Search: Security vulnerability exploitation

Cisco warns of ASA and FTD VPN flaw exploited to crash devices

… The vulnerability was also discovered during Cisco's internal security testing and independently reported to the company by security researcher Valerio Brussani. Cisco's advisory does not provide indicators of compromise associated with the ongoing exploitation. …

Aug 11, 2026 · Lawrence Abrams

CISA orders feds to patch actively exploited Oracle flaw by Saturday

… This vulnerability has no known previous exploitation and no public POC code exists," Defused noted . Internet security watchdog Shadowserver now tracks over 1,000 Internet-exposed Oracle EBS instances , more than half of them in the United States. …

Jul 16, 2026 · Sergiu Gatlan

Hackers now exploit critical Oracle E-Business flaw in attacks

… This vulnerability has no known previous exploitation and no public POC code exists," it warned . Internet security watchdog group Shadowserver now tracks over 450 Oracle EBS instances exposed online, with nearly 200 in the United States and in Europe. …

Jun 29, 2026 · Sergiu Gatlan

CISA: Microsoft SharePoint flaw now exploited in ransomware attacks

… In a subsequent advisory , the cybersecurity agency also urged security teams to monitor affected servers for signs of exploitation, apply Microsoft's latest patches, verify successful installation, and shorten patching cycles. …

Aug 11, 2026 · Sergiu Gatlan

Hackers exploit critical Adobe Commerce flaw to hijack customer accounts

… CVE-2026-48411 6.5, medium severity : Incorrect-authorization vulnerability that could enable a security-feature bypass. Exploitation requires authentication and administrator privileges. …

Aug 12, 2026 · Bill Toulas

Cisco warns of high-severity ClamAV flaws with public exploits

… Get the whitepaper Related Articles: vBulletin fixes critical pre-auth RCE flaw with public exploit Critical SharePoint RCE flaw exploited to steal machine keys HollowByte DDoS flaw bloats OpenSSL server memory with 11-byte payload FFmpeg fixes PixelSmash flaw in widely used video decoder F5 issues… …

Aug 11, 2026 · Sergiu Gatlan

CISA: Microsoft SharePoint RCE flaw now actively exploited

… Cybersecurity and Infrastructure Security Agency CISA warned on Wednesday that attackers have begun exploiting a high-severity Microsoft SharePoint remote code execution vulnerability. …

Jul 2, 2026 · Sergiu Gatlan

CISA: Splunk Enterprise flaw actively exploited, patch by Sunday

… "In June 2026, the Splunk Product Security Incident Response Team PSIRT became aware of limited exploitation of this vulnerability. Splunk strongly recommends that customers upgrade to a fixed software release to remediate this vulnerability," it said. …

Jun 19, 2026 · Sergiu Gatlan

CISA warns of another cPanel plugin flaw exploited in attacks

… Cybersecurity and Infrastructure Security Agency CISA has given U.S. government agencies three days to secure their servers against an actively exploited vulnerability CVE-2026-54420 in the LiteSpeed cPanel user-end plugin. …

Jun 16, 2026 · Sergiu Gatlan

CISA urges immediate action on actively exploited Fortinet flaws

… Two months later, the company addressed another security issue exploited in attacks: a path traversal vulnerability CVE-2025-61624 that can allow authenticated attackers to escalate privileges. …

Jul 17, 2026 · Sergiu Gatlan

Followed topics