Critical PHP RCE vulnerability mass exploited in new attacks
Threat intelligence company GreyNoise warns that a critical PHP remote code execution vulnerability that impacts Windows ...
CSO Online2d
Ivanti EPM vulnerabilities actively exploited in the wild, CISA warns
Three of the four critical path traversal flaws fixed in January in Ivanti Endpoint Manager are being exploited in ...
Security Boulevard6h
One PUT Request to Own Tomcat: CVE-2025-24813 RCE is in the Wild
A devastating new remote code execution (RCE) vulnerability, CVE-2025-24813, is now actively exploited in the wild. Attackers need just one PUT API request to take over vulnerable Apache Tomcat ...
The Hacker News2d
Ballista Botnet Exploits Unpatched TP-Link Vulnerability, Targets Over 6,000 Devices
Ballista botnet exploits TP-Link router flaw CVE-2023-1389, infecting 6,000+ devices worldwide and evolving to use TOR.
Thousands of TP-Link routers have been infected by a botnet to spread malware
A new botnet campaign is exploiting a high-severity security flaw in unpatched TP-Link routers and has already spread to more ...
Infosecurity Magazine11d
BYOVD Attacks Exploit Zero-Day in Paragon Partition Manager
Threat actors are exploiting a zero-day bug in Paragon Partition Manager's BioNTdrv.sys driver during ransomware attacks ...
Hosted on MSN2mon
Alleged 7-Zip arbitrary code execution exploit leaked to Twitter — the 7-Zip author claims this exploit not only isn't real but was generated by AI
Yesterday, user @NSA_Employee39 allegedly posted a zero-day exploit for the popular open-source file decompression utility 7-Zip on Twitter, only to have 7-Zip author Igor Pavlov swiftly dismiss ...
Hackaday9y
Stegosploit: Owned By A JPG
We’re primarily hardware hackers, but every once in a while we see a software hack that really tickles our fancy. One such hack is Stegosploit, by [Saumil Shah]. Stegosploit isn’t really an ...
Infosecurity-magazine.com17d
61% of Hackers Use New Exploit Code Within 48 Hours of Attack
In 2024, cyber-criminals have launched attacks within 48 hours of discovering a vulnerability, with 61% of hackers using new exploit code in this short timeframe. Companies faced an average of 68 days ...
Crypto lost to exploits, scams, hits $1.5B in February with Bybit hack: CertiK
Losses to crypto scams, exploits and hacks totaled nearly $1.53 billion in February, with the $1.4 billion Bybit hack ...
What is device code phishing, and why are Russian spies so successful at it?
Researchers have uncovered a sustained and ongoing campaign by Russian spies that uses a clever phishing technique to hijack ...
heise online27d
Palo Alto PAN-OS: Exploit code for high-risk vulnerability has emerged
Exploit code already exists for one of them. Palo Alto currently uses the consistently lower "temporal score" for the risk assessment; other providers usually use the acute CVSS value. This shows ...