Code Defence

A novel hardware-level attack targeting GPU memory allows for cross-process memory corruption and full system privilege escalation. This attack bypasses […]

A critical vulnerability in the management interface of high-performance server hardware allows unauthenticated attackers to gain full administrative control. This

A large-scale automated campaign is currently exploiting a critical pre-authentication RCE in React Server Components and Next.js applications to siphon

Attackers are industrializing the exploitation of a memory overread flaw to hijack enterprise sessions and bypass multi-factor authentication. This vulnerability

One of the most trusted HTTP client libraries in the JavaScript ecosystem has been weaponized by a North Korea-nexus actor

The supply chain campaign initiated through a compromised vulnerability scanner has successfully pivoted into secondary cloud-native libraries. This cascading failure

A large-scale automated campaign is currently exploiting a critical flaw in Next.js applications to map and harvest credentials from cloud-native

The Interlock ransomware group is actively targeting network security management planes to gain root-level control over enterprise firewalls. This campaign

Attackers are leveraging an unauthenticated memory overread vulnerability to bypass multi-factor authentication on enterprise gateways. This flaw specifically targets the

A critical vulnerability in a widely used video conferencing client is being actively exploited to distribute malicious code to enterprise