Technology ❯ Cybersecurity ❯ Threats

Exploits

Remote Code Execution Zero-Day Vulnerabilities Privilege Escalation Proof of Concept Malware Remote Attacks Zero-Day Exploits Active Exploitation Code Injection Command Injection

Critical FortiMail Zero-Day Lets Attackers Write Files and Run Code

CISA has ordered federal agencies to mitigate the flaw by October 4 to force rapid triage of affected systems.

CISA Orders Rapid Patch of Three Actively Exploited Linux Kernel Flaws

Critical WooCommerce Plugin Flaw Lets Hackers Upload PHP Webshells

Acronis Confirms Exploited Privilege-Escalation Flaw in cPanel Backup Plugin

Mass Scans Exploit Vite Flaw to Steal Cloud Credentials

Google Releases Chrome 153 to Patch Actively Exploited V8 Zero‑Day

Broadcom Patches Two VM‑Escape Flaws in VMware Workstation and Fusion

Second‑Order SQL Flaw in Popular WordPress Migration Plugin Leaves Millions Exposed

Critical WordPress Plugin Flaws Leave Hundreds of Thousands of Sites at Risk

macOS Screen Sharing Flaw Exploited to Root Macs and Install Monero Miners

Microsoft Ships August Patch Tuesday Fixes for About 400 Vulnerabilities Including an Exploited Zero‑Day

Critical Outlook Web Access Flaw Used to Deploy In‑Browser Backdoor OWAReaper

Check Point Patches Exploited SmartConsole Authentication Bypass

Zimbra Issues Urgent Patch for Critical SNMP Command Injection

Public Exploits Target WordPress wp2shell Pre‑Auth RCE After Emergency Patch

SonicWall SMA1000 Zero‑Days Are Being Actively Exploited and Vendor Issues Hotfixes

Microsoft Patches RoguePlanet Elevation‑of‑Privilege Flaw in Defender

HalluSquatting Lets Attackers Pre-Register AI Hallucinations to Seed Malicious Packages

Adobe Issues Urgent Patches for Seven Maximum‑Severity ColdFusion and Campaign Flaws

Maximum-Severity Ivanti Sentry Flaw Triggers Rapid Exploitation