ARCHIVE
Tag: exploited
-
Threat digest: 2026-09-30
CISA added Apple's exploited CoreGraphics flaw to its known exploited list while NetScaler zero-day attacks escalated into mass exploitation, a new Spectre v2 variant pulled Linux root password…
-
Threat digest: 2026-09-29
CISA ordered US federal agencies to patch the exploited Citrix NetScaler zero-days by Wednesday, a destructive agent-driven campaign deleted Azure resources, Bitget traced its $387 million theft to…
-
Threat digest: 2026-09-28
Citrix patched two NetScaler remote code execution zero-days that CISA says are being exploited in the wild, a cluster of critical flaws landed in Joomla, WordPress, Froxlor, hMailServer…
-
Threat digest: 2026-09-27
ShinyHunters resumed mass exploitation of the patched Oracle PeopleSoft bug by encoding the URL path around WAF rules, the Bitget attacker moved about $83 million of unfreezable XRP,…
-
Threat digest: 2026-09-26
CISA moved a critical WordPress core flaw plus exploited SharePoint and MikroTik bugs onto its known exploited list, Kiteworks told customers worldwide to take servers offline ahead of…
-
Threat digest: 2026-09-25
CISA added a maximum severity WSO2 authentication bypass and an Adobe Commerce flaw to its exploited list, a hot wallet drain at Bitget topped $351 million in the…
-
Threat digest: 2026-09-24
Actively exploited chains lead the day: unauthenticated takeover of internet-exposed MikroTik routers, a Chinese actor using Chrome and Windows zero-days, and a card skimming campaign run at scale…
-
Threat digest: 2026-09-23
CISA added four exploited vulnerabilities to its Known Exploited Vulnerabilities catalog in a single day, led by a CVSS 10.0 Arista VeloCloud Orchestrator flaw with fixes still missing…
-
Threat digest: 2026-09-22
A cluster of compromised signing keys drained the Fetch.ai and NuNet bridges and minted hundreds of millions of tokens across the ASI Alliance ecosystem, CISA's deadline passed for…