Technology ❯ Cybersecurity ❯ Incident Response

Indicators of Compromise

Post-Attack Actions Malicious Code SonicWall Recommendations Server Security System Cleaning Malicious Activity File and Log Indicators Detection and Prevention YARA Rules Scattered LAPSUS$ Hunters

3 ARTICLES

4w ago

Attackers Actively Exploiting Critical Sangoma Switchvox SQL Injection

Unauthenticated exploitation can run database and operating-system commands that let attackers steal signing keys and maintain access to business phone systems.

6 ARTICLES

4w ago

SonicWall SMA1000 Zero‑Days Are Being Actively Exploited and Vendor Issues Hotfixes

5 ARTICLES

3mo ago

Cisco Warns of Unpatched SD‑WAN Zero‑Day Under Active Exploitation

3 ARTICLES

4mo ago

KnowledgeDeliver Zero-Day Lets Hackers Install Godzilla Web Shells and Cobalt Strike

5 ARTICLES

4mo ago

Attackers Poison More Than 700 Ghost CMS Sites to Push ClickFix Malware

9 ARTICLES

4mo ago

DAEMON Tools Confirms Supply-Chain Breach, Releases Clean Lite 12.6

3 ARTICLES

6mo ago

CISA Lists F5 BIG-IP APM Flaw as Actively Exploited RCE, Sets March 30 Patch Deadline

5 ARTICLES

7mo ago

Hackers Actively Exploit 'Metro4Shell' CVE-2025-11953 in React Native Metro Servers

5 ARTICLES

8mo ago

SolarWinds Releases Web Help Desk 2026.1 to Fix Critical RCE and Authentication Bypass Flaws

4 ARTICLES

9mo ago

CISA Flags Actively Exploited WatchGuard Firebox RCE as Patches and IoCs Roll Out

6 ARTICLES

10mo ago

WrtHug Campaign Hijacks About 50,000 ASUS Routers Worldwide

5 ARTICLES

10mo ago

Mandiant Says Hackers Exploit Triofox Flaw to Create Admin Accounts and Execute Code

5 ARTICLES

11mo ago

Cisco SNMP Zero‑Day Fueled ‘Operation Zero Disco’ Rootkit Attacks on Older Switches

18 ARTICLES

11mo ago

Oracle Rushes Fix as Cl0p’s Exploitation of E‑Business Suite Zero‑Day Dates to August

Indicators of Compromise

Attackers Actively Exploiting Critical Sangoma Switchvox SQL Injection

SonicWall: Two SMA1000 Zero‑Days Actively Exploited

Fire Ant Turns Cisco Routers and TACACS Servers Into Espionage Platforms

PaperCut Zero-Days Escalate to Active Intrusions

PaperCut Pre‑Auth Flaws Allow Remote Code Execution

Typosquatted Rust Crate Delivered Build‑Time Backdoor

Metabase Zero‑Day SQL Injection Exploited to Steal Customer Data

SonicWall SMA1000 Zero‑Days Are Being Actively Exploited and Vendor Issues Hotfixes

Cisco Warns of Unpatched SD‑WAN Zero‑Day Under Active Exploitation

KnowledgeDeliver Zero-Day Lets Hackers Install Godzilla Web Shells and Cobalt Strike

Never miss stories about

Indicators of Compromise

Attackers Poison More Than 700 Ghost CMS Sites to Push ClickFix Malware

DAEMON Tools Confirms Supply-Chain Breach, Releases Clean Lite 12.6

CISA Lists F5 BIG-IP APM Flaw as Actively Exploited RCE, Sets March 30 Patch Deadline

Hackers Actively Exploit 'Metro4Shell' CVE-2025-11953 in React Native Metro Servers

SolarWinds Releases Web Help Desk 2026.1 to Fix Critical RCE and Authentication Bypass Flaws

CISA Flags Actively Exploited WatchGuard Firebox RCE as Patches and IoCs Roll Out

WrtHug Campaign Hijacks About 50,000 ASUS Routers Worldwide

Mandiant Says Hackers Exploit Triofox Flaw to Create Admin Accounts and Execute Code

Cisco SNMP Zero‑Day Fueled ‘Operation Zero Disco’ Rootkit Attacks on Older Switches

Oracle Rushes Fix as Cl0p’s Exploitation of E‑Business Suite Zero‑Day Dates to August

Never miss stories about

Indicators of Compromise