Active vulnerabilities, advisories, and threat intelligence — filtered for IT practitioners.
Successful exploitation of these vulnerabilities could allow a non-privileged user to escalate privileges or view the credentials of other users. The following versions of Weintek cMT3092X are affected: cMT3092X firmw...
A sandbox escape in Google Chrome was exploited as a zero-day in a targeted espionage campaign against media organizations, educational institutions, and government entities in Russia.
A Windows Management Console security feature bypass was exploited by the Russian-linked Water Gamayun group to execute malicious .msc files, bypassing Windows file reputation and MotW protections.
Scattered Spider (UNC3944) continues to compromise Fortune 500 companies by impersonating employees to IT help desks and exploiting SIM swapping — even after MGM and Caesars breaches drew federal attention.
