Technology ❯ Cybersecurity ❯ Threat Actors

Exploitation Techniques

Remote Code Execution Command Injection Privilege Escalation Access Control Proof-of-Concept Ransomware Authentication Bypass Zero-Click Exploits Zero-Day Exploits Denial of Service

Critical F5 BIG-IP APM Flaw Enables Unauthenticated Remote Code Execution

CISA has ordered rapid remediation for federal systems following F5's release of hotfixes and mitigations.

Critical GitLab Path Traversal Now Being Actively Exploited

Attackers Exploiting Critical Langflow Flaw to Steal OpenAI and AWS Keys

PaperCut Zero-Days Escalate to Active Intrusions

CISA Adds Actively Exploited Oracle WebLogic and Citrix NetScaler Flaws to KEV and Orders Rapid Federal Patching

Critical SAML Flaws Let Hackers Forge Logins on miniOrange WordPress Plugin

CISA Orders Rapid Fixes After Active Exploitation of Critical MLflow SSRF

GeoServer Zero-Day SQL Injection Draws Mass Probes

Public SharePoint PoC Triggers Active Exploitation of Critical JWT Bypass

CISA Adds Four High‑Risk RCE Flaws to KEV and Orders Immediate Federal Patching

N-able N-central Is Being Exploited as Emergency Hotfix Is Issued

Laundry Bear Uses OWA XSS to Install OWAReaper Backdoor

Public PoC Drives Active Exploitation of Critical SharePoint RCE

Qilin Ransomware Exploits Palo Alto GlobalProtect Authentication Bypass

SonicWall SMA1000 Zero‑Days Are Being Actively Exploited and Vendor Issues Hotfixes

CISA Orders Emergency Patching After Active Exploitation of Adobe ColdFusion Flaw

Attackers Exploit SimpleHelp OIDC Flaw to Deploy TaskWeaver and Djinn Stealer

CISA Lists PTC Windchill RCE in KEV as Vendor Confirms Active Web‑Shell Attacks

CISA Adds Ubiquiti and Lantronix Flaws to Known Exploited Vulnerabilities Catalog

CISA Orders Immediate Fixes for Actively Exploited LiteSpeed and Joomla Plugin Flaws