Technology ❯ Cybersecurity

Exploitation

Remote Code Execution Active Exploits Attack Vectors Active Threats Attackers Hacking Competitions Device Vulnerabilities Denial of Service Authentication Anti-Cheat Systems Attack Techniques Cybercrime Remote Access Command Injection Proof of Concept Threat Actors Malicious Code Authentication Bypass Zero-Day Exploits Attacks

React2Shell Attacks Escalate as Microsoft Confirms Hundreds of Compromised Systems

A flood of public exploits turned a React Server Components flaw into broad, real-world intrusions.

Unpatched Gogs Zero-Day Is Under Active Exploitation, 700+ Servers Compromised

Fortinet Confirms Critical FortiWeb Zero-Day Is Being Exploited as CISA Sets Nov. 21 Patch Deadline

Active Attacks Target Adobe Commerce With 'SessionReaper' Exploit

CISA Flags Active Exploits of Windows SMB Privilege Bug, Sets Nov. 10 Patch Deadline

Microsoft Links Medusa Affiliate to Exploits of Critical GoAnywhere Flaw

Fortra Patches CVSS 10 Flaw in GoAnywhere MFT, Urges Lockdown of Admin Consoles

Google Patches Two Exploited Android Zero-Days in Wide September Update

CISA Adds Actively Exploited TP-Link and WhatsApp Flaws to KEV, Sets September Deadlines

Citrix NetScaler Zero‑Day Triggers Emergency Patching as Thousands of Devices Remain Exposed

CISA Adds Exploited Git and Citrix Flaws to KEV, Orders Fixes by Sept. 15

Public Exploit Chains SAP NetWeaver Flaws for Admin-Level RCE

CISA Lists Two N-able N-central Flaws as Actively Exploited

CISA Adds Three D-Link Router Flaws to Known Exploited Vulnerabilities Catalog

Citrix Releases Patch for Critical NetScaler Flaw as New DoS Vulnerability Emerges