Exploits

Threat groups created a fake security company, "High Sierra," with faux exploits and fake profiles for security researchers on GitHub…

Several US federal government agencies have been hit in a global cyberattack that exploits a vulnerability in widely used software,…

Progress warned MOVEit Transfer customers to restrict all HTTP access to their environments after info on a new SQL injection (SQLi)…

Fortinet says a critical FortiOS SSL VPN vulnerability that was patched last week "may have been exploited" in attacks impacting government,…

The week was dominated by fallout over the MOVEit Transfer data-theft attacks, with the Clop ransomware gang confirming that they…

Progress has issued a second patch for additional SQL flaws that are distinct from the zero-day that Cl0p ransomware gang…

Progress Software warned customers today of newly found critical SQL injection vulnerabilities in its MOVEit Transfer managed file transfer (MFT)…

Russian cybersecurity firm Kaspersky says some iPhones on its network were hacked using an iOS vulnerability that installed malware via…

Google announced today that bug bounty hunters who report sandbox escape chain exploits targeting its Chrome web browser are now…

A threat actor known as Spyboy is promoting a Windows defense evasion tool called "Terminator" on the Russian-speaking forum RAMP…