Covenant Health Qilin Ransomware Breach: Technical Analysis of 2025 Attack Impacting 478,188 Patient Records
Active Exploitation Alert

Covenant Health Qilin Ransomware Breach: Technical Analysis of 2025 Attack Impacting 478,188 Patient Records

Jan 4, 2026 Read →
WebRAT Malware Campaign Targets Security Researchers via Fake CVE Exploit PoCs on GitHub
Active Exploitation Alert

WebRAT Malware Campaign Targets Security Researchers via Fake CVE Exploit PoCs on GitHub

Dec 25, 2025 Read →
La Poste and La Banque Postale Hit by Pro-Russian Noname057(16) DDoS Cyberattack in December 2025
Active Exploitation Alert

La Poste and La Banque Postale Hit by Pro-Russian Noname057(16) DDoS Cyberattack in December 2025

Dec 25, 2025 Read →
Healthcare Industry Pushes Back on HIPAA Security Rule Overhaul: Impact on Electronic Protected Health Information (ePHI) Systems
Active Exploitation Alert

Healthcare Industry Pushes Back on HIPAA Security Rule Overhaul: Impact on Electronic Protected Health Information (ePHI) Systems

Dec 25, 2025 Read →
Fake MAS Windows Activation Domain Infects Windows Systems with Cosmali Loader and XWorm PowerShell Malware
Active Exploitation Alert

Fake MAS Windows Activation Domain Infects Windows Systems with Cosmali Loader and XWorm PowerShell Malware

Dec 25, 2025 Read →
Critical CVE-2025-14847 Vulnerability in MongoDB Server: Patch Now to Prevent Remote Code Execution and Data Exposure
Active Exploitation Alert

Critical CVE-2025-14847 Vulnerability in MongoDB Server: Patch Now to Prevent Remote Code Execution and Data Exposure

Dec 25, 2025 Read →
WatchGuard Fireware OS VPN Vulnerability (CVE-2025-14733) Actively Exploited – Urgent Security Alert and Mitigation Guidance
Active Exploitation Alert

WatchGuard Fireware OS VPN Vulnerability (CVE-2025-14733) Actively Exploited – Urgent Security Alert and Mitigation Guidance

Dec 21, 2025 Read →
U.S. DOJ Charges 54 in Ploutus Malware ATM Jackpotting Attacks Targeting Diebold Nixdorf and Kalignite Systems
Active Exploitation Alert

U.S. DOJ Charges 54 in Ploutus Malware ATM Jackpotting Attacks Targeting Diebold Nixdorf and Kalignite Systems

Dec 21, 2025 Read →
Storm-2372: Russia-Linked Hackers Exploit Microsoft 365 Device Code Phishing for Account Takeovers
Active Exploitation Alert

Storm-2372: Russia-Linked Hackers Exploit Microsoft 365 Device Code Phishing for Account Takeovers

Dec 21, 2025 Read →
Russian Cyberattacks on Tureby Alkestrup Waterworks and Danish Election Websites: Attribution, Impact, and Mitigation
Active Exploitation Alert

Russian Cyberattacks on Tureby Alkestrup Waterworks and Danish Election Websites: Attribution, Impact, and Mitigation

Dec 21, 2025 Read →
Microsoft 365 Under Attack: OAuth Device Code Phishing Campaigns Bypass MFA and Compromise Accounts (2024–2025)
Active Exploitation Alert

Microsoft 365 Under Attack: OAuth Device Code Phishing Campaigns Bypass MFA and Compromise Accounts (2024–2025)

Dec 21, 2025 Read →
Iranian Infy (Prince of Persia) APT Returns: New Microsoft Windows and Office Malware Campaigns Exploit Telegram-Based C2
Active Exploitation Alert

Iranian Infy (Prince of Persia) APT Returns: New Microsoft Windows and Office Malware Campaigns Exploit Telegram-Based C2

Dec 21, 2025 Read →
CVE-2025-14733: Critical WatchGuard Firebox Firewall RCE Vulnerability Actively Exploited in the Wild
Active Exploitation Alert

CVE-2025-14733: Critical WatchGuard Firebox Firewall RCE Vulnerability Actively Exploited in the Wild

Dec 21, 2025 Read →
CountLoader and GachiLoader Malware Targeting Windows Systems via Cracked Software and YouTube Campaigns
Active Exploitation Alert

CountLoader and GachiLoader Malware Targeting Windows Systems via Cracked Software and YouTube Campaigns

Dec 21, 2025 Read →
ArcaneDoor Exploits Cisco ASA/FTD VPNs and Ransomware Groups Target Enterprise Email Services in 2024–2025 Campaigns
Active Exploitation Alert

ArcaneDoor Exploits Cisco ASA/FTD VPNs and Ransomware Groups Target Enterprise Email Services in 2024–2025 Campaigns

Dec 21, 2025 Read →
SonicWall SMA 1000 Zero-Day Attack Chain: CVE-2025-23006 and CVE-2025-40602 Actively Exploited, Patch Now
Active Exploitation Alert

SonicWall SMA 1000 Zero-Day Attack Chain: CVE-2025-23006 and CVE-2025-40602 Actively Exploited, Patch Now

Dec 18, 2025 Read →
Kimsuky Campaign Uses QR Phishing to Distribute DocSwap Android Malware via Fake CJ Logistics Delivery App
Active Exploitation Alert

Kimsuky Campaign Uses QR Phishing to Distribute DocSwap Android Malware via Fake CJ Logistics Delivery App

Dec 18, 2025 Read →
CVE-2025-68260: Critical Race Condition in Rust-Based Android Binder Subsystem Affects Linux Kernel 6.18+
Active Exploitation Alert

CVE-2025-68260: Critical Race Condition in Rust-Based Android Binder Subsystem Affects Linux Kernel 6.18+

Dec 18, 2025 Read →
CVE-2025-55182: Critical React Server Components Vulnerability (React2Shell) Exploited in Ransomware and APT Attacks
Active Exploitation Alert

CVE-2025-55182: Critical React Server Components Vulnerability (React2Shell) Exploited in Ransomware and APT Attacks

Dec 18, 2025 Read →
Cisco AsyncOS Email Security Appliance Zero-Day (CVE-2025-20393) Actively Exploited in Ongoing Attacks
Active Exploitation Alert

Cisco AsyncOS Email Security Appliance Zero-Day (CVE-2025-20393) Actively Exploited in Ongoing Attacks

Dec 18, 2025 Read →
CISA Adds Critical ASUS Live Update Supply Chain Vulnerability to KEV After Confirmed Exploitation (CVE-2025-59374)
Active Exploitation Alert

CISA Adds Critical ASUS Live Update Supply Chain Vulnerability to KEV After Confirmed Exploitation (CVE-2025-59374)

Dec 18, 2025 Read →
AWS Cryptomining Attack: Threat Intelligence on Stolen IAM Credentials Fueling Large-Scale EC2 & ECS Abuse
Active Exploitation Alert

AWS Cryptomining Attack: Threat Intelligence on Stolen IAM Credentials Fueling Large-Scale EC2 & ECS Abuse

Dec 18, 2025 Read →
APT28 Credential Phishing Campaign Targets UKR.net Users: Technical Analysis and Threat Intelligence Report
Active Exploitation Alert

APT28 Credential Phishing Campaign Targets UKR.net Users: Technical Analysis and Threat Intelligence Report

Dec 18, 2025 Read →
CVE-2025-55182 React2Shell: Chinese APT Groups Exploit Critical React Server Components Vulnerability for Malware Delivery
Active Exploitation Alert

CVE-2025-55182 React2Shell: Chinese APT Groups Exploit Critical React Server Components Vulnerability for Malware Delivery

Dec 16, 2025 Read →