10 articles

#Exploitation

All CosmicBytez Labs articles tagged #Exploitation, across news, security advisories, how-to guides, and projects.

NewsOct 21, 2026
High-Severity Flaws Exploited in Three Days as Ransomware Dominates Q3: Rapid7
Rapid7's Q3 2026 report finds high-severity flaws are exploited about three days after disclosure, with AI operational in only 8% of tracked incidents.
NewsAug 13, 2026
Critical VMware vCenter RCE Flaw Exploited for Reverse SSH Access
CVE-2026-59310 is under active exploitation just 5 days after disclosure, with 361 victims across 47 countries receiving reverse SSH backdoors.
NewsAug 12, 2026
Hackers Exploit Critical Adobe Commerce Flaw to Hijack Customer Accounts
Active exploitation of CVE-2026-71362 in Adobe Commerce and Magento is underway, with attackers targeting customer account takeover on e-commerce storefronts.
NewsJul 19, 2026
SonicWall SMA 1000 Zero-Days Exploited in the Wild Before Public Disclosure
A previously undocumented threat actor tracked as UTA0215 by Volexity exploited multiple zero-day vulnerabilities in SonicWall Secure Mobile Access 1000...
NewsJul 11, 2026
Australia Warns of Global Campaign Targeting Vulnerable CMS Platforms
The Australian Cyber Security Centre has issued an alert about a coordinated global campaign actively exploiting unpatched vulnerabilities in WordPress,...
NewsJun 17, 2026
Attackers Hit Pair of Critical Fortinet Vulnerabilities the Vendor Disclosed in April
Multiple threat intelligence firms have confirmed active exploitation of two critical vulnerabilities in Fortinet's FortiSandbox product — security flaws...
NewsJun 6, 2026
Critical Everest Forms Pro Flaw Exploited to Take Over WordPress Sites
Hackers are actively exploiting a critical vulnerability (CVE-2026-3300) in the Everest Forms Pro WordPress plugin, enabling them to take complete control of…
NewsMay 31, 2026
WP Maps Pro Bug Exploited to Create Admin Accounts on WordPress Sites
Hackers are actively exploiting a critical vulnerability in the WP Maps Pro WordPress plugin that allows unauthenticated attackers to create rogue…
NewsMay 29, 2026
Critical FortiClient EMS Vulnerability Exploited in Fresh Attacks
Fortinet's April hotfix for the actively exploited CVE-2026-35616 FortiClient EMS flaw is now seeing renewed exploitation, as attackers continue targeting...
NewsMay 17, 2026
NGINX CVE-2026-42945 Exploited in the Wild, Causing Worker
A heap buffer overflow in NGINX's rewrite module is under active exploitation, days after disclosure. The CVSS 9.2 flaw impacts both NGINX Plus and Open...

High-Severity Flaws Exploited in Three Days as Ransomware Dominates Q3: Rapid7

Critical VMware vCenter RCE Flaw Exploited for Reverse SSH Access

Hackers Exploit Critical Adobe Commerce Flaw to Hijack Customer Accounts

SonicWall SMA 1000 Zero-Days Exploited in the Wild Before Public Disclosure

Australia Warns of Global Campaign Targeting Vulnerable CMS Platforms

Attackers Hit Pair of Critical Fortinet Vulnerabilities the Vendor Disclosed in April

Critical Everest Forms Pro Flaw Exploited to Take Over WordPress Sites

WP Maps Pro Bug Exploited to Create Admin Accounts on WordPress Sites

Critical FortiClient EMS Vulnerability Exploited in Fresh Attacks

NGINX CVE-2026-42945 Exploited in the Wild, Causing Worker