Threat Intelligence

Malware Analysis Incident Response Malware Attack Vectors Vulnerabilities Exploitation Indicators of Compromise Vulnerability Management Advanced Persistent Threats Active Exploitation

3 ARTICLES

yesterday

NIKKE PC Launcher Compromised to Deliver Remote-Access and Wallet-Stealing Malware

Publisher updates aim to stop further infections as researchers publish technical indicators showing a LuaJIT backdoor and a DLL tied to wallet-theft functionality.

6 ARTICLES

2d ago

APT29 Uses Hijacked Analytics and Watering Holes to Deliver Patched iOS and Android Exploits

3 ARTICLES

3d ago

Gorbag Exploits WinRAR Flaw to Steal Ukrainian Credentials

4 ARTICLES

4d ago

Ivanti Releases Patches for Two Remaining Connect Secure Zero‑Days

3 ARTICLES

last wk.

China-Linked Vapor Panda Used Agentic AI Tool ARTEX to Hit More Than 200 Organizations

5 ARTICLES

last wk.

Attackers Scanning for Recently Patched Oracle E‑Business Suite Flaw

3 ARTICLES

last wk.

KeyDrift Malware Found in Cisco SD‑WAN Controllers Steals AES‑256 Site‑to‑Site Keys

19 ARTICLES

last wk.

Attackers Exploit DLL Sideloading Flaw in Siemens Software Center Linked to ClickFix Romulus

6 ARTICLES

3w ago

Palo Alto Issues Fixes for PAN‑OS Zero‑Day That Lets Authenticated Users Gain Root

5 ARTICLES

3w ago

Cisco Patches Actively Exploited Zero‑Day in Secure Email Gateway

5 ARTICLES

3w ago

Cheap Android Phones Ship With Firmware Malware That Can’t Be Removed

13 ARTICLES

4w ago

U.S. Seizes Domains and Disrupts China‑Linked MicroScan and FishHub Tools

12 ARTICLES

4w ago

AI Pentest Tool ARTEX Used to Steal Data From South Korean Banks

Threat Intelligence

NIKKE PC Launcher Compromised to Deliver Remote-Access and Wallet-Stealing Malware

APT29 Uses Hijacked Analytics and Watering Holes to Deliver Patched iOS and Android Exploits

Gorbag Exploits WinRAR Flaw to Steal Ukrainian Credentials

Ivanti Releases Patches for Two Remaining Connect Secure Zero‑Days

China-Linked Vapor Panda Used Agentic AI Tool ARTEX to Hit More Than 200 Organizations

Attackers Scanning for Recently Patched Oracle E‑Business Suite Flaw

KeyDrift Malware Found in Cisco SD‑WAN Controllers Steals AES‑256 Site‑to‑Site Keys

CISA Confirms Active Exploitation of PHP2Shell Targeting Management Interfaces

Cisco Issues Patches for Actively Exploited ASA and FTD VPN Zero‑Day

PHP2Shell Flaws Patched, Researchers Confirm Live Remote Code Execution

Never miss stories about

Threat Intelligence

Node.js Patches 'Node2Shell' Brotli Bug After RCE Demonstration

Iranian 'Prince of Persia' APT Used U.S. Hosting for Command‑and‑Control Server

Plex2Shell Exploit Turns Unpatched Plex Servers Into Miners and Proxy Nodes

ConnectWise Cloud Apps Used to Access Hundreds of Microsoft 365 Tenants

Attackers Exploit DLL Sideloading Flaw in Siemens Software Center Linked to ClickFix Romulus

Palo Alto Issues Fixes for PAN‑OS Zero‑Day That Lets Authenticated Users Gain Root

Cisco Patches Actively Exploited Zero‑Day in Secure Email Gateway

Cheap Android Phones Ship With Firmware Malware That Can’t Be Removed

U.S. Seizes Domains and Disrupts China‑Linked MicroScan and FishHub Tools

AI Pentest Tool ARTEX Used to Steal Data From South Korean Banks

Never miss stories about

Threat Intelligence