Blog

Attackers are industrializing the exploitation of a critical privilege escalation flaw in the Windows security subsystem to gain SYSTEM-level access […]

State-sponsored threat actors have scaled their reconnaissance operations by weaponizing massive botnets to identify and exploit unpatched management interfaces at

A previously undocumented state-backed threat actor is leveraging legitimate enterprise SaaS platforms to hide its command-and-control traffic. This strategy allows

A critical privilege escalation flaw in the Windows security subsystem has been added to the federal list of known exploited

A critical data persistence vulnerability in mobile notification services has been addressed following reports that it was being used by

Ongoing analysis of a major supply chain intrusion has revealed additional compromised customer accounts following the abuse of a third-party

A maximum-severity privilege escalation vulnerability in a core web development framework allows attackers to bypass security boundaries and execute code

A critical vulnerability in a popular web server management interface is being weaponized to hijack enterprise web traffic and steal

A sophisticated supply chain attack targeting the Node Package Manager (npm) ecosystem is leveraging compromised developer tokens to distribute malicious

Two critical vulnerabilities in the management plane of modern software-defined networking infrastructure are being actively exploited in the wild. These