Technology ❯ Cybersecurity ❯ Vulnerabilities

Exploitation

Incident Response CVE-2025-55182 WinRAR Citrix NetScaler Artificial Intelligence Microsoft SharePoint Oracle PeopleSoft Vendor Responsibility Windows Server Update Services macOS CVE-2024-50623 Zero-Day Exploits Palo Alto Networks Forensic Exploits Citrix Systems Malicious Code CVE-2025-10035 CitrixBleed 2 WSO2 Software Development CVE-2025-54236 Threat Intelligence Remote Access TrueConf CVE-2025-59489 React2Shell CVE CVE-2025-61882 Critical Vulnerabilities React Vulnerability Remote Code Execution ToolShell Spyware User Risks N-able N-central CVE-2025-12480 Incidents Zero-Days CVE-2026-1281 AI in Security SolarWinds Web Help Desk CVE-2025-8088 CVE-2026-18577 User Data Protection Open Source Vulnerabilities Cisco Unified Communications Manager Langflow AI Attacks Oracle Payments Hacking Techniques Credential Compromise Ransomware Mitigation AI Security Trojan Horses CVE-2026-20182 Self-Replicating Malware Zero-Day Flaws CVE-2026-6875 AI Safety Malware Oracle E-Business Suite Zimbra Collaboration Screen Sharing Zimbra Collaboration Suite Defensive Strategies AI Behavior CISA Ethical Hacking CVE-2026-59310 VMware vCenter Oracle WebLogic Server Oracle HTTP Server User Data Theft CVE-2026-20079 CVE-2026-82329 Threat Actors CVE-2026-42018 Device Security AI Vulnerabilities CVE-2026-42016 Research

ShinyHunters Resume Mass Exploitation of Oracle PeopleSoft

A URL-encoding trick lets attackers reach an unpatched PeopleSoft management endpoint, increasing risk of data theft and extortion.

White‑Hat Team Used Anthropic’s Claude to Breach OpenAI Systems

Attackers Forge Admin Tokens in Chained JFrog Artifactory Flaws, Plant Backdoors

AI-Orchestrated Campaign Exploits Chained PaperCut Flaws to Compromise Hundreds of Organizations

Active Exploitation of Zimbra Vulnerability CVE-2026-73570 Prompts Emergency Patching

CISA Orders Rapid Fixes for Actively Exploited TrueConf Server Flaws

macOS Screen Sharing Flaw Exploited to Root Macs and Install Monero Miners

Evooo1Bot Identified as Mirai-Derived Botnet That Turns Edge Devices Into SOCKS5 Proxies

Active Exploitation of VMware vCenter Flaw Lets Attackers Maintain Outbound Reverse Shells

Public SharePoint PoC Triggers Active Exploitation of Critical JWT Bypass

N-able N-central Is Being Exploited as Emergency Hotfix Is Issued

Attackers Exploit Critical ServiceNow RCE Flaw

Cursor Bug Lets Repo-Placed git.exe Run Automatically on Windows

Attackers Are Exploiting a Critical Oracle E‑Business Payments Flaw

Researchers Demonstrate AI‑Driven Worm That Adapts and Self‑Propagates in Lab Tests

Google Releases June Android Patches Fixing Actively Exploited Zero‑Day

CISA Orders Rapid Patching of Cisco SD‑WAN Admin‑Bypass Flaw CVE‑2026‑20182

cPanel Flaw Under Active Attack by Long-Running Group Deploying 'Filemanager'

Axios npm Package Briefly Trojanized After Maintainer Account Takeover

CISA Orders Federal Agencies to Patch Actively Exploited Citrix NetScaler Flaw