A large-scale automated campaign is currently exploiting a critical flaw in Next.js applications to map and harvest credentials from cloud-native […]
React2Shell campaign compromises 766 hosts via Next.js vulnerability Read More »
The Interlock ransomware group is actively targeting network security management planes to gain root-level control over enterprise firewalls. This campaign
Interlock ransomware weaponizes Cisco Secure FMC RCE for edge-device entry Read More »
Attackers are leveraging an unauthenticated memory overread vulnerability to bypass multi-factor authentication on enterprise gateways. This flaw specifically targets the
Citrix NetScaler memory disclose flaw actively exploited for session takeover Read More »
A critical vulnerability in a widely used video conferencing client is being actively exploited to distribute malicious code to enterprise
CISA adds TrueConf Client code integrity flaw to KEV amid active exploitation Read More »
The sophisticated supply chain attack on the Axios library has been confirmed as the result of a targeted social engineering
North Korean UNC1069 used social engineering to hijack Axios npm distribution Read More »
Attackers are industrializing the exploitation of a memory overread flaw to hijack enterprise sessions and bypass multi-factor authentication. This vulnerability
Active exploitation of Citrix NetScaler memory disclosure flaw surging globally Read More »
The major data exfiltration event impacting the European Commission cloud infrastructure has been formally traced to the compromise of a
European Commission breach linked to TeamPCP Trivy supply chain compromise Read More »
The North Korea-nexus threat actor UNC1069 successfully compromised the distribution channel for Axios‚ the most popular JavaScript HTTP client library.
UNC1069 North Korea-nexus actor compromises Axios npm package distribution Read More »
Today marks the final remediation deadline for a series of high-impact vulnerabilities that allow for remote code execution and session
Final CISA deadline for critical Apple WebKit and Laravel Livewire vulnerabilities Read More »
A critical vulnerability in the TrueConf video conferencing client is being actively exploited to download and execute malicious code without
CISA adds TrueConf Client code integrity flaw to KEV following active exploitation Read More »
