Vulnerability Overview
Exploitation Activity
Exploitation Intelligence
A recent intrusion campaign utilized the Nightmare-Eclipse privilege escalation tools, specifically BlueHammer, RedSun, and UnDefend, following unauthorized access through compromised FortiGate SSL VPN credentials. This incident marks the first confirmed deployment of these tools in a live enterpris...
On April's Patchday, Microsoft addressed over 160 security vulnerabilities, including critical issues in Edge and SharePoint Server. Attackers are actively exploiting CVE-2026-32201 in SharePoint for spoofing attacks, allowing unauthorized access to isolated data. Additionally, CVE-2026-5281 in Edge...
On June 9, 2026, Microsoft released its largest Patch Tuesday update, addressing 206 vulnerabilities, including three zero-day flaws. Among the critical vulnerabilities, 32 were rated as critical, with 28 classified as remote code execution (RCE) vulnerabilities. The update included CVE-2026-47291,...
Ransomware gangs are actively exploiting a high-severity vulnerability in Microsoft Defender, tracked as CVE-2026-33825 and nicknamed BlueHammer. This flaw allows local attackers to bypass access controls and escalate privileges on affected Windows systems. The Cybersecurity and Infrastructure Secur...
.png)
