Technology ❯ Cybersecurity ❯ Vulnerabilities

Exploitation

CVE-2025-55182 WinRAR Palo Alto Networks ToolShell React Vulnerability Incidents CVE-2025-10035 Oracle PeopleSoft Trojan Horses AI in Security

8 ARTICLES

5d ago

Attackers Are Exploiting a Critical Oracle E‑Business Payments Flaw

Successful attacks let unauthenticated HTTP requests read server files, risking takeover of Oracle Payments and forcing urgent patching and isolation steps.

10 ARTICLES

4w ago

Researchers Demonstrate AI‑Driven Worm That Adapts and Self‑Propagates in Lab Tests

11 ARTICLES

4w ago

Ivanti Patches EPM as EPMM Exploitation Campaign Traces to Single Bulletproof-Hosted IP

6 ARTICLES

4mo ago

Active Attacks Hit SolarWinds Web Help Desk, Abusing Zoho ManageEngine and Velociraptor

5 ARTICLES

5mo ago

CISA Flags SmarterMail RCE as Ransomware Target, Sets Feb. 26 Patch Deadline

10 ARTICLES

5mo ago

Google Warns of Widespread, Ongoing Exploitation of WinRAR Vulnerability

3 ARTICLES

6mo ago

CISA Adds Actively Exploited WinRAR and Windows Flaws to KEV, Sets Dec. 30 Deadline

10 ARTICLES

6mo ago

React2Shell Exploited in the Wild as China-Linked Groups Target Unpatched React Server Components

12 ARTICLES

7mo ago

React2Shell Exploited at Scale as CISA Sets Dec. 26 Patch Deadline and Breaches Mount

6 ARTICLES

7mo ago

Amazon Reveals Pre‑Disclosure Exploits of Citrix NetScaler and Cisco ISE to Plant Stealth Backdoor

5 ARTICLES

7mo ago

Mandiant Says Hackers Exploit Triofox Flaw to Create Admin Accounts and Execute Code

6 ARTICLES

8mo ago

CISA Sets Nov. 14 Deadline After Active Attacks on Critical WSUS Flaw

5 ARTICLES

8mo ago

Active Attacks Target Adobe Commerce With 'SessionReaper' Exploit

3 ARTICLES

9mo ago

China-Linked Actor Turns Velociraptor Into Ransomware Beachhead, Cisco Talos Warns

Exploitation

Attackers Are Exploiting a Critical Oracle E‑Business Payments Flaw

Researchers Demonstrate AI‑Driven Worm That Adapts and Self‑Propagates in Lab Tests

Google Releases June Android Patches Fixing Actively Exploited Zero‑Day

CISA Orders Rapid Patching of Cisco SD‑WAN Admin‑Bypass Flaw CVE‑2026‑20182

cPanel Flaw Under Active Attack by Long-Running Group Deploying 'Filemanager'

Axios npm Package Briefly Trojanized After Maintainer Account Takeover

CISA Orders Federal Agencies to Patch Actively Exploited Citrix NetScaler Flaw

Attackers Exploit Critical Langflow RCE Within 20 Hours of Disclosure

Ivanti Patches EPM as EPMM Exploitation Campaign Traces to Single Bulletproof-Hosted IP

Active Attacks Hit SolarWinds Web Help Desk, Abusing Zoho ManageEngine and Velociraptor

Never miss stories about

Exploitation

CISA Flags SmarterMail RCE as Ransomware Target, Sets Feb. 26 Patch Deadline

Google Warns of Widespread, Ongoing Exploitation of WinRAR Vulnerability

CISA Adds Actively Exploited WinRAR and Windows Flaws to KEV, Sets Dec. 30 Deadline

React2Shell Exploited in the Wild as China-Linked Groups Target Unpatched React Server Components

React2Shell Exploited at Scale as CISA Sets Dec. 26 Patch Deadline and Breaches Mount

Amazon Reveals Pre‑Disclosure Exploits of Citrix NetScaler and Cisco ISE to Plant Stealth Backdoor

Mandiant Says Hackers Exploit Triofox Flaw to Create Admin Accounts and Execute Code

CISA Sets Nov. 14 Deadline After Active Attacks on Critical WSUS Flaw

Active Attacks Target Adobe Commerce With 'SessionReaper' Exploit

China-Linked Actor Turns Velociraptor Into Ransomware Beachhead, Cisco Talos Warns

Never miss stories about

Exploitation