Technology ❯ Cybersecurity ❯ Vulnerabilities

Exploits

Privilege Escalation Malware Spyware Microsoft Defender CVE-2025-53770 Remote Access CVE-2026-1731 User Impact Zero-Day Attacks AI in Security

Ukraine's CERT Says UAC-0099 Hid Malware in Fake Notepad++ Plugin

CERT-UA says the malicious plugin creates a scheduled task to run a multi-stage loader chain that can fetch and install additional payloads.

Adobe Extension Flaw Let Websites Read WhatsApp Web Data

Balance Coin Crashes After Oracle Manipulation and Unauthorized Minting

Public PoC Drives Active Exploitation of Critical SharePoint RCE

China-Linked UAT-7810 Builds Out Router Relay Network With New LONGLEASH Backdoor

Hide My Email Flaw Lets Attackers Unmask Users’ Real Addresses

CISA Says BlueHammer Flaw Is Now Used in Ransomware Campaigns

Researchers Find macOS Chain Letting Standard Users Disable EDR and MDM

CISA Adds Ubiquiti and Lantronix Flaws to Known Exploited Vulnerabilities Catalog

Microsoft Confirms RoguePlanet Defender Zero-Day and Says Patch Is Being Developed

SearchLeak Turns Microsoft 365 Copilot Into One-Click Data Exfiltration Tool

Attackers Exploit Recently Patched FortiSandbox Flaws

CISA Orders Immediate Fixes for Actively Exploited LiteSpeed and Joomla Plugin Flaws

SprySOCKS Backdoor Ports to Windows With Kernel-Driver Stealth

GreatXML Exploit Bypasses BitLocker by Abusing WinRE XML Files

CISA Flags Two-Year-Old Oracle WebLogic Flaw as Actively Exploited

Active Exploitation of Palo Alto GlobalProtect Flaw Forces Urgent Patching

Attackers Use FortiClient EMS Bug to Push Infostealer to Managed Endpoints

Attackers Poison More Than 700 Ghost CMS Sites to Push ClickFix Malware

CISA Adds Langflow and Trend Micro Apex One to KEV After Active Exploitation