SectionExploits
Attacks seen in the wild, breaches and campaigns.
New Defender Zero-Day ‘BigDiskBuster’ Freezes Antivirus Updates
Researcher Abdelhamid Naceri has released another unpatched Microsoft Defender exploit, this time a denial-of-service tool that silently blocks signature and platform updates…
BlueMoon Exploit Kit Chains Chrome and Windows Zero-Days Across Espionage Groups
Proofpoint says a newly discovered exploit kit combining two Chrome V8 zero-days and a Windows ALPC privilege escalation flaw was rapidly adopted…
Cisco FMC Bugs Exploited by Qilin Ransomware and Sandworm-Linked Hackers
Cisco Talos says three separate threat clusters, including ransomware affiliates and a group overlapping with the Russian Sandworm APT, exploited two Secure…
Berlin Rejects Ransom Demand After State Network Breach
Berlin's state government says it will not pay extortionists behind an August compromise of its administrative network, as forensic investigators uncover additional…
Pro-Russian Group Claims Multi-Day DDoS Assault on Norway’s Digital Services
The hacker group Server Killers says it launched the attack in retaliation for Norway's renewed security cooperation with Ukraine, hitting the Digitalization…
US Government Takes Down Chinese State-Linked Hacking Platform QTFY
The Justice Department and FBI dismantled infrastructure behind QScan and QTRouter, tools tied to a Chinese company that allegedly hit US military,…
Iran-Linked Hackers Knocked Out UK Power Plant for Four Days
A British power generator was reportedly offline for four days in July after an Iran-linked cyberattack, with details only emerging weeks later…
U.S. Bancorp Denies Network Breach After LockBit Lists Bank as Victim
U.S. Bancorp says a LockBit ransomware claim traces back to a fourth-party incident outside its own environment, with no evidence its systems,…
UT San Antonio Takes Systems Offline After Cyberattack Days Before Classes
UTSA detected threat activity on its network over the weekend and pulled systems, including phones, offline, forcing payment and password reset delays…
Clop’s Custom-Built Web Shell Targets PTC Windchill Internals Directly
ReliaQuest found that a JSP web shell used in recent Windchill data-theft attacks was purpose-built to abuse the application's own credential-decryption and…
Attackers Exploit Patched macOS Screen Sharing Flaw to Plant Cryptominers
A high-severity authentication bypass in Apple's Screen Sharing daemon is being actively exploited to gain root access and install Monero miners on…
DDoS Barrage Knocks Threema Secure Messaging Offline for Days
A sustained, tactic-shifting DDoS campaign disrupted the Swiss encrypted messaging service and its colocation partner Nine, leaving users in Switzerland, India and…