Your endpoint management infrastructure is being targeted by unauthenticated attackers to achieve remote code execution via an API authentication bypass.
CISA orders emergency patching for actively exploited Fortinet EMS zero-day Read More »
A large-scale automated campaign is currently exploiting a critical pre-authentication RCE in Next.js applications to siphon credentials from cloud-native environments.
React2Shell campaign achieves industrial scale with NEXUS Listener command center Read More »
A novel hardware-level attack targeting GPU memory allows for cross-process memory corruption and full system privilege escalation. This attack bypasses
GPUBreach attack induces GDDR6 Rowhammer bit-flips for system takeover Read More »
A critical vulnerability in the management interface of high-performance server hardware allows unauthenticated attackers to gain full administrative control. This
Cisco releases emergency fixes for critical Integrated Management Controller bypass Read More »
A large-scale automated campaign is currently exploiting a critical pre-authentication RCE in React Server Components and Next.js applications to siphon
React2Shell campaign exploits critical Next.js RCE for automated cloud harvesting Read More »
Attackers are industrializing the exploitation of a memory overread flaw to hijack enterprise sessions and bypass multi-factor authentication. This vulnerability
Active exploitation of Citrix NetScaler memory disclosure flaw surging globally Read More »
One of the most trusted HTTP client libraries in the JavaScript ecosystem has been weaponized by a North Korea-nexus actor
North Korean UNC1069 attributed to Axios npm supply chain compromise Read More »
The supply chain campaign initiated through a compromised vulnerability scanner has successfully pivoted into secondary cloud-native libraries. This cascading failure
TeamPCP leverages stolen Trivy secrets to compromise secondary cloud targets Read More »
A large-scale automated campaign is currently exploiting a critical flaw in Next.js applications to map and harvest credentials from cloud-native
React2Shell campaign compromises 766 hosts via Next.js vulnerability Read More »
The Interlock ransomware group is actively targeting network security management planes to gain root-level control over enterprise firewalls. This campaign
Interlock ransomware weaponizes Cisco Secure FMC RCE for edge-device entry Read More »
