Actively Exploited News Today

Google, Microsoft, Gitlab, and more performed system patches. Check out these vulnerability fixes.

Google says that several state-backed hacking groups have joined ongoing attacks exploiting a high-severity vulnerability in WinRAR, a compression software used by over 500 million users, aiming to gain arbitrary code execution on targets systems.

Microsoft says a Chinese-backed threat group tracked as Storm-0062 (aka DarkShadow or Oro0lxy) has been exploiting a critical privilege escalation zero-day in the Atlassian Confluence Data Center and Server since September 14, 2023.

Major security flaws hit Microsoft, Apple, Cisco, Linux, Android and more, highlighting the need for strong patching practices.

Arm in a security advisory today is warning of an actively exploited vulnerability affecting the widely-used Mali GPU drivers.

Android, Apple, Apache, Cisco and Microsoft are among the names reporting security flaws in the last week, and some are under attack.

A WinRar zero-day vulnerability tracked as CVE-2023-38831 was actively exploited to install malware when clicking on harmless files in an archive, allowing the hackers to breach online cryptocurrency trading accounts.

US-based IT software company Ivanti warned customers today that a critical Sentry API authentication bypass vulnerability is being exploited in the wild.

Microsoft disclosed today an unpatched zero-day security bug in multiple Windows and Office products exploited in the wild to gain remote code execution via malicious Office documents.

CISA ordered federal agencies today to patch a high-severity Arm Mali GPU kernel driver privilege escalation flaw added to its list of actively exploited vulnerabilities and addressed with this months Android security updates.