like credentials and secrets with just a single HTTP request. This vulnerability enables attackers to access arbitrary files, potentially exposing long-lived secrets and confidential data.
Attackers Exploit JFrog Artifactory Bugs Despite Patches
Despite available patches, hackers have exploited three JFrog Artifactory vulnerabilities, highlighting the risks of slow patching and leaving internet-exposed instances open to attack. This exploitation has allowed attackers to gain administrative control, putting organizations at risk.
AI Agents Fuel Rapid PaperCut Attacks on 395 Organizations
In a stunning display of speed, hackers used AI agents to exploit PaperCut vulnerabilities, compromising at least 11 organizations in just 26 seconds and gaining domain admin access in a mere two hours. This rapid, automated campaign hit 395 organizations across 48 countries, leaving a trail of destruction in its wake.
Ransomware gangs exploit WatchGuard firewall flaw
Ransomware gangs are exploiting a critical vulnerability in WatchGuard Firebox firewalls, allowing them to execute malicious code remotely with ease. This flaw, known as CVE-2025-14733, affects various Fireware OS versions and could leave your network exposed to low-complexity attacks.
Cisco Secure FMC Flaw Exploited in Active Attacks
Hackers are actively exploiting a critical vulnerability in Cisco Secure Firewall Management Center (FMC) software, allowing them to bypass authentication and gain root access to vulnerable devices. This severe flaw, rated 10.0 on the CVSS scale, lets attackers execute scripts and commands remotely without logging in.