Search: “post-exploitation”

187 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Malware 274 Ransomware 224 Vulnerability 187 Exploit / PoC 165 Threat actor 112 Data breach 30 Phishing & fraud 14 Policy & legal 8 AI safety & security 5 Research 4 Advisory 3 Industry 3 Tools 3 AI tools & infra 1

SeverityAll critical 422 high 451 medium 137 low 14 info 10

Toolkit Hidden Inside Oracle Database Evades Endpoint Tools

Infosecurity MagazineAug 6, 15:30 UTC · Aug 6, 2026Vulnerability

55

ThreatsDay: Odysseus RCE, Samsung One-Click Takeover, iCloud Backdoor Fight + 27 More Stories

The Hacker NewsAug 6, 15:24 UTC · Aug 6, 2026Vulnerability CVE-2025-21079 CVE-2025-584862

47

Attackers Compile khunt Inside Oracle to Turn SQL Injection Into Windows SYSTEM Access

The Hacker NewsAug 6, 09:19 UTC · Aug 6, 2026Vulnerability1

30

Chinese Threat Actors Weaponize New Vulnerabilities in Under a Day

Infosecurity MagazineAug 3, 15:00 UTC · Aug 3, 2026Vulnerability in the wild

60

JSP webshells being dropped on unpatched PTC Windchill instances

Help Net SecurityJul 27, 12:30 UTC · Jul 27, 2026Vulnerability in the wildCVE-2026-12569 CVE-2026-4681

60

New Project CAV3RN .NET Native AOT communication module

Kaspersky SecurelistJul 22, 15:43 UTC · Jul 22, 2026Vulnerability

30

Suspected China-Aligned Hackers Exploit Roundcube Flaws Against Universities

The Hacker NewsJul 8, 05:07 UTC · Jul 8, 2026Vulnerability CVE-2024-42009 CVE-2025-49113

60

How to improve your organization's security based on compromise assessment findings

Kaspersky SecurelistJul 2, 09:00 UTC · Jul 2, 2026Vulnerability1

42

Why patch directives only go so far

CyberScoopJun 25, 09:00 UTC · Jun 25, 2026Vulnerability in the wildCVE-2026-50751

60

Hackers probe, exploit newly patched BeyondTrust RCE flaw (CVE-2026-1731)

Help Net SecurityJun 24, 10:29 UTC · Jun 24, 2026Vulnerability CVE-2026-1731 CVE-2024-12356

60

Attackers hit pair of critical Fortinet vulnerabilities the vendor disclosed in April

CyberScoopJun 18, 14:32 UTC · Jun 18, 2026Vulnerability in the wildCVE-2026-39808 CVE-2026-39813 CVE-2026-25089

60

LangGraph Flaw Chain Exposes Self-Hosted AI Agents to Remote Code Execution

The Hacker NewsJun 12, 09:50 UTC · Jun 12, 2026Vulnerability CVE-2025-67644 CVE-2026-28277 CVE-2026-27022

60

Attackers actively exploiting flaw(s) in Cleo file transfer software (CVE-2024-50623)

Help Net SecurityJun 8, 10:32 UTC · Jun 8, 2026Vulnerability in the wildCVE-2024-50623

60

Containers on fire: from container escapes to supply chain attacks

Kaspersky SecurelistJun 1, 10:00 UTC · Jun 1, 2026Vulnerability in the wildCVE-2019-5736 CVE-2022-0492 CVE-2024-216261

60

ThreatsDay Bulletin: PAN-OS RCE, Mythos cURL Bug, AI Tokenizer Attacks, and 10+ Stories

The Hacker NewsMay 15, 00:00 UTC · May 15, 2026Vulnerability CVE-2026-03001

60

Three Microsoft Defender Zero-Days Actively Exploited; Two Still Unpatched

The Hacker NewsMay 14, 09:15 UTC · May 14, 2026Vulnerability in the wildCVE-2026-33825

60

Rushed Patches Follow Broken Embargo on Linux Kernel Vulnerabilities

Infosecurity MagazineMay 11, 14:30 UTC · May 11, 2026Vulnerability in the wildCVE-2026-31431 CVE-2026-43284 CVE-2026-435001

60

PAN-OS RCE Exploit Under Active Use Enabling Root Access and Espionage

The Hacker NewsMay 7, 17:58 UTC · May 7, 2026Vulnerability in the wildCVE-2026-0300

60

PhantomCore Exploits TrueConf Vulnerabilities to Breach Russian Networks

The Hacker NewsApr 27, 14:07 UTC · Apr 27, 2026Vulnerability

42

FIRESTARTER Backdoor Hit Federal Cisco Firepower Device, Survives Security Patches

The Hacker NewsApr 25, 08:20 UTC · Apr 25, 2026Vulnerability CVE-2025-20333 CVE-2025-20362

60

Marimo RCE Flaw CVE-2026-39987 Exploited Within 10 Hours of Disclosure

The Hacker NewsApr 24, 05:28 UTC · Apr 24, 2026Vulnerability in the wildCVE-2026-39987

60

CVE-2026-39987: Marimo RCE exploited in hours after disclosure

Security AffairsApr 11, 09:44 UTC · Apr 11, 2026Vulnerability in the wildCVE-2026-39987 CVE-2026-33017

60

CISA Orders US Government to Patch Maximum Severity Cisco Flaw

Infosecurity MagazineMar 23, 10:30 UTC · Mar 23, 2026Vulnerability in the wildCVE-2026-20131

60

Critical Unpatched Telnetd Flaw (CVE-2026

The Hacker NewsMar 20, 15:41 UTC · Mar 20, 2026Vulnerability in the wildCVE-2026-32746 CVE-2026-24061 CVE-2005-0469

60

Critical Zero-Click Flaw in n8n Allows Full Server Compromise

Infosecurity MagazineMar 12, 15:28 UTC · Mar 12, 2026Vulnerability CVE-2026-27493 CVE-2026-27577

60

SolarWinds Web Help Desk Exploited for RCE in Multi

The Hacker NewsMar 7, 07:03 UTC · Mar 7, 2026Vulnerability in the wildCVE-2025-40551 CVE-2025-40536 CVE-2025-26399+1 CVEs

60

Grandstream GXP1600 VoIP Phones Exposed to Unauthenticated Remote Code Execution

The Hacker NewsFeb 18, 16:35 UTC · Feb 18, 2026Vulnerability CVE-2026-2329

60

Malicious NGINX Configurations Enable Large

The Hacker NewsFeb 6, 11:32 UTC · Feb 6, 2026Vulnerability in the wildCVE-2025-551821

60

China-linked Amaranth-Dragon hackers target Southeast Asian governments in 2025

Security AffairsFeb 5, 10:09 UTC · Feb 5, 2026Vulnerability CVE-2025-8088

47

Cybersecurity jobs available right now: May 20, 2025

Help Net SecurityJan 30, 10:23 UTC · Jan 30, 2026Vulnerability

30

Cybersecurity jobs available right now: June 10, 2025

Help Net SecurityJan 30, 10:20 UTC · Jan 30, 2026Vulnerability

55

ThreatsDay Bulletin: Pixel Zero-Click, Redis RCE, China C2s, RAT Ads, Crypto Scams & 15+ Stories

The Hacker NewsJan 24, 08:04 UTC · Jan 24, 2026Vulnerability

55

React2Shell Vulnerability Actively Exploited to Deploy Linux Backdoors

The Hacker NewsDec 17, 07:26 UTC · Dec 17, 2025Vulnerability in the wildCVE-2025-55182 CVE-2025-29927 CVE-2025-66478

60

November 2025 CVE Landscape: 10 Critical Vulnerabilities Show 69% Drop from October

Recorded FutureDec 10, 00:00 UTC · Dec 10, 2025Vulnerability in the wildCVE-2025-64446 CVE-2025-58034 CVE-2025-21042+1 CVEs

60

AI-Enhanced Tuoni Framework Targets Major US Real Estate Firm

Infosecurity MagazineNov 18, 14:45 UTC · Nov 18, 2025Vulnerability

30

Attackers exploited another Gladinet Triofox vulnerability (CVE-2025-12480)

Help Net SecurityNov 11, 00:00 UTC · Nov 11, 2025Vulnerability CVE-2025-12480 CVE-2025-30406 CVE-2025-31161+1 CVEs

60

sqlmap: Open-source SQL injection and database takeover tool

Help Net SecurityNov 10, 00:00 UTC · Nov 10, 2025Vulnerability

30

Two Windows vulnerabilities, one a 0

Ars Technica · SecurityOct 31, 21:03 UTC · Oct 31, 2025Vulnerability in the wildCVE-2025-9491

60

CISA Orders Immediate Patch of Critical Sitecore Vulnerability Under Active Exploitation

The Hacker NewsSep 8, 14:09 UTC · Sep 8, 2025Vulnerability in the wildCVE-2025-53690 CVE-2025-30406 CVE-2025-3935

60

Hackers Exploit Critical CrushFTP Flaw to Gain Admin Access on Unpatched Servers

The Hacker NewsSep 2, 04:43 UTC · Sep 2, 2025Vulnerability in the wildCVE-2025-54309 CVE-2025-31161 CVE-2024-4040

60