Vulnerabilities, zero-days and active exploitation.

CVE & Exploits · 2d ago

ShinyHunters Exploit Oracle PeopleSoft Flaw in New Campaign, Mandiant Warns

Security firm Mandiant has issued a warning that the ShinyHunters hacking group is actively exploiting a known…

CVE & Exploits · 2d ago

Apple Issues Emergency Update to Fix CoreGraphics Vulnerability Potentially Used in Targeted Attacks

Apple released a series of security updates on Tuesday that close a critical flaw in the CoreGraphics framework, a…

CVE & Exploits · 2d ago

Bitget Discloses $388 Million Heist Linked to Third‑Party Security Flaw

Cryptocurrency exchange Bitget confirmed on Monday that an attacker siphoned roughly $388 million by exploiting a…

CVE & Exploits · 3d ago

US and UK Issue Alerts Over Critical Citrix NetScaler Zero‑Day Flaws

Cybersecurity officials in the United States and the United Kingdom have issued urgent warnings about a series of…

CVE & Exploits · 3d ago

Forgotten Assumptions Fuel a Week of High-Profile Cyber Threats, From a $387 Million Crypto Heist to Malicious Placeholder Domains

A string of high‑impact cyber incidents dominated the security landscape this week, ranging from a…

CVE & Exploits · 3d ago

Kiteworks Recommends Immediate Server Shutdown After Detecting Advanced Forms Flaw

Kiteworks, a provider of secure content collaboration services, has issued an urgent advisory urging its customers to…

CVE & Exploits · 3d ago

Infostealer Trio Exploits Developer Workstations to Harvest Cloud Credentials

Security researchers have identified a growing trend in which sophisticated infostealer malware is being used as a…

CVE & Exploits · 3d ago

Citrix Releases Emergency Patches for Actively Exploited Zero‑Day Flaws

Citrix Systems announced today that it has issued emergency patches for two critical zero‑day vulnerabilities that are…

CVE & Exploits · 3d ago

Citrix Issues Emergency Fixes for Two Critical NetScaler Zero‑Day Flaws

Citrix Systems announced today that it has released security updates addressing two newly disclosed zero‑day…

CVE & Exploits · 3d ago

Kiteworks Issues Temporary Server Shutdown Advisory Amid Zero-Day Suspicions

Kiteworks, a provider of secure content collaboration services, instructed its clients to power down affected servers…

CVE & Exploits · 3d ago

CERT/CC Uncovers Chain of Flaws in ViewSonic vCast That Grant Unauthenticated Full Control

The CERT Coordination Center (CERT/CC) has disclosed a series of three linked vulnerabilities in ViewSonic's vCast…

CVE & Exploits · 3d ago

CISA Mandates Federal Patch for Critical Citrix NetScaler Flaws Within Days

The Cybersecurity and Infrastructure Security Agency (CISA) issued an urgent directive over the weekend requiring all…