Infosecurity Magazine

Cyber Threat Actors Ramp Up Attacks on Industrial Environments

Hacktivists and cybercriminals have intensified their efforts to exploit vulnerabilities in industrial systems, according to ...

This Microsoft Copilot vulnerability only requires a single click, and your personal data could be stolen

The good news is that the exploit has already been reported to Microsoft way back in August of 2025, and has been patched ...
SecurityWeek

Exploit for VMware Zero-Day Flaws Likely Built a Year Before Public Disclosure

Analysis of a recent attack targeting VMware ESXi vulnerabilities from March 2025 revealed an exploit developed a year before ...
CSO Online

Researchers warn of long‑running FortiSIEM root exploit vector as new CVE emerges

The latest phMonitor vulnerability continues a multiyear pattern of unauthenticated command‑injection flaws in Fortinet’s ...
Security Boulevard

CVE-2025-64155: Exploit Code Released for Critical Fortinet FortiSIEM Command Injection Vulnerability

Exploit code has been published for CVE-2025-64155, a critical command injection vulnerability affecting Fortinet FortiSIEM ...

VMware ESXi zero-days likely exploited a year before disclosure

Chinese-speaking threat actors used a compromised SonicWall VPN appliance to deliver a VMware ESXi exploit toolkit that seems to have been developed more than a year before the targeted ...

PS5 Hack from Old Disc Sparks Homebrew Hype : Star Wars Racer Disc Exploit

A PS4 Star Wars Racer Revenge disc can trigger a PS5 exploit on 12.0 or lower. Prices for Racer Revenge spiked after the ...

"MongoBleed": Exploit for critical vulnerability in MongoDB makes attacks easier

Those responsible for a MongoDB instance cannot rest easy: an exploit for a critical vulnerability makes upgrades even more urgent now.

Cisco warns of Identity Service Engine flaw with exploit code

Cisco has patched an ISE vulnerability with public proof-of-concept exploit code that can be abused by attackers with admin ...
TechRepublic

Threat Actors Are Exploiting Vulnerabilities Faster Than Ever

New research by cybersecurity firm Mandiant provides eyebrow-raising statistics on the exploitation of vulnerabilities by attackers, based on an analysis of 138 different exploited vulnerabilities ...

Truebit exploit exposes smart-contract flaw behind $26M token mint

The $26 million Truebit hack occurred due to a smart contract vulnerability related to a prior version of Solidity, according ...

Vulnerability in Identity Service Engine with exploit code patched by Cisco

Cisco has patched a medium-severity vulnerability in Identity Services Engine (ISE) and ISE Passive Identity Connector ...