Search: “shared hosting”

474 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Malware 1480 Vulnerability 991 Ransomware 955 Threat actor 514 Exploit / PoC 477 Data breach 398 Phishing & fraud 309 Policy & legal 278 Industry 252 AI tools & infra 64 Research 56 AI safety & security 52 Advisory 34 AI industry 31

SeverityAll critical 1903 high 1984 medium 1316 low 549 info 202

Keys to the Kingdom: Erlang/OTP SSH Vulnerability Analysis and Exploits Observed in the Wild

Attackers actively exploit CVE-2025-32433, a CVSS 10.0 unauthenticated RCE in Erlang/OTP SSH, heavily targeting OT and critical infrastructure networks.

CVE-2025-32433 enables unauthenticated RCE in Erlang/OTP's SSH daemon via SSH connection protocol messages (codes >= 80) processed before authentication, affecting versions before OTP-27.3.3, OTP-26.2.5.11 and OTP-25.3.2.20. Unit 42 recorded a spike in exploitation between May 1-9, 2025, with 70% of detections on firewalls protecting OT networks, disproportionately affecting healthcare, agriculture, media and high technology. Observed payloads bind TCP-connected shells or launch Bash reverse shells to hosts like 146.103.40.203:6667, with randomized DNS lookups under dns.outbound.watchtowr.com indicating OAST-driven blind RCE validation.

Palo Alto Unit 42Aug 17, 13:03 UTC · Aug 17, 2026Exploit / PoC in the wildCVE-2025-32433

Hackers can force iOS and macOS browsers to divulge passwords and much more

Ars Technica · SecurityOct 25, 17:00 UTC · Oct 25, 2023Exploit / PoC in the wild

FBI warns InfraGard members of 'malicious' copycat website

CyberScoopMar 27, 21:23 UTC · Mar 27, 2017Exploit / PoC in the wild

Hackers Exploit Critical Flaw in Triofox File Sharing Product

Infosecurity MagazineNov 11, 12:30 UTC · Nov 11, 2025Exploit / PoC in the wildCVE-2025-12480 CVE-2025-11371

Coruna iOS Exploit Kit Uses 23 Exploits Across Five Chains Targeting iOS 13

The Hacker NewsMar 26, 10:55 UTC · Mar 26, 2026Exploit / PoC in the wildCVE-2024-23222 CVE-2022-48503 CVE-2023-43000+9 CVEs

Estonia's diplomacy training aims to shape state behavior in cyberspace

CyberScoopFeb 9, 22:15 UTC · Feb 9, 2021Exploit / PoC in the wild

China borrowing Russian tactics to spread coronavirus disinformation

CyberScoopMar 23, 20:49 UTC · Mar 23, 2020Exploit / PoC in the wild

Chrome Extension Uses AI Engine to Act Without User Input

Infosecurity MagazineApr 25, 13:15 UTC · Apr 25, 2025Exploit / PoC1

WhatsApp fixed zero-day used to deploy Paragon Graphite spyware

Security AffairsMar 20, 00:12 UTC · Mar 20, 2025Exploit / PoC

C.A.S hacktivists attack Russian organizations using rare RATs

Kaspersky SecurelistDec 18, 10:00 UTC · Dec 18, 2024Exploit / PoC

CISA Orders Urgent Patching After Chinese Hackers Exploit SharePoint Flaws in Live Attacks

The Hacker NewsJul 23, 13:04 UTC · Jul 23, 2025Exploit / PoC in the wildCVE-2025-49704 CVE-2025-49706 CVE-2025-53770+1 CVEs

Hackers Actively Exploiting Widely

The Hacker NewsApr 23, 19:23 UTC · Apr 23, 2019Exploit / PoC in the wildCVE-2019-9978

Sen. Schumer seeks DHS plan on AI cyber coordination with state, local governments

CyberScoopMay 8, 17:20 UTC · May 8, 2026Exploit / PoC in the wild

Researchers Warn of AI Attacks After PoC Exploits Atlassian's AI Agent

Infosecurity MagazineJun 19, 11:50 UTC · Jun 19, 2025Exploit / PoC

SonicWall hit by attackers leveraging zero-day vulnerabilities in its own products?

Help Net SecurityJan 25, 00:00 UTC · Jan 25, 2021Exploit / PoC

FinSpy: unseen findings

Kaspersky SecurelistSep 28, 14:45 UTC · Sep 28, 2021Exploit / PoC

Microsoft Addresses Critical Power Platform Flaw After Delays and Criticism

The Hacker NewsAug 5, 07:38 UTC · Aug 5, 2023Exploit / PoC in the wild

Cyber Storm 2020 could be DHS's most rigorous drill for critical infrastructure yet

CyberScoopSep 30, 13:24 UTC · Sep 30, 2019Exploit / PoC in the wild

Fake PoC for Linux Kernel Vulnerability on GitHub Exposes Researchers to Malware

The Hacker NewsJul 15, 00:00 UTC · Jul 15, 2023Exploit / PoC CVE-2023-35829 CVE-2023-20871

Ahead of 2024 election, Meta worries about lack of information on top-tier nation

CyberScoopNov 30, 13:00 UTC · Nov 30, 2023Exploit / PoC in the wild

Russia's digital attacks are haphazard, chaotic, says top Ukrainian cyber official

CyberScoopAug 11, 15:54 UTC · Aug 11, 2022Exploit / PoC in the wild

TikTok users 'voluntarily' giving their data to China, Justice official says

CyberScoopAug 12, 22:38 UTC · Aug 12, 2020Exploit / PoC in the wild

WikiLeaks left key details unredacted in CIA leak

CyberScoopMar 9, 02:51 UTC · Mar 9, 2017Exploit / PoC in the wild

Gladinet flaw CVE-2025

Security AffairsApr 15, 07:05 UTC · Apr 15, 2025Exploit / PoC in the wildCVE-2025-30406

⚡ Weekly Recap: Chrome 0-Day, Router Hijacks, Coder Supply Chain Attack and More

Weekly recap: actively exploited Chrome V8 zero-day, MikroTik RouterOS zero-day chain, Magento StyleSmuggler backdoor, and critical N-able N-central flaws.

Google patched an actively exploited Chrome V8 type confusion zero-day, CVE-2026-85046 (CVSS 8.8), the sixth exploited Chrome zero-day of 2026. CERT Polska warned of the MikroTrick exploit chain (CVE-2026-67276 and CVE-2026-86060, CVSS 9.2) giving unauthenticated full control of MikroTik RouterOS devices via SSH, observed since September 2. Sansec disclosed the StyleSmuggler Magento/Adobe Commerce zero-day used since September 4 to inject a Rust backdoor into online stores, while N-able patched three critical N-central flaws (CVE-2026-86206, CVE-2026-86207, and CVE-2026-86218, CVSS 10.0) with Huntress observing likely exploitation. Elastic and Morphisec also detailed RevStealer, an information stealer spread via game cheats and a fake Claude Desktop app.

The Hacker NewsSep 7, 14:36 UTC · 9d agoExploit / PoC in the wildCVE-2026-85046 CVE-2026-86206 CVE-2026-86207+7 CVEs

Iranian attacks on US critical infrastructure puts 3,900 devices in crosshairs

CyberScoopApr 9, 21:29 UTC · Apr 9, 2026Exploit / PoC in the wild

Phishers Exploit Salesforce's Email Services Zero

The Hacker NewsAug 4, 10:16 UTC · Aug 4, 2023Exploit / PoC

13 Malicious Packagist Packages Target Unpatched iPhones to Steal Crypto Wallet Seeds

Trojanized Packagist themes inject JavaScript into Vietnamese streaming sites, exploiting unpatched iPhone WebKit and kernel flaws to install spyware and steal crypto wallet seeds.

Socket researchers found 13 malicious Composer theme packages across five vendor namespaces (including vsmov, vsphim, and ophimcms) that inject JavaScript into Vietnamese movie and comic streaming sites. On iPhones running iOS 18.4-18.6.x, the injected code fires a WebKit-to-kernel exploit chain using CVE-2025-31277 and CVE-2025-43529, pivoting through the GPU process and the AppleM2ScalerCSCDriver IOKit user client to gain kernel read/write. Since around August 12, 2026 the payload also steals cryptocurrency wallet seeds and mnemonics from Bitget, BitKeep, Bitpie, Phantom, Tonkeeper, Trust Wallet, and OKX, alongside keychain databases, Wi-Fi passwords, SMS, photos, cookies, and location history, uploaded via HTTPS to rotating C2 domains. The group is believed to be Vietnamese-operated, hosts exploits on Funnull infrastructure, and Apple patched the kernel escape flaw in iOS and macOS 26.1.

The Hacker NewsSep 2, 06:24 UTC · 14d agoExploit / PoC in the wildCVE-2025-31277 CVE-2025-43529 CVE-2025-43398+2 CVEs