A critical vulnerability (CVE-2026-1281) in Ivanti's EPMM platform is being actively exploited, with attackers implanting hidden, dormant backdoors that are…
Read More »Shadowserver Foundation
Entity category: organization
The RondoDox botnet is actively exploiting the critical React2Shell vulnerability (CVE-2025-55182) to compromise Next.js servers, deploying malware and cryptocurrency miners.…
Read More »
A Chinese state-sponsored hacking campaign is exploiting a critical zero-day vulnerability (CVE-2025-20393) in Cisco's Secure Email Gateway and Web Manager…
Read More »
Over 266,000 F5 BIG-IP systems are exposed online and vulnerable to remote attacks following a security breach by nation-state hackers…
Read More »
A critical vulnerability (CVE-2025-10035) in Fortra's GoAnywhere MFT platform is being exploited by ransomware attackers, allowing remote access without user…
Read More »
A critical vulnerability (CVE-2025-10035) in Fortra's GoAnywhere platform allows unauthenticated attackers to execute remote code, prompting urgent patching and removal…
Read More »
Fortra has issued an urgent alert for a critical vulnerability (CVE-2025-10035) in GoAnywhere MFT software, allowing remote command injection due…
Read More »
AI-powered tools like HexStrike-AI are being repurposed by cybercriminals to automate attacks, drastically reducing the time between vulnerability disclosure and…
Read More »
Over 800 N-able N-central servers remain vulnerable to two actively exploited critical flaws, CVE-2025-8875 and CVE-2025-8876, allowing attackers to execute…
Read More »
Pennsylvania’s Attorney General office experienced a major cyberattack, disrupting email, phone lines, and its website, forcing staff to operate with…
Read More »
Over 3,300 Citrix NetScaler systems remain unpatched against CVE-2025-5777 (CitrixBleed 2), exposing organizations to session hijacking and data theft despite…
Read More »
The Common Good Cyber Fund is a new initiative to bolster cybersecurity for non-profits serving public interest, focusing on critical…
Read More »
The Common Good Cyber Fund is a collaborative initiative aiming to strengthen global cybersecurity for vulnerable communities, with a goal…
Read More »
Qilin ransomware attacks are exploiting critical Fortinet vulnerabilities (CVE-2024-21762 and CVE-2024-55591), targeting unpatched devices and posing risks to organizations globally.…
Read More »