Technology ❯ Cybersecurity ❯ Incident Response

Threat Intelligence

Huntress Mandiant Vulnerability Management Google Threat Intelligence Group Cisco Talos Indicators of Compromise Real-time Monitoring Malicious Activities Cybersecurity Firms Security Research

Attackers Compromise Hotel and Conference Wi‑Fi to Steal Microsoft 365 Credentials

The gateway compromises let attackers harvest Microsoft 365 logins or obtain MFA‑cleared sessions by abusing device‑code sign‑ins.

ARToken Panel Identified as Full BEC‑as‑a‑Service Tied to EvilTokens

Mandiant Says Cisco SD‑WAN Zero‑Day Gave Attackers Root Access

WhatsApp Account Hijacks Deliver VBScript That Installs ManageEngine Remote‑Access Tool

Google Launches AI Threat Defense to Automate Enterprise Vulnerability Lifecycle

Incomplete Patching Lets Attackers Bypass MFA on SonicWall Gen6 VPNs

cPanel Flaw Under Active Attack by Long-Running Group Deploying 'Filemanager'

Google Details UNC6692’s Teams Impersonation Campaign Using ‘Snow’ Malware

CISA Orders Federal Fix for Microsoft Defender 'BlueHammer' Flaw Exploited in the Wild

Microsoft Defender Zero-Days Are Being Exploited as Two Remain Unpatched

Kevin Mandia Launches Armadin With Nearly $190 Million to Build Autonomous AI Red Teams

BeyondTrust Pre-Auth RCE Is Now Being Exploited in the Wild

Google Warns of Widespread, Ongoing Exploitation of WinRAR Vulnerability

Fortinet Confirms FortiCloud SSO Bypass Hitting Fully Patched FortiGate Firewalls

Cisco Releases Fix for AsyncOS Zero-Day Exploited on Secure Email Appliances

Huntress Uncovers Pre-Disclosure ESXi VM-Escape Toolkit Used in December Intrusion

React2Shell Attacks Escalate as Microsoft Confirms Hundreds of Compromised Systems

Fortinet Confirms Critical FortiWeb Zero-Day Is Being Exploited as CISA Sets Nov. 21 Patch Deadline

Mandiant Says Hackers Exploit Triofox Flaw to Create Admin Accounts and Execute Code

Darktrace: Salt Typhoon Used Citrix Flaw in Attempted European Telco Breach