All stories tagged :

Vulnerabilities

Discover the latest security vulnerabilities, zero-day exploits, CVE disclosures, and critical software flaws affecting popular applications, operating systems, and enterprise technologies. Throwlock provides vulnerability analysis, security advisories, patch updates, and information to help organizations address security risks.

Proof-of-Concept Released for Windows Winsock Ancillary Privilege Escalation Vulnerability

Nathan Cole
Vulnerabilities

Critical HashiCorp Consul Kubernetes Vulnerability Allows Privilege Escalation

Nathan Cole
Vulnerabilities

Microsoft Issues Out‑of‑Band Security Updates for Brotli and .NET Tarball Vulnerability

Nathan Cole
Vulnerabilities

Cloudflare Issues Emergency WAF Rules Update After Brotli Vulnerability

Nathan Cole
Vulnerabilities

HTTP2Shell Vulnerability Spreads Beyond HTTP to .NET, FFmpeg, ClickHouse and Apache...

Nathan Cole
Vulnerabilities

Microsoft Authenticator Flaw Lets Android Apps Steal Account Tokens Without Permissions

Nathan Cole
Vulnerabilities

Critical Okta Access Gateway Flaw Lets Attackers With Admin Privileges Execute...

Nathan Cole
Vulnerabilities

New Node2Shell RCE in Node.js Allows Attackers to Execute Malicious Code...

Nathan Cole
Vulnerabilities

Hackers Actively Exploiting Critical VeloCloud Orchestrator Vulnerability to Gain Superuser Access

Nathan Cole
Vulnerabilities

Oracle issues emergency Java patch for critical HTTPS trust vulnerability rated...

Nathan Cole
Vulnerabilities

Critical Cisco Expressway Vulnerability Allows Remote Code Execution

Nathan Cole
1 2 3 4 Page 2 of 4

Featured

Cyber Threats

Hackers Deploy CyberStrikeAI Agents to Automate Windows Domain Takeovers and Credential...

Ethan Mercer
Vulnerabilities

ChatGPT Vulnerability Let Attackers Hijack Accounts and Steal Private Conversations via...

Nathan Cole
Cyber Threats

North Korean Hackers Steal Developers’ Credentials to Inject Malware into GitHub...

Ethan Mercer
Cyber Threats

APT Groups Deploy NetamLoader to Target Windows 10 Systems in Asian...

Ethan Mercer
Ethan Mercer

Hackers Deploy CyberStrikeAI Agents to Automate Windows Domain Takeovers and Credential...

Attackers are using an AI-driven command framework called CyberStrikeAI to infiltrate Windows environments and take control of entire domains. Confirmed victims include educational institutions in Africa and Latin America. The platform delegates command selection to a language model, so the operator no longer needs to type...