Tag: exploit
-
Over 440,000 Exploit Attempts Target Super Forms and Elementor Pro RCE Flaws
Threat actors are exploiting two critical security flaws in WordPress plugins Super Forms and Elementor Pro, according to findings from Wordfence.The vulnerabilities in question are – CVE-2026-14894 (CVSS score: 9.8) – A missing file type validation vulnerability in Super Forms Drag & Drop Form Builder that allows unauthenticated attackers to upload files of any type,…
-
Ein falscher Klick reicht: Schadcode-Attacken auf Chrome-Nutzer beobachtet
Google hat Patches für hochgefährliche Chrome-Lücken veröffentlicht. Eine davon wird bereits aktiv ausgenutzt. Anwender sollten zügig updaten. First seen on golem.de Jump to article: www.golem.de/news/ein-falscher-klick-reicht-schadcode-attacken-auf-chrome-nutzer-beobachtet-2609-212654.html
-
Ein falscher Klick reicht: Schadcode-Attacken auf Chrome-Nutzer beobachtet
Google hat Patches für hochgefährliche Chrome-Lücken veröffentlicht. Eine davon wird bereits aktiv ausgenutzt. Anwender sollten zügig updaten. First seen on golem.de Jump to article: www.golem.de/news/ein-falscher-klick-reicht-schadcode-attacken-auf-chrome-nutzer-beobachtet-2609-212654.html
-
Google Releases Chrome Update to Patch Actively Exploited V8 Zero-Day
Google on Thursday released security updates to patch 12 vulnerabilities, including one that has come under active exploitation in the wild.The high-severity vulnerability, tracked as CVE-2026-85046 (CVSS score: 8.8), has been described as a type confusion bug in V8, Chrome’s JavaScript and WebAssembly engine.”Type confusion in V8 in Google Chrome prior to 152.0.7977.82 allowed a…
-
GPT-6 Astra Scores 100% on ExploitBench as OpenAI Blocks PoC Exploit Requests
OpenAI on Thursday officially unveiled GPT”‘6 Astra, which it described as the “world’s most intelligent and aligned model.”The development comes days after the artificial intelligence (AI) company said the model had reached the “Critical” cybersecurity capability threshold under its Preparedness Framework.”Astra is state-of-the-art on computer use, browsing, software engineering, First seen on thehackernews.com Jump to…
-
Google Chrome V8 Flaw Actively Exploited in the Wild, Update Released
Google has released an urgent update for Chrome Stable to address CVE-2026-85046, a high-severity type confusion vulnerability in the V8 JavaScript and WebAssembly engine that is actively being exploited. This flaw can allow remote attackers to execute code within Chrome’s sandbox by convincing a victim to open a specially crafted HTML page. The security update…
-
OpenAI GPT-6 Astra Discovers Zero-Day Flaws and Builds Working Exploits in Cyber Tests
OpenAI has introduced GPT-6 Astra, a groundbreaking model that has reportedly achieved perfect results on ExploitBench and demonstrated improved controls during cybersecurity testing. This announcement positions Astra as a significant advancement in authorized security research, in which models must analyze unfamiliar software vulnerabilities, generate reliable proof-of-concept code, and operate within the parameters of a controlled…
-
Attackers exploit zero-days in consistently besieged SonicWall product
SonicWall customers have confronted a barrage of attacks for years, including five actively exploited vulnerabilities in SMA 1000 appliances since late 2025. First seen on cyberscoop.com Jump to article: cyberscoop.com/sonicwall-sma1000-zero-days-actively-exploited/
-
OpenAI Launches GPT-6 Astra With Tighter Cyber Safeguards
New Model Can Develop Zero-Day Exploits But Adds More Human Oversight. OpenAI released what it calls its most intelligent and aligned model, GPT-6 Astra, its newest model after it paused some reinforcement training to align its safety and risk processes following agents attacking Hugging Face. First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/openai-launches-gpt-6-astra-tighter-cyber-safeguards-a-32745
-
Sangoma Switchvox Flaw Under Attack: 4,000 VoIP Systems Exposed
Hackers are exploiting a critical Sangoma Switchvox flaw that enables unauthenticated remote code execution. Admins should patch and check for compromise. First seen on esecurityplanet.com Jump to article: www.esecurityplanet.com/threats/news-sangoma-switchvox-cve-2026-9586-rce/
-
Sangoma Switchvox Flaw Under Attack: 4,000 VoIP Systems Exposed
Hackers are exploiting a critical Sangoma Switchvox flaw that enables unauthenticated remote code execution. Admins should patch and check for compromise. First seen on esecurityplanet.com Jump to article: www.esecurityplanet.com/threats/news-sangoma-switchvox-cve-2026-9586-rce/
-
BTS #81 Infratrust Pulse, AI’s Role in Security
In this episode of Below the Surface, host Paul Asadoorian is joined by Eclypsium’s Vlad Babkin for a wide-ranging discussion on the latest infrastructure security risks, beginning with the August InfraTrust Pulse and expanding into management plane exploitation, BMC persistence,… First seen on securityboulevard.com Jump to article: securityboulevard.com/2026/09/bts-81-infratrust-pulse-ais-role-in-security/
-
SonicWall SMA1000 Zero-Days Under Active Attack: Patch Now
SonicWall says attackers are actively exploiting two SMA1000 vulnerabilities that can be chained for unauthenticated remote code execution. First seen on esecurityplanet.com Jump to article: www.esecurityplanet.com/news/news-sonicwall-sma1000-zero-days-active-attack/
-
Pegasus Zero-Click Exploit Infects Serbian Student Activist’s iPhone
Pegasus infected a Serbian student activist’s iPhone through an iMessage zero-click exploit First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/pegasus-zero-click-exploit/
-
Critical Elementor Pro flaw exploited to take over WordPress sites
A recently patched critical vulnerability (CVE-2026-32475) in the Elementor Pro plugin for WordPress is being exploited in attacks that deliver a webshell payload and execute arbitrary commands on the server. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/critical-elementor-pro-flaw-exploited-to-take-over-wordpress-sites/
-
Chaotic Eclipse Releases Crowdstrike Falcon ZeroDay FalconFlank
Chaotic Eclipse released FalconFlank, a PoC exploit for a Crowdstrike Falcon ZeroDay Elevation of Privileges Vulnerability Security researcher Chaotic Eclipse, also known as INFINITE NIGHTMARE, MSNightmare and Nightmare-Eclipse, released a new zero-day exploit targeting Crowdstrike Falcon cybersecurity platform. The researcher named the exploit FalconFlank, it triggers a privilege escalation flaw. According to the researcher, FalconFlank abuses…
-
Pegasus Zero-Click Spyware Exploit Infects Serbian Student Movement Member’s iPhone
The iPhone belonging to a member of Serbia’s student protest movement was infected with NSO Group’s Pegasus spyware, according to new findings from the Citizen Lab in collaboration with the SHARE Foundation.”Our analysis confirmed that an iMessage zero-click exploit was used to infect the device with NSO Group’s Pegasus spyware,” the Citizen Lab said. “We…
-
Sangoma Switchvox RCE Flaw Actively Exploited in Wild via Unauthenticated SQL Injection
Tags: cve, cyber, data-breach, exploit, flaw, injection, Internet, rce, remote-code-execution, sql, voip, vulnerabilitySecurity researchers have reported active exploitation attempts targeting a critical vulnerability in Sangoma Switchvox, allowing unauthenticated attackers to execute code remotely via SQL injection. This vulnerability, tracked as CVE-2026-9586, affects internet-exposed Switchvox enterprise VoIP systems and was addressed in Switchvox version 8.4.0.2. Sangoma Switchvox RCE Flaw Zach Hanley, a researcher at Horizon3.ai, revealed that this…
-
WordPress Plugin Flaw Lets Attackers Turn SQL Injection Into Complete Site Takeover
Tags: backup, cve, cyber, exploit, flaw, injection, remote-code-execution, sql, vulnerability, wordpressA high-severity vulnerability affecting over 5 million active WordPress installations could allow unauthenticated attackers to exploit stored SQL injection vulnerabilities, leading to remote code execution and complete website takeover. This issue, tracked as CVE-2026-19949, impacts the widely used All-in-One WP Migration and Backup plugin developed by ServMask. Wordfence has rated the vulnerability 8.8 out of…
-
CISA Warns SonicWall SMA1000 Flaws Are Actively Exploited in Attacks
Tags: access, attack, cisa, cve, cyber, cybersecurity, exploit, flaw, infrastructure, kev, mobile, vulnerabilityThe U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added two vulnerabilities affecting SonicWall SMA1000 appliances to its Known Exploited Vulnerabilities (KEV) Catalog, warning that these flaws are actively being exploited in real-world attacks. The vulnerabilities, identified as CVE-2026-83548 and CVE-2026-83549, affect SonicWall’s Secure Mobile Access (SMA1000) remote-access appliances. CISA Warns SonicWall SMA1000 Flaws CISA…
-
CISA Warns SonicWall SMA1000 Flaws Are Actively Exploited in Attacks
Tags: access, attack, cisa, cve, cyber, cybersecurity, exploit, flaw, infrastructure, kev, mobile, vulnerabilityThe U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added two vulnerabilities affecting SonicWall SMA1000 appliances to its Known Exploited Vulnerabilities (KEV) Catalog, warning that these flaws are actively being exploited in real-world attacks. The vulnerabilities, identified as CVE-2026-83548 and CVE-2026-83549, affect SonicWall’s Secure Mobile Access (SMA1000) remote-access appliances. CISA Warns SonicWall SMA1000 Flaws CISA…
-
CISA Adds Seven Exploited Flaws as Attackers Deploy Reverse Shells and Crypto Miners
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Wednesday added seven security flaws to its Known Exploited Vulnerabilities (KEV) catalog after they landed in attackers’ crosshairs.The vulnerabilities are as follows – CVE-2026-83548 (CVSS score: 10.0) – A server-side request forgery vulnerability in SonicWall SMA 1000 Appliances that could allow a remote unauthenticated First seen…
-
DOJ Investigates Cyberattack Targeting Hundreds of Thousands of X Users
A cyberattack on X users that targeted hundreds of thousands of accounts has prompted an investigation by the US Department of Justice (DOJ), with Attorney General Todd Blanche saying sophisticated cybercriminals attempted to exploit the platform’s password-recovery system. First seen on thecyberexpress.com Jump to article: thecyberexpress.com/cyberattack-on-x-users-doj-investigation/
-
Critical SQL injection vulnerability in Sangoma Switchvox exploited in the wild
First seen on scworld.com Jump to article: www.scworld.com/brief/critical-sql-injection-vulnerability-in-sangoma-switchvox-exploited-in-the-wild
-
OpenAI Astra Brings Autonomous Zero-Day Exploitation to AI
OpenAI says Astra can autonomously find zero-days and build exploits, marking its first model to reach the “Critical” cyber risk level. Astra is now officially OpenAI’s highest-risk cybersecurity model. In August, OpenAI said it “couldn’t rule out” that its upcoming model had reached the highest cybersecurity risk level in its Preparedness Framework. In a new…
-
SonicWall SMA 1000 Zero-Days Enable Unauthenticated RCE
The exploitation activity follows attacks earlier this summer on two other zero-day vulnerabilities in the vendor’s edge devices. First seen on darkreading.com Jump to article: www.darkreading.com/vulnerabilities-threats/sonicwall-sma-1000-zero-days-unauthenticated-rce
-
Hackers exploit Sangoma Switchvox flaw to deploy reverse shells
Attackers are actively exploiting CVE-2026-9586, an unauthenticated SQL injection vulnerability in the Sangoma Switchvox VoIP platform that can lead to remote code execution. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/hackers-exploit-sangoma-switchvox-flaw-to-deploy-reverse-shells/
-
Global Public-Private Action Disrupts Russia-Linked Sality Botnet
US, European Law Enforcement, Cyber Firms Target Two-Decade-Old P2P Malware Network. U.S. and European authorities, CrowdStrike and Shadowserver disrupted the Russia-linked Sality botnet by exploiting its trusted-peer protocol to isolate roughly 15,000 infected machines and sever a malware network that had operated since 2003. First seen on govinfosecurity.com Jump to article: www.govinfosecurity.com/global-public-private-action-disrupts-russia-linked-sality-botnet-a-32732
-
Hackers exploit critical JFrog Artifactory flaw to forge admin tokens
A critical authentication bypass vulnerability (CVE-2026-82329) in JFrog Artifactory is being exploited in attacks to create tokens that provide administrative access. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/hackers-exploit-critical-jfrog-artifactory-flaw-to-forge-admin-tokens/
-
PaperCut Zero-Day Exploitation Escalates to Active Intrusions
Enterprise print management systems are often treated as routine infrastructure, but attackers continue to demonstrate that any connected application can become an entry point into a corporate environment. According to SecurityWeek report, threat actors are actively exploiting two recently disclosed… First seen on securityboulevard.com Jump to article: securityboulevard.com/2026/09/papercut-zero-day-exploitation-escalates-to-active-intrusions/