Technology ❯ Cybersecurity ❯ Vulnerabilities

Exploits

Privilege Escalation Malware Zero-Day Exploits Spyware Zero-Day Vulnerabilities Patches CVE-2025-53770 Microsoft Defender Windows Security CVE-2025-6558 User Impact CVE-2025-24085 CVE-2026-1731 AI in Cybersecurity CVE-2026-20700 AI in Security Remote Access Screen Sharing Zero-Day Attacks User Safety CVEs Defensive Capabilities CVE-2026-65400 CitrixBleed2 CVE-2025-10035 Unpatched Servers Corporate Security Supply Chain Attacks AI Agents Covert Listening Devices Memory Corruption Buffer Overflow CVE-2026-50522 CVE-2024-37079 Core Audio Vulnerability GreatXML Patching CVE-2024-57728 CVE-2026-34908 CVE-2023-20198 Microsoft Flaw CVE-2021-27137 CVE-2026-20805 Qualcomm Chips CVE-2024-43047 WebKit Flaws CVE-2026-33017 CVE-2026-35616 Oracle Manipulation Personal Information Microsoft SharePoint Cross-Site Scripting CVE-2025-8875 and CVE-2025-8876 CVE-2025-11412 CVE-2020-22653 CVE-2026-5281 OpenClaw Coruna CVE-2026-21510 CVE-2026-34909 Remote Attacks Real-World Examples WebKit Joomla Plugin Network Security Remote Code Execution Information Disclosure CISA Spotlight Vulnerability Man-in-the-Middle Attacks Windows DarkSword PeopleSoft CVE-2024-37085 Coruna Exploit Fortinet FortiWeb Apple Project Glasswing CVE-2025-34291 Passkeys CVE-2025-32463 Zero-Day SIM Swapping CVE-2026-42897 Smart Contract Flaws Nintendo Switch Physical Access CVE-2026-26980 Bug Fixes User Data GhostPairing CVE-2025-29635 Security Flaws Attack Methods CVE-2026-21513 Heap Corruption VMware vCenter CVE-2025-12480 Targeted Attacks Malicious Software

CISA Adds Zyxel Switch Bug to KEV as Veeam Agent Privilege Flaw Is Publicly Exploited

Federal agencies must install Zyxel’s patched firmware by Sept. 24 to close a bug CISA says is being actively abused.

AI-Built Exploit Used to Take Over OpenAI Staff Accounts

Google Patches Pixel Modem Zero‑Day Exploited in Targeted Attacks

Critical Cisco Email‑Gateway Zero‑Day Lets Attackers Gain Root

AI Ported a PLC Remote‑Code Exploit After Hours of Expert Guidance and $536 in API Fees

Researcher Publishes HardBreacher Exploit Targeting Kaspersky Endpoint

CISA Adds OwnCloud, Linux Kernel and Artifactory Flaws to KEV and Orders Rapid Federal Patching

Active Exploitation of Zimbra Vulnerability CVE-2026-73570 Prompts Emergency Patching

Maya Protocol Halted After $1.7 Million Multi‑Bug Exploit

macOS Screen Sharing Flaw Exploited to Root Macs and Install Monero Miners

Active Exploitation of VMware vCenter Flaw Lets Attackers Maintain Outbound Reverse Shells

ShieldBreak PoC Elevates Privileges via Microsoft Defender

Cisco Says Zero‑Day Static‑Credential Flaw in Firewall Manager Is Being Exploited

Ukraine's CERT Says UAC-0099 Hid Malware in Fake Notepad++ Plugin

Adobe Extension Flaw Let Websites Read WhatsApp Web Data

Balance Coin Crashes After Oracle Manipulation and Unauthorized Minting

Public PoC Drives Active Exploitation of Critical SharePoint RCE

China-Linked UAT-7810 Builds Out Router Relay Network With New LONGLEASH Backdoor

Hide My Email Flaw Lets Attackers Unmask Users’ Real Addresses

CISA Says BlueHammer Flaw Is Now Used in Ransomware Campaigns