In July 2026, Adobe and Microsoft released significant security updates addressing numerous vulnerabilities. Adobe issued 12 bulletins for 88 unique CVEs, with a focus on ColdFusion and Commerce patches, including a…
A multi-stage cyber attack targeted IIS servers, beginning with enumeration commands and escalating to credential extraction using Mimikatz. The attackers uploaded a steganographic webshell and executed a…
Rapid7 disclosed an access control bypass vulnerability in Adobe ColdFusion, identified as CVE-2023-29298, which affects versions 2018u16, 2021u6, and 2023. The vulnerability allows attackers to access restricted…
Adobe has issued urgent security updates for multiple products, including ColdFusion, Campaign Classic, and others, addressing critical vulnerabilities that could allow arbitrary code execution. The vulnerabilities,…
On June 9, 2026, Microsoft released its largest Patch Tuesday update, addressing 206 vulnerabilities, including three zero-day flaws. Among the critical vulnerabilities, 32 were rated as critical, with 28 classified as…
More than 10,000 Fortinet firewalls remain exposed to a critical two-factor authentication bypass vulnerability (CVE-2020-12812) that has been actively exploited. This flaw, first disclosed in July 2020, continues to…
Adobe has released security updates for critical vulnerabilities in Adobe ColdFusion and Adobe Experience Manager. The vulnerabilities include CVE-2025-61808, CVE-2025-61809 for ColdFusion and CVE-2025-64537,…
During the Christmas 2025 holiday, GreyNoise reported thousands of attack attempts targeting a dozen Adobe ColdFusion vulnerabilities. This coordinated exploitation campaign primarily affected ColdFusion servers,…
A coordinated exploitation campaign generated over 2.5 million malicious requests against Adobe ColdFusion servers and 47 other technology platforms during the Christmas 2025 holiday period. This operation was…
A coordinated campaign has been launched against Adobe ColdFusion servers, exploiting around a dozen vulnerabilities. GreyNoise reported thousands of requests targeting these vulnerabilities during the Christmas 2025…