Latest Actively Exploited news

Atlassian patches critical Confluence zero-day exploited in attacks

Australian software company Atlassian released emergency security updates to fix a maximum severity zero-day vulnerability in its Confluence Data Center and Server software, which has been exploited in attacks.
- Sergiu Gatlan
- October 04, 2023
- 01:41 PM
- 0
Android October security update fixes zero-days exploited in attacks

Google has released the October 2023 security updates for Android, addressing 54 unique vulnerabilities, including two known to be actively exploited.
- Bill Toulas
- October 03, 2023
- 02:12 PM
- 0
Qualcomm says hackers exploit 3 zero-days in its GPU, DSP drivers

Qualcomm is warning of three zero-day vulnerabilities in its GPU and Compute DSP drivers that hackers are actively exploiting in attacks.
- Bill Toulas
- October 03, 2023
- 11:29 AM
- 0
Ransomware gangs now exploiting critical TeamCity RCE flaw

Ransomware gangs are now targeting a recently patched critical vulnerability in JetBrains' TeamCity continuous integration and deployment server.
- Sergiu Gatlan
- October 02, 2023
- 03:32 PM
- 0
Exploit available for critical WS_FTP bug exploited in attacks

Over the weekend, security researchers released a proof-of-concept (PoC) exploit for a maximum severity remote code execution vulnerability in Progress Software's WS_FTP Server file sharing platform.
- Sergiu Gatlan
- October 02, 2023
- 01:11 PM
- 0
Arm warns of Mali GPU flaws likely exploited in targeted attacks

Arm in a security advisory today is warning of an actively exploited vulnerability affecting the widely-used Mali GPU drivers.
- Bill Toulas
- October 02, 2023
- 12:37 PM
- 0
Google fixes fifth actively exploited Chrome zero-day of 2023

Google has patched the fifth Chrome zero-day vulnerability exploited in attacks since the start of the year in emergency security updates released today.
- Sergiu Gatlan
- September 27, 2023
- 06:12 PM
- 3
Hackers actively exploiting Openfire flaw to encrypt servers

Hackers are actively exploiting a high-severity vulnerability in Openfire messaging servers to encrypt servers with ransomware and deploy cryptominers.
- Bill Toulas
- September 26, 2023
- 10:20 AM
- 0
Apple emergency updates fix 3 new zero-days exploited in attacks

Apple released emergency security updates to patch three new zero-day vulnerabilities exploited in attacks targeting iPhone and Mac users, for a total of 16 zero-days patched this year.
- Sergiu Gatlan
- September 21, 2023
- 01:57 PM
- 1
Trend Micro fixes endpoint protection zero-day used in attacks

Trend Micro fixed a remote code execution zero-day vulnerability in the Trend Micro's Apex One endpoint protection solution that was actively exploited in attacks.
- Bill Toulas
- September 19, 2023
- 05:11 PM
- 0
Apple backports BLASTPASS zero-day fix to older iPhones

Apple released security updates for older iPhones to fix a zero-day vulnerability tracked as CVE-2023-41064 that was actively exploited to infect iOS devices with NSO's Pegasus spyware.
- Bill Toulas
- September 12, 2023
- 09:42 AM
- 0
September Android updates fix zero-day exploited in attacks

The September 2023 Android security updates tackle 33 vulnerabilities, including a zero-day bug currently targeted in the wild.
- Sergiu Gatlan
- September 06, 2023
- 12:20 PM
- 1
Hackers exploit MinIO storage system to breach corporate networks

Hackers are exploiting two recent MinIO vulnerabilities to breach object storage systems and access private information, execute arbitrary code, and potentially take over servers.
- Bill Toulas
- September 04, 2023
- 12:45 PM
- 0
Hackers exploit critical Juniper RCE bug chain after PoC release

Hackers have started using a critical exploit chain to target Juniper EX switches and SRX firewalls via their Internet-exposed J-Web configuration interface.
- Sergiu Gatlan
- August 29, 2023
- 10:51 AM
- 0
Exploit released for Ivanti Sentry bug abused as zero-day in attacks

Proof-of-concept exploit code is now available for a critical Ivanti Sentry authentication bypass vulnerability that enables attackers to execute code remotely as root on vulnerable systems.
- Sergiu Gatlan
- August 24, 2023
- 11:20 AM
- 0
Over 3,000 Openfire servers vulnerable to takover attacks

Thousands of Openfire servers remain vulnerable to CVE-2023-32315, an actively exploited and path traversal vulnerability that allows an unauthenticated user to create new admin accounts.
- Bill Toulas
- August 23, 2023
- 03:36 PM
- 0
WinRAR zero-day exploited since April to hack trading accounts

A WinRar zero-day vulnerability tracked as CVE-2023-38831 was actively exploited to install malware when clicking on harmless files in an archive, allowing the hackers to breach online cryptocurrency trading accounts.
- Bill Toulas
- August 23, 2023
- 09:53 AM
- 0
Ivanti warns of new actively exploited MobileIron zero-day bug

US-based IT software company Ivanti warned customers today that a critical Sentry API authentication bypass vulnerability is being exploited in the wild.
- Sergiu Gatlan
- August 21, 2023
- 11:28 AM
- 0
CISA warns of critical Citrix ShareFile flaw exploited in the wild

CISA is warning that a critical Citrix ShareFile secure file transfer vulnerability tracked as CVE-2023-24489 is being targeted by unknown actors and has added the flaw to its catalog of known security flaws exploited in the wild.
- Lawrence Abrams
- August 16, 2023
- 05:31 PM
- 2
Gafgyt malware exploits five-years-old flaw in EoL Zyxel router

Fortinet has issued an alert warning that the Gafgyt botnet malware is actively trying to exploit a vulnerability in the end-of-life Zyxel P660HN-T1A router in thousands of daily attacks.
- Bill Toulas
- August 10, 2023
- 04:35 PM
- 0