Stories tagged “Exploitation.”
30 stories
A New Zealand court has jailed a religious sect leader, Kaixiao Liu, over the death of an elderly follower, Shulai Wang, who had travelled from China to live with his family.
Hackers are attempting to exploit two critical authentication bypass vulnerabilities in the miniOrange SAML 2.0 Single Sign On plugin for WordPress. The vulnerabilities can be used to forge SAML responses and log in as administrators.
The Cybersecurity and Infrastructure Security Agency (CISA) has ordered U.S. government agencies to patch an actively exploited vulnerability in Zimbra Collaboration Suite (ZCS) within three days. The Zimbra security team patched the security flaw (tracked as CVE-2026-735…
The Cybersecurity and Infrastructure Security Agency (CISA) warned federal agencies that threat actors are now exploiting a critical MLflow vulnerability. This vulnerability can be used by attackers without privileges to remotely access internal services or cloud metadata…
CISA Adds Four Known Exploited Vulnerabilities to Catalog
CISA has added four new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation. These types of vulnerabilities are a frequent attack vector for malicious cyber actors and pose significant risks to the federal enterpr…
The Netherlands' NCSC warned of active exploitation of a macOS Screen Sharing vulnerability across systems with port 5900 exposed to the internet, where attackers gained root access and installed Monero mining programs.
A maximum-severity SAP Commerce Cloud remote code execution vulnerability patched three days ago is already being targeted in attacks, according to threat intelligence company Defused.
The new film One Night Only by Will Gluck follows a bonkers premise: the U.S. government has outlawed premarital sex, and the only exception is during one 12-hour window every year. The movie captures something true about the anxieties and pressures of modern singlehood, …
A critical vulnerability (CVE-2026-59310) in VMware vCenter Syslog Server is being exploited to deploy a reverse SSH tool for persistence and remote access. Compromises have been identified at 361 IP addresses across 47 countries.
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) warned that hackers are exploiting a critical-severity Progress Kemp LoadMaster command injection vulnerability. Kemp LoadMaster is a popular Application Delivery Controller (ADC) and server load balancer us…
A young Afghan migrant worker, Hayatullah, died in the desert after being abandoned by his smugglers. His last words were recorded in a video, where he asked his mother to pray for him and his family.
Young girls in Colombia are allegedly being recruited by 'sex chat' studios while still in school, with some starting as young as 17. These studios exploit loopholes to bypass age restrictions, using fake accounts to allow minors to work in the industry.
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has warned federal agencies of hackers exploiting vulnerabilities in IBM Langflow, N-central, and Apache Tomcat. The agency has given federal agencies three days to mitigate the vulnerabilities.
.png)
A woman's mugshot went viral after she was arrested for public intoxication, leading to a year of online harassment and judgment. The incident highlights the issue of social media and privacy, with many people sharing and commenting on mugshots without considering the con…
Multiple security updates were released for various Linux distributions on Tuesday, addressing vulnerabilities in packages such as frr, ldns, mingw-glib2, and perl-Archive-Tar.
Teacher in Fukui arrested for allegedly having sex with teenage girl at his home
A 24-year-old public school teacher in Fukui Prefecture has been arrested for allegedly having non-consensual sex with a teenage girl at his home. The incident came to light after the police were contacted by a relative of the girl.
Cisco warns of a high-severity Secure Firewall Management Center (FMC) static credential vulnerability, tracked as CVE-2026-20316, which was actively exploited in zero-day attacks to gain unauthorized access to vulnerable devices.
CISA Adds One Known Exploited Vulnerability to Catalog
CISA has added one new vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation. The vulnerability is a use of hard-coded password in Cisco Secure Firewall Management Center.
Four men, aged between 28 and 45, are slated to be charged for allegedly providing a modified foodpanda application to foreigners to facilitate illegal platform work.
More than 24,000 internet-exposed servers are leaking authentication password hashes due to a 20-year-old vulnerability in their Baseboard Management Controller (BMC) interface. Researchers were able to find the correct password using dictionaries and the patterns on fact…
Arista has patched a maximum-severity command injection vulnerability in on-premises VeloCloud Orchestrator deployments that is being actively exploited in attacks.
CISA Adds Two Known Exploited Vulnerabilities to Catalog
CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation. The vulnerabilities are CVE-2025-68686 and CVE-2026-16812.
Singer D4vd, born David Anthony Burke, is accused of fatally stabbing 14-year-old Celeste Rivas Hernandez, whom he had impregnated at 13. Text messages indicate they discussed an abortion.
A 45-year-old physical education teacher in Singapore pleaded guilty to three counts of sexual penetration of a minor. He had a romantic relationship with a 14-year-old student and performed sexual acts on her on multiple occasions.
A 31-year-old woman was sentenced to six weeks’ jail for spending S$1,170 worth of Community Development Council (CDC) vouchers that belonged to two women. She had forwarded the voucher redemption links to her own mobile phone and utilised them on multiple occasions.
A nine-year-old race condition vulnerability in the Linux kernel's XFS filesystem, tracked as CVE-2026-64600, allows local attackers to overwrite protected files and gain root privileges.
Hackers are actively exploiting a critical vulnerability in Microsoft SharePoint to steal machine keys and maintain access even after affected servers are patched.
CISA Adds Four Known Exploited Vulnerabilities to Catalog
CISA has added four new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation. These vulnerabilities are frequent attack vectors for malicious cyber actors and pose significant risks to the federal enterprise.
Attackers have begun to exploit two critical vulnerabilities in WordPress that, when combined together, enable unauthenticated remote code execution (RCE) and complete compromise of vulnerable websites.
Attackers have begun exploiting a critical vulnerability (CVE-2026-6875) in the ServiceNow AI Platform, according to threat intelligence company Defused. The flaw allows unauthenticated threat actors to escape the sandbox and execute code remotely within the ServiceNow pl…