…appears to have originated from Fortinet configuration files. However, the source of the data remains unknown, and it is unclear whether it was stolen through exploitation of previously disclosed Fortinet vulnerabilities, a…
New Certighost PoC exploit lets attackers hijack Windows domains By Lawrence Abrams July 27, 2026 05:00 PM A proof-of-concept exploit for “Certighost,” a Windows Active Directory Certificate Services vulnerability…
…Hackers exploit critical flaw in Ninja Forms WordPress plugin Avada Builder WordPress plugin flaws allow site credential theft Hackers exploit auth bypass flaw in Burst Statistics WordPress plugin Hackers exploit file upload…
…server running Alibaba Nacos (Naming and Configuration Service), using root credentials whose origin Sysdig couldn’t determine. Nacos was targeted with multiple payloads, including one exploiting CVE-2021-29441, an authentication bypass…
…The backdoor establishes persistence through multiple methods, including a LaunchAgent, crontab entries, and modifications to shell configuration files. It connects through a GSocket relay, allowing the attacker to open a reverse shell…
SonicWall SMA1000 flaws exploited as zero-days to push custom malware By Lawrence Abrams July 20, 2026 06:23 PM Two recently disclosed SonicWall SMA1000 vulnerabilities were exploited in zero-day attacks…
…System and process reconnaissance File upload, download, deletion, and archive-based exfiltration Hidden command execution Remote process termination In-memory DLL injection Configuration and beacon timing changes Check Point also reported observing…
…rules fire, or your cloud configs hold. This guide covers the 6 surfaces you actually need to validate. Download Now Related Articles: Google fixes one actively exploited Android zero-day, 124 flaws…
…Neither workflow is exploitable alone. The vulnerability exists because of how they connect, which is exactly why the scanners stay green: a SAST or DAST tool pattern-matches a single file, and…
…unauthorized changes to targeted systems by exploiting an Improper Access Control weakness in UniFi OS, while the second ( CVE-2026-34909 ) allows them to access files on the underlying system by abusing…