Technology ❯ Cybersecurity ❯ Vulnerabilities

Exploitation

Microsoft SharePoint CVE-2025-55182 Incident Response WinRAR AI in Security ToolShell Cisco Unified Communications Manager Oracle PeopleSoft Palo Alto Networks Incidents

CISA Orders Rapid Patching of Actively Exploited TrueConf Server Flaws

The agency says the bugs let unauthenticated attackers run code on on‑premises TrueConf servers reachable on TCP port 4307.

Attackers Actively Exploit Critical Zimbra Remote‑Code‑Execution Flaw

macOS Screen Sharing Flaw Exploited to Root Macs and Install Monero Miners

Evooo1Bot Identified as Mirai-Derived Botnet That Turns Edge Devices Into SOCKS5 Proxies

Active Exploitation of VMware vCenter Flaw Lets Attackers Maintain Outbound Reverse Shells

Public SharePoint PoC Triggers Active Exploitation of Critical JWT Bypass

N-able N-central Is Being Exploited as Emergency Hotfix Is Issued

Attackers Exploit Critical ServiceNow RCE Flaw

Cursor Bug Lets Repo-Placed git.exe Run Automatically on Windows

Japanese Teen Arrested Over ChatGPT‑Assisted Hack That Canceled 46,000 Anime Subscriptions

Attackers Are Exploiting a Critical Oracle E‑Business Payments Flaw

Researchers Demonstrate AI‑Driven Worm That Adapts and Self‑Propagates in Lab Tests

Google Releases June Android Patches Fixing Actively Exploited Zero‑Day

CISA Orders Rapid Patching of Cisco SD‑WAN Admin‑Bypass Flaw CVE‑2026‑20182

cPanel Flaw Under Active Attack by Long-Running Group Deploying 'Filemanager'

Axios npm Package Briefly Trojanized After Maintainer Account Takeover

CISA Orders Federal Agencies to Patch Actively Exploited Citrix NetScaler Flaw

Attackers Exploit Critical Langflow RCE Within 20 Hours of Disclosure

Ivanti Patches EPM as EPMM Exploitation Campaign Traces to Single Bulletproof-Hosted IP

Active Attacks Hit SolarWinds Web Help Desk, Abusing Zoho ManageEngine and Velociraptor