A critical remote code execution vulnerability has been identified in a legacy management component of Apache ActiveMQ Classic. Automated scanning
Decade-old Apache ActiveMQ RCE vulnerability targeted in mass scanning campaign Read More »
A sophisticated zero-day vulnerability in @[Adobe](urn:li:organization:1480) Reader is being weaponized in a targeted campaign that has remained active and undetected
Adobe Reader zero-day exploit used in targeted energy sector espionage since 2025 Read More »
Organizations have until the end of today to remediate a critical code injection vulnerability in a leading mobile management platform
Remediation deadline today for Ivanti EPMM code injection vulnerability in KEV Read More »
A sophisticated zero-day vulnerability in @[Adobe](urn:li:organization:1480) Reader is being leveraged in a targeted campaign that has remained undetected since at
Adobe Reader zero-day exploit used in months-long campaign targeting energy sector Read More »
A critical supply chain compromise has impacted the distribution infrastructure of the CPUID project. Attackers gained unauthorized access to an
Supply chain attack at CPUID pushes malware via poisoned CPU-Z installers Read More »
A critical code injection vulnerability in a leading mobile management platform is being actively exploited to establish unauthenticated remote access.
CISA mandates remediation for Ivanti EPMM code injection vulnerability exploited in wild Read More »
A long-dormant remote code execution vulnerability in a core enterprise message broker has been identified and is currently being probed
A large-scale automated campaign is currently exploiting a critical pre-authentication RCE in Next.js applications to siphon credentials from cloud-native environments.
React2Shell campaign achieves industrial scale with NEXUS Listener command center Read More »
A highly sophisticated zero-day vulnerability in the world most popular PDF reader has been active in the wild since late
Sophisticated Adobe Reader zero-day exploit identified after months of active use Read More »
Your mobile device management infrastructure is being targeted to achieve unauthenticated remote code execution. This vulnerability provides a direct path
CISA adds Ivanti EPMM code injection flaw to KEV following active exploitation Read More »
