Blog
-
Active Exploitation of SonicWall VPNs
A potential zero-day vulnerability in SonicWall VPNs is being actively exploited to bypass MFA and deploy ransomware. The attack chain…
-
Active Exploitation of SonicWall VPNs
A potential zero-day vulnerability in SonicWall VPNs is being actively exploited to bypass MFA and deploy ransomware. The attack chain…
-
Frozen in transit: Secret Blizzards AiTM campaign against diplomats
A Russian state actor known as Secret Blizzard has been conducting a cyberespionage campaign targeting embassies in Moscow using an…
-
Frozen in transit: Secret Blizzards AiTM campaign against diplomats
A Russian state actor known as Secret Blizzard has been conducting a cyberespionage campaign targeting embassies in Moscow using an…
-
Active Exploitation of CVE20255394 in Alone WordPress Theme
A critical arbitrary file-upload vulnerability (CVE-2025-5394) in the Alone – Charity Multipurpose Non-profit WordPress theme versions 7.8.3 and earlier is…
-
Active Exploitation of CVE20255394 in Alone WordPress Theme
A critical arbitrary file-upload vulnerability (CVE-2025-5394) in the Alone – Charity Multipurpose Non-profit WordPress theme versions 7.8.3 and earlier is…
-
SharePoint ZeroDay Exploit (ToolShell) Network Infrastructure Mapping
Chinese threat actors have been exploiting zero-day vulnerabilities in SharePoint servers, known as ToolShell, affecting nearly 150 organizations worldwide. The…
-
SharePoint ZeroDay Exploit (ToolShell) Network Infrastructure Mapping
Chinese threat actors have been exploiting zero-day vulnerabilities in SharePoint servers, known as ToolShell, affecting nearly 150 organizations worldwide. The…
-
Silent Push CEO on cybercrime takedowns: ‘It’s an ongoing cat-and-mouse game’
#### [Cyber-crime](/security/cyber_crime/)Silent Push CEO on cybercrime takedowns: ‘It’s an ongoing cat-and-mouse game’=============================================================================Plus: why takedowns aren’t in threat-intel analysts’ best interest——————————————————————[Jessica…
-
Why we shouldn’t just repeat ransomware groups’ claims, Sunday edition
Some data leaks are not what you might expect from their listing on a dark web leak site. Today’s example…