Vulnerabilities & Exploits

The Ninja Forms vulnerability is under active exploitation, enabling unauthenticated takeover of WordPress sites running the popular form builder. The flaw is tracked as CVE-2024-43917. The widely deployed …

Ivanti zero-day vulnerabilities in Connect Secure and Policy Secure are being actively exploited, prompting urgent patching and incident response across enterprises. Attackers are chaining flaws for full compromise. …

The Flowise vulnerability is under active exploitation, with attackers scanning and compromising exposed instances for remote code execution and secret theft. Security teams should act immediately. Verified incidents …

The Android Strongbox vulnerability has been fixed by Google with patches for CVE-2024-31317, restoring hardware-backed keystore protections on supported devices. The flaw affects StrongBox Keymaster, which secures cryptographic …

Grafana vulnerability researchers disclosed GrafanaGhost (CVE-2024-9264), a flaw that enables unauthorized data access via abused dashboard and data source functions. The issue affects multi-tenant and legacy Grafana environments …

GPU rowhammer attack researchers disclosed GPUBreach, a practical technique that flips DRAM bits from the GPU and chains the fault with an AMD driver bug to gain root …

Medusa Ransomware is increasingly leveraging unpatched vulnerabilities to gain initial access and accelerate enterprise compromise. Recent incident analyses show a clear pivot from email-led intrusion to vulnerability-driven break-ins …

QNAP vulnerabilities Pwn2Own prompted urgent action this week as QNAP released firmware updates for four flaws exploited during the contest. The issues impact QTS across numerous NAS models. …

Chrome security vulnerabilities prompted a new Google Chrome Stable channel release for Windows, macOS, and Linux, addressing multiple high-severity flaws. Administrators should deploy patches immediately. The update reduces …

iOS security vulnerabilities have been added to the CISA KEV catalog following confirmed links to the Coruna exploit kit. The listing indicates active exploitation and available patches. The …