Technology ❯ Cybersecurity

Exploitation

Remote Code Execution Active Exploits Attack Vectors Zero-Day Exploits Privilege Escalation Remote Access Malware Zero-Day Attacks Threat Actors Active Threats

Researchers Report Active Exploitation of Critical Oracle E‑Business Flaw

The move from patched advisory to in‑the‑wild attacks raises urgent risk for internet‑facing, unpatched Oracle E‑Business Suite systems.

Critical Cisco Unified CM SSRF Is Being Exploited

F5 Issues Emergency Patches for Critical NGINX Flaws

CISA Orders Immediate Fixes for Actively Exploited LiteSpeed and Joomla Plugin Flaws

Maximum-Severity Ivanti Sentry Flaw Triggers Rapid Exploitation

Langflow Path Traversal Flaw Exploited to Write Files

Critical Check Point VPN Flaw Exploited by Ransomware-Linked Attackers

CISA Says SolarWinds Serv-U Flaw Is Being Exploited to Crash Servers

CISA Adds Exploited Mirasvit Magento Flaw to KEV After Active RCE Attacks

Google Releases June Android Patches Fixing Actively Exploited Zero‑Day

Belgium Says Critical Windows Netlogon Flaw Is Being Actively Exploited

Microsoft Patches High-Severity SharePoint Deserialization RCE

Microsoft Issues Emergency Patches for Two Actively Exploited Defender Zero‑Days

cPanel Flaw Under Active Attack by Long-Running Group Deploying 'Filemanager'

CISA Adds Actively Exploited ‘Copy Fail’ Linux Bug to KEV With May 15 Patch Deadline

Microsoft’s April Patch Tuesday Fixes Exploited SharePoint Zero-Day and 160-Plus Flaws

CISA Orders Rapid Fix for Actively Exploited Fortinet EMS Zero-Day

Cisco Releases Fixes for Critical IMC and SSM On-Prem Flaws Allowing Remote Admin and Root Access

CISA Adds Actively Exploited Wing FTP Flaw to KEV With March 30 Fix Deadline

Cisco Patches Two CVSS 10 Flaws in Secure Firewall Management Center