Hackers leverage new Microsoft SharePoint exploit in attacks

Hackers have already begun using a proof-of-concept (PoC) exploit for a critical Microsoft SharePoint vulnerability, published by cybersecurity company Rapid7 on Tuesday.

New Microsoft Defender 'ShieldBreak' zero-day grants SYSTEM privileges

Nightmare Eclipse has released a new Microsoft Defender zero-day exploit named "ShieldBreak" after Microsoft released the August 2026 Patch Tuesday security updates.
Security Boulevard

Confirmed Vulnerabilities vs Potential Vulnerabilities: Why Vulnerability Validation Changes Everything?

A vulnerability scan can hand a security team a long list of findings before lunch. Almost none of them are the reason your ...
Security Boulevard

Contrast Security Launches CVE Shield for Runtime Exploit Protection

Contrast Security has launched CVE Shield, a runtime control that detects, monitors and blocks exploitation of known vulnerabilities in production ...
Infosecurity-magazine.com

Researchers Build WordPress Exploit Using OpenAI's GPT

Security researchers at Searchlight Cyber have used OpenAI’s GPT5.6 Sol Ultra to successfully develop a full exploit chain for two critical WordPress Core vulnerabilities. The first vulnerability, ...
techtimes

Public Exploit Turns 15-Year Linux Kernel Flaw Into 5-Second Root Attack

A working exploit for a Linux kernel flaw that has existed since 2011 is now publicly available, and any logged-in user can run it to gain full root control of an affected machine in roughly five ...
9to5Mac

New unpatchable exploit targets Apple devices with A12 and A13 chips

Researchers at Paradigm Shift have published the technical details of usbliter8, a new unpatchable iPhone BootROM vulnerability that enables arbitrary code execution on devices powered by Apple’s A12 ...
MacRumors

Apple's A12 and A13 Chips Facing New Unpatchable Exploit

Security research firm Paradigm Shift today published details of a new BootROM vulnerability affecting Apple's A12 and A13 chips, along with a working proof-of-concept exploit named "usbliter8." The ...
Enid News & Eagle

Azul Addresses the Java Runtime Security Blind Spot Autonomous AI Can Now Exploit

Azul, the trusted leader in enterprise Java for today’s AI and cloud-first world, today launched a free JVM vulnerability risk assessment to address the blind spot that autonomous AI exploitation ...
IGN

Bank Balances Rolled Back for Forza Horizon 6 Players Who Used Exploit to Amass a Billion Credits

In response to an arcane but incredibly lucrative exploit discovered by Forza Horizon 6 players, Playground Games has confirmed that those who used the method to accumulate massive amounts of credits ...
Ars Technica

Google publishes exploit code threatening millions of Chromium users

Google on Wednesday published exploit code for an unfixed vulnerability in its Chromium browser codebase that threatens millions of people using Chrome, Microsoft Edge, and virtually all other ...
Forbes

Microsoft Confirms Active 0-Day Exploit—Check Emergency Mitigation

This voice experience is generated by AI. Learn more. This voice experience is generated by AI. Learn more. Microsoft confirms Exchange zero-day, CISA warns it's under active exploitation. Updated May ...