60
55% Actively Exploited Zero-Day Flaws In 2022 Are Variants Of Previous Bugs
60
60
60
Microsoft patches two actively exploited zero-days (CVE-2024-29988, CVE-2024-26234)
60
60
60
60
60
60
60
45
Hackers Are Probing PaperCut Servers, and 47% Still Have No Patch
PaperCut pre-auth RCE CVE-2026-81578 actively exploited; 47% of tracked installs unpatched and exposed to remote code execution.
Huntress confirmed active exploitation of a pre-authentication RCE flaw in PaperCut (CVE-2026-81578), chainable with CVE-2026-82078 to achieve SYSTEM-level code execution via PaperCut's Application Server. Observed attacks focused on short reconnaissance (whoami, ver, tasklist) with no persistence, but a malicious Java class dropping into the installation directory leaves the jdbc:derby:memory:pwn breadcrumb. Roughly 47% of ~2,500 tracked installations run version 23 or earlier with no patch yet available.
74
60
60
Patch Tuesday: Microsoft fixes 5 actively exploited zero-days
60
57
60
60
57
60
Researchers Build Self-Replicating AI Worm That Operates Entirely on Local, Open
60
December 2019 Patch Tuesday: Microsoft fixes one actively exploited zero-day
60
45
60
60
60
60
60
60
60
60
45
60
60
60
60
60
60
60