Ivanti patches two more exploited zero-days
CVE-2026-111357 and CVE-2026-118527 were exploited alongside a previously patched CVE-2026-104935 in attacks targeting a limited number of customers.
3 min read
Cybersecurity Help is a global vulnerability intelligence provider. We monitor vulnerabilities in software from 60,000+ vendors and help customers prevent potential data breaches by addressing them proactively.
Request DemoCVE-2026-111357 and CVE-2026-118527 were exploited alongside a previously patched CVE-2026-104935 in attacks targeting a limited number of customers.
3 min readThe implant may be capable of capturing sensitive info displayed on the screen, including wallet recovery phrases, and sending it to attackers.
3 min readThe attack employed a multi-stage malware delivery chain designed to bypass basic security controls.
3 min readIn nine confirmed cases of post-compromise activity, the attackers deployed the BLOODALCHEMY backdoor.
3 min readIn brief: Cisco patches a zero-day flaw in firewall software, Chinese hackers exploit the PHP2Shell vulnerabilities, and more.
13 min read