exploited

Cisco Warns of Exploited Secure Email Gateway Vulnerability

Cisco, email security, exploited, Featured, Vulnerabilities, vulnerability /

Cisco Warns of Exploited Secure Email Gateway Vulnerability 2026-10-15 at 09:34 By Ionut Arghire Unauthenticated, remote attackers could write arbitrary files to the operating system and execute commands with root privileges. The post Cisco Warns of Exploited Secure Email Gateway Vulnerability appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Cisco Warns of Exploited Secure Email Gateway Vulnerability Read More »

Microsoft Patches Record 1,413 Vulnerabilities, Including Exploited Windows Zero-Day

exploited, Featured, Microsoft, MotW, Patch Tuesday, Vulnerabilities, Windows, Zero-Day /

Microsoft Patches Record 1,413 Vulnerabilities, Including Exploited Windows Zero-Day 2026-10-14 at 10:16 By Eduard Kovacs The most important is CVE-2026-96951, a security feature bypass flaw in Windows that has been exploited in the wild. The post Microsoft Patches Record 1,413 Vulnerabilities, Including Exploited Windows Zero-Day appeared first on SecurityWeek. This article is an excerpt from […]

Microsoft Patches Record 1,413 Vulnerabilities, Including Exploited Windows Zero-Day Read More »

Ivanti Zero-Day Chain Gave Attackers Root Access to Fully Patched VPN

exploited, Featured, Ivanti, Vulnerabilities, vulnerability, Zero-Day /

Ivanti Zero-Day Chain Gave Attackers Root Access to Fully Patched VPN 2026-10-13 at 21:43 By Eduard Kovacs CVE-2026-104935 affects Ivanti Connect Secure and it can be exploited for unauthenticated remote code execution with elevated privileges.  The post Ivanti Zero-Day Chain Gave Attackers Root Access to Fully Patched VPN appeared first on SecurityWeek. This article is […]

Ivanti Zero-Day Chain Gave Attackers Root Access to Fully Patched VPN Read More »

Bricksforge WordPress Plugin Vulnerability Exploited in the Wild

exploited, Vulnerabilities, vulnerability, WordPress /

Bricksforge WordPress Plugin Vulnerability Exploited in the Wild 2026-10-12 at 16:14 By Eduard Kovacs The vulnerability tracked as CVE-2026-85097 can allow threat actors to take control of the targeted WordPress websites. The post Bricksforge WordPress Plugin Vulnerability Exploited in the Wild appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Bricksforge WordPress Plugin Vulnerability Exploited in the Wild Read More »

Critical SonicWall Vulnerability Exploited Days After Disclosure

exploited, Featured, SonicWall, Vulnerabilities, vulnerability /

Critical SonicWall Vulnerability Exploited Days After Disclosure 2026-10-12 at 11:36 By Ionut Arghire CVE-2026-102255 is a pre-authenticated SSRF flaw that could allow attackers to perform unauthorized operations. The post Critical SonicWall Vulnerability Exploited Days After Disclosure appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Critical SonicWall Vulnerability Exploited Days After Disclosure Read More »

Attackers Target Critical Atlassian Vulnerability Within Hours of PoC Publication

Atlassian, exploited, Featured, Vulnerabilities, vulnerability /

Attackers Target Critical Atlassian Vulnerability Within Hours of PoC Publication 2026-10-08 at 17:04 By Eduard Kovacs Threat actors have started targeting CVE-2026-21589, a critical vulnerability in Atlassian’s self-hosted Data Center products. The post Attackers Target Critical Atlassian Vulnerability Within Hours of PoC Publication appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View […]

Attackers Target Critical Atlassian Vulnerability Within Hours of PoC Publication Read More »

Exploitation Hits Rejetto HFS Vulnerability Discovered by AI 

exploited, Rejetto, Vulnerabilities, vulnerability /

Exploitation Hits Rejetto HFS Vulnerability Discovered by AI  2026-10-05 at 14:00 By Ionut Arghire CVE-2026-61500 allows attackers to recover the session-cookie signing key and gain administrative access and RCE. The post Exploitation Hits Rejetto HFS Vulnerability Discovered by AI  appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Exploitation Hits Rejetto HFS Vulnerability Discovered by AI  Read More »

Exploitation of Citrix NetScaler Zero-Day Hits Appliances Patched Days Earlier

Citrix, exploited, Featured, NetScaler, Vulnerabilities, vulnerability, Zero-Day /

Exploitation of Citrix NetScaler Zero-Day Hits Appliances Patched Days Earlier 2026-10-05 at 08:14 By Eduard Kovacs Citrix has confirmed that a new zero-day vulnerability, CVE-2026-88779, emerged just days after two other exploited flaws were patched. The post Exploitation of Citrix NetScaler Zero-Day Hits Appliances Patched Days Earlier appeared first on SecurityWeek. This article is an […]

Exploitation of Citrix NetScaler Zero-Day Hits Appliances Patched Days Earlier Read More »

Warlock Expands SharePoint Exploitation in Critical Infrastructure Attacks

China, exploited, Malware & Threats, Ransomware, SharePoint, Vulnerabilities, Warlock /

Warlock Expands SharePoint Exploitation in Critical Infrastructure Attacks 2026-10-02 at 12:34 By Ionut Arghire The China-based hacking group has been exploiting SharePoint vulnerabilities since July 2025. The post Warlock Expands SharePoint Exploitation in Critical Infrastructure Attacks appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Warlock Expands SharePoint Exploitation in Critical Infrastructure Attacks Read More »

Exploited Fortinet FortiMail Zero-Day Calls for Urgent Action

exploited, Featured, FortiMail, Fortinet, Vulnerabilities, Zero-Day /

Exploited Fortinet FortiMail Zero-Day Calls for Urgent Action 2026-10-02 at 11:07 By Ionut Arghire CVE-2026-104286 is a critical-severity path traversal vulnerability that could allow attackers to write arbitrary files to the system. The post Exploited Fortinet FortiMail Zero-Day Calls for Urgent Action appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original […]

Exploited Fortinet FortiMail Zero-Day Calls for Urgent Action Read More »

Zimbra Vulnerability Exploited in the Wild Prior to Public Disclosure

exploited, Vulnerabilities, vulnerability, Zimbra /

Zimbra Vulnerability Exploited in the Wild Prior to Public Disclosure 2026-10-01 at 15:55 By Ionut Arghire Under certain conditions, CVE-2026-73570 can be exploited via specially crafted emails without user interaction. The post Zimbra Vulnerability Exploited in the Wild Prior to Public Disclosure appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original […]

Zimbra Vulnerability Exploited in the Wild Prior to Public Disclosure Read More »

Zammad Zero-Days Exploited in AI-Powered DIVD Hack

AI, Artificial Intelligence, DIVD, exploited, Incident Response, Vulnerabilities, Zammad, Zero-Day /

Zammad Zero-Days Exploited in AI-Powered DIVD Hack 2026-10-01 at 13:42 By Ionut Arghire The flaws were chained to hijack sessions, achieve remote code execution, and elevate privileges to root. The post Zammad Zero-Days Exploited in AI-Powered DIVD Hack appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Zammad Zero-Days Exploited in AI-Powered DIVD Hack Read More »

Cisco Patches Exploited Catalyst SD-WAN Zero-Day Vulnerability

Cisco, exploited, SD-WAN, Vulnerabilities, Zero-Day /

Cisco Patches Exploited Catalyst SD-WAN Zero-Day Vulnerability 2026-10-01 at 11:26 By Ionut Arghire The flaw could allow remote, unauthenticated attackers to access vulnerable appliances with administrative privileges. The post Cisco Patches Exploited Catalyst SD-WAN Zero-Day Vulnerability appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Cisco Patches Exploited Catalyst SD-WAN Zero-Day Vulnerability Read More »

Government, Finance Orgs Targeted in Weeks-Long NetScaler Zero-Day Attacks

Citrix, exploited, NetScaler, Vulnerabilities, vulnerability, Zero-Day /

Government, Finance Orgs Targeted in Weeks-Long NetScaler Zero-Day Attacks 2026-09-30 at 15:48 By Eduard Kovacs Several security firms have confirmed seeing exploitation of the NetScaler vulnerabilities CVE-2026-88771 and CVE-2026-88772. The post Government, Finance Orgs Targeted in Weeks-Long NetScaler Zero-Day Attacks appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Government, Finance Orgs Targeted in Weeks-Long NetScaler Zero-Day Attacks Read More »

Apple Patches Meta-Reported Zero-Day Linked to ‘Extremely Sophisticated Attack’ 

apple, exploited, Featured, iOS, macOS, Meta, Mobile & Wireless, Vulnerabilities, Zero-Day /

Apple Patches Meta-Reported Zero-Day Linked to ‘Extremely Sophisticated Attack’  2026-09-29 at 09:18 By Eduard Kovacs Apple has released iOS and macOS updates to patch the zero-day vulnerability tracked as CVE-2026-86950. The post Apple Patches Meta-Reported Zero-Day Linked to ‘Extremely Sophisticated Attack’  appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Apple Patches Meta-Reported Zero-Day Linked to ‘Extremely Sophisticated Attack’  Read More »

Citrix Confirms 2 NetScaler Zero-Days After Admins Pulled the Plug

Citrix, exploited, Featured, NetScaler, Vulnerabilities, vulnerability, Zero-Day /

Citrix Confirms 2 NetScaler Zero-Days After Admins Pulled the Plug 2026-09-28 at 10:29 By Eduard Kovacs Citrix has released patches for the critical NetScaler vulnerabilities tracked as CVE-2026-88771 and CVE-2026-88772. The post Citrix Confirms 2 NetScaler Zero-Days After Admins Pulled the Plug appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original […]

Citrix Confirms 2 NetScaler Zero-Days After Admins Pulled the Plug Read More »

Microsoft SharePoint Flaw CVE-2026-65660 Now Exploited in Attacks

exploited, Featured, SharePoint, Vulnerabilities, vulnerability /

Microsoft SharePoint Flaw CVE-2026-65660 Now Exploited in Attacks 2026-09-27 at 12:23 By Eduard Kovacs CISA added CVE-2026-65660 to its KEV catalog, giving federal agencies a patching deadline of September 28. The post Microsoft SharePoint Flaw CVE-2026-65660 Now Exploited in Attacks appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Microsoft SharePoint Flaw CVE-2026-65660 Now Exploited in Attacks Read More »

Roundcube Webmail Vulnerability in Attackers’ Crosshairs

email security, exploited, Featured, Roundcube, Vulnerabilities, vulnerability /

Roundcube Webmail Vulnerability in Attackers’ Crosshairs 2026-09-25 at 09:57 By Ionut Arghire Tracked as CVE-2026-48842, the exploited bug is an SQL injection that can be exploited without authentication. The post Roundcube Webmail Vulnerability in Attackers’ Crosshairs appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Roundcube Webmail Vulnerability in Attackers’ Crosshairs Read More »

Critical WordPress Vulnerability Exploited Immediately After Disclosure

exploited, Featured, Vulnerabilities, vulnerability, WordPress /

Critical WordPress Vulnerability Exploited Immediately After Disclosure 2026-09-24 at 10:12 By Ionut Arghire Tracked as CVE-2026-87902, the path traversal flaw allows remote, unauthenticated attackers to execute arbitrary code. The post Critical WordPress Vulnerability Exploited Immediately After Disclosure appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Critical WordPress Vulnerability Exploited Immediately After Disclosure Read More »

Arista Urges Immediate Patching of Exploited VCO Zero-Day

Arista, CISA KEV, exploited, Vulnerabilities, vulnerability, Zero-Day /

Arista Urges Immediate Patching of Exploited VCO Zero-Day 2026-09-23 at 11:33 By Ionut Arghire Remote attackers could trigger the critical-severity flaw to access privileged internal functionality. The post Arista Urges Immediate Patching of Exploited VCO Zero-Day appeared first on SecurityWeek. This article is an excerpt from SecurityWeek View Original Source

Arista Urges Immediate Patching of Exploited VCO Zero-Day Read More »

Scroll to Top