Tag: exploit

Gogs Flaw Could Let Attackers Quietly Overwrite Large File Storage Data

Mar 10, 2026 11:46 AM

Tags: attack, cve, cyber, data, exploit, flaw, open-source, software, supply-chain, threat, vulnerability

A critical security vulnerability has been identified in Gogs, a widely used open-source self-hosted Git service. / Tracked as CVE-2026-25921, this flaw allows unauthenticated attackers to silently overwrite Git Large File Storage (LFS) objects across any repository. By exploiting a lack of content verification, threat actors can conduct stealthy software supply-chain attacks, replacing legitimate project…
I replaced manual pen tests with automation. Here’s what I learned.

Mar 10, 2026 9:48 AM

Tags: access, attack, breach, control, cvss, detection, exploit, infrastructure, intelligence, password, penetration-testing, ransomware, RedTeam, resilience, risk, service, siem, soc, tactics, tool, training, update, vulnerability, zero-day

The remediation black hole: Perhaps most frustrating was what happened after we received findings. Our teams would work diligently to implement fixes, but we rarely had the budget or opportunity to bring testers back to validate remediation. We were left with uncertainty. This gap between identification and verification created a dangerous blind spot in our…
iPhone Hacking Toolkit Tied to Russian Espionage May Have Originated in the U.S.

Mar 10, 2026 9:48 AM

Tags: breach, china, cyber, data-breach, defense, espionage, exploit, framework, hacking, intelligence, iphone, military, russia

A highly advanced iPhone hacking toolkit, originally developed for Western intelligence agencies, has leaked into the hands of Russian spies and Chinese cybercriminals. The exploit framework, known internally as >>Coruna,<< was likely created by Trenchant, the hacking and surveillance division of U.S. defense contractor L3Harris. This major breach demonstrates how strictly controlled military cyber weapons…
Threat Actors Mass-Scan Salesforce Experience Cloud via Modified AuraInspector Tool

Mar 10, 2026 9:48 AM

Tags: access, cloud, exploit, open-source, threat, tool

Salesforce has warned of an increase in threat actor activity that’s aimed at exploiting misconfigurations in publicly accessible Experience Cloud sites by making use of a customized version of an open-source tool called AuraInspector.The activity, per the company, involves the exploitation of customers’ overly permissive Experience Cloud guest user configurations to obtain access to sensitive…
Chinese APT Campaign Uses Middle East Lures to Target Qatar With PlugX

Mar 10, 2026 8:47 AM

Tags: apt, china, cyber, espionage, exploit, group, middle-east, threat

Chinese state-linked cyber espionage groups are actively exploiting geopolitical tensions in the Middle East to target organizations in Qatar, according to new findings. The campaign began almost immediately after the recent escalation in the region, highlighting how quickly advanced persistent threat (APT) groups adapt to real-world events to conduct cyber operations. Researchers from Check Point…
CISA Flags SolarWinds, Ivanti, and Workspace One Vulnerabilities as Actively Exploited

Mar 10, 2026 8:47 AM

Tags: cisa, cve, cybersecurity, exploit, flaw, infrastructure, ivanti, kev, vmware, vulnerability

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) on Monday added three security flaws to its Known Exploited Vulnerabilities (KEV) catalog, based on evidence of active exploitation.The vulnerability list is as follows -CVE-2021-22054 (CVSS score: 7.5) – A server-side request forgery (SSRF) vulnerability in Omnissa Workspace One UEM (formerly VMware Workspace One UEM) that First…
When AI safety constrains defenders more than attackers

Mar 10, 2026 8:47 AM

Tags: access, ai, attack, authentication, awareness, business, chatgpt, ciso, control, defense, detection, email, exploit, framework, LLM, malicious, malware, marketplace, microsoft, offense, open-source, openai, penetration-testing, phishing, RedTeam, service, social-engineering, spear-phishing, strategy, threat, tool, training, usa, vulnerability

The attacker advantage: Threat actors operate under no such constraints. They simply use jailbroken models, locally hosted open-source alternatives, or purpose-built malicious tools that have proliferated across underground markets.WormGPT, originally shut down in 2023, has reappeared largely as a recycled brand name for uncensored AI tools. New variants posted on underground marketplace BreachForums between October…
When AI safety constrains defenders more than attackers

Mar 10, 2026 8:47 AM

Tags: access, ai, attack, authentication, awareness, business, chatgpt, ciso, control, defense, detection, email, exploit, framework, LLM, malicious, malware, marketplace, microsoft, offense, open-source, openai, penetration-testing, phishing, RedTeam, service, social-engineering, spear-phishing, strategy, threat, tool, training, usa, vulnerability

The attacker advantage: Threat actors operate under no such constraints. They simply use jailbroken models, locally hosted open-source alternatives, or purpose-built malicious tools that have proliferated across underground markets.WormGPT, originally shut down in 2023, has reappeared largely as a recycled brand name for uncensored AI tools. New variants posted on underground marketplace BreachForums between October…
Exploiting the Crisis: Chinese APTs Weaponize Middle East Tensions to Target Qatar with PlugX

Mar 10, 2026 8:47 AM

Tags: apt, china, exploit, middle-east

The post Exploiting the Crisis: Chinese APTs Weaponize Middle East Tensions to Target Qatar with PlugX appeared first on Daily CyberSecurity. First seen on securityonline.info Jump to article: securityonline.info/exploiting-the-crisis-chinese-apts-weaponize-middle-east-tensions-to-target-qatar-with-plugx/
President Trump’s Cyber Strategy for America: What It Means for the U.S. and Why It Matters Globally

Mar 9, 2026 11:48 PM

Tags: access, ai, awareness, business, ceo, cloud, compliance, computing, cryptography, cyber, cybercrime, cybersecurity, data, defense, exploit, governance, government, healthcare, incident response, infrastructure, intelligence, international, malicious, network, regulation, resilience, risk, skills, startup, strategy, supply-chain, technology, threat, tool, training, usa, vulnerability, zero-trust

President Trump’s Cyber Strategy for America signals a shift toward risk-based security and cooperation across emerging technologies. While centered on U.S. interests, the strategy provides a blueprint to collectively strengthen global cyber resilience. Key takeaways Cybersecurity as a global security imperative: The strategy signals that cybersecurity has evolved beyond a mere “IT issue” to become…
Cloud attacks exploit flaws more than weak credentials

Mar 9, 2026 11:48 PM

Tags: access, attack, cloud, credentials, exploit, flaw, google, hacker, software, vulnerability

Hackers are increasingly exploiting newly disclosed vulnerabilities in third-party software to gain initial access to cloud environments, with the window for attacks shrinking from weeks to just days. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/google-cloud-attacks-exploit-flaws-more-than-weak-credentials/
What is the Salesforce GraphQL Exploit and What You Should Do

Mar 9, 2026 11:48 PM

Tags: data, data-breach, exploit

Salesforce GraphQL exploit exposed misconfigured guest data in Experience Cloud. Learn how it happened and how to prevent exposure. First seen on securityboulevard.com Jump to article: securityboulevard.com/2026/03/what-is-the-salesforce-graphql-exploit-and-what-you-should-do/
Meta’s AI Safety Chief Couldn’t Stop Her Own Agent. What Makes You Think You Can Stop Yours?

Mar 9, 2026 8:48 PM

Tags: ai, exploit, github, microsoft, open-source, threat

Two incidents from the last two weeks of February need to be read together, because separately they look like cautionary anecdotes and together they look like a threat doctrine. Incident One: An autonomous bot called hackerbot-claw attacked seven major open-source repositories”, Microsoft, DataDog, the CNCF, and Trivy among them. It exploited a well-documented GitHub Actions…
Report Surfaces Higher Correlation Between API and AI Security

Mar 9, 2026 6:47 PM

Tags: ai, api, cybersecurity, exploit, infrastructure, kev, programming, vulnerability

An analysis of 67,058 published vulnerabilities from 2025 finds 11,053, or 17%, are related to application programming interfaces (APIs). Conducted by Wallarm, the 2026 API ThreatStats Report also notes that 43% of the additions made in 2025 to the Known Exploited Vulnerabilities (KEV) catalog maintained by the Cybersecurity and Infrastructure Security Agency (CISA) involved API……
ShinyHunters claims ongoing Salesforce Aura data theft attacks

Mar 9, 2026 6:47 PM

Tags: access, attack, cloud, data, exploit, extortion, hacker, theft

Salesforce is warning customers that hackers are targeting websites with misconfigured Experience Cloud platforms that give guest users access to more data than intended. However, the ShinyHunters extortion gang claims to be actively exploiting a new bug to steal data from instances. First seen on bleepingcomputer.com Jump to article: www.bleepingcomputer.com/news/security/shinyhunters-claims-ongoing-salesforce-aura-data-theft-attacks/
Threat Actor Exploits Flaws and Uses Elastic Cloud SIEM to Manage Stolen Data

Mar 9, 2026 5:47 PM

Tags: breach, cloud, data, exploit, flaw, siem, threat, vulnerability

Huntress researchers uncover campaign exploiting vulnerabilities to steal data using Elastic Cloud as a data hub First seen on infosecurity-magazine.com Jump to article: www.infosecurity-magazine.com/news/elastic-cloud-siem-manage-stolen/
âš¡ Weekly Recap: Qualcomm 0-Day, iOS Exploit Chains, AirSnitch Attack & Vibe-Coded Malware

Mar 9, 2026 4:46 PM

Tags: attack, exploit, malware, zero-day

Another week in cybersecurity. Another week of “you’ve got to be kidding me.”Attackers were busy. Defenders were busy. And somewhere in the middle, a whole lot of people had a very bad Monday morning. That’s kind of just how it goes now.The good news? There were some actual wins this week. Real ones. The kind…
New Attack Against Wi-Fi

Mar 9, 2026 2:46 PM

Tags: attack, data, exploit, identity, network, office, wifi

It’s called AirSnitch: Unlike previous Wi-Fi attacks, AirSnitch exploits core features in Layers 1 and 2 and the failure to bind and synchronize a client across these and higher layers, other nodes, and other network names such as SSIDs (Service Set Identifiers). This cross-layer identity desynchronization is the key driver of AirSnitch attacks. The most…
OpenAI says Codex Security found 11,000 high-impact bugs in a month

Mar 9, 2026 1:47 PM

Tags: ai, attack, business, chatgpt, exploit, openai, risk, threat, vulnerability

From the ‘Aardvark’ experiment to an AI security researcher: Codex Security evolved from an earlier internal project called Aardvark, an AI-powered vulnerability research agent that OpenAI began testing with select users. The concept behind Aardvark was to have the AI agent read code, test possible exploit paths, and reason through how an attacker might compromise…
Für 220.000 US-Dollar: Exploit für gefährliche Windows-Lücke steht zum Verkauf

Mar 9, 2026 11:48 AM

Tags: bug, exploit, hacker, windows

Ein Hacker versucht, aus einer Sicherheitslücke in Windows Profit zu schlagen. Er verlangt 220.000 US-Dollar für einen Exploit, der Systemrechte verleiht. First seen on golem.de Jump to article: www.golem.de/news/fuer-220-000-us-dollar-exploit-fuer-gefaehrliche-windows-luecke-steht-zum-verkauf-2603-206241.html
Rogues gallery: 15 worst ransomware groups active today

Mar 9, 2026 10:47 AM

Tags: access, ai, alphv, apt, attack, backup, breach, cloud, cyber, cybercrime, dark-web, data, data-breach, defense, detection, email, encryption, endpoint, exploit, extortion, finance, government, group, healthcare, infrastructure, insurance, intelligence, korea, law, leak, linux, lockbit, malicious, malware, moveIT, network, north-korea, organized, phishing, ransom, ransomware, russia, service, social-engineering, software, strategy, threat, tool, usa, vmware, vpn, vulnerability, windows, zero-day

Black Basta: History: Black Basta appeared on the ransomware scene in early 2022 and is believed to be a spin-off from Conti, a group notorious for attacking major organizations.How it works: Black Basta usually deploys malware through exploitation of known vulnerabilities and social engineering campaigns. “Employees in the target environment are email bombed and then…
Web Server Exploits and Mimikatz Used in Attacks Targeting Asian Critical Infrastructure

Mar 9, 2026 9:47 AM

Tags: attack, china, exploit, government, group, infrastructure, law, network, technology, threat

High-value organizations located in South, Southeast, and East Asia have been targeted by a Chinese threat actor as part of a years-long campaign.The activity, which has targeted aviation, energy, government, law enforcement, pharmaceutical, technology, and telecommunications sectors, has been attributed by Palo Alto Networks Unit 42 to a previously undocumented threat activity group dubbed First…
Hikvision Multiple Product Vulnerability Could Let Attackers Escalate Privileges

Mar 9, 2026 8:47 AM

Tags: cyber, cybersecurity, exploit, flaw, infrastructure, kev, network, threat, vulnerability

The Cybersecurity and Infrastructure Security Agency (CISA) has officially added a critical security flaw affecting multiple Hikvision products to its Known Exploited Vulnerabilities (KEV) catalog. This urgent addition, made on March 5, 2026, serves as a stark warning to network defenders after federal authorities confirmed that threat actors are actively exploiting the bug in real-world…
CISA Alerts Users to Actively Exploited Vulnerabilities Impacting macOS and iOS

Mar 9, 2026 6:48 AM

Tags: apple, cisa, cyber, cybersecurity, exploit, flaw, infrastructure, kev, macOS, network, vulnerability

The Cybersecurity and Infrastructure Security Agency (CISA) has issued an urgent alert regarding three actively exploited vulnerabilities affecting multiple Apple platforms. On March 5, 2026, CISA added these security flaws to its Known Exploited Vulnerabilities (KEV) catalog, requiring immediate attention from network defenders and system administrators. These vulnerabilities impact a wide range of Apple devices…
Whatsapp-Exploit für 30 Dollar im Darknet: So können Hacker dein Gerät unbrauchbar machen

Mar 8, 2026 4:46 PM

Tags: dark-web, exploit, hacker

First seen on t3n.de Jump to article: t3n.de/news/whatsapp-exploit-fuer-30-dollar-1731151/
AI Exploits, Cloud Breaches, and Identity Gaps Define This Week’s Cybersecurity Landscape

Mar 6, 2026 10:46 PM

Tags: ai, breach, cloud, cybersecurity, exploit, identity

Weekly summary of Cybersecurity Insider newsletters from the week of March 01, 2026. First seen on esecurityplanet.com Jump to article: www.esecurityplanet.com/weekly-roundup/ai-exploits-cloud-breaches-and-identity-gaps-define-this-weeks-cybersecurity-landscape/
Middle East Conflict Fuels Opportunistic Cyber Attacks

Mar 6, 2026 9:47 PM

Tags: access, advisory, api, apt, attack, authentication, awareness, backdoor, best-practice, breach, browser, business, chrome, cloud, crypto, cyber, cybercrime, cybersecurity, data, defense, endpoint, exploit, fraud, google, government, identity, infection, Internet, iran, iraq, malicious, malware, mfa, middle-east, military, monitoring, network, password, phishing, PurpleTeam, radius, risk, risk-assessment, scam, service, software, technology, theft, threat, training, unauthorized, update, vulnerability, windows, zero-day

IntroductionThreat actors often take advantage of major global events to fuel interest in their malicious activities. Zscaler ThreatLabz is diligently tracking a surge in cybercriminal activity that capitalizes on the elevated political climate in the Middle East. This increased malicious activity includes discoveries that are directly tied to the ongoing conflict, alongside other related findings. ThreatLabz…
Feds take notice of iOS vulnerabilities exploited under mysterious circumstances

Mar 6, 2026 9:47 PM

Tags: exploit, vulnerability

The long, strange trip of a large assembly of advanced iOS exploits. First seen on arstechnica.com Jump to article: arstechnica.com/security/2026/03/cisa-adds-3-ios-flaws-to-its-catalog-of-known-exploited-vulnerabilities/
5 Actions Critical for Cybersecurity Leadership During International Conflicts

Mar 6, 2026 8:46 PM

Tags: attack, backup, business, cloud, corporate, cyber, cybersecurity, data, exploit, government, incident response, infrastructure, international, iran, middle-east, military, network, resilience, risk, risk-assessment, russia, saas, service, supply-chain, technology, threat, ukraine, update, vulnerability, warfare

The recent military attacks involving Iran in the Middle East are a stark reminder that cybersecurity leadership must continually incorporate geopolitical risk into their enterprise cyber risk posture and preparedness. Every crisis that elevates to military engagements between cyber-active participants, changes the risk landscape of businesses, for people, operations, and data. This includes the…
Spyware Makers Topped Google’s List of Zero-Day Exploits for the First Time in 2025

Mar 6, 2026 7:50 PM

Tags: china, exploit, flaw, google, russia, spyware, zero-day

For the first time, spyware makers topped Google’s list of organizations that exploited zero-day flaws in 2025, overtaking nation-state actors from China, Russia, and elsewhere and continuing a trends that Google researchers warned about two years ago. First seen on securityboulevard.com Jump to article: securityboulevard.com/2026/03/spyware-makers-in-2025-for-the-first-time-topped-googles-lists-of-zero-day-exploits/