#ongoing


Over 1,000 GitLab servers vulnerable to ongoing RCE attacks

Nov 2, 2026 // 15:56

Over 1,000 Internet-exposed GitLab servers are still unpatched against a maximum-severity flaw actively exploited in remote code execution attacks. Tracked as CVE-2026-97229, this vulnerability stems […]

DreamHost forces password resets in ongoing “incident”

Oct 27, 2026 // 00:17

DreamHost has forced password resets for email and FTP/SFTP users following an incident that disrupted connections to the File Manager interface. The latest update from […]

FBI: Ongoing FortiBleed attacks lock out FortiGate VPN admins

Oct 8, 2026 // 00:36

The FBI is warning that FortiBleed attacks are still ongoing, targeting exposed Fortinet FortiGate firewalls and SSL VPN gateways and locking out legitimate administrators. Hackers […]

N-able patches max severity N-central flaw amid ongoing attacks

Sep 7, 2026 // 11:37

N-able has released an emergency hotfix for a maximum-severity remote code execution (RCE) flaw affecting its N-central remote monitoring and management (RMM) platform. IT departments […]

Hackers breached over 270 Zimbra servers in ongoing attacks

Aug 25, 2026 // 15:16

Threat actors have already compromised over 270 Zimbra instances in remote code execution attacks targeting a high-severity Zimbra Collaboration Suite (ZCS) vulnerability. The ZCS email […]

Over 900 Oracle E-Business instances exposed to ongoing attacks

Jul 1, 2026 // 15:36

Over 900 Oracle E-Business Suite (EBS) instances have been found exposed online amid ongoing attacks exploiting a critical security flaw. The vulnerability (tracked as CVE-2026-46817) […]

Over 10,000 Zimbra servers vulnerable to ongoing XSS attacks

Apr 24, 2026 // 16:37

Over 10,000 Zimbra Collaboration Suite (ZCS) instances exposed online are vulnerable to ongoing attacks exploiting a cross-site scripting (XSS) security flaw, according to nonprofit security organization Shadowserver. […]

Bitwarden CLI Compromised in Ongoing Checkmarx Supply Chain Campaign

Apr 23, 2026 // 16:49

Bitwarden CLI has been compromised as part of the newly discovered and ongoing Checkmarx supply chain campaign, according to new findings from Socket. “The affected […]