Exploitation Techniques

Remote Code Execution Privilege Escalation Proof of Concept Server-Side Request Forgery Race Conditions Authentication Bypass Command Injection Zero-Click Attacks Reconnaissance Buffer Overflows

3 ARTICLES

yesterday

LiteLLM Flaws Let Low‑Privilege Users Seize Gateways and Steal AI Provider Keys

Check Point’s mid-October 2026 disclosure shows missing auth and SSRF bugs let users change runtime settings, run code, and capture credentials so organizations must patch and check for key theft.

5 ARTICLES

2w ago

U.S. Agencies Say Medusa Ransomware Has Hit More Than 500 Critical‑Infrastructure Organizations

4 ARTICLES

last mo.

Researchers Find CoSnitch One-Click Flaw in Microsoft Copilot Personal

7 ARTICLES

2mo ago

Public SharePoint PoC Triggers Active Exploitation of Critical JWT Bypass

4 ARTICLES

2mo ago

DeepSeek Inside Hermes Used to Launch Autonomous Cyberattacks

4 ARTICLES

2mo ago

Critical RufRoot Flaw Allowed Unauthenticated Control of Ruflo's AI Bridge

5 ARTICLES

2mo ago

Race-Condition Bug in snap-confine Lets Local Users Gain Root on Ubuntu Desktop

5 ARTICLES

2mo ago

SonicWall SMA1000 Zero-Days Exploited Before Patch, Custom Malware Deployed

5 ARTICLES

3mo ago

Critical Cisco Unified CM SSRF Is Being Exploited

6 ARTICLES

4mo ago

Attackers Exploit Recently Patched FortiSandbox Flaws

3 ARTICLES

4mo ago

Ransomware Group Hid Command Channels Inside Microsoft Teams Relays

5 ARTICLES

4mo ago

Cisco Patches Exploited SD‑WAN Manager Zero‑Day

9 ARTICLES

4mo ago

Maximum-Severity Ivanti Sentry Flaw Triggers Rapid Exploitation

5 ARTICLES

4mo ago

Cisco Warns of Unpatched SD‑WAN Zero‑Day Under Active Exploitation

4 ARTICLES

4mo ago

Exploitation Techniques

LiteLLM Flaws Let Low‑Privilege Users Seize Gateways and Steal AI Provider Keys

ShinyHunters Resume Mass Exploitation of Oracle PeopleSoft

MikroTrick Chain Lets Attackers Take Over MikroTik Routers

Critical WordPress File-Inclusion Flaw Patched but Exploited Within Hours

Google Patches Pixel Modem Zero‑Day Exploited in Targeted Attacks

Elementor Pro Vulnerability Fueled Widespread Webshell Attacks

U.S. Agencies Say Medusa Ransomware Has Hit More Than 500 Critical‑Infrastructure Organizations

Researchers Find CoSnitch One-Click Flaw in Microsoft Copilot Personal

Public SharePoint PoC Triggers Active Exploitation of Critical JWT Bypass

DeepSeek Inside Hermes Used to Launch Autonomous Cyberattacks

Never miss stories about

Exploitation Techniques

Critical RufRoot Flaw Allowed Unauthenticated Control of Ruflo's AI Bridge

Race-Condition Bug in snap-confine Lets Local Users Gain Root on Ubuntu Desktop

SonicWall SMA1000 Zero-Days Exploited Before Patch, Custom Malware Deployed

Critical Cisco Unified CM SSRF Is Being Exploited

Attackers Exploit Recently Patched FortiSandbox Flaws

Ransomware Group Hid Command Channels Inside Microsoft Teams Relays

Cisco Patches Exploited SD‑WAN Manager Zero‑Day

Maximum-Severity Ivanti Sentry Flaw Triggers Rapid Exploitation

Cisco Warns of Unpatched SD‑WAN Zero‑Day Under Active Exploitation

Cisco Patches Critical Unified CM SSRF Flaw After Public PoC Emerges

Never miss stories about

Exploitation Techniques