Technology ❯ Cybersecurity ❯ Vulnerabilities

Exploitation

CVE-2025-55182 WinRAR Palo Alto Networks AI in Security ToolShell React Vulnerability Incidents CVE-2025-10035 Trojan Horses Citrix NetScaler User Risks Remote Access Microsoft SharePoint Threat Intelligence Remote Code Execution Zero-Days Vendor Responsibility Spyware CVE-2025-61882 Open Source Vulnerabilities Citrix Systems CVE-2025-12480 CVE-2024-50623 CVE-2025-59489 CVE-2026-20182 CVE-2025-8088 CitrixBleed 2 Hacking Techniques Credential Compromise Forensic Exploits CVE-2026-1281 Windows Server Update Services SolarWinds Web Help Desk Langflow Malicious Code React2Shell Ransomware CVE-2025-54236 Critical Vulnerabilities Mitigation Zero-Day Exploits

CISA Orders Rapid Patching of Cisco SD‑WAN Admin‑Bypass Flaw CVE‑2026‑20182

Talos links the attacks to threat cluster UAT‑8616.

cPanel Flaw Under Active Attack by Long-Running Group Deploying 'Filemanager'

Axios npm Package Briefly Trojanized After Maintainer Account Takeover

CISA Orders Federal Agencies to Patch Actively Exploited Citrix NetScaler Flaw

Attackers Exploit Critical Langflow RCE Within 20 Hours of Disclosure

Ivanti Patches EPM as EPMM Exploitation Campaign Traces to Single Bulletproof-Hosted IP

Active Attacks Hit SolarWinds Web Help Desk, Abusing Zoho ManageEngine and Velociraptor

CISA Flags SmarterMail RCE as Ransomware Target, Sets Feb. 26 Patch Deadline

Google Warns of Widespread, Ongoing Exploitation of WinRAR Vulnerability

React2Shell Exploited in the Wild as China-Linked Groups Target Unpatched React Server Components

React2Shell Exploited at Scale as CISA Sets Dec. 26 Patch Deadline and Breaches Mount

Amazon Reveals Pre‑Disclosure Exploits of Citrix NetScaler and Cisco ISE to Plant Stealth Backdoor

Mandiant Says Hackers Exploit Triofox Flaw to Create Admin Accounts and Execute Code

CISA Sets Nov. 14 Deadline After Active Attacks on Critical WSUS Flaw

Active Attacks Target Adobe Commerce With 'SessionReaper' Exploit

China-Linked Actor Turns Velociraptor Into Ransomware Beachhead, Cisco Talos Warns

Steam Blocks Risky Launches as Microsoft Urges Uninstalls After Unity Patches High-Severity Engine Flaw

Researchers Say GoAnywhere CVSS 10 Flaw Was Exploited as Zero-Day Before Disclosure

Microsoft’s September Patch Tuesday Fixes 80–86 Flaws, Two Disclosed Zero-Days, No Active Exploits

Dutch National Cyber Security Centre Confirms NetScaler Zero-Day Breaches