Thirteen-year-old Apache ActiveMQ RCE vulnerability targeted in new reconnaissance campaign
A long-dormant remote code execution vulnerability in a core enterprise message broker has been identified and is currently being probed […]
React2Shell campaign achieves industrial scale with NEXUS Listener command center
A large-scale automated campaign is currently exploiting a critical pre-authentication RCE in Next.js applications to siphon credentials from cloud-native environments.
React2Shell campaign achieves industrial scale with NEXUS Listener command center Read More »
Sophisticated Adobe Reader zero-day exploit identified after months of active use
A highly sophisticated zero-day vulnerability in the world most popular PDF reader has been active in the wild since late
Sophisticated Adobe Reader zero-day exploit identified after months of active use Read More »
CISA adds Ivanti EPMM code injection flaw to KEV following active exploitation
Your mobile device management infrastructure is being targeted to achieve unauthenticated remote code execution. This vulnerability provides a direct path
CISA adds Ivanti EPMM code injection flaw to KEV following active exploitation Read More »
Thirteen-year-old Apache ActiveMQ bug weaponized in new ransomware campaigns
A critical remote code execution flaw in a legacy message broker is being actively exploited to deploy botnets and ransomware
Thirteen-year-old Apache ActiveMQ bug weaponized in new ransomware campaigns Read More »
Threat actors weaponize Langflow AI framework RCE for automated data hijacking
A critical code injection flaw in a popular AI orchestration framework is being actively exploited to hijack agent workflows and
Threat actors weaponize Langflow AI framework RCE for automated data hijacking Read More »
Confirmed exploitation of Citrix NetScaler memory disclosure flaw surging globally
Attackers are industrializing the exploitation of a memory overread flaw to hijack enterprise sessions and bypass multi-factor authentication. This vulnerability
Confirmed exploitation of Citrix NetScaler memory disclosure flaw surging globally Read More »
Russian Forest Blizzard APT hijacks 18,000 routers to siphon Microsoft Office tokens
State-sponsored threat actors are bypassing endpoint security by compromising legacy network hardware to intercept authentication tokens from cloud services. This
Russian Forest Blizzard APT hijacks 18,000 routers to siphon Microsoft Office tokens Read More »
CISA adds critical Fortinet FortiClient EMS zero-day to KEV following mass exploitation
Your endpoint management infrastructure is currently being weaponized to execute unauthorized commands via a critical API authentication bypass. This vulnerability
CISA adds critical Fortinet FortiClient EMS zero-day to KEV following mass exploitation Read More »
BlueHammer Windows zero-day exploit leaked following private report dispute
A potent privilege escalation exploit for an unpatched Windows flaw has been released publicly‚ providing attackers with a reliable path
BlueHammer Windows zero-day exploit leaked following private report dispute Read More »
