4 groups caught using the same Chrome and Windows exploit kit

A nearly identical exploit kit that targets critical vulnerabilities in both Chromium-based browsers and older versions of ...
SecurityWeek

Nightmare Eclipse Drops CrowdStrike, Nvidia, Avast Zero-Day Exploits

Nightmare Eclipse has dropped three zero-day exploits targeting Avast, CrowdStrike, and Nvidia products for privilege ...
Security Boulevard

Researcher Releases Exploit of Claimed CrowdStrike Falcon Zero-Day

Chaotic Eclipse, a security researcher and Microsoft nemesis, released a PoC exploit for a zero-day flaw that they claim will ...
BetaNews

Zero-Day Windows Shell Exploit Emerges

Microsoft confirmed the existence Thursday of a vulnerability affecting the Windows Shell feature in Windows XP, 2000, and 2003. The issue exists in the WebViewFolderIcon ActiveX control, and ...
SecurityWeek

Nightmare Eclipse Drops ‘HardBreacher’ Kaspersky Product Exploit

Nightmare Eclipse has dropped a zero-day targeting a privilege escalation vulnerability in a Kaspersky endpoint security ...
techtarget

Lessons learned: Network security implications of Shellshock

Now that the hype over the Shellshock vulnerability has settled, we can step back and get a clearer look at the exploit and its network security implications on the enterprise. So why will Shellshock ...

Hackers exploit Sangoma Switchvox flaw to deploy reverse shells

Attackers are actively exploiting CVE-2026-9586, an unauthenticated SQL injection vulnerability in the Sangoma Switchvox VoIP platform that can lead to remote code execution.