Active Vulnerability Exploitation
Active Vulnerability Exploitation
Articles on active exploitation of newly disclosed vulnerabilities, including zero-day attacks, memory disclosure bugs, and rapid weaponization of published CVEs by threat actors.
active vulnerability exploitationJul 7, 20263 min
The GitLost Loophole: Turning Public GitHub Issues Into Secret Data Exfiltration Pipelines
A deep dive into the GitLost vulnerability, where researchers at Noma Security demonstrated how prompt injection attacks over GitHub's Agentic Workflows allow unauthenticated actors to retrieve private repository files by opening public issues.
active vulnerability exploitationJul 6, 20263 min
CitrixBleed Strikes Again: Attackers Weaponize NetScaler Memory Leak Within Hours
Attackers wasted little time targeting the latest memory disclosure bug in Citrix NetScaler, exploiting a vulnerability that leaks sensitive data from server memory shortly after researchers published their findings.