A coordinated cloud-based scanning campaign targeting 75 different vulnerabilities was detected by GreyNoise on May 8, 2025. The operation used 251 malicious IP addresses hosted on Amazon's infrastructure in Japan, targeting vulnerabilities in Adobe ColdFusion, Apache Struts, Atlassian Con...
The first quarter of 2025 saw 159 vulnerabilities exploited in the wild, with 28.3% weaponized within 24 hours of disclosure. Content Management Systems were the most targeted technology, followed by network edge devices and operating systems. Microsoft Windows led as the most exploited pr...
Russian threat actors Head Mare and Twelve have likely merged operations to target Russian organizations, according to Kaspersky research. Head Mare exploits vulnerabilities in WinRAR, Microsoft Exchange, and uses phishing emails for initial access. Their expanded toolkit includes the CobI...
2024 saw a 20% increase in exploited vulnerabilities, with 768 CVEs reported compared to 639 in 2023. Research shows 23.6% of vulnerabilities were weaponized during or before disclosure, with Chinese threat actors heavily involved. Log4j remains the most targeted vulnerability, while 400,0...
