Tag: Exploitation
Attackers need three days from disclosure to a working exploit
Rapid7 counted 43 newly exploited vulnerabilities in Q3 and found nearly 80% were remote, unauthenticated and zero-click.
A rented model ran one crew’s attack loop for 100,000 unattended steps
Symantec trapped a criminal AI agent in a honeypot and recovered the full prompt that turns somebody else's model into…
Langflow MCP bug draws 1,423 exploit attempts from 27 addresses
An authenticated flaw that passes a user-supplied command straight to bash is being hammered by attackers who only need one…
Attackers cash in on an unauthenticated Roundcube mail flaw
Canada's cyber centre says a patched SQL injection in Roundcube Webmail is being exploited in the wild.
Attackers hammer Orkes Conductor through an unauthenticated RCE hole
A workflow engine that many teams expose to the internet has been under active exploitation for a month, with no…
Forged tokens breach a CVSS 10 flaw in WSO2’s API manager
Attackers are bypassing JWT authentication in WSO2 middleware that banks, telcos, and governments rely on to broker API traffic.
GitLab patches a 10.0 file-read flaw as scanning begins within hours
Two GitLab flaws, one a perfect 10.0, drew automated probes within hours of the patch.