Active Exploitation Alert
312 posts | Page 9 of 13
Active Exploitation Alert
Critical XXE Vulnerability CVE-2025-66516 (CVSS 10.0) in Apache Tika Enables File Disclosure, SSRF, and Remote Code Execution – Immediate Patch Required
Active Exploitation Alert
Barts Health NHS Data Breach: Cl0p Ransomware Exploits Oracle E-Business Suite Zero-Day (CVE-2025-61882)
Active Exploitation Alert
StealC V2 Infostealer Delivered via Malicious Blender 3D Asset Files: Threat Analysis and Mitigation
Active Exploitation Alert
Shai-Hulud npm Supply Chain Attack: 640 Malicious Packages Compromise JavaScript Ecosystem
Active Exploitation Alert
JackFix Attack Targets Windows and macOS: Advanced Social Engineering Bypasses ClickFix Security Controls
Active Exploitation Alert
Dartmouth College Data Breach: Clop Ransomware Exploits Oracle E-Business Suite Zero-Day (CVE-2025-61882)
Active Exploitation Alert
BADBOX 2.0 and Vo1d Botnets: Android TV Streaming Box Infections, Impacted Models, and Mitigation Strategies
Active Exploitation Alert
Tsundere Botnet Targets Windows Users with Fake Game Installers and Ethereum-Based C2 Infrastructure
Active Exploitation Alert
Salesforce Security Incident: Unauthorized Data Access via Compromised Gainsight OAuth Integrations
Active Exploitation Alert
Iberia Airline Club Loyalty Data Exposed in Third-Party Vendor Breach: Incident Analysis and Mitigation Steps
Active Exploitation Alert
Critical Zero-Day Exploited in Oracle Identity Manager (CVE-2025-61757): Pre-Auth RCE Vulnerability Analysis and Mitigation
Active Exploitation Alert
Critical CVE-2025-41115 SCIM Vulnerability in Grafana Enterprise Allows Remote Impersonation and Privilege Escalation
Active Exploitation Alert
Cox Enterprises Data Breach: Cl0p Ransomware Exploits Oracle E-Business Suite Zero-Day Vulnerability (CVE-2025-61882)
Active Exploitation Alert
APT31 Exploits Yandex.Browser and Cloud Services in Stealthy Cyberattacks on Russian IT Sector
Active Exploitation Alert
Eurofiber France Customer Data Breach: Hacker Attempts to Sell Compromised Information from Customer Data Systems
Active Exploitation Alert
Critical Zero-Day Exploits Target Cisco ISE and Citrix NetScaler: Amazon Uncovers In-the-Wild Attacks
Active Exploitation Alert
CitrixBleed 2 (CVE-2025-5777) Zero-Day: Critical Memory Leak Hits Citrix NetScaler ADC and Gateway Systems
Active Exploitation Alert
Shai-Hulud Worm Attack Compromises npm Registry: Over 46,000 Malicious Packages and Widespread Credential Theft
Active Exploitation Alert
Critical Vulnerabilities Patched in Mozilla Firefox 145 and Google Chrome 142: Update Now to Prevent Remote Code Execution
Active Exploitation Alert
LANDFALL Android Spyware Exploiting CVE-2025-21042 Zero-Day to Target Samsung Galaxy Devices
Active Exploitation Alert
GlassWorm Malware Infects Visual Studio Code Extensions: Open VSX and GitHub Supply Chain Attack Analysis
Active Exploitation Alert
GlassWorm Malware Infects Thousands via Malicious Visual Studio Code Extensions: Supply Chain Attack Report
Active Exploitation Alert
CVE-2025-12480: Triofox Zero-Day Exploited to Deploy Remote Access Tools via Antivirus Feature Misuse
Active Exploitation Alert