Vulnerability Overview
Exploitation Activity
Exploitation Intelligence
In 2026, Iranian APT groups, notably Cavern Manticore and OilRig, have intensified cyber operations against Israeli organizations, primarily in the IT and government sectors. Cavern Manticore employs a modular command-and-control (C2) framework built on a .NET foundation, utilizing various compilati...
A critical vulnerability in Livewire Filemanager, tracked as CVE-2025-14894, allows unauthenticated remote code execution (RCE) on affected Laravel web applications. This flaw arises from improper file validation in the LivewireFilemanagerComponent.php component, putting numerous servers at risk. Th...
OpenAI has introduced GPT-5.4-Cyber, a specialized AI model for defensive cybersecurity, available only to vetted professionals through its Trusted Access for Cyber (TAC) program. This model is designed to facilitate advanced tasks such as binary reverse engineering and vulnerability analysis with f...
