Vulnerability Overview
Exploitation Activity
Exploitation Intelligence
The Akira ransomware group has been identified as a significant threat to critical infrastructure, with the U.S. Cybersecurity and Infrastructure Security Agency (CISA) and the FBI warning of its active ransomware attacks. Since its emergence in March 2023, Akira has exploited vulnerabilities in edg...
A sophisticated backdoor malware named Firestarter has been discovered on Cisco Firepower devices, attributed to the state-sponsored threat actor UAT-4356. The malware exploits two vulnerabilities, CVE-2025-20333 and CVE-2025-20362, which were patched in September 2025 but remain exploitable if devi...
BeyondTrust has issued a warning regarding a critical remote code execution (RCE) vulnerability in its Remote Support and Privileged Remote Access software. The flaw, tracked as CVE-2026-1731, allows unauthenticated attackers to execute arbitrary code remotely and affects versions 25.3.1 or earlier...
Cisco has disclosed a high-severity denial-of-service (DoS) vulnerability tracked as CVE-2026-20188 affecting the Crosswork Network Controller (CNC) and Network Services Orchestrator (NSO). The flaw arises from inadequate rate limiting on incoming connections, allowing unauthenticated remote attacke...