Technology ❯ Cybersecurity

Exploitation

Remote Code Execution Active Exploits Attack Vectors Zero-Day Exploits Active Threats Active Exploitation Threat Actors Privilege Escalation Remote Access Zero-Day Vulnerabilities

cPanel Flaw Under Active Attack by Long-Running Group Deploying 'Filemanager'

Researchers detail a Go-based tool that enables stealthy credential theft with persistent control.

CISA Adds Actively Exploited ‘Copy Fail’ Linux Bug to KEV With May 15 Patch Deadline

Microsoft’s April Patch Tuesday Fixes Exploited SharePoint Zero-Day and 160-Plus Flaws

CISA Orders Rapid Fix for Actively Exploited Fortinet EMS Zero-Day

Cisco Releases Fixes for Critical IMC and SSM On-Prem Flaws Allowing Remote Admin and Root Access

CISA Adds Actively Exploited Wing FTP Flaw to KEV With March 30 Fix Deadline

Cisco Patches Two CVSS 10 Flaws in Secure Firewall Management Center

CISA Puts Exploited FileZen Bug on KEV With March 17 Fix Deadline

Dell Patches RecoverPoint Zero-Day Exploited Since 2024 by Suspected China Group

Fortinet Confirms FortiCloud SSO Bypass Hitting Fully Patched FortiGate Firewalls

CERT/CC Discloses Unpatched TOTOLINK EX200 Flaw That Enables Root Telnet Takeover

React2Shell Attacks Escalate as Microsoft Confirms Hundreds of Compromised Systems

Unpatched Gogs Zero-Day Is Under Active Exploitation, 700+ Servers Compromised

Fortinet Confirms Critical FortiWeb Zero-Day Is Being Exploited as CISA Sets Nov. 21 Patch Deadline

Active Attacks Target Adobe Commerce With 'SessionReaper' Exploit

CISA Flags Active Exploits of Windows SMB Privilege Bug, Sets Nov. 10 Patch Deadline

Microsoft Links Medusa Affiliate to Exploits of Critical GoAnywhere Flaw

Fortra Patches Critical GoAnywhere MFT Flaw as Researchers Urge Blocking Public Admin Access

Fortra Patches CVSS 10 Flaw in GoAnywhere MFT, Urges Lockdown of Admin Consoles

Google Patches Two Exploited Android Zero-Days in Wide September Update