Stay informed on the latest exploit trends and vulnerabilities. Get expert insights and updates on information security exploits with our dedicated tag.
Search across headline titles and summaries.
Background for this topic.
An exploit is code, data, or a sequence of actions that uses a software, hardware, or configuration vulnerability to produce unintended behavior. Depending on the flaw and the attacker’s access, it may enable unauthorized code execution, privilege escalation, information disclosure, or denial of service. Exploitation can occur remotely through exposed services, web applications, or client software, or locally after an attacker gains limited access.
Exploitation matters because a vulnerability becomes an active attack path when the required conditions are reachable and exploitable. Defenders should inventory affected assets, prioritize remediation when exploitation is known or credible, apply patches or vendor mitigations, and reduce exposure through access controls, segmentation, and secure configuration. Monitoring for exploit-specific indicators—such as abnormal requests, unexpected processes, or privilege changes—supports detection; systems suspected of successful exploitation require containment and investigation for follow-on access.
Weekly headline count for the current query.
Progress has restored access to its ShareFile Storage Zones Controller after a four-day suspension triggered by a credible external security threat
Researchers at Jamf Threat Labs detail CrashStealer, which steals passwords, cryptocurrency wallets and more
Researchers at the AI Now Institute developed a proof-of-concept exploit showing common AI tools used for security could backfire
GodDamn ransomware uses remote desktop application to secretly move around networks and drop the malicious PoisonX kernel driver
Threat actors are exploiting an Adobe ColdFusion vulnerability which has a CVSS score of 10.0
Infosecurity spoke with the researcher who dumped over 30 proof-of-concept exploits without disclosing the vulnerabilities first
Apple BootROM exploit exposes unpatchable USB flaw on A12 and A13 devices
CloudSEK maps Operation Escaneo, a campaign hitting Latin American infrastructure via perimeter bugs
Athena is a new an industry coalition to fix the vulnerabilities frontier AI models find before attackers can exploit them
A Bugcrowd researcher has unveiled ExploitBench, an independent benchmark of AI models for vulnerability exploitation
ESET’s 2026 APT Activity Report suggests China-backed APTs are using instability in the region to target victims, as well as continuing activity against organizations around the globe
Verizon DBIR finds 31% of data breaches began with software flaws last year
Cloud app developer Vercel appears to have suffered a security breach
FortiGuard Labs has identified a Mirai-based Nexcorium campaign actively exploiting CVE-2024-3721 in TBK DVR devices
AI models are making rapid gains in vulnerability research and exploit development, raising new cybersecurity risks, a Forescout study finds
GrafanaGhost chains AI prompt injection and URL flaws to exfiltrate sensitive Grafana data
Microsoft has released a new report about the Storm-1175 group and its connection to Medusa ransomware
iOS/iPadOS 18.7.7 updates expanded to protect older devices from DarkSword web exploit kit
TeamPCP is exploring ways to monetize the secrets harvested during supply chain attacks, with identified ties to the Lapsus$ and Vect ransomware gangs
Tax-season phishing floods deliver RMM malware, credential theft, BEC and tax-form scams