Vulnerability Overview
Exploitation Activity
Exploitation Intelligence
The NightEagle APT group (APT-Q-95) has escalated its cyberattacks against Russian organizations, employing sophisticated techniques for persistence and lateral movement. Utilizing stolen credentials, the group gains access to corporate VPNs, often routing through Cloudflare WARP tunnels linked to R...
Microsoft has patched a high-severity zero-day vulnerability in Exchange Server, tracked as CVE-2026-42897, which allows attackers to execute arbitrary JavaScript via crafted emails in Outlook Web Access. The flaw affects Exchange Server 2016, 2019, and Subscription Edition, enabling remote exploita...
Multiple vulnerabilities have been identified in D-Link and Microsoft products, allowing for remote code execution. CVE-2022-26258 affects the D-Link DIR-820L, while CVE-2016-3393 impacts Microsoft Windows GDI. Both vulnerabilities have been confirmed to be in the wild. D-Link's DNS-320 (CVE-2019-16...
The Ravin Academy, a training institution for Iranian state hackers, experienced a data breach that revealed the personal information of over 1,000 individuals associated with the academy. The leak was made public by British-Iranian activist Nariman Gharib on October 22. Established in 2019, the aca...