#exploited


BeyondTrust patches zero-day exploited in attacks since August

Oct 16, 2026 // 11:57

BeyondTrust warned customers on Thursday to patch a critical flaw in its Remote Support (RS) that has been exploited in zero-day attacks since late August. […]

Palo Alto Networks warns of PAN-OS RCE flaw exploited in attacks

Oct 15, 2026 // 12:37

Palo Alto Networks has released security updates for a high-severity PAN-OS RCE zero-day, tracked as CVE-2026-0322, that has been exploited in attacks targeting firewalls. The […]

Cisco patches new Secure Email Gateway zero-day exploited in attacks

Oct 14, 2026 // 20:38

Cisco has patched another actively exploited zero-day flaw in its Secure Email Gateway (SEG) that lets remote unauthenticated attackers execute commands with root privileges. Tracked […]

CISA warns admins to immediately fix Ivanti flaw exploited as zero-day

Oct 14, 2026 // 16:37

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) urged security teams to immediately patch an Ivanti Connect Secure (ICS) flaw exploited in zero-day attacks since […]

Ivanti warns of Connect Secure zero-day exploited in attacks

Oct 13, 2026 // 18:57

Ivanti urged customers on Tuesday to immediately patch an actively exploited zero-day vulnerability in the Ivanti Connect Secure (ICS) remote access gateway. Formerly known as […]

Unpatched AhsayCBS flaws exploited to deploy webshells, mine crypto

Oct 9, 2026 // 20:37

Threat actors are exploiting one critical and one medium-severity vulnerability still unpatched in the AhsayCBS backup management platform to deploy webshells and cryptocurrency miners. AhsayCBS […]

Max severity SonicWall SMA1000 flaw now exploited in attacks

Oct 9, 2026 // 15:36

Attackers are exploiting a maximum-severity vulnerability in SonicWall SMA1000 appliances (CVE-2026-102255) that was patched on Tuesday, three days ago. Tracked as CVE-2026-102255, the flaw affects […]

Ninja Forms plugin flaw exploited to hack WordPress sites

Oct 7, 2026 // 12:36

Hackers are exploiting stored cross-site scripting (XSS) vulnerabilities in two unrelated WordPress plugins, Ninja Forms and WPC Product Bundles for WooCommerce, to install backdoors and […]

New NetScaler Zero-Day Exploited in Targeted Attacks Can Knock SAML Deployments Offline

Oct 5, 2026 // 12:35

Citrix has released security updates for a high-severity security flaw in NetScaler ADC and Citrix NetScaler Gateway that has been exploited as part of targeted […]

Citrix patches NetScaler SAML zero-day exploited in attacks

Oct 5, 2026 // 01:16

Citrix has released emergency updates for a new NetScaler denial-of-service vulnerability tracked as CVE-2026-88779 that has been exploited in zero-day attacks, with researchers investigating whether […]

1 2 3 … 24 Next