Attackers chain two PaperCut NG and MF flaws for unauthenticated remote code execution, with limited exploitation seen in two ...
PostgreSQL vulnerability CVE-2026-6471 allows low-privileged attackers to execute code, gain PostgreSQL superuser access and ...
Microsoft Threat Intelligence provides analysis of a ClickFix campaign that uses fake CAPTCHA prompts, DLL sideloading, and a reverse tunnel, with detections and hunting guidance.
A new ClickFix variant dubbed TerminalFix uses fake Cloudflare CAPTCHA prompts on compromised websites to trick victims into ...
Microsoft Threat Intelligence observed a human-operated intrusion campaign that abuses Microsoft Teams external collaboration to impersonate IT support, gain remote access, and deploy a Node.js-based ...
The flaw that had gone unnoticed since 2014 could let attackers with low-privileged replication access execute code, gain ...
A StopAndProtect cybercrime campaign compromised nearly 2,000 WordPress websites, turning them into infrastructure to spread malware, steal data and control infected devices ...
PostGREShell (CVE-2026-6471) is a 12-year-old PostgreSQL flaw that lets low-privileged attackers execute code and take over ...
A critical PostgreSQL vulnerability dubbed PostGREShell could allow low-privileged backup and replication accounts to execute ...
PostGREShell is a 12-year-old PostgreSQL flaw that could enable arbitrary code execution through low-level replication access.
The ClickFix-style campaign features a sophisticated, multistage attack chain that includes reverse tunnels into victim ...
August’s Patch Tuesday is a big one: 751 fixes, an exploited WinSock flaw and plenty of critical Windows, Office and Exchange issues.
Some results have been hidden because they may be inaccessible to you
Show inaccessible results