Vulnerability Overview
Exploitation Activity
Exploitation Intelligence
A proxyjacking campaign has compromised at least 143 devices across 34 countries, hijacking internet connections by installing Pawns.app, a legitimate bandwidth-sharing application, without user consent. The attackers exploited vulnerabilities in D-Link ShareCenter NAS (CVE-2024-3272, CVE-2024-3273)...
UK small and medium-sized enterprises (SMEs) are increasingly vulnerable to sophisticated AI-driven scams, as highlighted by recent reports. The emergence of 'AI scams 2.0' combines traditional social engineering techniques with advanced technologies such as automated content creation, voice cloning...
On September 8, 2026, Ivanti disclosed multiple vulnerabilities affecting its Endpoint Manager Mobile (EPMM), Neurons for ITSM, and Sentry products. Two critical CVEs, CVE-2026-83527 and CVE-2026-18851, allow for authentication bypass and privilege escalation, respectively. CVE-2026-83527 has a CVSS...
