PaperCut Zero-Day Exploited in Attacks, Affecting All NG and MF Versions
PaperCut Zero-Day Exploited in Attacks, Affecting All NG and MF Versions Ravie LakshmananAug 28, 2026Vulnerability / Enterprise Security PaperCut has alerted customers…
PaperCut Zero-Day Exploited in Attacks, Affecting All NG and MF Versions Ravie LakshmananAug 28, 2026Vulnerability / Enterprise Security PaperCut has alerted customers…
ThreatsDay: 296K IoT Botnet, 100+ Water Systems Targeted, SharePoint RCE Chain + 27 New Stories Ravie LakshmananAug 27, 2026Hacking News / Cybersecurity…
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a critical remote code execution vulnerability in Gitea, tracked as CVE-2026-60004 (CVSS…
UAT-10147 Uses AI to Scale Server Attacks, Deploys SPECTRE With EDR Bypass and Linux Rootkit Ravie LakshmananAug 24, 2026Cybercrime / Malware Cybersecurity…
ThreatsDay: Gogs 10.0 RCE, n8n Workflow-to-RCE, $10M Reward, GLM-5.3 AI Exploit and More Ravie LakshmananAug 20, 2026Hacking News / Cybersecurity News A…
The S7-300 Series, including models 314, 315, and 317, are singled out in the advisory. Threat actors use AI to generate scripts…
Specific CPU variants (1211C, 1212C, 1214C, 1215C, 1217C) of the S7-1200 Series are targeted. These PLCs are often internet-exposed and vulnerable to…
Threat actors use snap7.dll, an open-source library for S7 communication, to create scripts that mimic legitimate monitoring tools and gain unauthorized access…
p2pwn is a public proof-of-concept tool that accepts Dahua serial numbers as input and checks for CVE-2021-33044 and CVE-2021-33045. It contains a…
⚡ Weekly Recap: VMware Exploits, Windows 0-Day, MCP Attacks, Browser Hijacks and More Ravie LakshmananAug 17, 2026Cybersecurity / Hacking The expensive attacks…