Latest Exploit news

PoC released for Windows Win32k bug exploited in attacks

Researchers have released a proof-of-concept (PoC) exploit for an actively exploited Windows local privilege escalation vulnerability fixed as part of the May 2023 Patch Tuesday.
- Bill Toulas
- June 08, 2023
- 04:51 PM
- 0
Zyxel shares tips on protecting firewalls from ongoing attacks

Zyxel has published a security advisory containing guidance on protecting firewall and VPN devices from ongoing attacks and detecting signs of exploitation.
- Bill Toulas
- June 03, 2023
- 10:06 AM
- 0
Exploit released for RCE flaw in popular ReportLab PDF library

A researcher has published a working exploit for a remote code execution (RCE) flaw impacting ReportLab, a popular Python library used by numerous projects to generate PDF files from HTML input.
- Bill Toulas
- May 31, 2023
- 06:17 PM
- 0
Hackers exploit critical Zyxel firewall flaw in ongoing attacks

Hackers are performing widespread exploitation of a critical-severity command injection flaw in Zyxel networking devices, tracked as CVE-2023-28771, to install malware.
- Bill Toulas
- May 31, 2023
- 01:54 PM
- 0
Cisco warns of critical switch bugs with public exploit code

Cisco warned customers today of four critical remote code execution vulnerabilities with public exploit code affecting multiple Small Business Series Switches.
- Sergiu Gatlan
- May 17, 2023
- 02:50 PM
- 0
Hackers target Wordpress plugin flaw after PoC exploit released

Hackers are actively exploiting a recently fixed vulnerability in the WordPress Advanced Custom Fields plugin roughly 24 hours after a proof-of-concept (PoC) exploit was made public.
- Bill Toulas
- May 14, 2023
- 11:14 AM
- 1
New PaperCut RCE exploit created that bypasses existing detections

A new proof-of-concept (PoC) exploit for an actively exploited PaperCut vulnerability was released that bypasses all known detection rules.
- Bill Toulas
- May 06, 2023
- 10:11 AM
- 0
Hackers target vulnerable Veeam backup servers exposed online

Veeam backup servers are being targeted by at least one group of threat actors known to work with multiple high-profile ransomware gangs.
- Bill Toulas
- April 29, 2023
- 10:41 AM
- 1
The Week in Ransomware - April 28th 2023 - Clop at it again

It has been a very quiet week for ransomware news, with only a few reports released and not much info about cyberattacks. An item of interest was Microsoft linking the recent PaperCut server attacks on the Clop and LockBit ransomware operation.
- Lawrence Abrams
- April 28, 2023
- 02:42 PM
- 0
Exploit released for PaperCut flaw abused to hijack servers, patch now

Attackers are exploiting severe vulnerabilities in the widely-used PaperCut MF/NG print management software to install Atera remote management software to take over servers.
- Sergiu Gatlan
- April 24, 2023
- 01:01 PM
- 2
New sandbox escape PoC exploit available for VM2 library, patch now

Security researchers have released yet another sandbox escape proof of concept (PoC) exploit that makes it possible to execute unsafe code on the host running the VM2 sandbox.
- Bill Toulas
- April 18, 2023
- 10:39 AM
- 0
ALPHV ransomware exploits Veritas Backup Exec bugs for initial access

An ALPHV/BlackCat ransomware affiliate was observed exploiting three vulnerabilities impacting the Veritas Backup product for initial access to the target network.
- Bill Toulas
- April 04, 2023
- 11:43 AM
- 0
Google finds more Android, iOS zero-days used to install spyware

Google's Threat Analysis Group (TAG) discovered several exploit chains using Android, iOS, and Chrome zero-day and n-day vulnerabilities to install commercial spyware and malicious apps on targets' devices.
- Sergiu Gatlan
- March 29, 2023
- 08:00 AM
- 0
Hackers earn $1,035,000 for 27 zero-days exploited at Pwn2Own Vancouver

Pwn2Own Vancouver 2023 has ended with contestants earning $1,035,000 and a Tesla Model 3 car for 27 zero-day (and several bug collisions) exploited between March 22 and 24.
- Sergiu Gatlan
- March 27, 2023
- 11:23 AM
- 0
Microsoft Teams, Virtualbox, Tesla zero-days exploited at Pwn2Own

During the second day of Pwn2Own Vancouver 2023, competitors were awarded $475,000 after successfully exploiting 10 zero-days in multiple products.
- Sergiu Gatlan
- March 23, 2023
- 07:33 PM
- 0
Exploit released for Veeam bug allowing cleartext credential theft

Cross-platform exploit code is now available for a high-severity Backup Service vulnerability impacting Veeam's Backup & Replication (VBR) software.
- Sergiu Gatlan
- March 23, 2023
- 12:18 PM
- 2
Hackers now exploit critical Fortinet bug to backdoor servers

Threat actors are targeting Internet-exposed Fortinet appliances with exploits targeting CVE-2022-39952, an unauthenticated file path manipulation vulnerability in the FortiNAC webserver that can be abused for remote command execution.
- Sergiu Gatlan
- February 22, 2023
- 02:06 PM
- 0
Malicious Dota 2 game modes infected players with malware

Security researchers have discovered four malicious Dota 2 game modes that were used by a threat actor to backdoor the players' systems.
- Sergiu Gatlan
- February 08, 2023
- 01:09 PM
- 0
Exploit released for actively exploited GoAnywhere MFT zero-day

Exploit code has been released for an actively exploited zero-day vulnerability affecting Internet-exposed GoAnywhere MFT administrator consoles.
- Sergiu Gatlan
- February 06, 2023
- 06:22 PM
- 0
Exploit released for critical VMware vRealize RCE vulnerability

Horizon3 security researchers have released proof-of-concept (PoC) code for a VMware vRealize Log Insight vulnerability chain that allows attackers to gain remote code execution on unpatched appliances.
- Sergiu Gatlan
- January 31, 2023
- 11:14 AM
- 0