Browsing: Threat Campaign

Top Highlights An unknown threat actor exploited a zero-day vulnerability in Cisco Catalyst SD-WAN (CVE-2026-20245)…

Essential Insights GHOST STADIUM is running a highly sophisticated phishing campaign with over 300 domains,…

Fast Facts Malicious npm packages like "aes-decode-runner-pro" and "postcss-minify-selector-parser" embed JavaScript droppers that deliver a…

Summary Points Malicious VBScript files disguised as legitimate documents are distributed via WhatsApp, exploiting both…

Essential Insights Threat actors are exploiting default and organization-specific credentials on Fortinet FortiGate devices through…

Summary Points Threat actors exploited compromised Fortinet credentials, impacting around 74,000 devices globally, enabling unauthorized…

Essential Insights Threat actors now exploit exposed Fortinet credentials to gain unauthorized access, manipulate firewall…

Essential Insights The campaign uses malicious Windows Shortcut (LNK) files via USB to infect systems,…

Fast Facts Attackers exploited legitimate Microsoft Teams infrastructure by utilizing a custom Go-based backdoor, Backdoor.Turn,…

Fast Facts UNC6508 exploited externally facing REDCap servers, deploying the custom malware INFINITERED to harvest…