High-severity #WinRAR 0-day #exploited for weeks by 2 groups
#0day #security #zeroday #exploit

https://arstechnica.com/security/2025/08/high-severity-winrar-0-day-exploited-for-weeks-by-2-groups/

#Microsoft Fix Targets Attacks on #SharePoint #ZeroDay

Microsoft Corp. issued an emergency #security update for a #vulnerability in SharePoint Server that is actively being #exploited to compromise #vulnerable organizations. The #patch comes amid reports that malicious #hackers have used the SharePoint flaw to #breach U.S. federal and state agencies, universities, and energy companies.
#privacy

https://krebsonsecurity.com/2025/07/microsoft-fix-targets-attacks-on-sharepoint-zero-day/

Microsoft Teams Exploited to Deliver Matanbuchus Ransomware Payload
https://gbhackers.com/microsoft-teams-exploited/

#Infosec #Security #Cybersecurity #CeptBiro #MicrosoftTeams #Exploited #Matanbuchus #Ransomware #Payload

Critical #CitrixBleed 2 #vulnerability has been under active #exploit for weeks

A critical vulnerability allowing #hackers to bypass #multifactor #authentication in network management devices made by #Citrix has been actively #exploited for more than a month, researchers said. The finding is at odds with advisories from the vendor saying there is no evidence of in-the-wild #exploitation.
#security #privacy

https://arstechnica.com/security/2025/07/critical-citrixbleed-2-vulnerability-has-been-under-active-exploit-for-weeks/

#PerfektBlue #Bluetooth #Vulnerabilities Expose Millions of #Vehicles to Remote Code Execution

"Cybersecurity researchers have discovered a set of four security flaws in OpenSynergy's BlueSDK Bluetooth stack that, if successfully #exploited, could allow remote code execution #rce on millions of #transport vehicles from different vendors."
https://thehackernews.com/2025/07/perfektblue-bluetooth-vulnerabilities.html

Actively #exploited #vulnerability gives extraordinary control over #server fleets

The vulnerability, carrying a #severity rating of 10 out of a possible 10, resides in the #AMIMegaRAC , a widely used #firmware package that allows large fleets of servers to be remotely accessed and managed even when power is unavailable or the operating system isn't functioning.
#security #ami #megarac

https://arstechnica.com/security/2025/06/active-exploitation-of-ami-management-tool-imperils-thousands-of-servers/