Search: “Shadowserver Foundation”

81 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Vulnerability 81 Exploit / PoC 67 Ransomware 48 Malware 46 Data breach 12 Phishing & fraud 10 Threat actor 7 Industry 3 Advisory 3 Policy & legal 2 AI tools & infra 1 Tools 1 Model release 1

SeverityAll critical 201 high 53 medium 19 low 5 info 4

CrushFTP Vulnerability Exploited Following Disclosure Issues

Infosecurity MagazineApr 3, 16:00 UTC · Apr 3, 2025Vulnerability in the wildCVE-2025-31161 CVE-2025-2825

60

A daily average of 80,000 printers exposed online via IPP

Security AffairsJun 23, 13:16 UTC · Jun 23, 2020Vulnerability

30

Tens of thousands of IPs vulnerable to Fortinet flaw dubbed 'must patch' by feds

CyberScoopOct 14, 16:22 UTC · Oct 14, 2024Vulnerability in the wild

60

New MOVEit Transfer critical bug is actively exploited

Security AffairsJun 26, 19:54 UTC · Jun 26, 2024Vulnerability in the wildCVE-2024-5805 CVE-2024-5806

60

Over 80,000 servers hit as roundcube RCE bug gets rapidly exploited

Security AffairsJun 11, 11:43 UTC · Jun 11, 2025Vulnerability CVE-2025-49113

60

CISA: Patch Critical GeoServer GeoTools Bug Now

Infosecurity MagazineJul 17, 09:30 UTC · Jul 17, 2024Vulnerability in the wildCVE-2024-36401

60

CVE-2026-10520 Exploited: Ivanti Sentry Gateways Compromised Shortly After Patch Release

Security AffairsJun 12, 18:42 UTC · Jun 12, 2026Vulnerability in the wildCVE-2026-10520 CVE-2026-1340 CVE-2026-1603

60

Week in review: Veeam Service Provider Console flaws fixed, Patch Tuesday forecast

Help Net SecurityDec 8, 00:00 UTC · Dec 8, 2024Vulnerability CVE-2024-42448 CVE-2024-42449 CVE-2024-41713+1 CVEs

60

Over 28,000 Citrix instances remain exposed to critical RCE flaw CVE-2025

Security AffairsAug 27, 19:05 UTC · Aug 27, 2025Vulnerability in the wildCVE-2025-7775 CVE-2025-7776 CVE-2025-8424

60

Citrix Patches Three Zero Days as One Sees Active Exploitation

Infosecurity MagazineAug 27, 11:10 UTC · Aug 27, 2025Vulnerability in the wildCVE-2025-7775 CVE-2025-7776 CVE-2025-8424+1 CVEs

60

Attackers Exploit RCE Flaw as 14,000 F5 BIG

Security AffairsApr 6, 13:08 UTC · Apr 6, 2026Vulnerability in the wildCVE-2025-53521

60

PHP addressed critical RCE potentially impacting millions of servers

Security AffairsJun 9, 13:27 UTC · Jun 9, 2024Vulnerability CVE-2024-4577 CVE-2012-1823

60

Alert: Hackers Actively Exploiting Critical "Control Web Panel" RCE Vulnerability

The Hacker NewsJan 12, 08:49 UTC · Jan 12, 2023Vulnerability in the wildCVE-2022-44877

60

New Ivanti Vulnerability Observed as Widespread Security Concerns Grow

Infosecurity MagazineFeb 16, 15:45 UTC · Feb 16, 2024Vulnerability in the wildCVE-2024-22024 CVE-2023-46805 CVE-2024-21887+2 CVEs

60

Ivanti Connect Secure flaw massively exploited by attackers (CVE-2024-21893)

Help Net SecurityFeb 7, 00:00 UTC · Feb 7, 2024Vulnerability CVE-2024-21893 CVE-2024-21888 CVE-2023-46805+1 CVEs

60

Critical Fortinet FortiOS bug CVE-2024-21762 potentially impact 150,000 internet

Security AffairsMar 12, 14:56 UTC · Mar 12, 2024Vulnerability in the wildCVE-2024-21762

60

Critical Apache HugeGraph Vulnerability Under Attack

The Hacker NewsJul 17, 05:25 UTC · Jul 17, 2024Vulnerability in the wildCVE-2024-27348

60

Over 20,000 Zyxel Firewalls Still Exposed to Critical Bug

Infosecurity MagazineMay 16, 09:30 UTC · May 16, 2022Vulnerability in the wildCVE-2022-30525

60

Over 1,200 IceWarp servers still vulnerable to unauthenticated RCE flaw (CVE-2025-14500)

Help Net SecurityMar 4, 00:00 UTC · Mar 4, 2026Vulnerability in the wildCVE-2025-145001

60

Researchers, NSA cybersecurity director warn of hackers targeting Zyxel vulnerability

The RecordJan 12, 00:00 UTC · Jan 12, 2023Vulnerability in the wildCVE-2022-30525

60

Critical SAP NetWeaver flaw exploited by suspected initial access broker (CVE-2025-31324)

Help Net SecurityAug 20, 08:46 UTC · Aug 20, 2025Vulnerability in the wildCVE-2025-31324

60

Attackers exploit critical Adobe ColdFusion vulnerability (CVE-2026-48282)

Help Net SecurityJul 7, 00:00 UTC · Jul 7, 2026Vulnerability in the wildCVE-2026-48282

60

Ivanti, Fortinet, and SAP Release Patches for Multiple Critical Vulnerabilities

The Hacker NewsJun 12, 18:42 UTC · Jun 12, 2026Vulnerability in the wildCVE-2026-25089 CVE-2026-10520 CVE-2026-10523+4 CVEs

60

CrushFTP: Patch critical vulnerability ASAP! (CVE-2025-2825)

Help Net SecurityJun 8, 10:31 UTC · Jun 8, 2026Vulnerability in the wildCVE-2025-2825

60

Critical CrushFTP vulnerability exploited. Have you been targeted? (CVE-2025-54309)

Help Net SecurityJun 8, 10:30 UTC · Jun 8, 2026Vulnerability CVE-2025-54309 CVE-2024-4040 CVE-2025-2825

60

New cPanel vulnerabilities could allow file access and remote code execution

Security AffairsMay 10, 16:00 UTC · May 10, 2026Vulnerability in the wildCVE-2026-29201 CVE-2026-29202 CVE-2026-29203+1 CVEs

60

Weaver E-cology RCE Flaw CVE-2026

The Hacker NewsMay 6, 01:14 UTC · May 6, 2026Vulnerability in the wildCVE-2026-22679

60

Critical cPanel Vulnerability Weaponized to Target Government and MSP Networks

The Hacker NewsMay 4, 16:03 UTC · May 4, 2026Vulnerability CVE-2026-41940

60

Multiple threat actors actively exploit cPanel vulnerability (CVE-2026-41940)

Help Net SecurityMay 4, 00:00 UTC · May 4, 2026Vulnerability CVE-2026-41940

60

CISA Flags Actively Exploited n8n RCE Bug as 24,700 Instances Remain Exposed

The Hacker NewsMar 12, 05:18 UTC · Mar 12, 2026Vulnerability in the wildCVE-2025-68613 CVE-2026-27577

60

Week in review: Weaponized OAuth redirection logic delivers malware, Patch Tuesday forecast

Help Net SecurityMar 8, 00:00 UTC · Mar 8, 2026Vulnerability CVE-2025-14500 CVE-2026-28289 CVE-2026-20128+1 CVEs

60

CVE-2025-64328 exploitation impacts 900 Sangoma FreePBX instances

Security AffairsMar 1, 10:01 UTC · Mar 1, 2026Vulnerability in the wildCVE-2025-64328

60

Roundcube RCE: Dark web activity signals imminent attacks (CVE-2025-49113)

Help Net SecurityFeb 23, 10:54 UTC · Feb 23, 2026Vulnerability in the wildCVE-2025-49113 CVE-2024-42009 CVE-2025-68461

60

Week in review: Exploited newly patched BeyondTrust RCE, United Airlines CISO on building resilience

Help Net SecurityFeb 15, 00:00 UTC · Feb 15, 2026Vulnerability in the wildCVE-2026-1731 CVE-2024-12356 CVE-2026-1281+2 CVEs

60

Two High-Severity n8n Flaws Allow Authenticated Remote Code Execution

The Hacker NewsJan 29, 16:54 UTC · Jan 29, 2026Vulnerability CVE-2026-1470 CVE-2026-0863 CVE-2026-21858

47

Ongoing Attacks Exploiting Critical RCE Vulnerability in Legacy D

The Hacker NewsJan 7, 09:23 UTC · Jan 7, 2026Vulnerability in the wildCVE-2026-0625

60

⚡ Weekly Recap: IoT Exploits, Wallet Breaches, Rogue Extensions, AI Abuse & More

The Hacker NewsJan 5, 12:56 UTC · Jan 5, 2026Vulnerability CVE-2025-55182 CVE-2025-13915 CVE-2025-52691+7 CVEs

60

Fortinet Warns of Active Exploitation of FortiOS SSL VPN 2FA Bypass Vulnerability

The Hacker NewsJan 3, 08:24 UTC · Jan 3, 2026Vulnerability in the wildCVE-2020-12812

60

WatchGuard Warns of Active Exploitation of Critical Fireware OS VPN Vulnerability

The Hacker NewsDec 23, 04:10 UTC · Dec 23, 2025Vulnerability in the wildCVE-2025-14733 CVE-2025-59718 CVE-2025-59719+1 CVEs

60

React2Shell Vulnerability Actively Exploited to Deploy Linux Backdoors

The Hacker NewsDec 17, 07:26 UTC · Dec 17, 2025Vulnerability in the wildCVE-2025-55182 CVE-2025-29927 CVE-2025-66478

60