#active


FBI Warns FortiBleed Remains Active After Amassing 86,644 Fortinet Device Credentials

Oct 7, 2026 // 15:04

The U.S. Federal Bureau of Investigation (FBI) and Secret Service (USSS) on Tuesday warned that the FortiBleed credential harvesting campaign remains an active threat aimed […]

Warning: Two Unpatched Citrix NetScaler RCE Zero-Days Under Active Exploitation

Sep 27, 2026 // 12:28

Two new unpatched zero-day vulnerabilities in Citrix NetScaler ADC and NetScaler Gateway appliances that allow remote code execution are being actively exploited in the wild, […]

GitHub Actions re-enabled with Mini Shai-Hulud payload still active

Sep 26, 2026 // 17:36

Two third-party GitHub Actions previously compromised in a Mini Shai-Hulud campaign were re-enabled by their maintainer and remained accessible for more than a week despite […]

Zyxel and Veeam Flaws Under Active Exploitation With Command and SYSTEM Access

Sep 22, 2026 // 13:14

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday added a now-patched security flaw impacting Zyxel GS1900 series switches to its Known Exploited Vulnerabilities […]

CISA alerts of active exploitation of three Linux kernel flaws

Sep 22, 2026 // 00:16

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) is warning that hackers are exploiting three Linux kernel vulnerabilities, one of them rated critical. The three […]

Active Exploitation Attempts Target WSO2 API Manager JWT Bypass With Forged Admin Tokens

Sep 16, 2026 // 11:41

A critical security flaw in WSO2 API Manager has come under active exploitation in the wild, according to findings from watchTowr. The vulnerability, tracked as […]

Critical macOS, SharePoint, vCenter, and Microsoft IKE Flaws Under Active Exploitation

Aug 19, 2026 // 14:11

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Tuesday added four critical vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog, stating they are being […]

Unpatched GeoServer Zero-Day Targeted in Active Exploitation Attempts, Can Lead to RCE

Aug 14, 2026 // 00:08

A newly disclosed zero-day flaw in GeoServer is seeing active exploitation efforts, per watchTowr. The vulnerability, which has yet to be assigned a CVE identifier, […]

Microsoft Patches 398 Flaws Including a Windows Driver Zero-Day Under Active Attack

Aug 11, 2026 // 23:50

Microsoft released its monthly security updates on Tuesday, and one of the flaws it closed is already being used in attacks. The bug sits in […]

CISA Flags TeamCity CVE-2026-63077 RCE Flaw Under Active Exploitation in the Wild

Aug 6, 2026 // 11:29

A newly patched security flaw impacting on-premise versions of JetBrains TeamCity has come under active exploitation in the wild, according to the U.S. Cybersecurity and […]

1 2 3 … 7 Next