Technology ❯ Cybersecurity

Exploitation Techniques

Remote Code Execution Privilege Escalation Server-Side Request Forgery Authentication Bypass Proof of Concept Remote Authentication Bypass Buffer Overflows Denial of Service Reconnaissance Command Obfuscation

Ransomware Group Hid Command Channels Inside Microsoft Teams Relays

Security firms disclosed a new technique that disguised attacker command-and-control as legitimate Teams traffic to help intruders evade detection.

Cisco Patches Exploited SD‑WAN Manager Zero‑Day

Maximum-Severity Ivanti Sentry Flaw Triggers Rapid Exploitation

Cisco Warns of Unpatched SD‑WAN Zero‑Day Under Active Exploitation

Cisco Patches Critical Unified CM SSRF Flaw After Public PoC Emerges

Critical Zero-Day in Gogs Lets Authenticated Users Run Remote Code

Hackers Exploit Critical 'Nginx Rift' Bug as Fixes Ship

CISA Adds Actively Exploited Microsoft Exchange Zero-Day to KEV Catalog

Researcher Publishes YellowKey BitLocker Bypass and GreenPlasma Windows Exploit PoCs

Fragnesia Linux Kernel Flaw Gives Local Users Root Access

CISA Flags Palo Alto PAN-OS Zero-Day as Actively Exploited, Orders Federal Fixes by May 9

Linux 'Copy Fail' Bug Lets Local Users Gain Root as Patches Roll Out

Mirai Botnet Actively Exploits Year-Old Flaw in Retired D-Link DIR-823X Routers

Microsoft’s April Patch Tuesday Fixes Exploited SharePoint Zero-Day and 160-Plus Flaws

Google Ships Rust DNS Parser in Pixel 10 Modem to Curb Memory-Safety Flaws

Ubiquiti Patches CVSS 10 UniFi Bug That Could Enable Account Takeover

Google: Record Share of 2025 Zero‑Day Exploits Hit Enterprise Tech

Cisco Patches Two CVSS 10 Flaws in Secure Firewall Management Center

FreeScout Zero-Click Flaw (CVE-2026-28289) Enables Full Server Takeover

Zenity Labs Details ‘PleaseFix’ Flaws in Agentic Browsers After Perplexity Closes Calendar-Invite Attack