Vulnerability Overview
Exploitation Activity
Exploitation Intelligence
A series of attacks exploiting zero-day vulnerabilities in Microsoft SharePoint has compromised over 400 organizations, including multiple US government agencies. The attacks, attributed to Chinese threat groups such as Linen Typhoon, Violet Typhoon, and Storm-2603, began with the deployment of Warl...
A critical vulnerability in FortiWeb Web Application Firewall (WAF) has been actively exploited, allowing attackers to gain full administrative access to affected systems. Organizations using FortiWeb are at risk of total control being seized by malicious actors. The flaw has been confirmed to be ex...
The Warlock ransomware group, tracked as Longlegs or Storm-2603, has targeted critical infrastructure in Portuguese- and Spanish-speaking countries, including a water utility, a telecommunications provider, a regional government body, and an university. Recent attacks exploited vulnerabilities in Mi...
Recent vulnerabilities in remote monitoring and management (RMM) software pose significant risks to managed service providers (MSPs). A critical pre-authentication remote code execution flaw (CVE-2026-86218) in N-able's N-central platform was reported, with confirmed. Additionally, Microsoft SharePo...