Technology ❯ Cybersecurity ❯ Threat Intelligence

Vulnerabilities

Zero-Day Exploits Public Disclosure Modbus Protocol Android Devices Malware Analysis CVE-2013-3307 SMA 100 Series Remote Code Execution CVE-2025-29824 CVE-2024-40766 CVE Program Microsoft Exchange Server CVE-2025-61882 Incident Response CISA KEV Catalog Authentication Bypass Router Exploits PoC Exploits CVE-2025-20393 Cross-Site Scripting Monitoring Tools Exfiltration Techniques Access Control CVE Reports Google Threat Intelligence Group Credential Harvesting OSINT Exploit Development Communication Mechanisms Exploitation Legacy Systems

GitLab Emergency Patch for CVSS 10 Path Traversal Draws Internet-Scale Probes

Unauthenticated requests can read arbitrary files on self-hosted GitLab servers, raising urgent risk to source code and CI/CD secrets.

Mandiant Says Cisco SD‑WAN Zero‑Day Gave Attackers Root Access

AryStinger Malware Hijacks 4,300+ Legacy Routers to Build Reconnaissance and Proxy Fleet

Hackers Exploit Critical Next.js React2Shell Bug to Steal Credentials From 766 Hosts

npm Worm 'SANDWORM_MODE' Exposed Targeting Developer and CI Secrets Through Typosquatted Packages

Researchers Exploit StealC Panel XSS to Expose Operations of ‘YouTubeTA’

China-Linked Hackers Exploit Cisco Email Zero-Day With No Patch as CISA Flags Active Threat

WrtHug Campaign Hijacks About 50,000 ASUS Routers Worldwide

Fortinet Confirms Critical FortiWeb Zero-Day Is Being Exploited as CISA Sets Nov. 21 Patch Deadline

Amazon Reveals Pre‑Disclosure Exploits of Citrix NetScaler and Cisco ISE to Plant Stealth Backdoor

CISA and NSA Lead Multinational Guide to Secure On‑Premises Microsoft Exchange Servers

CISA Flags Active Exploits of Windows SMB Privilege Bug, Sets Nov. 10 Patch Deadline

Google Says Oracle E‑Business Suite Zero‑Day Fueled Data Theft at Dozens, Likely Over 100

SonicWall Ships SMA 100 Firmware to Detect and Remove OVERSTEP Rootkit

Researchers Detail PipeMagic Backdoor Using Fake ChatGPT App and CLFS Exploit

Darktrace Details First Auto-Color Malware Attack Exploiting Patched SAP NetWeaver Flaw