Latest Exploit news

Over 80,000 exploitable Hikvision cameras exposed online

Security researchers have discovered over 80,000 Hikvision cameras vulnerable to a critical command injection flaw that's easily exploitable via specially crafted messages sent to the vulnerable web server.
- Bill Toulas
- August 22, 2022
- 05:48 PM
- 0
Hacker uses new RAT malware in Cuba Ransomware attacks

A member of the Cuba ransomware operation is employing previously unseen tactics, techniques, and procedures (TTPs), including a novel RAT (remote access trojan) and a new local privilege escalation tool.
- Bill Toulas
- August 10, 2022
- 02:04 PM
- 0
VMware warns of public exploit for critical auth bypass vulnerability

Proof-of-concept exploit code is now publicly available online for a critical authentication bypass security flaw in multiple VMware products that enables attackers to gain admin privileges.
- Sergiu Gatlan
- August 09, 2022
- 12:15 PM
- 0
Thousands of Solana wallets drained in attack using unknown exploit

An overnight attack on the Solana blockchain platform drained thousands of software wallets of cryptocurrency worth millions of U.S. dollars.
- Bill Toulas
- August 03, 2022
- 07:26 AM
- 0
Hackers scan for vulnerabilities within 15 minutes of disclosure

System administrators have even less time to patch disclosed security vulnerabilities than previously thought, as a new report shows threat actors scanning for vulnerable endpoints within 15 minutes of a new CVE being publicly disclosed.
- Bill Toulas
- July 26, 2022
- 03:44 PM
- 2
Zoho ManageEngine ADAudit Plus bug gets public RCE exploit

Security researchers have published technical details and proof-of-concept exploit code for CVE-2022-28219, a critical vulnerability in the Zoho ManageEngine ADAudit Plus tool for monitoring activities in the Active Directory.
- Ionut Ilascu
- July 01, 2022
- 03:45 PM
- 0
Microsoft June 2022 Patch Tuesday fixes 1 zero-day, 55 flaws

Today is Microsoft's June 2022 Patch Tuesday, and with it comes fixes for 55 vulnerabilities, including fixes for the Windows MSDT 'Follina' zero-day vulnerability and new Intel MMIO flaws.
- Lawrence Abrams
- June 14, 2022
- 01:45 PM
- 9
Metasploit 6.2.0 improves credential theft, SMB support features, more

Metasploit 6.2.0 has been released with 138 new modules, 148 new improvements/features, and 156 bug fixes since version 6.1.0 was released in August 2021.
- Lawrence Abrams
- June 13, 2022
- 02:15 PM
- 0
Confluence servers hacked to deploy AvosLocker, Cerber2021 ransomware

Ransomware gangs are now targeting a recently patched and actively exploited remote code execution (RCE) vulnerability affecting Atlassian Confluence Server and Data Center instances for initial access to corporate networks.
- Sergiu Gatlan
- June 11, 2022
- 10:31 AM
- 0
Android June 2022 updates bring fix for critical RCE vulnerability

Google has released the June 2022 security updates for Android devices running OS versions 10, 11, and 12, fixing 41 vulnerabilities, five rated critical.
- Bill Toulas
- June 07, 2022
- 09:14 AM
- 1
Exploit released for Atlassian Confluence RCE bug, patch now

Proof-of-concept exploits for the actively exploited critical CVE-2022-26134 vulnerability impacting Atlassian Confluence and Data Center servers have been widely released this weekend.
- Lawrence Abrams
- June 05, 2022
- 12:41 PM
- 0
Exploit released for critical VMware auth bypass bug, patch now

Proof-of-concept exploit code is now available online for a critical authentication bypass vulnerability in multiple VMware products that allows attackers to gain admin privileges.
- Sergiu Gatlan
- May 26, 2022
- 02:21 PM
- 0
Darknet market Versus shuts down after hacker leaks security flaw

The Versus Market, one of the most popular English-speaking criminal darknet markets, is shutting down after discovering a severe exploit that could have allowed access to its database and exposed the IP address of its servers.
- Bill Toulas
- May 25, 2022
- 11:54 AM
- 0
Researchers to release exploit for new VMware auth bypass, patch now

Proof-of-concept exploit code is about to be published for a vulnerability that allows administrative access without authentication in several VMware products.
- Ionut Ilascu
- May 24, 2022
- 10:16 AM
- 0
Fake Windows exploits target infosec community with Cobalt Strike

A threat actor targeted security researchers with fake Windows proof-of-concept exploits that infected devices with the Cobalt Strike backdoor.
- Lawrence Abrams
- May 23, 2022
- 04:12 PM
- 1
Zyxel fixes firewall flaws that could lead to hacked networks

Threat analysts who discovered a vulnerability affecting multiple Zyxel products report that the network equipment company fixed it via a silent update pushed out two weeks ago.
- Bill Toulas
- May 12, 2022
- 02:13 PM
- 0
Critical F5 BIG-IP vulnerability exploited to wipe devices

A recently disclosed F5 BIG-IP vulnerability has been used in destructive attacks, attempting to erase a device's file system and make the server unusable.
- Lawrence Abrams
- May 10, 2022
- 06:50 PM
- 0
Microsoft May 2022 Patch Tuesday fixes 3 zero-days, 75 flaws

Today is Microsoft's May 2022 Patch Tuesday, and with it comes fixes for three zero-day vulnerabilities, with one actively exploited, and a total of 75 flaws.
- Lawrence Abrams
- May 10, 2022
- 01:37 PM
- 2
Hackers exploiting critical F5 BIG-IP bug, public exploits released

Threat actors have started massively exploiting the critical vulnerability tracked as CVE-2022-1388, which affects multiple versions of all F5 BIG-IP modules, to drop malicious payloads.
- Ionut Ilascu
- May 09, 2022
- 11:20 AM
- 0
Exploits created for critical F5 BIG-IP flaw, install patch immediately

Security researchers are warning F5 BIG-IP admins to immediately install the latest security updates after creating exploits for a recently disclosed critical CVE-2022-1388 remote code execution vulnerability.
- Lawrence Abrams
- May 08, 2022
- 12:35 PM
- 0