Active Exploitation Alert
312 posts | Page 8 of 13
Active Exploitation Alert
Storm-2372: Russia-Linked Hackers Exploit Microsoft 365 Device Code Phishing for Account Takeovers
Active Exploitation Alert
Russian Cyberattacks on Tureby Alkestrup Waterworks and Danish Election Websites: Attribution, Impact, and Mitigation
Active Exploitation Alert
Microsoft 365 Under Attack: OAuth Device Code Phishing Campaigns Bypass MFA and Compromise Accounts (2024–2025)
Active Exploitation Alert
Iranian Infy (Prince of Persia) APT Returns: New Microsoft Windows and Office Malware Campaigns Exploit Telegram-Based C2
Active Exploitation Alert
CVE-2025-14733: Critical WatchGuard Firebox Firewall RCE Vulnerability Actively Exploited in the Wild
Active Exploitation Alert
CountLoader and GachiLoader Malware Targeting Windows Systems via Cracked Software and YouTube Campaigns
Active Exploitation Alert
ArcaneDoor Exploits Cisco ASA/FTD VPNs and Ransomware Groups Target Enterprise Email Services in 2024–2025 Campaigns
Active Exploitation Alert
SonicWall SMA 1000 Zero-Day Attack Chain: CVE-2025-23006 and CVE-2025-40602 Actively Exploited, Patch Now
Active Exploitation Alert
Kimsuky Campaign Uses QR Phishing to Distribute DocSwap Android Malware via Fake CJ Logistics Delivery App
Active Exploitation Alert
CVE-2025-68260: Critical Race Condition in Rust-Based Android Binder Subsystem Affects Linux Kernel 6.18+
Active Exploitation Alert
CVE-2025-55182: Critical React Server Components Vulnerability (React2Shell) Exploited in Ransomware and APT Attacks
Active Exploitation Alert
Cisco AsyncOS Email Security Appliance Zero-Day (CVE-2025-20393) Actively Exploited in Ongoing Attacks
Active Exploitation Alert
CISA Adds Critical ASUS Live Update Supply Chain Vulnerability to KEV After Confirmed Exploitation (CVE-2025-59374)
Active Exploitation Alert
AWS Cryptomining Attack: Threat Intelligence on Stolen IAM Credentials Fueling Large-Scale EC2 & ECS Abuse
Active Exploitation Alert
APT28 Credential Phishing Campaign Targets UKR.net Users: Technical Analysis and Threat Intelligence Report
Active Exploitation Alert
CVE-2025-55182 React2Shell: Chinese APT Groups Exploit Critical React Server Components Vulnerability for Malware Delivery
Active Exploitation Alert
Rescana Threat Intelligence Report: Widespread Exploitation of React Server Components via CVE-2025-55182 (React2Shell)
Active Exploitation Alert
PyStoreRAT Malware Campaign: Fake OSINT and GPT GitHub Repositories Target Security Researchers and Cryptocurrency Users
Active Exploitation Alert
Critical Sierra Wireless AirLink ALEOS Router Vulnerability (CVE-2018-4063) Added to CISA KEV After Active Exploitation Enables Remote Code Execution
Active Exploitation Alert
Apple Urgently Patches WebKit Zero-Day Vulnerabilities Exploited in Targeted Attacks Affecting iOS, macOS, and Safari
Active Exploitation Alert
AI-Driven Phishing Kits Target Microsoft 365 and European Banks with Advanced MFA Bypass Techniques
Active Exploitation Alert
Zero-Click Vulnerability in Perplexity Comet Browser Allows Full Google Drive Deletion via Crafted Emails
Active Exploitation Alert
ShadowMQ Vulnerabilities: Over 30 Critical Flaws in Meta Llama, NVIDIA TensorRT-LLM, vLLM, and Other AI Inference Engines Enable Data Theft and Remote Code Execution
Active Exploitation Alert