Collaborate Disseminate
The proof-of-concept (PoC) exploits lead to privilege escalation, spawning a shell with System privileges.
The post Nightmare Eclipse Drops CrowdStrike, Nvidia, Avast Zero-Day Exploits appeared first on SecurityWeek.
Continue reading Nightmare Eclipse Drops CrowdStrike, Nvidia, Avast Zero-Day Exploits
The stealthy toolkit embeds a backdoor in HAProxy and targets automotive and media organizations in South Korea for long-term surveillance.
The post North Korean Hackers Deploy New Linux Espionage Toolkit appeared first on SecurityWeek.
Continue reading North Korean Hackers Deploy New Linux Espionage Toolkit
The StyleSmuggler zero-day allows attackers to execute code and deploy a stealthy backdoor on Adobe Commerce and Magento stores.
The post Adobe Commerce Zero-Day Exploited to Backdoor Online Stores appeared first on SecurityWeek.
Continue reading Adobe Commerce Zero-Day Exploited to Backdoor Online Stores
The attacks rely on backdoored ScreenConnect instances to transfer and execute payloads to newly connected clients.
The post Modified ScreenConnect Clients Used in Worm-Like Campaign appeared first on SecurityWeek.
Continue reading Modified ScreenConnect Clients Used in Worm-Like Campaign
Tracked as CVE-2026-32475 (CVSS score of 9.8), the bug described as an arbitrary file upload issue in the function that handles form submissions.
The post Elementor Pro WordPress Plugin Vulnerability Exploited to Hack Sites appeared first on SecurityWe… Continue reading Elementor Pro WordPress Plugin Vulnerability Exploited to Hack Sites
Nearly two dozen issues, tracked collectively as CVE-2026-73749 (CVSS score of 9.8), were addressed with the updates.
The post HPE Patches Critical RCE Vulnerabilities in AOS-CX appeared first on SecurityWeek.
Continue reading HPE Patches Critical RCE Vulnerabilities in AOS-CX
Tracked as CVE-2026-9586, the unauthenticated SQL injection flaw can be exploited remotely for arbitrary code execution.
The post Sangoma Switchvox Vulnerabilities Exploited in the Wild appeared first on SecurityWeek.
Continue reading Sangoma Switchvox Vulnerabilities Exploited in the Wild
Dubbed PostGREShell, CVE-2026-6471 turns low-level replication access into code execution, permanent superuser privileges and a persistent database backdoor.
The post 12-Year-Old PostgreSQL Vulnerability Enables Database, Server Takeover appeared first… Continue reading 12-Year-Old PostgreSQL Vulnerability Enables Database, Server Takeover
The flaws could allow attackers with administrative access to a virtual machine to execute code on the host system.
The post VMware Workstation and Fusion Updates Patch Critical Vulnerability appeared first on SecurityWeek.
Continue reading VMware Workstation and Fusion Updates Patch Critical Vulnerability
Google’s Chrome 152 security update resolves 12 vulnerabilities, including a high-severity type confusion flaw in the V8 engine.
The post Google Patches 6th Chrome Zero-Day of 2026 appeared first on SecurityWeek.
Continue reading Google Patches 6th Chrome Zero-Day of 2026