Technology ❯ Cybersecurity

Research

Security Research Security Researchers Vulnerability Disclosure Vulnerability Research Security Firms Security Researcher Proof of Concept Rapid7 Malware Analysis Vulnerabilities

Researcher Publishes HardBreacher Exploit Targeting Kaspersky Endpoint

The public release raises immediate operational risk for administrators while Kaspersky says a database update has fixed the flaw.

PaperCut Pre‑Auth Flaws Allow Remote Code Execution

GitLab Critical GraphQL Flaw Is Being Exploited in the Wild

ShieldBreak PoC Elevates Privileges via Microsoft Defender

Public SharePoint PoC Triggers Active Exploitation of Critical JWT Bypass

Unit 42 Reveals Three Post‑Compromise ‘Pass‑ta‑key’ Attacks Targeting Google Passkeys

Researchers Find and Microsoft Patches CosmosEscape Flaw in Azure Cosmos DB

Cisco Says Zero‑Day Static‑Credential Flaw in Firewall Manager Is Being Exploited

Thousands of Internet‑Exposed BMCs Leak IPMI Password Hashes

Dysphoria Botnet Uses Blockchain Domains and Infected Devices to Hide Command Servers

Adobe Extension Flaw Let Websites Read WhatsApp Web Data

Hackers Exploiting WP2Shell Chain to Take Over Unpatched WordPress Sites

Public Exploits Target WordPress wp2shell Pre‑Auth RCE After Emergency Patch

ClickLock Stealer Locks Mac Desktops and Forces Users to Reveal Passwords

Researcher Publishes LegacyHive PoC That Escalates Privileges on Patched Windows

Microsoft Revokes 11 Old Signed UEFI Shims That Could Bypass Secure Boot

Attackers Spoof OAuth Client IDs to Evade Microsoft Entra Sign-In Logs

Microsoft Patches RoguePlanet Elevation‑of‑Privilege Flaw in Defender

Cursor Patches DuneSlide Flaws That Let Prompts Break Its Sandbox

Citrix Patches Six NetScaler Flaws Including High-Severity SAML Memory Bug