A vulnerability in curl, specifically in its handling of HTTP/2 uploads, has been fixed following the discovery that a malicious server could exploit this flaw to corrupt a client's memory. This could potentially lead to code execution on the machine that is uploading data. The issue was reported by a researcher who demonstrated how an attacker could take control of a client, although this requires detailed knowledge of the client's build and memory layout. The curl project released a patch on October 14, 2023, in version 8.23.0. While the risk of a successful attack is considered low, the potential for a crash indicates the seriousness of the flaw, affecting users of curl who implement HTTP/2 uploads.
Articles tagged "Exploit"
Found 989 articles
A Saudi engineer working for OpenAI has been arrested for allegedly placing a hidden recording device in a conference room at the company's San Francisco office. The device was reportedly intended to capture private conversations involving executives, raising serious concerns about corporate espionage and data security. The incident highlights the vulnerabilities that organizations face from insider threats, as employees may exploit their access to sensitive areas. This situation not only puts OpenAI's confidential discussions at risk but also serves as a reminder for companies to strengthen their security measures against internal breaches. Law enforcement is involved, and further investigations are likely to reveal more about the motives behind this act.
A serious vulnerability has been discovered in the Ghostscript interpreter, identified as CVE-2026-39919. This flaw allows attackers to exploit a heap buffer overflow, which could lead to remote code execution if they upload specially crafted PDF files. This vulnerability poses a significant risk to any servers running the Ghostscript software, as it could enable unauthorized access and control. Organizations using Ghostscript need to be particularly vigilant, as the potential for exploitation could result in severe data breaches or system compromises. It's crucial for users to stay updated on this issue to protect their systems from potential attacks.
Actively Exploited
A newly discovered vulnerability, identified as CVE-2026-104935, affects Ivanti Connect Secure, a widely used VPN solution. This zero-day exploit allows attackers to execute code remotely without authentication, ultimately granting them root access even on systems that have been fully patched. This poses a significant risk to organizations relying on Ivanti's VPN for secure remote access, as it could lead to unauthorized control over sensitive networks. Companies utilizing this software should take immediate action to secure their systems and monitor for any signs of exploitation. The implications of such a vulnerability underscore the importance of maintaining vigilance in cybersecurity practices.
Critical
SAP Discloses Critical CVSS 10 Flaw in Cloud SDK for Python Allowing OAuth2 Credential TheftThe Hacker News
SAP has announced a serious vulnerability in its Cloud SDK for Python, which could allow attackers to steal OAuth2 client credentials from applications running on the SAP Business Technology Platform (BTP). This flaw, rated with a CVSS score of 10, affects multi-tenant applications that utilize the SDK. For an attacker to exploit this vulnerability, they must have control over the tenant subdomain, making it crucial for users to ensure their subdomains are secure. The potential for credential theft poses significant risks to organizations using these services, as compromised credentials could lead to unauthorized access and data breaches. Companies using the affected SDK should take immediate action to assess their security posture and implement necessary safeguards.
Actively Exploited
SonicWall customers are facing a serious security issue as attackers exploit a maximum-severity Server-Side Request Forgery (SSRF) vulnerability in their SMA 1000 appliances. This flaw allows unauthorized access to internal resources, potentially leading to data breaches and network compromises. Organizations using these devices need to act quickly to protect their networks, as the vulnerability is currently being targeted in the wild. SonicWall users should ensure their systems are updated and patched to mitigate the risks associated with this exploitation. The urgency of this situation emphasizes the need for businesses to maintain vigilance in securing their devices against emerging threats.
Critical
Attackers Exploit CVSS 10.0 Bricksforge WordPress Flaw Enabling Unauthenticated RCEThe Hacker News
Actively Exploited
A serious security vulnerability has been discovered in the Bricksforge plugin for WordPress, identified as CVE-2026-85097, which has a maximum severity score of 10.0. This flaw allows unauthenticated attackers to upload and run arbitrary PHP code on affected WordPress sites, leading to remote code execution (RCE). According to Patchstack, the exploit is currently being actively used in the wild, putting numerous WordPress installations at risk. Website owners using the Bricksforge plugin should take immediate action to secure their sites against this threat, as the vulnerability could lead to significant data breaches or site compromises. It's crucial for users to stay updated with security patches and monitor their systems for any unusual activity.
Edward Dubrovsky, a Canadian cybersecurity executive, has been arrested in Pennsylvania for alleged extortion activities linked to the ShinyHunters hacking group. This arrest comes amid an ongoing investigation by the FBI into the group's operations, which are known for their data breaches and selling stolen information. Dubrovsky's involvement raises concerns about the potential connections between cybersecurity professionals and criminal hacking activities. The case highlights the risks within the cybersecurity field, where individuals may exploit their skills for malicious purposes. As investigations continue, it serves as a reminder of the ethical responsibilities that come with expertise in cybersecurity.
Actively Exploited
Attackers are taking advantage of two vulnerabilities in the AhsayCBS backup management platform—one critical and one medium-severity—that remain unpatched. These flaws allow them to deploy webshells, which can provide unauthorized access to systems, and to install cryptocurrency miners that exploit system resources for profit. Organizations using AhsayCBS are at risk, as these vulnerabilities can lead to significant data breaches and financial losses. It's crucial for affected users to address these issues promptly to safeguard their systems and data. The ongoing exploitation of these vulnerabilities emphasizes the need for timely software updates and rigorous security practices.
The FBI has arrested a suspected member of the ShinyHunters hacking group connected to a breach of FBI systems. This individual is believed to be involved in extortion activities that have targeted various organizations. The arrest highlights ongoing efforts by law enforcement to combat cybercrime and hold accountable those who exploit vulnerabilities for financial gain. With the FBI itself being a target, this incident raises concerns about the security of government systems and the potential for sensitive information to be compromised. The implications of such breaches can be serious, affecting not only the agencies involved but also the public's trust in cybersecurity measures.
A new variant of the DarkSword iOS exploit kit, named P7 DarkSword, has been discovered by cybersecurity researchers. This variant is notable for its reduced footprint on devices and its ability to steal data from on-device keychains and cryptocurrency wallets. Additionally, it enables two-way communication with the attacker's servers, which raises significant security concerns. Users of iOS devices, especially those with crypto wallets, are particularly at risk, as their sensitive information could be compromised. The emergence of this exploit kit underscores the ongoing challenges in mobile security and the need for users to remain vigilant about their data protection practices.
As artificial intelligence becomes more integrated into business systems, it opens up new vulnerabilities that attackers can exploit, similar to traditional business email compromise (BEC) schemes. Researchers warn that cybercriminals could manipulate AI agents to gain unauthorized access to sensitive information or initiate fraudulent transactions. This shift poses significant risks for companies that rely on AI for operations, as attackers can potentially bypass traditional security measures by targeting these intelligent systems. It's crucial for organizations to understand these emerging threats and take proactive steps to secure their AI implementations to prevent exploitation. The implications could be severe, affecting everything from financial transactions to data integrity.
Critical
Researchers Publish Working Exploit for Pre-Auth AnyDesk Linux Flaw That Gives Root AccessThe Hacker News
Actively Exploited
Researchers have released a working exploit for a serious flaw in AnyDesk's Linux software that allows attackers to execute code remotely and gain root access without any user authentication. This vulnerability was patched in version 8.0.3 in June 2023, but the company described the fix vaguely as a bug that could cause crashes, failing to assign a CVE identifier. Users of AnyDesk on Linux systems are at risk, as the exploit can be executed before a connection is approved. This situation raises concerns about the transparency of security updates and the potential for malicious exploitation if users do not update their software promptly.
Critical
Attackers Exploit AhsayCBS Flaws to Deploy XMRig Miners Disguised as Microsoft EdgeThe Hacker News
Actively Exploited
Attackers are exploiting two recently disclosed vulnerabilities in the AhsayCBS backup utility, which is used for data backup and recovery. These flaws allow the attackers to take control of affected devices and deploy malicious software, including web shells and XMRig cryptocurrency miners disguised as Microsoft Edge. The specific vulnerability, identified as CVE-2026-105133, has a CVSS v4 score of 5.5, indicating a moderate level of risk. This situation primarily affects users of the AhsayCBS backup software, which could lead to unauthorized access and potential financial losses due to the mining activities. Companies using this utility should be vigilant and assess their systems for these vulnerabilities to prevent exploitation.
In the third quarter of 2026, Comparitech reported a staggering 2,627 ransomware attacks, marking a new record high. Critical sectors such as finance, technology, education, and healthcare saw particularly sharp increases in these incidents. This surge in ransomware activity poses serious risks to organizations, as attackers continue to exploit vulnerabilities to gain access to sensitive data and disrupt operations. With more businesses targeted, it emphasizes the urgent need for enhanced cybersecurity measures and employee training to mitigate these threats. The ongoing trend of rising attacks suggests that organizations must remain vigilant and proactive in their defenses against ransomware.
Page 1 of 66Next