Technology ❯ Cybersecurity ❯ Threats

Exploitation Techniques

Remote Code Execution Unauthenticated Access Privilege Escalation Proof of Concept Remote Access Attacks Cross-Site Scripting Denial of Service Prompt Injection Server-Side Request Forgery (SSRF) SQL Injection

Critical Adobe Commerce Flaw Lets Attackers Hijack Customer Accounts

Security firm detections show active targeting that raises urgent risk for unpatched storefronts worldwide.

Cisco Patches Firewall Flaw Being Exploited to Crash ASA and FTD Devices

Microsoft Revokes 11 Old Signed UEFI Shims That Could Bypass Secure Boot

CISA Adds Microsoft SharePoint RCE to Known Exploited List and Orders Rapid Federal Patching

Squidbleed Lets Shared Squid Proxies Leak Other Users' HTTP Requests

Critical Splunk Enterprise Flaw Is Being Exploited; CISA Orders Federal Fix by Sunday

VS Code Zero-Day Lets Attackers Steal Full GitHub OAuth Tokens

Hackers Exploit Critical LiteLLM SQL Injection Within 36 Hours of Advisory

CISA Adds ActiveMQ RCE to KEV With April 30 Patch Deadline

Apache ActiveMQ Classic RCE Patched After AI-Assisted Discovery

Researchers Expose Critical Flaws in Popular VS Code Extensions Downloaded Over 125 Million Times

BeyondTrust Patches Critical Pre-Auth RCE in Remote Access Tools

SolarWinds Releases Web Help Desk 2026.1 to Fix Critical RCE and Authentication Bypass Flaws

Fortinet Begins Patching Actively Exploited FortiCloud SSO Bypass as CISA Sets Jan. 30 Deadline

Researchers Say Attackers Are Probing Apple Podcasts Auto-Launch Trigger

Critical 'RediShell' Bug in Redis Gets Fix as Tens of Thousands Remain Exposed

Docker Patches Critical Desktop Flaw Allowing Container Escapes on Windows and macOS

Trend Micro Releases Mitigation Tool for Critical Apex One Zero-Days