Search: Security vulnerability exploitation

Max severity Ivanti Sentry vulnerability now exploited in attacks

…has yet to update the security advisory issued on Tuesday, which still states that "We are not aware of any customers being exploited by these vulnerabilities at the time of disclosure." An…

Jun 11, 2026 · Sergiu Gatlan

CISA: Windows BlueHammer flaw now exploited by ransomware gangs

…Will Dormann, principal vulnerability analyst at Tharros, told BleepingComputer in April that while the issue is not easy to exploit, it gives local attackers access to the Security Account Manager (SAM) database…

Jun 30, 2026 · Sergiu Gatlan

CISA warns of active attacks exploiting Android, Linux bugs

…Cybersecurity and Infrastructure Security Agency (CISA) is warning that hackers are exploiting vulnerabilities in the Linux kernel and Android operating system. The most recent flaw the agency added to its Known Exploited…

Jun 3, 2026 · Bill Toulas

Max severity Adobe ColdFusion flaw now exploited in attacks

…Adobe released security updates on Tuesday to address the vulnerability, saying that it posed a high risk of exploitation and urging admins to deploy patches immediately. "This update resolves vulnerabilities being targeted…

Jul 6, 2026 · Sergiu Gatlan

CISA warns of hackers exploiting Langflow, N-central, Apache Tomcat flaws

…The topics he writes about include malware, vulnerabilities, exploits and security defenses, as well as research and innovation in information security. His work has been published by Bitdefender, Netgear, The Security Ledger…

Aug 5, 2026 · Ionut Ilascu

CISA orders urgent action on actively exploited Langflow RCE flaw

…government agencies to prioritize patching an actively exploited vulnerability in the Langflow visual framework for building AI agents. Tracked as CVE-2026-0770 , this critical security flaw allows unauthenticated threat actors to…

Jul 22, 2026 · Sergiu Gatlan

Critical SharePoint RCE flaw exploited to steal machine keys

…Offensive security company watchTowr has observed that hackers started to leverage CVE-2026-50522 against on-premise vulnerable SharePoint deployments, immediately after a valid proof-of-concept (PoC) exploit became public. “On…

Jul 21, 2026 · Bill Toulas

Critical Progress LoadMaster flaw now actively exploited in attacks

…Cybersecurity and Infrastructure Security Agency (CISA) warned that hackers are exploiting a critical-severity Progress Kemp LoadMaster command injection vulnerability. Kemp LoadMaster is a very popular Application Delivery Controller (ADC) and server…

Aug 10, 2026 · Sergiu Gatlan

Ivanti: Max severity Sentry flaw allows code execution as root

…severity vulnerability stems from an OS command injection weakness. The second Sentry security flaw patched on Tuesday (tracked as CVE-2026-10523 ) is a critical authentication bypass that can be exploited remotely…

Jun 10, 2026 · Sergiu Gatlan

CISA: Windows Task Host flaw now exploited by ransomware gangs

…Cybersecurity and Infrastructure Security Agency (CISA) has confirmed that ransomware gangs are also exploiting a high-severity Windows Task Host vulnerability that was flagged as actively exploited in April. Task Host is…

Aug 18, 2026 · Sergiu Gatlan

Followed topics