Search: “post-exploitation”

160 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Malware 274 Ransomware 224 Vulnerability 187 Exploit / PoC 165 Threat actor 111 Data breach 30 Phishing & fraud 14 Policy & legal 8 AI safety & security 5 Research 4 Advisory 3 Industry 3 Tools 3 AI tools & infra 1

SeverityAll critical 422 high 450 medium 137 low 14 info 10

CISA Orders Urgent Patching After Chinese Hackers Exploit SharePoint Flaws in Live Attacks

The Hacker NewsJul 23, 13:04 UTC · Jul 23, 2025Exploit / PoC in the wildCVE-2025-49704 CVE-2025-49706 CVE-2025-53770+1 CVEs

60

Hackers Exploit SharePoint Zero-Day Since July 7 to Steal Keys, Maintain Persistent Access

The Hacker NewsJul 23, 06:05 UTC · Jul 23, 2025Exploit / PoC in the wildCVE-2025-4427 CVE-2025-4428 CVE-2025-53770+3 CVEs

60

Microsoft SharePoint servers under attack via zero-day vulnerability (CVE-2025-53770)

Help Net SecurityJul 22, 15:29 UTC · Jul 22, 2025Exploit / PoC in the wildCVE-2025-53770 CVE-2025-49706 CVE-2025-49704+1 CVEs

60

Critical Unpatched SharePoint Zero-Day Actively Exploited, Breaches 75+ Company Servers

The Hacker NewsJul 22, 03:59 UTC · Jul 22, 2025Exploit / PoC in the wildCVE-2025-53770 CVE-2025-49704 CVE-2025-49706+1 CVEs

60

Oligo Security strives to fill application

CyberScoopJul 8, 15:40 UTC · Jul 8, 2025Exploit / PoC in the wild

60

Chinese Hackers Exploit Ivanti CSA Zero-Days in Attacks on French Government, Telecoms

The Hacker NewsJul 3, 09:25 UTC · Jul 3, 2025Exploit / PoC in the wildCVE-2024-8963 CVE-2024-9380 CVE-2024-8190

60

Log4Shell: How It’s Exploited and Mitigating Damage

Recorded FutureJun 27, 00:00 UTC · Jun 27, 2025Exploit / PoC in the wildCVE-2021-44228

60

Review: Learning Kali Linux, 2nd Edition

Help Net SecurityJun 16, 00:00 UTC · Jun 16, 2025Exploit / PoC

45

Using an agent for the Mythic framework: pros and cons in pentesting

Kaspersky SecurelistMay 13, 10:00 UTC · May 13, 2025Exploit / PoC

60

New Critical SAP NetWeaver Flaw Exploited to Drop Web Shell, Brute Ratel Framework

The Hacker NewsMay 6, 13:53 UTC · May 6, 2025Exploit / PoC in the wildCVE-2017-9844 CVE-2025-31324 CVE-2017-12637

60

CISA Adds CrushFTP Vulnerability to KEV Catalog Following Confirmed Active Exploitation

The Hacker NewsApr 8, 15:56 UTC · Apr 8, 2025Exploit / PoC in the wildCVE-2025-31161 CVE-2025-2825 CVE-2024-2825

60

U.S. CISA adds Fortinet FortiOS/FortiProxy and GitHub Action flaws to its Known Exploited Vulnerabilities catalog

Security AffairsMar 20, 14:17 UTC · Mar 20, 2025Exploit / PoC in the wildCVE-2025-24472 CVE-2025-30066 CVE-2024-55591

60

Cybercrime gang exploited VeraCore zero-day vulnerabilities for years (CVE-2025-25181, CVE-2024-57968)

Help Net SecurityFeb 11, 13:53 UTC · Feb 11, 2025Exploit / PoC CVE-2025-25181 CVE-2024-579681

60

XE Group shifts from credit card skimming to exploiting zero

Security AffairsFeb 10, 12:53 UTC · Feb 10, 2025Exploit / PoC CVE-2024-57968 CVE-2025-25181 CVE-2017-9248+1 CVEs

60

U.S. CISA adds Cleo Harmony, VLTrader, and LexiCom flaw to its Known Exploited Vulnerabilities catalog

Security AffairsJan 16, 15:09 UTC · Jan 16, 2025Exploit / PoC in the wildCVE-2024-506231

60

⚡ THN Weekly Recap: Top Cybersecurity Threats, Tools and Tips [30 Dec]

The Hacker NewsJan 8, 11:22 UTC · Jan 8, 2025Exploit / PoC CVE-2024-3393 CVE-2019-3568 CVE-2024-56337+7 CVEs1

60

Mandiant devised a technique to bypass browser isolation using QR codes

Security AffairsDec 9, 12:12 UTC · Dec 9, 2024Exploit / PoC

45

Advanced threat predictions for 2025

Kaspersky SecurelistNov 25, 10:02 UTC · Nov 25, 2024Exploit / PoC CVE-2024-23222 CVE-2024-23225 CVE-2024-23296+3 CVEs

60

RedNovember Targets Government, Defense, and Technology Organizations

Recorded FutureNov 14, 00:00 UTC · Nov 14, 2024Exploit / PoC in the wild

60

FBI Seeks Public Help to Identify Chinese Hackers Behind Global Cyber Intrusions

The Hacker NewsNov 11, 05:16 UTC · Nov 11, 2024Exploit / PoC CVE-2020-12271 CVE-2020-15069 CVE-2020-29574+2 CVEs

60

Cybercriminals capitalize on poorly configured cloud environments

Help Net SecurityOct 4, 00:00 UTC · Oct 4, 2024Exploit / PoC

60

U.S. Offers $10 Million for Info on Russian Cadet Blizzard Hackers Behind Major Attacks

The Hacker NewsSep 9, 04:33 UTC · Sep 9, 2024Exploit / PoC in the wild

60

The best and worst ways to get users to improve their account security

Cisco TalosSep 5, 18:00 UTC · Sep 5, 2024Exploit / PoC CVE-2024-7971

60

Sonos smart speakers flaw allowed to eavesdrop on users

Security AffairsAug 10, 00:00 UTC · Aug 10, 2024Exploit / PoC CVE-2023-50809 CVE-2024-20018

60

CISA adds Microsoft COM for Windows bug to its Known Exploited Vulnerabilities catalog

Security AffairsAug 8, 20:41 UTC · Aug 8, 2024Exploit / PoC in the wildCVE-2018-08241

60

CISA adds Microsoft Windows Print Spooler flaw to its Known Exploited Vulnerabilities catalog

Security AffairsApr 25, 13:33 UTC · Apr 25, 2024Exploit / PoC in the wildCVE-2022-38028

60

Hackers Exploit OpenMetadata Flaws to Mine Crypto on Kubernetes

The Hacker NewsApr 23, 05:41 UTC · Apr 23, 2024Exploit / PoC CVE-2024-28847 CVE-2024-28848 CVE-2024-28253+3 CVEs

60

Palo Alto Networks Discloses More Details on Critical PAN

The Hacker NewsApr 20, 13:04 UTC · Apr 20, 2024Exploit / PoC in the wildCVE-2024-3400

60

Hackers Exploit Fortinet Flaw, Deploy ScreenConnect, Metasploit in New Campaign

The Hacker NewsApr 18, 14:09 UTC · Apr 18, 2024Exploit / PoC CVE-2023-48788

60

Palo Alto Networks Zero

Infosecurity MagazineApr 15, 15:30 UTC · Apr 15, 2024Exploit / PoC in the wildCVE-2024-3400

60

“Highly capable” hackers root corporate networks by exploiting firewall 0

Ars Technica · SecurityApr 12, 20:48 UTC · Apr 12, 2024Exploit / PoC in the wildCVE-2024-3400

60

Researchers Identify Multiple China Hacker Groups Exploiting Ivanti Security Flaws

The Hacker NewsApr 6, 09:12 UTC · Apr 6, 2024Exploit / PoC CVE-2023-46805 CVE-2024-21887 CVE-2024-21893

60

U.S. Charges 7 Chinese Nationals in Major 14

The Hacker NewsMar 26, 16:21 UTC · Mar 26, 2024Exploit / PoC

60

Hackers backed by Russia and China are infecting SOHO routers like yours, FBI warns

Ars Technica · SecurityFeb 27, 20:57 UTC · Feb 27, 2024Exploit / PoC CVE-2023-23397

60

Ivanti Pulse Secure Found Using 11-Year

The Hacker NewsFeb 15, 00:00 UTC · Feb 15, 2024Exploit / PoC in the wildCVE-2023-46805 CVE-2024-21887 CVE-2024-21893+1 CVEs

60

CISA orders federal agencies to disconnect Ivanti VPN instances by February 2

Security AffairsFeb 1, 19:46 UTC · Feb 1, 2024Exploit / PoC in the wildCVE-2023-46805 CVE-2024-21887 CVE-2024-21888+1 CVEs

60

Ivanti Releases Zero

Infosecurity MagazineFeb 1, 09:30 UTC · Feb 1, 2024Exploit / PoC in the wildCVE-2023-46805 CVE-2024-21887 CVE-2024-21888+1 CVEs

60

Rust Payloads Exploiting Ivanti 0

Infosecurity MagazineJan 30, 15:00 UTC · Jan 30, 2024Exploit / PoC CVE-2024-21887 CVE-2023-46805

60

Securonix Autonomous Threat Sweeper automates search for Log4j related activity

Help Net SecurityDec 12, 13:02 UTC · Dec 12, 2023Exploit / PoC

45

Just about every Windows and Linux device vulnerable to new LogoFAIL firmware attack

Ars Technica · SecurityDec 6, 15:02 UTC · Dec 6, 2023Exploit / PoC

60