Technology ❯ Cybersecurity ❯ Incident Response

Indicators of Compromise

Scattered LAPSUS$ Hunters Post-Attack Actions SonicWall Recommendations System Cleaning Malicious Activity File and Log Indicators Detection and Prevention YARA Rules Detection Methods Exploitation Activity Firmware Investigation Trend Micro Reports WHD Logs Recommendations Customer Support Mitigation Strategies Monitoring Traffic ColdFusion Servers Security Advisory Vulnerability Management VulnCheck Hunting for Attacks Malware Detection Website Security

SonicWall SMA1000 Zero‑Days Are Being Actively Exploited and Vendor Issues Hotfixes

U.S. regulators have ordered rapid federal fixes because the flaws let attackers move from web requests to full appliance compromise.

Cisco Warns of Unpatched SD‑WAN Zero‑Day Under Active Exploitation

KnowledgeDeliver Zero-Day Lets Hackers Install Godzilla Web Shells and Cobalt Strike

Attackers Poison More Than 700 Ghost CMS Sites to Push ClickFix Malware

DAEMON Tools Confirms Supply-Chain Breach, Releases Clean Lite 12.6

CISA Lists F5 BIG-IP APM Flaw as Actively Exploited RCE, Sets March 30 Patch Deadline

Hackers Actively Exploit 'Metro4Shell' CVE-2025-11953 in React Native Metro Servers

SolarWinds Releases Web Help Desk 2026.1 to Fix Critical RCE and Authentication Bypass Flaws

CISA Flags Actively Exploited WatchGuard Firebox RCE as Patches and IoCs Roll Out

WrtHug Campaign Hijacks About 50,000 ASUS Routers Worldwide

Mandiant Says Hackers Exploit Triofox Flaw to Create Admin Accounts and Execute Code

Cisco SNMP Zero‑Day Fueled ‘Operation Zero Disco’ Rootkit Attacks on Older Switches

Oracle Rushes Fix as Cl0p’s Exploitation of E‑Business Suite Zero‑Day Dates to August

Researchers Say GoAnywhere CVSS 10 Flaw Was Exploited as Zero-Day Before Disclosure

CISA Orders Immediate Fix for Actively Exploited Sitecore ViewState Flaw (CVE-2025-53690)