Latest Exploit news

Researchers to release VMware vRealize Log RCE exploit, patch now

Security researchers with Horizon3's Attack Team will release next week an exploit targeting a vulnerability chain for gaining remote code execution on unpatched VMware vRealize Log Insight appliances.
- Sergiu Gatlan
- January 28, 2023
- 11:32 AM
- 0
Exploit released for critical Windows CryptoAPI spoofing bug

Proof of concept exploit code has been released by Akamai researchers for a critical Windows CryptoAPI vulnerability discovered by the NSA and U.K.'s NCSC allowing MD5-collision certificate spoofing.
- Sergiu Gatlan
- January 25, 2023
- 06:45 PM
- 0
Over 19,000 end-of-life Cisco routers exposed to RCE attacks

Over 19,000 end-of-life Cisco VPN routers on the Internet are exposed to attacks targeting a remote command execution exploit chain.
- Sergiu Gatlan
- January 20, 2023
- 04:26 PM
- 1
Exploit released for critical ManageEngine RCE bug, patch now

Proof-of-concept exploit code is now available for a remote code execution (RCE) vulnerability in multiple Zoho ManageEngine products.
- Sergiu Gatlan
- January 19, 2023
- 12:07 PM
- 0
Researchers to release PoC exploit for critical ManageEngine RCE bug, patch now

Proof-of-concept exploit code will be released later this week for a critical vulnerability allowing remote code execution (RCE) without authentication in several Zoho ManageEngine products.
- Sergiu Gatlan
- January 16, 2023
- 06:10 PM
- 3
Microsoft: Cuba ransomware hacking Exchange servers via OWASSRF flaw

Microsoft says Cuba ransomware threat actors are hacking their way into victims' networks via Microsoft Exchange servers unpatched against a critical server-side request forgery (SSRF) vulnerability also exploited in Play ransomware attacks.
- Sergiu Gatlan
- January 12, 2023
- 02:53 PM
- 0
Cisco warns of auth bypass bug with public exploit in EoL routers

Cisco warned customers today of a critical authentication bypass vulnerability with public exploit code affecting multiple end-of-life (EoL) VPN routers.
- Sergiu Gatlan
- January 11, 2023
- 01:50 PM
- 0
Ransomware gang uses new Microsoft Exchange exploit to breach servers

Play ransomware threat actors are using a new exploit chain that bypasses ProxyNotShell URL rewrite mitigations to gain remote code execution (RCE) on vulnerable servers through Outlook Web Access (OWA).
- Sergiu Gatlan
- December 20, 2022
- 05:33 PM
- 0
Hackers earn $989,750 for 63 zero-days exploited at Pwn2Own Toronto

Pwn2Own Toronto 2022 has ended with competitors earning $989,750 for 63 zero-day exploits (and multiple bug collisions) targeting consumer products between December 6th and December 9th.
- Sergiu Gatlan
- December 10, 2022
- 03:02 AM
- 0
Antivirus and EDR solutions tricked into acting as data wipers

A security researcher has found a way to exploit the data deletion capabilities of widely used endpoint detection and response (EDR) and antivirus (AV) software from Microsoft, SentinelOne, TrendMicro, Avast, and AVG to turn them into data wipers.
- Bill Toulas
- December 09, 2022
- 12:00 PM
- 3
Google discovers Windows exploit framework used to deploy spyware

Google's Threat Analysis Group (TAG) has linked an exploit framework that targets now-patched vulnerabilities in the Chrome and Firefox web browsers and the Microsoft Defender security app to a Spanish software company.
- Sergiu Gatlan
- November 30, 2022
- 12:00 PM
- 2
Exploit released for actively abused ProxyNotShell Exchange bug

Proof-of-concept exploit code has been released online for two actively exploited and high-severity vulnerabilities in Microsoft Exchange, collectively known as ProxyNotShell.
- Sergiu Gatlan
- November 18, 2022
- 03:53 PM
- 0
Magento stores targeted in massive surge of TrojanOrders attacks

At least seven hacking groups are behind a massive surge in 'TrojanOrders' attacks targeting Magento 2 websites, exploiting a vulnerability that allows the threat actors to compromise vulnerable servers.
- Bill Toulas
- November 16, 2022
- 11:14 AM
- 0
Exploit released for critical VMware RCE vulnerability, patch now

Proof-of-concept exploit code is now available for a pre-authentication remote code execution (RCE) vulnerability allowing attackers to execute arbitrary code remotely with root privileges on unpatched Cloud Foundation and NSX Manager appliances.
- Sergiu Gatlan
- October 28, 2022
- 11:34 AM
- 1
Fortinet urges admins to patch bug with public exploit immediately

Fortinet urges customers to urgently patch their appliances against a critical authentication bypass FortiOS, FortiProxy, and FortiSwitchManager vulnerability exploited in attacks.
- Sergiu Gatlan
- October 15, 2022
- 11:05 AM
- 0
Exploit available for critical Fortinet auth bypass bug, patch now

Proof-of-concept exploit code is now available for a critical authentication bypass vulnerability affecting Fortinet's FortiOS, FortiProxy, and FortiSwitchManager appliances.
- Sergiu Gatlan
- October 13, 2022
- 02:10 PM
- 2
Fake Microsoft Exchange ProxyNotShell exploits for sale on GitHub

Scammers are impersonating security researchers to sell fake proof-of-concept ProxyNotShell exploits for newly discovered Microsoft Exchange zero-day vulnerabilities.
- Lawrence Abrams
- October 03, 2022
- 05:47 PM
- 0
New Microsoft Exchange zero-days actively exploited in attacks

Threat actors are exploiting yet-to-be-disclosed Microsoft Exchange zero-day bugs allowing for remote code execution, according to claims made by security researchers at Vietnamese cybersecurity outfit GTSC, who first spotted and reported the attacks.
- Sergiu Gatlan
- September 29, 2022
- 05:52 PM
- 5
New Royal Ransomware emerges in multi-million dollar attacks

A new ransomware operation named Royal is quickly ramping up, targeting corporations with ransom demands ranging from $250,000 to over $2 million.
- Lawrence Abrams
- September 29, 2022
- 10:32 AM
- 0
Windows 11 22H2 adds kernel exploit protection to security baseline

Microsoft has released the final version of security configuration baseline settings for Windows 11, version 22H2, downloadable today using the Microsoft Security Compliance Toolkit.
- Sergiu Gatlan
- September 20, 2022
- 05:20 PM
- 0