The Exploit Post

Sign in Subscribe

News

News

Critical Vulnerability in Cisco UCCX Allows Root Command Execution

Critical Vulnerability in Cisco UCCX Allows Root Command Execution

Cisco developers have patched a critical vulnerability in Unified Contact Center Express (UCCX) that allowed attackers to obtain root privileges and gain full control over the system. This is the kind of vulnerability that keeps security teams awake at night—unauthenticated remote code execution with root access on systems that

An AI-Written Encryptor Infiltrated the VS Code Extension Catalog

An AI-Written Encryptor Infiltrated the VS Code Extension Catalog

Researchers from Secure Annex have discovered a malicious extension in the Visual Studio Code Marketplace that possesses basic ransomware functionality. What makes this case particularly noteworthy is that the malware appears to be written using AI-assisted coding, and its malicious functionality is stated directly in the description as if the

The Cavalry Werewolf Group is Attacking Russian Government Institutions

The Cavalry Werewolf Group is Attacking Russian Government Institutions

In July 2025, Doctor Web specialists investigated an incident at a Russian Federation state institution where unwanted emails were being sent from a corporate mailbox. What started as a seemingly simple email compromise investigation revealed something far more serious: a targeted attack by the hacker group Cavalry Werewolf, aimed at

US Cybersecurity Experts Accused of Using BlackCat Ransomware

US Cybersecurity Experts Accused of Using BlackCat Ransomware

Three former employees of cybersecurity firms—companies whose job was to protect against ransomware attacks—now stand accused of conducting those very attacks themselves. According to the US Department of Justice, they participated in BlackCat (ALPHV) ransomware operations and extorted millions of dollars from victims. This represents one of the

Hackers Exploit Post SMTP Plugin to Hijack WordPress Administrator Accounts

Hackers Exploit Post SMTP Plugin to Hijack WordPress Administrator Accounts

Attackers are actively exploiting a critical vulnerability in Post SMTP, a WordPress plugin installed on over 400,000 websites. The flaw allows hackers to seize administrator accounts and take complete control of vulnerable sites. Post SMTP ranks among the most popular plugins for handling email on WordPress sites. Developers market

Akira Ransomware Gang's Apache OpenOffice Claims Don't Add Up

Akira Ransomware Gang's Apache OpenOffice Claims Don't Add Up

The Akira ransomware group posted a bold claim on October 30, 2025: they'd breached Apache OpenOffice and stolen 23 GB of sensitive data. According to their darknet announcement, the haul includes employee personal information—home addresses, phone numbers, birth dates, driver's license copies, social security numbers,

Operation SkyCloak: Advanced Espionage Campaign Targets Russian and Belarusian Defense Sectors

Operation SkyCloak: Advanced Espionage Campaign Targets Russian and Belarusian Defense Sectors

Cybersecurity researchers at Cyble and Seqrite Labs have uncovered a sophisticated espionage campaign targeting defense and government organizations in Russia and Belarus. The operation, designated Operation SkyCloak, deploys a custom backdoor that combines OpenSSH, Tor hidden services, and obfs4 traffic obfuscation to maintain persistent, anonymous access to compromised systems. Attack