Technology ❯ Cybersecurity ❯ Threats

Exploits

Remote Code Execution Zero-Day Vulnerabilities Privilege Escalation Proof of Concept Remote Attacks Command Injection Zero-Day Exploits CVE Vulnerabilities Malware Critical Vulnerabilities

Check Point Patches Exploited SmartConsole Authentication Bypass

Unauthenticated attackers can obtain admin tokens to change security policy, triggering an urgent federal remediation order.

Zimbra Issues Urgent Patch for Critical SNMP Command Injection

Public Exploits Target WordPress wp2shell Pre‑Auth RCE After Emergency Patch

SonicWall SMA1000 Zero‑Days Are Being Actively Exploited and Vendor Issues Hotfixes

Microsoft Patches RoguePlanet Elevation‑of‑Privilege Flaw in Defender

HalluSquatting Lets Attackers Pre-Register AI Hallucinations to Seed Malicious Packages

Adobe Issues Urgent Patches for Seven Maximum‑Severity ColdFusion and Campaign Flaws

Maximum-Severity Ivanti Sentry Flaw Triggers Rapid Exploitation

Arista Declines Patch for Actively Exploited EOS Tunnel Flaw

Google Releases Emergency Chrome 149 Patch for Actively Exploited V8 Zero‑Day

Critical WP Maps Pro Flaw Lets Attackers Create WordPress Admin Accounts

Microsoft Threatens Legal Action After Public Release of Six Windows Zero‑Days

Microsoft Patches High-Severity SharePoint Deserialization RCE

Microsoft Issues Emergency Patches for Two Actively Exploited Defender Zero‑Days

Cisco Fixes Critical Secure Workload API Flaw That Can Grant Site Admin Access

Microsoft Issues Mitigations for YellowKey BitLocker Bypass

Drupal Issues Emergency Patch for PostgreSQL SQL Injection Flaw

Anthropic to Brief Global Financial Watchdogs on Risks From Claude Mythos

Researcher’s Exploits Revive MiniPlasma Bug and Flag BitLocker Bypass in Windows

Researcher Releases 'MiniPlasma' Exploit That Gains SYSTEM Access on Fully Patched Windows