Tag: vulnerability exploitation
201 articles
Hackers exploit Qinglong flaws for cryptomining deployments
Hackers are taking advantage of two major flaws in the Qinglong open-source task scheduler, CVE-2026-3965 and CVE-2026-4047, which can be combined to gain remote control of vulnerable systems. These authentication-bypass vulnerabilities affect Qinglong versions 2.20.1 and older, and have been exploited for cryptomining deployments.
LiteLLM SQL Flaw Exploited 36 Hours After Disclosure
A critical SQL injection flaw, CVE-2026-42208, was exploited just 36 hours after its disclosure, putting vulnerable LiteLLM versions at risk of unauthorized database access. The bug, with a CVSS score of 9.3, allows unauthenticated callers to reach a vulnerable database query through the proxy's error-handling path.
Hackers Exploit LiteLLM SQL Flaw for Sensitive Data Access
Within just 36 hours of being publicly disclosed, a critical SQL injection flaw in LiteLLM, known as CVE-2026-42208, was actively exploited by hackers, allowing them to access sensitive data without authentication. This alarming vulnerability highlights the importance of swift patching, with LiteLLM version 1.83.7 now available to fix the issue.
PhantomCore Exploits TrueConf Flaws to Breach Russian Networks
Researchers Daniil Grigoryan and Georgy Khandozhko revealed that PhantomCore attackers exploited a chain of three TrueConf Server vulnerabilities, including insufficient access control and file reading flaws, to breach Russian networks. This sophisticated attack highlights the importance of addressing these critical vulnerabilities to protect against potential threats.
Zimbra Servers Targeted in Ongoing XSS Attacks
Beware of sneaky phishing emails that can hijack your Zimbra server with just a glance - no clicks or downloads required. A single malicious email can trigger a cross-site scripting attack, thanks to a recently patched vulnerability, CVE-2025-48700.
LMDeploy Vulnerability Exploited Within 13 Hours of Disclosure
A critical vulnerability in LMDeploy's vision-language module was exploited in the wild just 13 hours after its disclosure, allowing attackers to access sensitive resources and internal networks. This server-side request forgery flaw, tracked as CVE-2026-33626, affects all versions of the toolkit prior to 0.12.0.
CISA Warns of Active Exploitation of SD-WAN Flaw
The Cybersecurity and Infrastructure Security Agency (CISA) has sounded the alarm on a newly discovered SD-WAN flaw that's already being exploited by attackers, giving US government agencies just four days to secure vulnerable systems. Time is of the essence in this urgent directive, which CISA has framed as an operational emergency.
Apache ActiveMQ Vulnerability Exploited, Hits 6,400 Servers
More than 6,400 publicly accessible Apache ActiveMQ servers are under attack, thanks to a high-severity code injection vulnerability that's being actively exploited. Is your server among them?
Microsoft Defender Zero-Days Exploited in Active Attacks
Microsoft's top security tool, Defender, has been turned against itself: hackers are exploiting three newly discovered flaws to gain elevated access to already compromised systems, forcing a major rethink of what we thought was safe. This alarming development has defenders, users, and policymakers scrambling to reassess their security assumptions.
CISA Warns of Active Exploitation of Apache ActiveMQ Flaw
A high-severity vulnerability in Apache ActiveMQ, hidden for 13 years, is now being actively exploited by attackers just days after a patch was released, putting organizations that rely on the software at risk. The Cybersecurity and Infrastructure Security Agency (CISA) has issued a warning, urging companies to take immediate action to protect themselves.
Hackers exploit Marimo flaw to spread NKAbuse malware via Hugging Face
Hackers are exploiting a critical flaw in Marimo's reactive Python notebook to spread a new variant of NKAbuse malware, sneaking malicious payloads onto Hugging Face Spaces, a popular platform for sharing machine learning models. This alarming attack highlights the need for vigilance when it comes to defending against malware disguised as code-sharing tools.
Nginx Flaw Exploited for Server Takeovers
A critical vulnerability in Nginx UI's Model Context Protocol (MCP) support is being actively exploited, allowing attackers to take over servers without any authentication. If your organization exposes Nginx UI with MCP support, your servers may be at risk of a full takeover.
CISA Warns of Exploited Windows Task Host Vulnerability
Stay one step ahead of cyber threats by securing your Windows systems - a recently exploited vulnerability in Windows Task Host could let attackers escalate privileges and take full control of your machines. The Cybersecurity and Infrastructure Security Agency (CISA) has flagged this issue as high-risk, urging swift action to protect affected systems.
Nginx-ui Flaw Exploited in Active Attacks Worldwide
A critical flaw in the nginx-ui MCP component, tracked as CVE-2026-33032, is being actively exploited worldwide, allowing attackers to bypass authentication and slip past one of the most basic protections. This highly severe vulnerability, rated 9.8 on the CVSS scale, poses an immediate dilemma for organizations that depend on this component.
ShowDoc Flaw CVE-2025-0520 Actively Exploited, Servers Targeted
A critical vulnerability in ShowDoc, a popular collaboration platform, is being actively exploited, allowing hackers to place arbitrary files on unpatched servers - putting organizations at risk. With a severity score of 9.4 out of 10, CVE-2025-0520 is a critical threat that needs immediate attention.
Anthropic Unveils Mythos AI, Raises Stakes in Zero-Day Exploitation Race
Anthropic just unveiled Mythos AI, a game-changing model that can allegedly uncover and exploit zero-day vulnerabilities with unprecedented skill - but is it a revolutionary breakthrough or just pre-IPO hype? The tech community is buzzing with skepticism and curiosity.
CISA KEV Remediation Records Expose Human-Scale Security Limits
The harsh reality of cybersecurity: an analysis of 1 billion CISA KEV remediation records reveals that most critical flaws are exploited by attackers before defenders can patch them, exposing the breaking point of human-scale security. This sobering trend highlights the limitations of traditional security approaches in keeping up with the volume and tempo of modern threats.
Marimo Flaw CVE-2026-39987 Exploited Rapidly After Disclosure
A single line of code can drastically change the risk landscape for thousands of users - and that's exactly what happened with Marimo, an open-source Python notebook, when a critical vulnerability (CVE-2026-39987) was exploited just 10 hours after its disclosure. This severe flaw, with a CVSS score of 9.3, allows pre-authenticated remote code execution, putting all Marimo versions prior to the disclosed fix at risk.
AI Tools Accelerate Healthcare Cyber Threats, Experts Warn
As AI tools become more advanced, experts warn that they can also supercharge healthcare cyber threats, autonomously identifying and exploiting software flaws at unprecedented speeds. This could lead to a dramatic surge in attacks on hospitals, clinics, and patients, making the threat landscape more treacherous than ever.
Adobe Reader zero-day flaw under active exploitation
Malicious PDF documents have been hiding a nasty secret: a zero-day vulnerability in Adobe Reader that's been exploited by attackers since at least December, allowing them to spread malware and wreak havoc. This stealthy threat highlights the urgent need for better detection and response to these types of attacks.
Kubernetes Environments Under Siege as Attacks Escalate
Kubernetes environments are under attack like never before, with threat actors exploiting identities and critical vulnerabilities to compromise cloud infrastructure - so what can organizations do to protect themselves? The warning signs are clear: it's time to take action against escalating Kubernetes attacks.
GrafanaGhost Exploit Bypasses AI Defenses for Covert Data Theft
A newly discovered exploit, dubbed GrafanaGhost, has been found to cleverly bypass AI defenses, allowing for covert data theft by chaining together AI prompt injection and URL-handling flaws. This sneaky attack enables silent exfiltration of sensitive Grafana data, catching users off guard.
Fortinet EMS Flaw Exploited in Wild, CISA Warns
Fortinet has urgently patched a critical flaw in its FortiClient Enterprise Management Server (EMS) after confirming it was being exploited in the wild, sparking a dilemma for organizations: patch now and risk disruption, or wait and risk a potentially devastating cyberattack. The Cybersecurity and Infrastructure Security Agency (CISA) has added the vulnerability to its Known Exploited Vulnerabilities list, underscoring the need for swift action.
Fortinet Zero-Day Flaw Exploited in Active Attacks
A critical Fortinet zero-day flaw is under active attack, allowing hackers to remotely take control of vulnerable endpoint management servers without authentication - leaving organizations with a pressing choice: patch now or risk a devastating breach. Immediate action is crucial, as attackers have already begun exploiting these vulnerabilities to execute malicious code and commands.