Threat Advisories
Detailed information and guidance on threats and vulnerabilities, focusing on its characteristics, impact, and remediation steps, released daily and weekly to provide actionable intelligence and aid in rapid response and mitigation efforts.
Strengthen Your Defenses With the Latest Intelligence
Threat Level – Red | Vulnerability Report
China-linked Hackers Exploit Cisco NX-OS as Zero-Day
Summary: Cisco fixed a zero-day vulnerability in NX-OS that was exploited in July 3, 2024 Threat Level – Red | Vulnerability Report
regreSSHion: Exploiting Signal Handler Race Condition in OpenSSH
Summary: The “regreSSHion” vulnerability (CVE-2024-6387) in OpenSSH allows unauthenticated remote code execution July 3, 2024 Threat Level – Red | Vulnerability Report
SneakyChef Group Hits Governments Using SugarGh0st and SpiceRAT
Summary: SneakyChef, a new cyberespionage group active since August 2023, targets government June 29, 2024 Threat Level – Amber | Vulnerability Report
InnoLoader Malware Stealth Mastery, Unique Instances per Download
InnoLoader is a new unique malware that generates a distinct version with June 29, 2024 Threat Level – Red | Vulnerability Report
Critical Vulnerabilities Patched in Progress Software’s MOVEit
Summary: Progress Software fixed critical vulnerabilities CVE-2024-5805 (in MOVEit Gateway) and CVE-2024-5806 June 28, 2024 Threat Level – Amber | Vulnerability Report
UAC-0184 Strikes Ukraine with XWorm RAT
UAC-0184 has orchestrated an advanced malware campaign targeting Ukraine, deploying the Remote June 27, 2024 Threat Level – Red | Vulnerability Report
ExCobalt’s GoRed the Silent Infiltrator of Russian Sectors
Summary: ExCobalt, a cyber espionage-focused threat actor, has been targeting Russian organizations June 27, 2024 Threat Level – Red | Vulnerability Report
DragonForce Unleashes Chaos with Leaked Lockbit Builder
Summary: The DragonForce Ransomware, discovered in December 2023, has been associated with June 27, 2024