Hackers exploit Check Point gateway flaws to deploy the TSGA backdoor, with some intrusions leading to destructive attacks on ESXi hosts.
Public SignDrop exploit code abuses Windows CLFS log authentication to enable local SYSTEM privilege escalation, with no ...
Nightmare Eclipse has dropped SignDrop, a Windows zero-day exploit that abuses CLFS and Defender to gain System privileges.
A public exploit chain called Plex2Shell is being used to compromise unpatched Plex Media Servers and install cryptocurrency ...
Palo Alto Networks firewalls running outdated OS seem to be the target, as Chinese hackers chain PHP2Shell to Fragnesia for the campaign.
PHP2Shell flaws face botnet attacks, but Sophos found only failed exploit attempts and no confirmed compromises.
SignDrop is a Windows zero-day that abuses CLFS security protections to let local attackers gain SYSTEM privileges and bypass defenses.
Two critical weaknesses in Barracuda Email Security Gateway (ESG) let unauthenticated attackers chain a pre-authentication ...
A week of testing by our research team found that working exploits had to be fitted to each target’s exact PHP setup. Systems that share one build, such as network appliances, are the ...