Vulnerability Overview
Exploitation Activity
Exploitation Intelligence
Recent cybersecurity reports detail the exploitation of software vulnerabilities in client applications, particularly targeting web browsers and Microsoft Office. Adversaries utilize techniques such as Drive-by Compromise and Phishing to execute malicious code, often without user interaction. Notabl...
A critical vulnerability in VMware vCenter Server, tracked as CVE-2024-37079, is being actively exploited more than a year after Broadcom issued a patch. This out-of-bounds write flaw in the DCERPC protocol has a CVSS rating of 9.8, indicating a severe security risk for affected systems. Organizatio...
In July 2025, an advanced persistent threat actor known as UNC3886 targeted Singapore's four telecommunications companies, compromising critical infrastructure. The attack was detected by the Infocomm Media Development Authority (IMDA) and has led to ongoing investigations into the extent of the bre...
CrowdStrike has reported on WARP PANDA, a China-linked cyber-espionage group targeting North American legal, technology, and manufacturing firms throughout 2025. The group specializes in covert operations within hybrid-cloud environments, focusing on platforms like Microsoft 365 and Azure, and has b...
