Technology ❯ Cybersecurity ❯ Threat Intelligence

Attack Vectors

Remote Code Execution Zero-Day Vulnerabilities Webshells Phishing Emails Direct Send Slopsquatting Cryptomining HTTP POST Requests Chinese Cyber Actors Admin Account Creation Compromised Credentials DLL Sideloading

3 ARTICLES

3w ago

LinkedIn DMs Used in RAT Campaign That Leverages DLL Sideloading

ReliaQuest describes a WinRAR-delivered PDF reader decoy with a malicious DLL that exploits trust in legitimate software to bypass email-focused protections.

5 ARTICLES

last mo.

Huntress Uncovers Pre-Disclosure ESXi VM-Escape Toolkit Used in December Intrusion

6 ARTICLES

last mo.

SonicWall Patches Actively Exploited SMA1000 Zero-Day, Urges Immediate Hotfixes

11 ARTICLES

2mo ago

React2Shell Attacks Intensify as React Issues Second Round of Emergency Patches

8 ARTICLES

3mo ago

Fortinet Confirms Critical FortiWeb Zero-Day Is Being Exploited as CISA Sets Nov. 21 Patch Deadline

7 ARTICLES

3mo ago

Researchers Uncover 'PhantomRaven' Campaign Flooding npm With 126 Credential-Stealing Packages

3 ARTICLES

5mo ago

FortiGuard Uncovers MostereRAT, a Stealthy Windows RAT Using mTLS and Remote-Access Tools

6 ARTICLES

5mo ago

CISA Orders Immediate Fix for Actively Exploited Sitecore ViewState Flaw (CVE-2025-53690)

5 ARTICLES

5mo ago

HexStrike‑AI Attracts Criminal Use as Citrix NetScaler Zero‑Days Face Rapid Exploitation