Cyber
CISA warns that hackers are now exploiting critical Node2Shell flaw
The US Cybersecurity and Infrastructure Security Agency (CISA) has confirmed that hackers have started exploiting a critical Brotli vulnerability known as Node2Shell.
Tag
#Zaiflik
The latest news, analysis and stories about Zaiflik — TECC.UZ.
26 articles
Cyber
HPE Patches Critical RCE and Auth Bypass Flaws in ArubaOS
HPE has rolled out security updates addressing 72 vulnerabilities in ArubaOS, including eight maximum-severity remote code execution and auth bypass flaws.
Cyber
Amazon says PHP2Shell exploitation began 4 days before patches
Security researchers at Amazon Threat Intelligence reveal that attackers targeted PHP2Shell flaws four days before official patches were released.
Cyber
CISA Warns of Plex Servers Exploitation
The U.S. cybersecurity agency is warning that attackers are actively exploiting vulnerabilities in Plex Media Server.
Cyber
GitLab warns of max severity code execution vulnerability
GitLab has urged users to immediately patch a maximum-severity vulnerability in the CI/CD Regular Expression Compiler allowing remote code execution.
Cyber
Hackers Exploit Critical Atlassian Flaw Following Public PoC Release
A critical unauthenticated vulnerability (CVE-2026-21589) affecting Jira, Confluence, and Bitbucket is being actively exploited in attacks.
Cyber
Fortinet warns of critical FortiMail flaw exploited in zero-day attacks
Cybersecurity firm Fortinet has issued an urgent warning regarding a critical vulnerability in FortiMail actively targeted in zero-day attacks.
Cyber
CISA warns of critical pre-auth RCE flaw in MikroTik RouterOS
The U.S. Cybersecurity and Infrastructure Security Agency has issued a warning regarding a critical remote code execution vulnerability in MikroTik RouterOS.
Cyber
Hackers start exploiting critical WordPress flaw for code execution
Threat actors have moved from probing vulnerable WordPress sites to actively exploiting CVE-2026-87902 to execute shell commands.
Cyber
CISA Warns of Active Exploitation of Three Linux Kernel Flaws
The U.S. Cybersecurity and Infrastructure Security Agency is warning that hackers are actively exploiting three Linux kernel vulnerabilities, including one critical flaw.
Cyber
Critical Check Point Flaw Allows Remote Code Execution with Root Privileges
Check Point Software has released security updates to address a critical vulnerability that lets attackers execute code with root privileges on management systems.
Cyber
Critical ScreenConnect flaw now actively exploited in attacks
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) reports that a critical ConnectWise ScreenConnect vulnerability is actively being exploited in the wild.
Cyber
Acronis warns of actively exploited flaw in cPanel backup plugin
Acronis has disclosed a high-severity Linux local privilege escalation vulnerability in its backup plugin for cPanel, WHM, and Plesk that is actively being exploited.
Cyber
CISA: Critical VMware RCE flaw now exploited by ransomware gangs
The U.S. CISA has warned that ransomware gangs have joined ongoing attacks exploiting a critical VMware vCenter vulnerability.
Cyber
Hackers exploit new MikroTik RouterOS flaws to hijack routers
Cybercriminals are exploiting a chain of two recently disclosed vulnerabilities in MikroTik routers with exposed SSH services.
Cyber
HPE patches critical ArubaOS-CX remote code execution flaw
Hewlett Packard Enterprise has released patches addressing a critical remote code execution vulnerability in the ArubaOS-CX network operating system.
Cyber
Critical Elementor Pro Flaw Exploited to Take Over WordPress Sites
A newly patched critical vulnerability in the Elementor Pro WordPress plugin is being actively exploited to deliver webshells and execute commands.
Cyber
Hackers exploit critical JFrog Artifactory flaw to forge admin tokens
A critical authentication bypass vulnerability in JFrog Artifactory is being actively exploited in attacks to forge administrative access tokens.
Cyber
Nearly 22,000 Microsoft Exchange servers vulnerable to hijack attacks
Thousands of internet-exposed Microsoft Exchange servers remain unpatched against a severe authentication bypass vulnerability.
Cyber
Over 8,300 Gitea servers vulnerable to code execution attacks
According to Shadowserver, over 8,300 internet-exposed Gitea instances remain unpatched against critical remote code execution flaws.
Cyber
CISA orders federal agencies to patch critical Citrix NetScaler flaw
The US cybersecurity agency has instructed federal civilian agencies to fix an actively exploited remote code execution vulnerability in Citrix devices by Saturday.
IT
Critical Avada WordPress Theme Flaw Enables Zero-Click RCE
A critical vulnerability chain in the popular Avada WordPress theme allows unauthenticated attackers to execute arbitrary code on servers.
Cyber
CISA Orders Urgent Patching of Actively Exploited Zimbra Flaw
The Cybersecurity and Infrastructure Security Agency (CISA) has ordered U.S. government agencies to patch an actively exploited vulnerability in Zimbra Collaboration Suite within three days.
Cyber
Microsoft warns of max severity Entra ID flaw exploited in attacks
Microsoft has patched a maximum-severity vulnerability in the Entra ID identity and access management platform.