Search: “assembly”

52 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Exploit / PoC 52 Malware 22 Ransomware 18 Vulnerability 13 Threat actor 9 Policy & legal 9 Data breach 7 Phishing & fraud 6 Advisory 2 AI safety & security 2 Research 1

SeverityAll critical 110 high 15 medium 15 low 0 info 1

DHS assembles Cyber Safety Review Board to imitate fed agency that studies aviation accidents

CyberScoopFeb 3, 15:30 UTC · Feb 3, 2022Exploit / PoC in the wild

September 2025 CVE Landscape

Recorded FutureOct 17, 00:00 UTC · Oct 17, 2025Exploit / PoC in the wildCVE-2025-53690 CVE-2021-21311 CVE-2025-20333+6 CVEs

The U.N. passed a resolution that gives Russia greater influence over internet norms

CyberScoopNov 19, 14:44 UTC · Nov 19, 2019Exploit / PoC in the wild

FortiBleed Exposes Admin Passwords for 75,000 Fortinet Firewalls

Security AffairsJun 18, 07:31 UTC · Jun 18, 2026Exploit / PoC in the wild

ViciousTrap Uses Cisco Flaw to Build Global Honeypot from 5,300 Compromised Devices

The Hacker NewsMay 29, 08:55 UTC · May 29, 2025Exploit / PoC in the wildCVE-2023-20118 CVE-2023-39780

After UN adoption, controversial cybercrime treaty’s next steps could prove vital

CyberScoopDec 31, 18:04 UTC · Dec 31, 2024Exploit / PoC in the wild

HackerOne urges U.S. to advocate for research protections in UN cybercrime treaty

CyberScoopNov 14, 23:06 UTC · Nov 14, 2024Exploit / PoC in the wild

Networking firm Sandvine cancels Belarus contract, citing ‘custom code’ that aided censorship

CyberScoopSep 16, 16:03 UTC · Sep 16, 2020Exploit / PoC in the wild

World powers are pushing to build their own brand of cyber norms

CyberScoopSep 24, 17:54 UTC · Sep 24, 2019Exploit / PoC in the wild

To raise security awareness, researchers spent months hacking mock building systems

CyberScoopJan 15, 11:00 UTC · Jan 15, 2019Exploit / PoC in the wild

New gaming and hospitality cybersecurity alliance formed by Retail ISAC

CyberScoopFeb 15, 17:53 UTC · Feb 15, 2018Exploit / PoC in the wild

Synack raises $21.25 million in Series C round

CyberScoopApr 11, 18:48 UTC · Apr 11, 2017Exploit / PoC in the wild

NIST out with draft cyber guide for manufacturing industry

CyberScoopNov 8, 13:55 UTC · Nov 8, 2016Exploit / PoC in the wild

Hackers Mass-Scan Exposed Vite Servers to Steal AWS and Azure Cloud Credentials

F5 honeypots record mass scanning of exposed Vite dev servers exploiting CVE-2026-39364 to harvest AWS and Azure cloud credentials.

F5 honeypots recorded 807 session-grouped attacks and roughly 32,000 raw events in August 2026 against internet-exposed Vite development servers, up from 1,732 events in the previous three months. Scanners abused CVE-2026-39364 (Vite 7.1.0-7.3.1, 8.0.0-8.0.4), bypassing server.fs.deny via @fs routes with ?raw/?import query parameters and double encoding to read .env files, AWS SSO caches, Azure tokens, and Terraform state. The same infrastructure also probed CVE-2025-29927 (Next.js), CVE-2025-30208, CVE-2025-31125 (KEV-listed January 2026), and CVE-2024-45811. Most traffic originated from Google Cloud IP ranges, with the US accounting for 17,297 events.

Cyber Security Newsupdated Sep 15, 11:12 UTC · 1d agofirst Sep 14, 16:59 UTC · 2d agoExploit / PoC in the wild 4 sources CVE-2026-39364 CVE-2025-29927 CVE-2025-30208+2 CVEs1

Unpatched Magento and Adobe Commerce Zero-Day Exploited to Backdoor Online Stores

Sansec reports active exploitation of an unpatched zero-day, dubbed StyleSmuggler, in Magento and Adobe Commerce, letting attackers backdoor online store servers without authentication.

Sansec disclosed on September 5 that attackers are exploiting an unpatched vulnerability, named StyleSmuggler, in Magento Open Source and Adobe Commerce to achieve unauthenticated remote code execution, with attacks observed starting September 4. All current versions including 2.4.9 are affected, and Adobe has published no advisory, CVE, patch, or workaround, with the next scheduled security release on September 8. Hosting firm Disrex Group independently confirmed two compromised stores (running 2.4.8 and 2.4.7-p2), both breached within the roughly eight-hour window before Sansec's blocking rules went live. The implant is a ~1.9 MB statically linked Rust binary disguised as a Linux kworker process, re-adding a cron entry every five minutes and in one case reading Magento sessions directly from Redis with no outbound traffic.

The Hacker NewsSep 5, 20:14 UTC · 11d agoExploit / PoC in the wild