Threat actors have been targeting Balbooa Forms and iCagenda Joomla extension flaws for remote code execution.

The post Organizations Warned of Exploited Joomla Extension Vulnerabilities appeared first on SecurityWeek.

The Microsoft Defender vulnerability CVE-2026-33825 was exploited in the wild as a zero-day before patches were released.

The post BlueHammer Vulnerability Exploited in Ransomware Attacks appeared first on SecurityWeek.

The threat actor is focused on collecting credentials, SSH keys, cryptocurrency wallets, and development tooling.

The post Critical SimpleHelp Vulnerability Exploited for Malware Delivery appeared first on SecurityWeek.