Search: “edge case”

9 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Vulnerability 348 Industry 243 Malware 221 Ransomware 194 Exploit / PoC 148 Policy & legal 141 Data breach 102 Threat actor 85 Phishing & fraud 63 AI tools & infra 54 Research 41 AI safety & security 36 AI industry 23 AI research 19

SeverityAll critical 781 high 311 medium 247 low 282 info 149

U.S. CISA adds JQuery flaw to its Known Exploited Vulnerabilities catalog

Security AffairsJan 24, 19:59 UTC · Jan 24, 2025Exploit / PoC in the wildCVE-2020-11023

Cisco SD-WAN Has a New Root-Level Problem, and There's No Fix Yet

Security AffairsJun 5, 13:35 UTC · Jun 5, 2026Exploit / PoC in the wildCVE-2026-20245 CVE-2026-20182 CVE-2026-20127+1 CVEs

Aerospike expands Accelerate Partner Program to speed up partner ramp to revenue

Help Net SecurityJul 17, 00:00 UTC · Jul 17, 2021Exploit / PoC

⚡ Weekly Recap: VMware Exploits, Windows 0-Day, MCP Attacks, Browser Hijacks and More

Weekly recap: suspected China-nexus APT exploited VMware vCenter CVE-2026-59310, Lazarus used Windows zero-day CVE-2026-68820, and macOS flaw dropped Monero miners.

The week's top stories included a suspected China-nexus APT exploiting VMware vCenter CVE-2026-59310 (CVSS 9.8), a directory-traversal flaw enabling arbitrary code execution, with backdoors, reverse SSH and Babuk-derived ransomware deployed, per QUIRSO. NCSC-NL reported active exploitation of macOS Screen Sharing flaw CVE-2026-65400 (CVSS 9.8) to install Monero miners on systems with port 5900 exposed. Lazarus Group exploited Windows zero-day CVE-2026-68820 (CVSS 7.0) in Operation Dream Job, delivering ForestTiger and Troy backdoors to defense and aerospace targets. GeoServer patched a critical SQL injection flaw exploited within hours of disclosure, and Jamf analyzed the new Amnesia Stealer for macOS with live browser control.

The Hacker NewsAug 17, 17:57 UTC · 29d agoExploit / PoC in the wildCVE-2026-59310 CVE-2026-65400 CVE-2026-688201

Threat Spotlight: Sundown Matures

Cisco TalosMar 31, 12:40 UTC · Mar 31, 2017Exploit / PoC CVE-2016-0189

Attackers plant remote access tools on compromised PaperCut servers

Attackers chained two PaperCut NG/MF zero-days for unauthenticated access, installing SimpleHelp and AnyDesk remote access tools on compromised servers.

An ongoing campaign exploits chained zero-days CVE-2026-81578 (improper access control) and CVE-2026-82078 (unsafe dynamic class loading) in internet-facing PaperCut NG and MF Application Servers, enabling authentication bypass and arbitrary Java bytecode execution. Post-compromise activity includes user and domain enumeration, payload download from sendit.sh, and silent installation of SimpleHelp and AnyDesk for redundant remote access; Defused observed CVE-2026-81578/CVE-2026-82078 exploit activity in honeypots since August 29, including data theft via Derby database dumps. Emergency patches were released August 28 and August 30, but 47% of roughly 2,500 PaperCut installs tracked by Huntress run v23 or older, for which no patch is available.

Help Net SecuritySep 2, 08:12 UTC · 14d agoExploit / PoC in the wildCVE-2026-81578 CVE-2026-820781