China-Aligned Threat Group Exploits Roundcube Vulnerabilities to Target University Research Networks
A chained exploit requiring only an opened email is giving attackers persistent access to physics…
Tag: exploitation
Sysdig Documents First Known End-to-End Agentic Ransomware Attack Driven by an LLM
A threat actor used an AI agent to autonomously exploit, pivot, encrypt, and extort a…
Oracle E-Business Suite Vulnerability Exploited Before Public Proof-of-Concept Emerged
Targeted exploitation of a critical EBS flaw within six weeks of patching signals a capable…
Citrix patches six NetScaler vulnerabilities, including a memory disclosure flaw linked to CitrixBleed’s root cause
A new out-of-bounds memory read in NetScaler's SAML handling reinforces a persistent pattern of fragile…
SimpleHelp Authentication Bypass Lets Attackers Forge Technician Sessions via Unsigned Tokens
A vulnerability in SimpleHelp's OIDC authentication flow allows unauthenticated remote attackers to submit forged identity…
Critical libssh2 Flaw Lets Rogue SSH Servers Corrupt Client Memory
A public proof-of-concept exploit now exists for CVE-2026-55200, a CVSS 9.2 vulnerability in libssh2 that…
Check Point VPN Zero-Day: Six Weeks of Exploitation Before the Patch Directive Arrived
CVE-2026-50751 illustrates why perimeter patching alone cannot protect organisations that were already breached before a…
Two Active Cisco Exploits Target Communications and SD-WAN Infrastructure
A patched SSRF bug in Unified Communications Manager is now being weaponised in the wild,…
Mandiant Details How Cisco SD-WAN Zero-Day Enabled Rogue Root Account Creation
A zero-day vulnerability in Cisco Catalyst SD-WAN allowed attackers to establish persistent root-level access, with…
OpenSSL Stack Buffer Overflow Affects More Than 130 Siemens Products Across OT and IT
A pre-authentication stack-based overflow in OpenSSL's CMS parsing logic carries a CVSS 9.8 rating and…