T1505.003 - Web Shell

Critical Citrix NetScaler Zero-Day Vulnerabilities Exploited

Lazarus Group Exploits Windows Zero-Day to Target Defense Sector

SonicWall SMA1000 Faces Critical Zero-Day Exploitation

SHADOW-EARTH-053 Exploits Microsoft Exchange Vulnerabilities in Asia

Critical Citrix NetScaler Zero-Day Vulnerabilities Exploited

Critical Vulnerabilities in AhsayCBS Allow Remote Code Execution

Critical CVE-2026-93952 Vulnerability in VeloCloud Orchestrator Actively Exploited

Operation Escaneo Targets Latin American Critical Infrastructure

Warlock Ransomware Targets Critical Infrastructure in Spanish and Portuguese Regions

Head Mare Hackers Exploit TrueConf Vulnerabilities to Deploy Backdoors

CyberXero Campaign Targets Ukrainian Records Using AI Tools

Critical RCE Vulnerability in Oracle PeopleSoft Exploited by SHADOW-AETHER-015

CISA Alerts on Critical Flaws in SimpleHelp, Samsung MagicINFO, and D-Link Devices

Critical RCE Vulnerability in Divi Form Builder Plugin for WordPress

Critical Vulnerability in Ninja Forms Plugin Exposes 50,000 WordPress Sites to RCE

Critical RCE Vulnerability in PTC Windchill and FlexPLM Under Active Exploitation

Critical Flaw in Collabora's CODE Server Backdoors Nextcloud Servers

NightEagle APT Targets Russian Enterprises with Advanced Malware

Chinese APT CL-STA-1062 Deploys TinyRCT Backdoor Against Southeast Asian Targets

Bitget Suffers $388M Theft via Zero-Day Exploit

Chinese Threat Group Exploits Roundcube Vulnerabilities in University Networks

VerdantBamboo's 18-Month Cyber Campaign Targets Managed Service Providers

Operation Double Barrel: State-Sponsored Exploitation of Korean Financial Software

Bitget Confirms $387.5 Million Theft Linked to North Korean Hackers

China-Nexus Hackers Target Hospitals and Governments with TriBack Loader Malware

Iranian Cyberespionage Targets Iraqi Government Officials

UAT-10147 Cybercrime Group Integrates AI for Large-Scale Attacks

JFrog Artifactory Vulnerabilities Enable Rapid Admin Access Exploitation

Critical RCE Vulnerability in Windchill and FlexPLM Triggers Urgent Alerts

Multiple Critical CVEs Exploited in Cybersecurity Attacks

Advanced PHP Web Shell Exploits F5 BIG-IP Systems

Malaysian Government Websites Targeted by Cyberattacks Exploiting Joomla Vulnerability

Microsoft's Record Patch Tuesday in June 2026 Addresses 206 Vulnerabilities

Spring Framework RCE Vulnerability CVE-2022-22965 Exploited in the Wild

Critical WP Maps Pro Vulnerability Exposes 15,000 WordPress Sites to Admin Takeover

Attackers Exploit WDigest Vulnerability to Harvest Plaintext Credentials

Critical Unauthenticated Path Traversal Vulnerability in WordPress

CISA Issues Urgent Warning on Actively Exploited LiteSpeed cPanel Plugin Vulnerability

Critical Linux Vulnerability 'Copy Fail' Grants Root Access Across Major Distros

Critical WordPress Plugin Vulnerabilities Expose Sites to Severe Attacks

Critical Zero-Day Vulnerabilities in Atlassian Confluence Exploited

Critical wp2shell Vulnerability Enables Unauthenticated RCE in WordPress

Critical SharePoint RCE Vulnerability Exploited for Key Theft

Critical Vulnerabilities in Kaltura HTML5 Player Expose Organizations to Attacks

BeyondTrust patches zero-day exploited in attacks since August

Mandiant attributes the attacks

CVE-2026-102764: BeyondTrust Zero

U.S. CISA adds Palo Alto Networks PAN-OS, Ahsay AhsayCBS, and Cisco Secure Email ...

CISA flags exploited flaws in Palo Alto, Cisco and Ahsay products

CVE-2026-105133 and CVE-2026-105134

Richdocumentscode Issues 354

Python 3.15 goes global with UTF-8 support

Hackers Backdoor Nextcloud Servers Through Critical Flaw in Collabora's Built

ShadowSilk (Group-IB)

CyberXero Uses Claude Code in Campaign That Stole Over 628,000 Ukrainian Records

CyberXero Weaponises Claude Code: 51 AI Agents Stole 628,000 Records in One Campaign

97 days to test and deploy SAP patches

Korean banks had AI hacking warning weeks before data breaches

GHSA 8phf V3xj 8jjg

Unpatched AhsayCBS flaws exploited to deploy webshells, mine crypto

Attackers Exploit AhsayCBS Flaws to Deploy XMRig Miners Disguised as Microsoft Edge

Attackers exploit AhsayCBS backup flaws to deploy disguised crypto miners

Unpatched AhsayCBS Vulnerabilities Exploited in the Wild

Unpatched AhsayCBS Vulnerabilities Exploited in the Wild

Threat Actors Exploit Critical AhsayCBS Flaws to Drop Webshells and XMRig Cryptominer

Justice Department Announces Arrest Prolific Chinese State Sponsored Contract Hacker

Critical Citrix NetScaler CVE-2026

U.S. Offers $10 Million Reward for Chinese Hacker Behind Alleged COVID

Critical Citrix NetScaler CVE-2026

Oasis Security analyzed that

Russian

Hackers Use ERP Web Shell and IDOR Flaws to Breach Major South Korean Churches

South Korea's Yoido Full Gospel and SaRang Churches Hacked; Data of 1 Million Members Leaked

FBI Cuts Ties With Accenture After Missed Security Patch Linked To Data Breach

FBI Removes Accenture Contractor Over ShinyHunters Job Site Data Breach

Oracle Privately Confirms Cloud Breach To Customers

Four ways back in: the WordPress XSS campaign that hides its own admin account

Despite ShinyHunters arrests after FBI jobs data breach, enterprises still have no answers about PeopleSoft risks

Api Admin Rce.md

Exploitation of Citrix NetScaler Zero

Warlock Ransomware Attackers Hit Water and Telecom Operators

Week in review: Researcher breaks into Microsoft analytics service, NetScaler RCE 0