Technology ❯ Cybersecurity ❯ Threat Intelligence

Attack Vectors

Remote Code Execution Social Engineering Webshells Zero-Day Vulnerabilities Slopsquatting Compromised Credentials Admin Account Creation Credential Attacks HTTP POST Requests Server-Side Request Forgery

3 ARTICLES

2w ago

Public PoC Triggers Active Exploitation of Critical SharePoint RCE

Attackers are stealing IIS and SharePoint machine keys to stay inside networks after fixes, so applying patches alone will not guarantee removal of intruders.

4 ARTICLES

2w ago

Qilin Ransomware Exploits Palo Alto GlobalProtect Authentication Bypass

8 ARTICLES

2w ago

HOLLOWGRAPH Malware Uses Microsoft 365 Calendars as a Covert C2 Channel

3 ARTICLES

3w ago

AI-Generated PowerShell Script Mapped Active Directory and Staged Data Exfiltration

9 ARTICLES

3mo ago

Adobe Reader Zero-Day Exploited for Months Through Malicious PDFs

12 ARTICLES

4mo ago

Axios npm Package Briefly Trojanized After Maintainer Account Takeover

6 ARTICLES

4mo ago

M‑Trends 2026 Finds 22‑Second Handoffs, Exploit‑Led Breaches and a Vishing Spike

3 ARTICLES

5mo ago

Huntress Uncovers Pre-Disclosure ESXi VM-Escape Toolkit Used in December Intrusion

6 ARTICLES

7mo ago

SonicWall Patches Actively Exploited SMA1000 Zero-Day, Urges Immediate Hotfixes

11 ARTICLES

7mo ago

React2Shell Attacks Intensify as React Issues Second Round of Emergency Patches

8 ARTICLES

8mo ago

Fortinet Confirms Critical FortiWeb Zero-Day Is Being Exploited as CISA Sets Nov. 21 Patch Deadline

7 ARTICLES

9mo ago

Researchers Uncover 'PhantomRaven' Campaign Flooding npm With 126 Credential-Stealing Packages

3 ARTICLES

11mo ago

FortiGuard Uncovers MostereRAT, a Stealthy Windows RAT Using mTLS and Remote-Access Tools

6 ARTICLES

11mo ago

CISA Orders Immediate Fix for Actively Exploited Sitecore ViewState Flaw (CVE-2025-53690)

5 ARTICLES

11mo ago

HexStrike‑AI Attracts Criminal Use as Citrix NetScaler Zero‑Days Face Rapid Exploitation

Attack Vectors

Public PoC Triggers Active Exploitation of Critical SharePoint RCE

Qilin Ransomware Exploits Palo Alto GlobalProtect Authentication Bypass

HOLLOWGRAPH Malware Uses Microsoft 365 Calendars as a Covert C2 Channel

AI-Generated PowerShell Script Mapped Active Directory and Staged Data Exfiltration

Adobe Reader Zero-Day Exploited for Months Through Malicious PDFs

Axios npm Package Briefly Trojanized After Maintainer Account Takeover

M‑Trends 2026 Finds 22‑Second Handoffs, Exploit‑Led Breaches and a Vishing Spike

Exploit-Driven Hacks Overtake Credential Abuse in Cloud Breaches, Google Warns

Microsoft Warns of Fake Next.js Repos That Backdoor Developers’ Machines

LinkedIn DMs Used in RAT Campaign That Leverages DLL Sideloading

Never miss stories about

Attack Vectors

Huntress Uncovers Pre-Disclosure ESXi VM-Escape Toolkit Used in December Intrusion

SonicWall Patches Actively Exploited SMA1000 Zero-Day, Urges Immediate Hotfixes

React2Shell Attacks Intensify as React Issues Second Round of Emergency Patches

Fortinet Confirms Critical FortiWeb Zero-Day Is Being Exploited as CISA Sets Nov. 21 Patch Deadline

Researchers Uncover 'PhantomRaven' Campaign Flooding npm With 126 Credential-Stealing Packages

FortiGuard Uncovers MostereRAT, a Stealthy Windows RAT Using mTLS and Remote-Access Tools

CISA Orders Immediate Fix for Actively Exploited Sitecore ViewState Flaw (CVE-2025-53690)

HexStrike‑AI Attracts Criminal Use as Citrix NetScaler Zero‑Days Face Rapid Exploitation

Never miss stories about

Attack Vectors