SonicWall SMA Zero-Days Exploited Before Disclosure to Gain Root Access
A previously undocumented threat actor, tracked as UTA0533 by Volexity, exploited two zero-day vulnerabilities in SonicWall Secure Mobile Access (SMA) 1000 series…
Tag: web shell
Weekly Cybersecurity Recap: ShareFile Threat, Citrix Bleed 2 Ransomware, AI Coding Attacks, and More
This week's cybersecurity landscape is marked by a series of critical threats and vulnerabilities. Progress has urged ShareFile customers to shut down…
SHELLSTORM: Large-Scale Web Shell Access Brokerage Operation
SHELLSTORM is a large-scale operation that exploited 27 CVEs in WordPress plugins to deploy web shells on over 1.4 million domains. The…
iCagenda and Balbooa Forms Joomla Flaws Exploited as Zero-Days; CISA Adds to KEV Catalog
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added two maximum-severity vulnerabilities affecting iCagenda and Balbooa Forms extensions for Joomla to…
CVE-2025-6389: Sneeit Framework Vulnerability
A vulnerability in the Sneeit Framework exploited in a global CMS campaign for web shell deployment.
CVE-2025-12352: Gravity Forms WordPress Plugin Vulnerability
A vulnerability in the Gravity Forms WordPress plugin exploited in a global CMS campaign for web shell deployment.
CVE-2025-32432: Craft CMS Vulnerability
A vulnerability in Craft CMS exploited in a global CMS campaign for web shell deployment.
CVE-2026-3395: MaxSite CMS Vulnerability
A vulnerability in MaxSite CMS exploited in a global CMS campaign for web shell deployment.
CVE-2026-29014: MetInfo CMS Vulnerability
A vulnerability in MetInfo CMS exploited in a global CMS campaign for web shell deployment.
Australian Cyber Security Centre (ACSC)
Australian agency that issued an alert about a global exploitation campaign targeting vulnerable CMS systems and plugins, including web shell deployment.