Threat Intelligence

Malware Analysis Incident Response Malware Vulnerabilities Attack Vectors Exploitation Indicators of Compromise Vulnerability Management Advanced Persistent Threats Hacking Groups

3 ARTICLES

last wk.

Attackers Actively Exploiting Critical Sangoma Switchvox SQL Injection

Unauthenticated exploitation can run database and operating-system commands that let attackers steal signing keys and maintain access to business phone systems.

5 ARTICLES

last wk.

AI Ported a PLC Remote‑Code Exploit After Hours of Expert Guidance and $536 in API Fees

3 ARTICLES

last wk.

CISA Adds Actively Exploited Oracle WebLogic and Citrix NetScaler Flaws to KEV and Orders Rapid Federal Patching

5 ARTICLES

2w ago

ReliaQuest Says ShinyHunters Gained Brief View-Only Okta Access After MFA Push

9 ARTICLES

2w ago

Typosquatted Rust Crate Delivered Build‑Time Backdoor

3 ARTICLES

2w ago

Microsoft Confirms Entra ID Deserialization Flaw CVE-2026-69836 Was Exploited

15 ARTICLES

2w ago

U.S. Agencies Warn AI-Generated Tools Are Actively Targeting Siemens S7 PLCs

5 ARTICLES

2w ago

Operators Compromised More Than 14,500 Dahua Cameras in 35‑Day Campaign

3 ARTICLES

3w ago

Critical SAP Commerce Cloud Flaw Targeted in Early Exploit Attempts

4 ARTICLES

3w ago

Active Exploitation of VMware vCenter Flaw Lets Attackers Maintain Outbound Reverse Shells

9 ARTICLES

3w ago

ShieldBreak PoC Elevates Privileges via Microsoft Defender

7 ARTICLES

3w ago

Public SharePoint PoC Triggers Active Exploitation of Critical JWT Bypass

Threat Intelligence

Attackers Actively Exploiting Critical Sangoma Switchvox SQL Injection

AI Ported a PLC Remote‑Code Exploit After Hours of Expert Guidance and $536 in API Fees

Attackers Forge Admin Tokens Using Critical JFrog Artifactory Flaw

Mirage Kitten Uses Fake LinkedIn Coding Tests to Deliver New Node.js Malware

Attackers Exploiting Critical Langflow Flaw to Steal OpenAI and AWS Keys

Palo Alto Acquires Console to Add Natural‑Language Agents to Cortex

PaperCut Zero-Days Escalate to Active Intrusions

Signed Chinese Wallpaper App Used to Sideload ValleyRAT Backdoor

PaperCut Pre‑Auth Flaws Allow Remote Code Execution

GoCaracal Malware Uses Ethereum Smart Contract as Backup C2

Never miss stories about

Threat Intelligence

CISA Adds Actively Exploited Oracle WebLogic and Citrix NetScaler Flaws to KEV and Orders Rapid Federal Patching

ReliaQuest Says ShinyHunters Gained Brief View-Only Okta Access After MFA Push

Typosquatted Rust Crate Delivered Build‑Time Backdoor

Microsoft Confirms Entra ID Deserialization Flaw CVE-2026-69836 Was Exploited

U.S. Agencies Warn AI-Generated Tools Are Actively Targeting Siemens S7 PLCs

Operators Compromised More Than 14,500 Dahua Cameras in 35‑Day Campaign

Critical SAP Commerce Cloud Flaw Targeted in Early Exploit Attempts

Active Exploitation of VMware vCenter Flaw Lets Attackers Maintain Outbound Reverse Shells

ShieldBreak PoC Elevates Privileges via Microsoft Defender

Public SharePoint PoC Triggers Active Exploitation of Critical JWT Bypass

Never miss stories about

Threat Intelligence