Technology ❯ Cybersecurity ❯ Threat Intelligence

Indicators of Compromise

Kaspersky Analysis Huntress Research Huntress Reports Malware Identification Malicious Dependencies Integration Tools YARA rules Check Point Research Digital Forensics Fortinet

3 ARTICLES

3d ago

Critical Xen Orchestra Authentication Bypass Under Active Exploitation

A crafted REST cookie can make the token service return another user's token and let attackers gain admin control that may lead to full XCP‑ng host takeover.

5 ARTICLES

last wk.

NIKKE PC Launcher Compromised by Tampered CDN Scripts That Could Install Remote Backdoor

7 ARTICLES

3w ago

Plex2Shell Exploit Turns Unpatched Plex Servers Into Miners and Proxy Nodes

9 ARTICLES

last mo.

Cisco Patches Actively Exploited SD‑WAN Manager Zero‑Day

7 ARTICLES

last mo.

Check Point Issues Emergency Hotfixes After Management Server Zero‑Day Is Found Exploited

3 ARTICLES

2mo ago

Check Point Details 'VoidLink,' a Cloud-Focused Linux Malware Framework With Modular Stealth

5 ARTICLES

11mo ago

Fortinet SSO Bypass Actively Exploited as CISA Sets Dec. 23 Fix Deadline

4 ARTICLES

11mo ago

New ShadowV2 Botnet Used AWS Outage for Test, Fortinet Warns of Lasting IoT Risk

3 ARTICLES

this yr.

Anthropic’s ‘AI‑Orchestrated’ Cyberespionage Claim Faces Immediate Skepticism

4 ARTICLES

last yr.

Google Details COLDRIVER’s New NOROBOT, YESROBOT, MAYBEROBOT Toolset After LOSTKEYS Exposure

7 ARTICLES

last yr.

Malicious npm Packages Tap Ethereum Smart Contracts for Stealthy C2

Indicators of Compromise

Critical Xen Orchestra Authentication Bypass Under Active Exploitation

NIKKE PC Launcher Compromised by Tampered CDN Scripts That Could Install Remote Backdoor

Plex2Shell Exploit Turns Unpatched Plex Servers Into Miners and Proxy Nodes

Cisco Patches Actively Exploited SD‑WAN Manager Zero‑Day

Check Point Issues Emergency Hotfixes After Management Server Zero‑Day Is Found Exploited

Signed Chinese Wallpaper App Used to Sideload ValleyRAT Backdoor

Chaos Ransomware's msaRAT Tunnels C2 Through Headless Chrome and Edge

Attackers Exploit SimpleHelp OIDC Flaw to Deploy TaskWeaver and Djinn Stealer

Mistic Backdoor Tied to KongTuke IAB Enables Stealthy In‑Memory Access

TA4922 Targets UK, Germany, Italy and South Africa With New RATs and Loaders

Never miss stories about

Indicators of Compromise

DAEMON Tools Confirms Supply-Chain Breach, Releases Clean Lite 12.6

Axios npm Package Briefly Trojanized After Maintainer Account Takeover

eScan Update Server Breach Delivered Malicious Patch During Two-Hour Window

Fortinet FortiSIEM Flaw Under Active Exploitation After Public Exploit Release

Check Point Details 'VoidLink,' a Cloud-Focused Linux Malware Framework With Modular Stealth

Fortinet SSO Bypass Actively Exploited as CISA Sets Dec. 23 Fix Deadline

New ShadowV2 Botnet Used AWS Outage for Test, Fortinet Warns of Lasting IoT Risk

Anthropic’s ‘AI‑Orchestrated’ Cyberespionage Claim Faces Immediate Skepticism

Google Details COLDRIVER’s New NOROBOT, YESROBOT, MAYBEROBOT Toolset After LOSTKEYS Exposure

Malicious npm Packages Tap Ethereum Smart Contracts for Stealthy C2

Never miss stories about

Indicators of Compromise