ThreatVectr
Tag

#shadowserver

5 stories taggedshadowserver.

An IT support center with multiple workstations running remote support software, ScreenConnect interface visible on screens, file transfer dialogs open, warning
Vulnerabilities

ConnectWise ScreenConnect Hit by New File-Transfer Flaw, Patch Days Away

The remote-support tool used by IT teams worldwide has a bug that lets attackers move files through active sessions. A fix is expected this week.

3 min read
A multinational cybercrime task force headquarters with computers displaying botnet network topology maps, infected nodes being systematically disconnected and
Threat Intelligence

Police Hijack Sality Botnet's Own Network to Kill It Off

A four-country operation used the malware's peer-to-peer design against it, blocking infected computers from receiving fresh criminal payloads.

4 min read
Illustration: A server rack in dim
Vulnerabilities

22,000 Microsoft Exchange servers still open to mailbox takeover flaw

A patched but widely ignored bug lets attackers read, send and download every user's email. Exploit code is already circulating.

3 min read
A software development environment displaying Git repository management interface with code diff and patch utilities visible, warning indicators appearing in th
Vulnerabilities

8,300 Gitea servers still exposed to a code injection bug attackers are already using

A flaw in Gitea's diffpatch endpoint lets low-privilege users run shell commands on the server. CISA gave federal agencies three days to patch. Most operators haven't.

3 min read
A corporate email server room with warning tape cordoning off affected equipment, technicians reviewing security patches on terminal screens, calendar dates sho
Vulnerabilities

Poland's CERT warns of active attacks on critical Zimbra email flaw

CERT Polska says attackers are exploiting CVE-2026-73570 in Zimbra Collaboration Suite. Zimbra patched the bug in version 10.1.20 on 20 July 2026.

3 min read
© 2026 Threat Vectr