Vulnerability Overview
Exploitation Activity
Exploitation Intelligence
A Russian-speaking operator has been identified using a custom Docker project named camview to exploit and stream IP cameras in Ukraine. The tool, built with FastAPI, wraps the open-source Ingram scanner and employs a 3,811-entry dictionary to brute-force camera credentials over HTTP and RTSP. The o...
FortiGuard Labs has identified a new Linux botnet named Evooo1Bot, which is based on the Mirai malware framework. This botnet targets internet-facing edge devices, exploiting multiple vulnerabilities since July 2026. The botnet utilizes a loader script at 91.92.40[.]118/wget.sh to download and execu...
Hackers have targeted Hikvision surveillance devices in Ukraine, exploiting a critical command injection vulnerability (CVE-2021-36260) during a surge of Russian missile and drone strikes. GreyNoise reported a nine-day increase in exploitation attempts from September 23 to October 1, 2026, with acti...
A public exploit for CVE-2025-40778, a critical vulnerability in BIND 9, has been released, enabling DNS cache poisoning and traffic redirection. This flaw affects the widely used Domain Name System software, posing risks to global internet infrastructure. Cybersecurity professionals are urged to ta...
