Stories tagged “Exploitation.”
30 stories
A critical vulnerability (CVE-2026-59310) in VMware vCenter Syslog Server is being exploited to deploy a reverse SSH tool for persistence and remote access. Compromises have been identified at 361 IP addresses across 47 countries.
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) warned that hackers are exploiting a critical-severity Progress Kemp LoadMaster command injection vulnerability. Kemp LoadMaster is a popular Application Delivery Controller (ADC) and server load balancer us…
A young Afghan migrant worker, Hayatullah, died in the desert after being abandoned by his smugglers. His last words were recorded in a video, where he asked his mother to pray for him and his family.
Young girls in Colombia are allegedly being recruited by 'sex chat' studios while still in school, with some starting as young as 17. These studios exploit loopholes to bypass age restrictions, using fake accounts to allow minors to work in the industry.
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has warned federal agencies of hackers exploiting vulnerabilities in IBM Langflow, N-central, and Apache Tomcat. The agency has given federal agencies three days to mitigate the vulnerabilities.
.png)
A woman's mugshot went viral after she was arrested for public intoxication, leading to a year of online harassment and judgment. The incident highlights the issue of social media and privacy, with many people sharing and commenting on mugshots without considering the con…
Multiple security updates were released for various Linux distributions on Tuesday, addressing vulnerabilities in packages such as frr, ldns, mingw-glib2, and perl-Archive-Tar.
Teacher in Fukui arrested for allegedly having sex with teenage girl at his home
A 24-year-old public school teacher in Fukui Prefecture has been arrested for allegedly having non-consensual sex with a teenage girl at his home. The incident came to light after the police were contacted by a relative of the girl.
Cisco warns of a high-severity Secure Firewall Management Center (FMC) static credential vulnerability, tracked as CVE-2026-20316, which was actively exploited in zero-day attacks to gain unauthorized access to vulnerable devices.
CISA Adds One Known Exploited Vulnerability to Catalog
CISA has added one new vulnerability to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation. The vulnerability is a use of hard-coded password in Cisco Secure Firewall Management Center.
Four men, aged between 28 and 45, are slated to be charged for allegedly providing a modified foodpanda application to foreigners to facilitate illegal platform work.
More than 24,000 internet-exposed servers are leaking authentication password hashes due to a 20-year-old vulnerability in their Baseboard Management Controller (BMC) interface. Researchers were able to find the correct password using dictionaries and the patterns on fact…
Arista has patched a maximum-severity command injection vulnerability in on-premises VeloCloud Orchestrator deployments that is being actively exploited in attacks.
CISA Adds Two Known Exploited Vulnerabilities to Catalog
CISA has added two new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation. The vulnerabilities are CVE-2025-68686 and CVE-2026-16812.
Singer D4vd, born David Anthony Burke, is accused of fatally stabbing 14-year-old Celeste Rivas Hernandez, whom he had impregnated at 13. Text messages indicate they discussed an abortion.
A 45-year-old physical education teacher in Singapore pleaded guilty to three counts of sexual penetration of a minor. He had a romantic relationship with a 14-year-old student and performed sexual acts on her on multiple occasions.
A 31-year-old woman was sentenced to six weeks’ jail for spending S$1,170 worth of Community Development Council (CDC) vouchers that belonged to two women. She had forwarded the voucher redemption links to her own mobile phone and utilised them on multiple occasions.
A nine-year-old race condition vulnerability in the Linux kernel's XFS filesystem, tracked as CVE-2026-64600, allows local attackers to overwrite protected files and gain root privileges.
Hackers are actively exploiting a critical vulnerability in Microsoft SharePoint to steal machine keys and maintain access even after affected servers are patched.
CISA Adds Four Known Exploited Vulnerabilities to Catalog
CISA has added four new vulnerabilities to its Known Exploited Vulnerabilities (KEV) Catalog, based on evidence of active exploitation. These vulnerabilities are frequent attack vectors for malicious cyber actors and pose significant risks to the federal enterprise.
Attackers have begun to exploit two critical vulnerabilities in WordPress that, when combined together, enable unauthenticated remote code execution (RCE) and complete compromise of vulnerable websites.
Attackers have begun exploiting a critical vulnerability (CVE-2026-6875) in the ServiceNow AI Platform, according to threat intelligence company Defused. The flaw allows unauthenticated threat actors to escape the sandbox and execute code remotely within the ServiceNow pl…
A previously undocumented threat actor has been attributed to the exploitation of recently disclosed SonicWall Secure Mobile Access (SMA) 1000 series VPN appliances as zero-days prior their public disclosure since June 22, 2026.
Andrew and Tristan Tate, British influencers, have been arrested in Miami after being incriminated for rape and human trafficking in the UK and Romania.
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has ordered federal agencies to secure their systems by Saturday against ongoing attacks exploiting a critical vulnerability in the Oracle E-Business Suite (EBS) financial application.
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) warned that attackers are actively exploiting three vulnerabilities to hack Internet-exposed on-premises SharePoint Server instances. CISA urged security teams to closely monitor affected servers for signs o…
Microsoft has released a record 622 security patches, including two zero-day vulnerabilities in SharePoint Server and Active Directory Federation Services that are already being exploited. The company has credited incident responders for discovering the flaws, which can b…
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has warned that attackers are exploiting vulnerabilities in the iCagenda and Balbooa Forms extensions for Joomla to achieve remote code execution through arbitrary file uploads.
The Australian Cyber Security Centre (ACSC) has issued an alert about a global exploitation campaign targeting vulnerable content management systems (CMS) and plugins. Many Australian businesses have already been affected by the malicious activity, with webshells being de…
Hackers are actively exploiting a critical vulnerability in the official Docker image for the Gitea self-hosted Git service that allows attackers to impersonate any user, including administrators.